Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/71n4hyruudaEtzgLbheu8dLtwQyPpt4vzs7Ubib11UQC/1/3137392e34382e3133382e302f32342d3234203d3e20323634393230.roa
File:                     3137392e34382e3133382e302f32342d3234203d3e20323634393230.roa (raw, json)
Hash identifier:          3/+5UYv++gFFjFoKyuuuYNu9uOO6bRzhoT3+9oc4mKE=
Subject key identifier:   03:2C:0E:AE:AB:4F:68:86:45:C5:C3:35:B8:6F:50:70:D6:54:FA:76
Certificate issuer:       /CN=EB092EE47BCDBF6CDBF6586BF02A9DE990D06E74
Certificate serial:       5395A2C497786DC98CCA66D860BE03F7E2861F4A
Authority key identifier: EB:09:2E:E4:7B:CD:BF:6C:DB:F6:58:6B:F0:2A:9D:E9:90:D0:6E:74
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EB092EE47BCDBF6CDBF6586BF02A9DE990D06E74.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/71n4hyruudaEtzgLbheu8dLtwQyPpt4vzs7Ubib11UQC/1/3137392e34382e3133382e302f32342d3234203d3e20323634393230.roa
Signing time:             Thu 21 Nov 2024 17:55:24 +0000
ROA not before:           Thu 21 Nov 2024 17:50:24 +0000
ROA not after:            Thu 20 Nov 2025 17:55:24 +0000
asID:                     264920
IP address blocks:        179.48.138.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/71n4hyruudaEtzgLbheu8dLtwQyPpt4vzs7Ubib11UQC/1/EB092EE47BCDBF6CDBF6586BF02A9DE990D06E74.crl
                          rsync://rpki-repo.registro.br/repo/71n4hyruudaEtzgLbheu8dLtwQyPpt4vzs7Ubib11UQC/1/EB092EE47BCDBF6CDBF6586BF02A9DE990D06E74.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EB092EE47BCDBF6CDBF6586BF02A9DE990D06E74.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 13:58:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:95:a2:c4:97:78:6d:c9:8c:ca:66:d8:60:be:03:f7:e2:86:1f:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB092EE47BCDBF6CDBF6586BF02A9DE990D06E74
        Validity
            Not Before: Nov 21 17:50:24 2024 GMT
            Not After : Nov 20 17:55:24 2025 GMT
        Subject: CN=032C0EAEAB4F688645C5C335B86F5070D654FA76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:ed:3f:0d:49:97:bd:78:64:4f:9d:38:ed:c7:
                    10:e5:b0:c3:c6:62:c6:bf:1f:f3:53:b1:53:f0:a1:
                    d9:a3:85:e4:84:37:a5:df:28:c7:d0:af:70:c0:4d:
                    a4:61:58:de:65:75:d5:dd:69:39:80:34:6a:80:fd:
                    ff:03:9e:7f:03:92:17:a2:3f:9e:03:e9:bd:54:0b:
                    5e:84:8d:76:05:20:b2:1a:7c:51:0a:5b:b7:15:86:
                    05:4f:29:24:1f:be:4b:35:7f:47:4b:f3:84:f3:f7:
                    c9:28:a3:f1:45:02:b9:1c:c7:83:0b:53:fb:c9:b3:
                    06:18:82:79:76:5f:8f:f6:55:c5:98:a5:2c:3b:72:
                    79:d6:73:12:f8:30:6e:b9:83:e2:de:a8:0d:5d:99:
                    50:d0:76:f9:e8:ce:55:19:50:1b:63:81:5f:34:28:
                    46:1d:bc:0b:54:d8:23:a6:a5:8e:72:10:a4:a2:dd:
                    8a:aa:f2:e7:8d:70:1c:08:06:a1:d1:c8:63:f6:d2:
                    7f:50:f6:9d:01:8e:48:f3:22:51:7f:a4:89:25:02:
                    3a:d4:1f:d5:b2:9b:3a:3e:90:99:77:a9:57:65:d2:
                    a9:59:01:33:db:be:99:e0:84:a3:86:17:e1:3e:35:
                    92:29:85:14:3c:1d:53:7c:d5:bd:40:96:96:0d:24:
                    5a:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:2C:0E:AE:AB:4F:68:86:45:C5:C3:35:B8:6F:50:70:D6:54:FA:76
            X509v3 Authority Key Identifier:
                keyid:EB:09:2E:E4:7B:CD:BF:6C:DB:F6:58:6B:F0:2A:9D:E9:90:D0:6E:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/71n4hyruudaEtzgLbheu8dLtwQyPpt4vzs7Ubib11UQC/1/EB092EE47BCDBF6CDBF6586BF02A9DE990D06E74.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EB092EE47BCDBF6CDBF6586BF02A9DE990D06E74.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/71n4hyruudaEtzgLbheu8dLtwQyPpt4vzs7Ubib11UQC/1/3137392e34382e3133382e302f32342d3234203d3e20323634393230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.48.138.0/24

    Signature Algorithm: sha256WithRSAEncryption
         02:ee:45:98:72:32:cd:69:b7:7c:b2:66:80:25:90:22:cb:2c:
         e0:88:7f:df:18:a3:da:22:29:8b:cd:63:0f:9c:b6:9c:23:1b:
         f9:11:a0:37:b9:96:c3:ac:6f:4f:3b:2b:94:38:06:1a:aa:5f:
         be:fc:36:41:b6:c5:a5:85:1d:52:6f:a9:33:a6:01:b6:1a:22:
         0e:86:a6:77:68:7f:c6:60:4d:6b:9f:d5:32:3f:19:80:25:e9:
         d6:e2:f9:72:b6:f9:ad:ed:11:ab:f2:4c:37:70:0e:ae:f0:70:
         75:98:7b:05:df:a8:9b:2f:84:d3:48:84:5c:8b:60:ca:4e:e9:
         5a:cd:95:8d:2c:ff:b8:f6:ea:6c:68:8f:de:d2:b8:1b:cd:78:
         c7:8f:20:fe:c4:d2:71:14:82:59:f0:39:b0:a1:71:a0:8d:6a:
         92:be:f5:87:b4:9d:7e:11:bf:da:37:70:ba:f2:63:a9:34:1c:
         08:d9:6d:27:01:eb:71:8d:6c:8e:c1:22:43:95:0c:7b:f3:25:
         48:d7:6f:41:56:6a:de:d4:a5:06:50:f0:7c:68:a5:ad:1c:8f:
         93:fb:0d:9a:90:9a:0f:30:32:98:e5:ab:ff:8e:ae:3d:0a:8b:
         de:b3:cb:18:ca:5e:dc:ab:17:18:c5:ab:be:3f:6b:01:f2:ee:
         5c:18:b6:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 15:22:38 2024 by rpki-client on console-fra.rpki-client.org