Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7YgUCFjENbiLg4FLBzokWDgjo7UHN8LKjWJDzhoSx1ZH/1/3137392e35312e3134392e302f32342d3234203d3e20323731313739.roa
File:                     3137392e35312e3134392e302f32342d3234203d3e20323731313739.roa (raw, json)
Hash identifier:          4AUYIgPYCuGrg2n4fs+gJIL0ILZ1cAZhDtIRU4OallA=
Subject key identifier:   CD:B9:EA:06:DF:42:DF:E9:35:86:03:5F:1C:D6:28:B3:9B:7D:21:34
Certificate issuer:       /CN=B9EFF2DCC8D3B6928E516E6A2DF086E08CB891E4
Certificate serial:       190BFC1795FA54325244FE00D5D81045C68AC157
Authority key identifier: B9:EF:F2:DC:C8:D3:B6:92:8E:51:6E:6A:2D:F0:86:E0:8C:B8:91:E4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9EFF2DCC8D3B6928E516E6A2DF086E08CB891E4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7YgUCFjENbiLg4FLBzokWDgjo7UHN8LKjWJDzhoSx1ZH/1/3137392e35312e3134392e302f32342d3234203d3e20323731313739.roa
Signing time:             Wed 10 Jul 2024 22:27:49 +0000
ROA not before:           Wed 10 Jul 2024 22:22:49 +0000
ROA not after:            Wed 09 Jul 2025 22:27:49 +0000
asID:                     271179
IP address blocks:        179.51.149.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7YgUCFjENbiLg4FLBzokWDgjo7UHN8LKjWJDzhoSx1ZH/1/B9EFF2DCC8D3B6928E516E6A2DF086E08CB891E4.crl
                          rsync://rpki-repo.registro.br/repo/7YgUCFjENbiLg4FLBzokWDgjo7UHN8LKjWJDzhoSx1ZH/1/B9EFF2DCC8D3B6928E516E6A2DF086E08CB891E4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9EFF2DCC8D3B6928E516E6A2DF086E08CB891E4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 17:41:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:0b:fc:17:95:fa:54:32:52:44:fe:00:d5:d8:10:45:c6:8a:c1:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B9EFF2DCC8D3B6928E516E6A2DF086E08CB891E4
        Validity
            Not Before: Jul 10 22:22:49 2024 GMT
            Not After : Jul  9 22:27:49 2025 GMT
        Subject: CN=CDB9EA06DF42DFE93586035F1CD628B39B7D2134
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:f8:53:f6:f6:41:ed:b1:fd:4c:91:66:18:6a:
                    80:1b:a3:b8:ae:bd:b4:58:13:81:e2:bc:17:e2:36:
                    75:c8:c8:9d:31:45:b3:0a:f1:2a:3f:a2:6d:9a:cd:
                    29:88:f6:1c:6f:c8:2f:eb:7a:79:a9:6f:14:a6:b6:
                    a0:2a:11:30:72:9e:95:eb:22:0f:26:3c:19:0e:56:
                    69:a5:63:33:1a:45:3c:d9:16:0b:4a:e5:ce:ed:e9:
                    4e:a4:30:67:1a:0e:a8:ad:a4:cb:7a:23:51:69:b1:
                    8d:57:83:cd:42:af:c1:c4:45:31:8f:1e:6f:4a:0c:
                    f8:22:7c:77:77:d9:22:4b:a7:ad:e0:14:38:32:ba:
                    5d:59:1b:c1:ad:f2:d2:4c:cc:b1:d2:05:06:f4:88:
                    6b:17:f9:19:35:a5:0f:72:b7:d8:ad:76:0d:7b:91:
                    02:7d:2e:33:8f:e6:05:7a:c4:7e:21:03:58:15:08:
                    c8:4a:c4:29:66:b3:cf:04:25:60:97:de:1c:50:c9:
                    9f:c6:42:7f:6a:02:1d:1a:da:76:7e:7c:ef:5b:72:
                    0e:67:3f:b4:58:d3:9d:22:6f:49:f7:bc:c7:33:a1:
                    49:63:3b:6c:fe:4f:90:8a:31:e5:bd:37:64:7d:f0:
                    28:b2:36:c1:48:74:4d:9c:26:5c:5d:25:42:ff:f5:
                    48:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:B9:EA:06:DF:42:DF:E9:35:86:03:5F:1C:D6:28:B3:9B:7D:21:34
            X509v3 Authority Key Identifier:
                keyid:B9:EF:F2:DC:C8:D3:B6:92:8E:51:6E:6A:2D:F0:86:E0:8C:B8:91:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7YgUCFjENbiLg4FLBzokWDgjo7UHN8LKjWJDzhoSx1ZH/1/B9EFF2DCC8D3B6928E516E6A2DF086E08CB891E4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9EFF2DCC8D3B6928E516E6A2DF086E08CB891E4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7YgUCFjENbiLg4FLBzokWDgjo7UHN8LKjWJDzhoSx1ZH/1/3137392e35312e3134392e302f32342d3234203d3e20323731313739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.51.149.0/24

    Signature Algorithm: sha256WithRSAEncryption
         57:28:81:9c:b2:7b:d7:cc:72:a8:8c:62:a5:7a:78:cd:83:44:
         3d:0c:0f:57:a6:57:34:4e:39:94:4f:c0:d4:c1:91:c1:c4:2c:
         c8:ed:ff:6a:08:93:8f:aa:00:49:fa:ce:d5:a7:6c:90:15:0b:
         44:7a:b9:53:f5:49:23:ee:6e:43:da:91:85:e5:ab:8a:db:b4:
         92:62:cb:7c:ec:92:16:fe:2d:f0:c2:09:a5:5b:84:27:e5:1a:
         41:71:64:af:8d:92:8a:29:22:aa:7c:8f:f5:f4:b9:91:33:64:
         04:20:64:12:e1:4c:b4:df:80:50:6a:0b:19:8c:05:e2:42:e9:
         0b:e0:0d:f3:9d:a9:dd:7e:94:82:c7:6e:ad:a3:d9:4c:bf:2b:
         2f:04:7f:c2:e7:77:cf:3e:bd:03:e2:5e:c1:31:97:e0:59:af:
         25:d7:45:bd:70:01:90:35:f7:30:8d:15:5b:7e:65:30:ea:64:
         ed:03:31:1d:5a:55:e9:8d:74:6c:33:c8:51:86:6a:5a:a6:b9:
         46:78:c4:29:0d:7d:83:bd:05:8e:ac:94:96:1f:f9:a1:82:09:
         2e:70:12:c7:a8:8b:8b:3b:cf:e5:04:38:a1:c2:7a:b6:7e:c1:
         9f:c6:a0:76:51:c0:60:57:11:84:e0:aa:41:48:64:72:06:bd:
         6c:a5:96:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:44:18 2024 by rpki-client on console-ams.rpki-client.org