Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7innpnSxgy6Ra6kkGd6vf4evxdXgHX9s5VuGTg8xsQnH/0/3137392e34392e38322e302f32342d3234203d3e20323731333934.roa
File:                     3137392e34392e38322e302f32342d3234203d3e20323731333934.roa (raw, json)
Hash identifier:          g1y4gagU2GAenpO/rDVhQZQcFxsI23b4LYFWNXj/QZk=
Subject key identifier:   F4:C8:9F:F1:5B:7A:21:6B:DF:C7:08:9F:70:0E:CE:25:5C:E7:34:39
Certificate issuer:       /CN=DD271F242DF0D8617E8D7597283EB60BDB86C2FD
Certificate serial:       3597A77876DB31F4F7606FBAEED2786685B261F3
Authority key identifier: DD:27:1F:24:2D:F0:D8:61:7E:8D:75:97:28:3E:B6:0B:DB:86:C2:FD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DD271F242DF0D8617E8D7597283EB60BDB86C2FD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7innpnSxgy6Ra6kkGd6vf4evxdXgHX9s5VuGTg8xsQnH/0/3137392e34392e38322e302f32342d3234203d3e20323731333934.roa
Signing time:             Tue 04 Feb 2025 03:32:18 +0000
ROA not before:           Tue 04 Feb 2025 03:27:18 +0000
ROA not after:            Tue 03 Feb 2026 03:32:18 +0000
asID:                     271394
IP address blocks:        179.49.82.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7innpnSxgy6Ra6kkGd6vf4evxdXgHX9s5VuGTg8xsQnH/0/DD271F242DF0D8617E8D7597283EB60BDB86C2FD.crl
                          rsync://rpki-repo.registro.br/repo/7innpnSxgy6Ra6kkGd6vf4evxdXgHX9s5VuGTg8xsQnH/0/DD271F242DF0D8617E8D7597283EB60BDB86C2FD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DD271F242DF0D8617E8D7597283EB60BDB86C2FD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Apr 2025 09:35:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:97:a7:78:76:db:31:f4:f7:60:6f:ba:ee:d2:78:66:85:b2:61:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DD271F242DF0D8617E8D7597283EB60BDB86C2FD
        Validity
            Not Before: Feb  4 03:27:18 2025 GMT
            Not After : Feb  3 03:32:18 2026 GMT
        Subject: CN=F4C89FF15B7A216BDFC7089F700ECE255CE73439
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:12:47:cd:5b:b2:7c:a5:56:e7:71:69:e7:2d:
                    6d:fd:68:e2:a8:70:9f:62:cc:04:6b:37:55:d8:af:
                    23:cd:38:c4:51:42:17:56:30:c8:54:ac:8c:8b:cd:
                    5a:63:62:6c:32:b4:49:48:bd:e8:f7:7d:9e:e5:61:
                    00:a2:b8:24:ef:69:ba:fa:d7:b7:93:5b:83:ec:54:
                    63:98:0f:89:23:2b:c7:43:bc:a6:63:dd:dd:04:15:
                    ba:0f:2a:35:8a:f1:cd:f8:6b:36:7c:3c:a0:52:e0:
                    f4:68:1b:6f:15:16:43:86:ca:24:0f:e2:36:87:81:
                    b9:f4:20:58:e5:bb:c5:9a:b6:72:7e:eb:08:b0:ee:
                    fe:75:b9:40:20:8c:7f:9e:35:fe:02:cf:47:ef:69:
                    c1:e6:12:52:67:d3:6a:9d:45:74:35:2c:ed:98:7e:
                    e2:f1:2b:aa:ca:65:1b:14:c9:bc:77:da:1e:30:dd:
                    ce:a8:ef:c3:83:a3:e5:d1:a6:b1:c5:0c:fa:39:f4:
                    8f:19:f6:c4:1c:08:84:94:2f:7b:ed:4d:4d:6f:23:
                    54:fd:33:d6:a0:33:3e:0e:b7:99:60:87:03:c0:89:
                    12:22:b3:25:1e:07:ed:53:2e:ea:71:f9:dc:4d:e6:
                    7f:ea:f1:33:bd:ac:5f:56:10:25:fc:c3:e1:fa:68:
                    99:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:C8:9F:F1:5B:7A:21:6B:DF:C7:08:9F:70:0E:CE:25:5C:E7:34:39
            X509v3 Authority Key Identifier:
                keyid:DD:27:1F:24:2D:F0:D8:61:7E:8D:75:97:28:3E:B6:0B:DB:86:C2:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7innpnSxgy6Ra6kkGd6vf4evxdXgHX9s5VuGTg8xsQnH/0/DD271F242DF0D8617E8D7597283EB60BDB86C2FD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DD271F242DF0D8617E8D7597283EB60BDB86C2FD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7innpnSxgy6Ra6kkGd6vf4evxdXgHX9s5VuGTg8xsQnH/0/3137392e34392e38322e302f32342d3234203d3e20323731333934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.49.82.0/24

    Signature Algorithm: sha256WithRSAEncryption
         65:35:f1:47:16:35:af:f3:68:cb:a3:f5:8f:ac:e0:71:0a:3a:
         e5:52:d4:ae:ec:b3:58:30:d3:35:33:cc:61:c8:62:44:15:cb:
         cb:f6:c6:3f:f3:61:ce:3f:b8:d0:ff:9a:47:3b:27:a9:94:9f:
         37:97:d3:b1:47:92:3e:e5:b9:69:81:b7:66:06:39:5b:db:28:
         13:55:77:b1:61:4e:57:ee:c2:0d:6b:0e:dc:d2:01:d1:be:15:
         a4:2e:82:8f:a0:f1:9e:b1:be:29:08:2b:da:c8:ec:ff:8e:65:
         ac:17:4a:c7:bd:35:46:95:57:da:78:90:7d:74:fc:c8:d8:cf:
         30:3b:c7:9d:58:37:99:94:e4:44:11:22:4f:b9:bd:02:f6:c0:
         c0:68:a8:26:06:4a:2d:19:13:77:13:3a:f9:c1:76:91:33:d3:
         bf:27:9f:75:70:ae:aa:11:84:63:75:0c:77:d8:56:1f:35:55:
         13:f3:91:ad:b1:b0:31:19:29:0d:eb:43:13:86:59:82:fc:2f:
         e1:d7:df:2e:cc:f2:a2:a4:75:d3:24:36:bc:d7:c7:0d:97:41:
         f2:35:6c:50:7e:2c:b4:e3:d6:04:ff:af:46:a2:c0:b6:33:c3:
         9d:fc:94:4b:46:5a:65:fe:2f:21:70:c4:82:d7:0e:4c:57:66:
         70:f5:d6:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 19:59:26 2025 by rpki-client