Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7YgUCFjENbiLg4FLBzokWDgjo7UHN8LKjWJDzhoSx1ZH/1/3137392e35312e3134382e302f32322d3234203d3e20323731313739.roa
File:                     3137392e35312e3134382e302f32322d3234203d3e20323731313739.roa (raw, json)
Hash identifier:          TOZLv2YdUpKM19BNgD3ZGHf5LkA7ln1krh07uYQ1evA=
Subject key identifier:   D2:C0:36:0D:5C:D8:C7:41:A8:34:A6:0E:28:2C:DD:91:99:A8:F3:05
Certificate issuer:       /CN=B9EFF2DCC8D3B6928E516E6A2DF086E08CB891E4
Certificate serial:       2B6C0E3FA55F6CB8D02AF1932FE03777ED6FC6B6
Authority key identifier: B9:EF:F2:DC:C8:D3:B6:92:8E:51:6E:6A:2D:F0:86:E0:8C:B8:91:E4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9EFF2DCC8D3B6928E516E6A2DF086E08CB891E4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7YgUCFjENbiLg4FLBzokWDgjo7UHN8LKjWJDzhoSx1ZH/1/3137392e35312e3134382e302f32322d3234203d3e20323731313739.roa
Signing time:             Wed 10 Jul 2024 22:13:40 +0000
ROA not before:           Wed 10 Jul 2024 22:08:40 +0000
ROA not after:            Wed 09 Jul 2025 22:13:40 +0000
asID:                     271179
IP address blocks:        179.51.148.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7YgUCFjENbiLg4FLBzokWDgjo7UHN8LKjWJDzhoSx1ZH/1/B9EFF2DCC8D3B6928E516E6A2DF086E08CB891E4.crl
                          rsync://rpki-repo.registro.br/repo/7YgUCFjENbiLg4FLBzokWDgjo7UHN8LKjWJDzhoSx1ZH/1/B9EFF2DCC8D3B6928E516E6A2DF086E08CB891E4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9EFF2DCC8D3B6928E516E6A2DF086E08CB891E4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 17:41:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:6c:0e:3f:a5:5f:6c:b8:d0:2a:f1:93:2f:e0:37:77:ed:6f:c6:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B9EFF2DCC8D3B6928E516E6A2DF086E08CB891E4
        Validity
            Not Before: Jul 10 22:08:40 2024 GMT
            Not After : Jul  9 22:13:40 2025 GMT
        Subject: CN=D2C0360D5CD8C741A834A60E282CDD9199A8F305
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:08:bb:a6:23:91:6c:af:f7:41:25:b6:8c:79:
                    fc:7b:4a:ba:0f:8a:f2:c4:7d:60:06:f3:fb:84:55:
                    ba:ae:06:dd:ac:67:ee:76:26:c7:88:78:89:f9:cf:
                    c7:02:53:b6:5d:04:55:2d:e8:3b:21:0d:fe:17:34:
                    b5:2e:03:93:5a:85:80:d3:68:a0:4c:45:8e:58:ca:
                    63:e7:f8:05:ba:99:67:35:71:e5:0f:32:28:5c:67:
                    91:a3:43:f2:e9:69:e4:cf:06:a0:cf:dc:dc:cd:fc:
                    bd:d8:ed:e1:3a:cd:93:24:b1:f0:58:b2:f0:26:e1:
                    3b:b3:87:62:09:0c:a7:d0:95:c9:3d:87:05:90:3a:
                    5f:e7:11:4d:0d:85:46:59:01:6f:9a:f9:a6:27:fe:
                    4a:77:5d:44:63:5f:79:af:3c:68:4d:d4:f0:1e:c6:
                    67:3a:ab:74:c7:20:ac:f4:70:32:31:f0:6b:09:a8:
                    fd:a3:7a:d5:2a:d6:27:e2:19:53:bb:09:96:9f:ee:
                    13:db:d5:8d:b9:c0:6a:87:45:34:c6:2a:d0:92:3f:
                    a8:b1:59:08:18:8b:31:2a:bb:8a:14:24:91:f1:11:
                    dc:78:45:c8:0b:38:10:84:57:39:d2:9a:f6:96:aa:
                    f7:e7:db:11:f9:fd:e4:3c:38:58:31:d6:2c:12:06:
                    39:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:C0:36:0D:5C:D8:C7:41:A8:34:A6:0E:28:2C:DD:91:99:A8:F3:05
            X509v3 Authority Key Identifier:
                keyid:B9:EF:F2:DC:C8:D3:B6:92:8E:51:6E:6A:2D:F0:86:E0:8C:B8:91:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7YgUCFjENbiLg4FLBzokWDgjo7UHN8LKjWJDzhoSx1ZH/1/B9EFF2DCC8D3B6928E516E6A2DF086E08CB891E4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9EFF2DCC8D3B6928E516E6A2DF086E08CB891E4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7YgUCFjENbiLg4FLBzokWDgjo7UHN8LKjWJDzhoSx1ZH/1/3137392e35312e3134382e302f32322d3234203d3e20323731313739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.51.148.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1e:f5:aa:ac:cd:c5:02:0e:0a:a9:c8:81:47:f9:19:9e:fc:ac:
         33:28:96:bf:df:1e:31:d1:c4:0a:b7:b1:12:4f:bc:52:f1:95:
         60:3d:b7:89:da:0d:13:55:1f:df:1d:2a:29:bf:88:38:ee:ab:
         74:d1:9d:69:65:64:69:73:2f:ff:74:29:fc:31:54:2a:ad:85:
         1a:2c:72:1e:df:4b:af:f3:3a:28:da:af:ef:8f:03:0f:f6:49:
         3c:ae:46:88:77:a6:80:67:39:92:45:85:94:64:d7:5c:bb:5d:
         5f:86:0e:25:34:7c:31:57:1c:07:e2:05:8d:ac:92:3c:04:59:
         32:7f:55:c3:72:f7:cd:30:5a:f3:d5:b3:bc:0f:60:6b:8c:a8:
         3f:fa:b0:81:91:0c:9e:21:1d:07:31:a0:c6:b6:5d:91:f5:fc:
         ba:a0:61:71:7f:c6:8b:a3:65:1e:1d:0d:ea:01:8c:e2:a5:97:
         88:c0:e1:ee:83:17:35:92:ae:cd:a2:67:f8:63:db:ee:30:f9:
         0a:05:ea:be:91:72:fe:fa:b6:9e:14:e2:50:fd:ec:1d:fe:2f:
         32:7b:87:28:99:47:34:59:bb:95:09:a9:da:08:74:c3:68:83:
         84:eb:99:07:39:f6:aa:80:f7:da:4a:a2:f2:e7:d0:68:74:88:
         c7:e0:41:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:44:18 2024 by rpki-client on console-ams.rpki-client.org