Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7S5oA7gWhenZZDoUT9g8oBFvDgCFpzoLAhBXsaVYnrB/0/3137392e36332e3133362e302f32332d3332203d3e20323731353631.roa
File:                     3137392e36332e3133362e302f32332d3332203d3e20323731353631.roa (raw, json)
Hash identifier:          plUXGiaEha5OEfE6cZ4sN9AZP70kKrGXranIFtwGLoQ=
Subject key identifier:   90:FA:54:2A:35:B3:F5:85:D0:21:5D:A1:F6:E8:90:E5:83:66:53:BA
Certificate issuer:       /CN=4641B2DCB11A279B8EDF7B3757FA1DEA29B5200D
Certificate serial:       08117C6F5829913DAD68BFC79C31756DF04A6114
Authority key identifier: 46:41:B2:DC:B1:1A:27:9B:8E:DF:7B:37:57:FA:1D:EA:29:B5:20:0D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4641B2DCB11A279B8EDF7B3757FA1DEA29B5200D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7S5oA7gWhenZZDoUT9g8oBFvDgCFpzoLAhBXsaVYnrB/0/3137392e36332e3133362e302f32332d3332203d3e20323731353631.roa
Signing time:             Fri 18 Oct 2024 00:04:33 +0000
ROA not before:           Thu 17 Oct 2024 23:59:33 +0000
ROA not after:            Fri 17 Oct 2025 00:04:33 +0000
asID:                     271561
IP address blocks:        179.63.136.0/23 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7S5oA7gWhenZZDoUT9g8oBFvDgCFpzoLAhBXsaVYnrB/0/4641B2DCB11A279B8EDF7B3757FA1DEA29B5200D.crl
                          rsync://rpki-repo.registro.br/repo/7S5oA7gWhenZZDoUT9g8oBFvDgCFpzoLAhBXsaVYnrB/0/4641B2DCB11A279B8EDF7B3757FA1DEA29B5200D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4641B2DCB11A279B8EDF7B3757FA1DEA29B5200D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 16:36:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:11:7c:6f:58:29:91:3d:ad:68:bf:c7:9c:31:75:6d:f0:4a:61:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4641B2DCB11A279B8EDF7B3757FA1DEA29B5200D
        Validity
            Not Before: Oct 17 23:59:33 2024 GMT
            Not After : Oct 17 00:04:33 2025 GMT
        Subject: CN=90FA542A35B3F585D0215DA1F6E890E5836653BA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:a6:0b:3a:62:92:ac:97:69:62:fc:4d:a2:5b:
                    32:a7:a3:c9:8d:d1:cd:ac:fa:38:e4:b8:0f:97:a0:
                    fc:51:d8:11:c8:44:56:51:d8:f8:22:89:41:dc:19:
                    f8:1d:cc:0b:27:c9:2f:3a:fb:1b:13:0d:f2:1b:a8:
                    1b:b5:d5:74:00:54:6f:da:f7:ec:c8:f3:f3:28:bd:
                    c2:de:a8:ff:39:1d:19:58:21:56:8e:f4:4b:d3:67:
                    19:96:c6:6d:fc:c4:aa:74:ab:32:72:ff:75:52:c7:
                    77:13:73:6e:e8:f6:33:f7:b9:3a:02:37:76:6b:66:
                    37:45:dd:af:c8:62:c4:38:d4:83:3a:54:06:4e:40:
                    b3:15:86:42:85:dd:97:65:85:bb:6c:e7:27:5a:3d:
                    51:0d:2e:a6:df:04:20:26:f8:69:89:13:4e:f6:89:
                    e5:b2:a6:8c:06:90:dc:69:5b:da:db:9c:48:bd:5c:
                    8a:eb:45:5e:00:2b:84:d2:0e:87:9b:0c:7c:8a:52:
                    1a:c8:c2:d4:f9:7a:7d:24:40:6c:14:6c:f1:3b:e3:
                    1a:e9:c8:c3:be:78:2b:5d:a2:23:15:d5:25:dd:d8:
                    a8:1b:9d:44:b7:c3:11:3d:54:56:b5:b3:d6:67:32:
                    02:f1:d9:f7:f8:16:b9:43:ca:21:0a:15:0c:30:27:
                    9b:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:FA:54:2A:35:B3:F5:85:D0:21:5D:A1:F6:E8:90:E5:83:66:53:BA
            X509v3 Authority Key Identifier:
                keyid:46:41:B2:DC:B1:1A:27:9B:8E:DF:7B:37:57:FA:1D:EA:29:B5:20:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7S5oA7gWhenZZDoUT9g8oBFvDgCFpzoLAhBXsaVYnrB/0/4641B2DCB11A279B8EDF7B3757FA1DEA29B5200D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4641B2DCB11A279B8EDF7B3757FA1DEA29B5200D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7S5oA7gWhenZZDoUT9g8oBFvDgCFpzoLAhBXsaVYnrB/0/3137392e36332e3133362e302f32332d3332203d3e20323731353631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.63.136.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4b:fd:55:03:76:db:85:0d:13:35:09:cc:db:df:cf:54:a0:9d:
         b4:9b:50:1a:e2:7a:0a:15:fc:bb:85:7d:86:ea:52:27:99:20:
         1f:c3:ce:5e:63:c3:ca:60:86:33:c7:94:44:fa:a3:b8:48:af:
         5f:9d:50:36:f3:70:da:57:5f:f5:fb:57:b9:35:93:94:c7:6a:
         a3:42:24:5d:72:70:e2:a2:08:ed:9a:88:b2:cb:35:94:5c:4d:
         a6:b3:f1:ec:12:e6:98:e7:d9:cc:39:ae:47:e2:09:5c:77:da:
         8e:7c:0b:8f:9c:2b:cd:bd:0d:da:e4:b2:95:a3:08:dd:a3:be:
         aa:cb:44:35:ea:5f:25:4a:82:1a:95:a8:cf:eb:7b:9f:3c:60:
         3b:b5:15:48:3c:7f:03:34:21:1c:df:06:0e:79:76:cf:3a:63:
         d5:43:16:31:6b:c9:c0:a9:a4:81:db:df:d3:0e:b7:82:1d:e2:
         0e:e9:c3:39:ce:0e:44:b1:30:c6:4b:15:63:2f:fd:18:1e:02:
         db:10:89:ff:c3:07:35:fe:08:ed:8e:64:f4:2e:01:87:84:22:
         54:6f:41:ad:d9:2d:1d:74:9d:55:0d:0c:10:c2:e0:13:95:48:
         ef:fc:7c:2c:ac:66:7e:2a:38:d2:73:b7:5d:42:41:79:0b:1f:
         ab:c2:27:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 18:43:13 2024 by rpki-client on console-ams.rpki-client.org