Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/79gb79DhY1oyAmsHY3QwikknQEBWjC1JWwttLxBES6zu/1/3138372e36312e3131322e302f32312d3332203d3e20323633303437.roa
File:                     3138372e36312e3131322e302f32312d3332203d3e20323633303437.roa (raw, json)
Hash identifier:          Rw055zfvzX2mHAxA9t4LpSe7Gn41Q5/jWxfmOjjybAc=
Subject key identifier:   DC:87:7D:FF:4A:78:47:DA:1E:05:F6:00:CF:F6:0F:A2:E4:AB:35:92
Certificate issuer:       /CN=4E335352EA63CE855FDA3B777EA08D10359B7B71
Certificate serial:       2A974D57C008B2237E48E594454F8E968DE42715
Authority key identifier: 4E:33:53:52:EA:63:CE:85:5F:DA:3B:77:7E:A0:8D:10:35:9B:7B:71
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4E335352EA63CE855FDA3B777EA08D10359B7B71.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/79gb79DhY1oyAmsHY3QwikknQEBWjC1JWwttLxBES6zu/1/3138372e36312e3131322e302f32312d3332203d3e20323633303437.roa
Signing time:             Thu 04 Apr 2024 18:15:47 +0000
ROA not before:           Thu 04 Apr 2024 18:10:47 +0000
ROA not after:            Thu 03 Apr 2025 18:15:47 +0000
asID:                     263047
IP address blocks:        187.61.112.0/21 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/79gb79DhY1oyAmsHY3QwikknQEBWjC1JWwttLxBES6zu/1/4E335352EA63CE855FDA3B777EA08D10359B7B71.crl
                          rsync://rpki-repo.registro.br/repo/79gb79DhY1oyAmsHY3QwikknQEBWjC1JWwttLxBES6zu/1/4E335352EA63CE855FDA3B777EA08D10359B7B71.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4E335352EA63CE855FDA3B777EA08D10359B7B71.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:97:4d:57:c0:08:b2:23:7e:48:e5:94:45:4f:8e:96:8d:e4:27:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4E335352EA63CE855FDA3B777EA08D10359B7B71
        Validity
            Not Before: Apr  4 18:10:47 2024 GMT
            Not After : Apr  3 18:15:47 2025 GMT
        Subject: CN=DC877DFF4A7847DA1E05F600CFF60FA2E4AB3592
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:40:d8:eb:35:ee:ec:14:c5:ad:97:4b:44:61:
                    aa:37:b7:1a:75:6f:e5:92:ee:b7:e0:71:12:b0:e9:
                    bc:2e:bd:1f:a6:cd:09:06:09:98:99:a3:84:b2:90:
                    98:10:f1:21:e9:c1:73:1f:b1:b8:b5:bb:6b:20:31:
                    5a:86:70:5a:58:5a:79:27:ff:3b:a3:fe:1f:11:4b:
                    9f:66:96:3e:c5:87:21:3b:05:5c:36:92:4b:2c:b3:
                    56:08:be:77:da:38:75:31:0f:a0:e0:da:b3:1b:37:
                    68:0b:dc:c4:e6:ec:9b:b7:bd:b4:14:45:28:b4:3f:
                    c9:3f:20:05:79:d9:b9:05:0f:23:e2:4e:ba:f9:cf:
                    b3:e2:3b:cd:37:bb:fb:b9:ac:20:23:75:be:b0:bd:
                    43:6b:2c:54:8b:a8:4a:ca:ce:97:fa:6d:ec:d1:f2:
                    95:99:21:ef:b6:0f:38:74:9f:06:0e:22:2f:2a:82:
                    2c:92:81:2f:c8:16:94:69:6b:6f:14:2f:1b:df:09:
                    40:d6:5d:75:a6:8e:52:13:e4:86:a9:94:fe:ee:cc:
                    02:42:5f:a6:45:78:d6:f4:db:bf:0a:3a:db:f1:f2:
                    ba:3f:63:da:26:7b:e3:cb:5b:04:f0:80:2f:8e:6b:
                    56:7f:d5:29:50:27:7b:ed:62:3d:09:e8:db:ad:4c:
                    40:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:87:7D:FF:4A:78:47:DA:1E:05:F6:00:CF:F6:0F:A2:E4:AB:35:92
            X509v3 Authority Key Identifier:
                keyid:4E:33:53:52:EA:63:CE:85:5F:DA:3B:77:7E:A0:8D:10:35:9B:7B:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/79gb79DhY1oyAmsHY3QwikknQEBWjC1JWwttLxBES6zu/1/4E335352EA63CE855FDA3B777EA08D10359B7B71.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4E335352EA63CE855FDA3B777EA08D10359B7B71.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/79gb79DhY1oyAmsHY3QwikknQEBWjC1JWwttLxBES6zu/1/3138372e36312e3131322e302f32312d3332203d3e20323633303437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.61.112.0/21

    Signature Algorithm: sha256WithRSAEncryption
         a6:e3:46:a5:26:0e:ba:89:e2:5a:1f:0c:5b:ca:f5:09:a8:d3:
         dd:6c:b8:18:fc:bf:b5:ea:4c:4f:df:88:f0:43:a5:3a:48:f6:
         d9:50:1b:18:cc:5a:66:fa:ca:ec:e6:48:40:17:8d:48:1a:4c:
         3c:27:88:aa:82:bb:c1:97:2f:df:1c:a4:24:e6:9f:b5:5d:83:
         6d:29:2f:9d:54:79:70:d0:77:6c:7c:2d:1f:e0:1c:ac:1c:d6:
         6b:79:21:bc:89:5a:c1:0c:24:0d:99:b7:8f:13:c6:5c:31:2f:
         60:da:b0:71:3a:a8:2e:0b:04:3f:0e:86:23:0f:16:ec:66:16:
         2c:30:59:ae:f4:1a:11:54:bb:3d:79:41:ae:10:ea:81:07:34:
         ed:ea:e4:17:a1:35:d1:75:d9:38:f2:88:3a:1d:40:7d:98:45:
         7b:e3:11:d7:74:ed:41:0e:44:07:fb:94:72:b5:7e:69:b7:52:
         58:ee:0a:fe:f1:c1:07:c0:39:73:9c:4a:4c:24:c5:69:5d:f5:
         e2:01:ff:87:42:ce:da:0f:9f:92:5d:f6:b1:f9:6f:3a:94:be:
         16:f1:d4:d5:0c:4c:61:9d:c1:23:10:80:ee:e6:cf:82:a8:2b:
         57:d3:71:e8:52:1c:76:6f:68:47:a2:fd:86:db:93:83:d6:c7:
         a8:00:c3:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 00:48:16 2024 by rpki-client on console-fra.rpki-client.org