Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7rAziowefNmFrwbW51SyPKaD3H1wNUj1JwUPwgujmacU/2/3137392e39362e3137362e302f32312d3332203d3e20323032.roa
File:                     3137392e39362e3137362e302f32312d3332203d3e20323032.roa (raw, json)
Hash identifier:          Cd2gmVxgmGguXs1p5Fdj44tyMSbE13yOsecoPdj6jPg=
Subject key identifier:   BF:C1:A3:C9:6C:1B:5F:D5:83:74:C1:E0:14:38:0D:9D:81:01:54:0F
Certificate issuer:       /CN=4C331098B84DC9296BBDAEE9D2C05BE2AC3CC5A2
Certificate serial:       272F40D255FF0336E3463163F0E729CDEC2514CC
Authority key identifier: 4C:33:10:98:B8:4D:C9:29:6B:BD:AE:E9:D2:C0:5B:E2:AC:3C:C5:A2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4C331098B84DC9296BBDAEE9D2C05BE2AC3CC5A2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7rAziowefNmFrwbW51SyPKaD3H1wNUj1JwUPwgujmacU/2/3137392e39362e3137362e302f32312d3332203d3e20323032.roa
Signing time:             Thu 04 Apr 2024 00:30:19 +0000
ROA not before:           Thu 04 Apr 2024 00:25:19 +0000
ROA not after:            Thu 03 Apr 2025 00:30:19 +0000
asID:                     202
IP address blocks:        179.96.176.0/21 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7rAziowefNmFrwbW51SyPKaD3H1wNUj1JwUPwgujmacU/2/4C331098B84DC9296BBDAEE9D2C05BE2AC3CC5A2.crl
                          rsync://rpki-repo.registro.br/repo/7rAziowefNmFrwbW51SyPKaD3H1wNUj1JwUPwgujmacU/2/4C331098B84DC9296BBDAEE9D2C05BE2AC3CC5A2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4C331098B84DC9296BBDAEE9D2C05BE2AC3CC5A2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 25 Nov 2024 22:48:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:2f:40:d2:55:ff:03:36:e3:46:31:63:f0:e7:29:cd:ec:25:14:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4C331098B84DC9296BBDAEE9D2C05BE2AC3CC5A2
        Validity
            Not Before: Apr  4 00:25:19 2024 GMT
            Not After : Apr  3 00:30:19 2025 GMT
        Subject: CN=BFC1A3C96C1B5FD58374C1E014380D9D8101540F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:15:30:60:7d:f2:e9:a5:14:a0:f5:6c:f0:14:
                    fe:a9:c5:77:e9:79:0b:0c:fe:ac:9e:1d:43:c4:4a:
                    b5:e0:b9:51:cd:ab:22:11:5c:ac:be:60:6e:50:ea:
                    53:09:ed:f6:6c:46:43:df:78:25:32:e5:8e:43:35:
                    b8:18:25:08:5a:b5:75:19:5a:ec:7e:93:75:ee:6d:
                    f5:e9:ed:51:21:75:05:a2:70:a6:56:48:e6:b4:8f:
                    7e:14:27:1e:2f:73:45:e9:ab:fc:95:62:49:17:97:
                    d8:00:d9:9d:7e:e7:be:29:f3:80:55:90:84:b7:f1:
                    bc:65:1f:ba:5f:c5:58:7b:0d:ac:9e:38:6d:fc:d0:
                    a7:8a:c6:cf:b8:84:7f:a0:ee:fc:2d:92:cb:df:90:
                    74:eb:15:8a:b4:ea:90:fd:ce:38:c9:16:18:e3:17:
                    b9:41:23:91:77:27:bc:a2:88:4b:4e:1c:f8:71:be:
                    c1:00:88:43:64:1b:aa:26:94:79:b9:da:c6:43:6e:
                    8a:94:1f:96:e2:64:e6:af:2e:e3:ad:40:d4:68:0d:
                    09:8e:35:c4:e1:c9:97:71:08:4e:8c:38:ee:2c:7d:
                    0e:50:92:39:68:a2:6d:d3:95:a1:ff:22:a8:4d:70:
                    90:e5:38:73:e9:fe:32:0d:87:ca:0e:e4:e5:82:c3:
                    da:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:C1:A3:C9:6C:1B:5F:D5:83:74:C1:E0:14:38:0D:9D:81:01:54:0F
            X509v3 Authority Key Identifier:
                keyid:4C:33:10:98:B8:4D:C9:29:6B:BD:AE:E9:D2:C0:5B:E2:AC:3C:C5:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7rAziowefNmFrwbW51SyPKaD3H1wNUj1JwUPwgujmacU/2/4C331098B84DC9296BBDAEE9D2C05BE2AC3CC5A2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4C331098B84DC9296BBDAEE9D2C05BE2AC3CC5A2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7rAziowefNmFrwbW51SyPKaD3H1wNUj1JwUPwgujmacU/2/3137392e39362e3137362e302f32312d3332203d3e20323032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.96.176.0/21

    Signature Algorithm: sha256WithRSAEncryption
         ac:b7:34:3b:2e:c5:0c:fe:57:99:db:a0:73:0e:4f:97:35:6b:
         15:ff:b9:e6:ca:c0:ef:4f:86:31:03:48:27:c7:f5:45:9a:1a:
         ae:9d:e1:3d:1c:e6:82:25:24:b3:5e:b4:83:01:c6:3b:63:94:
         b4:f0:f2:8e:9f:d1:06:1e:28:75:80:49:f2:9f:db:00:5e:27:
         ea:32:45:ca:4d:b7:81:42:4d:37:57:73:4d:90:45:51:bf:7f:
         f7:15:e8:0c:3c:15:42:30:a0:d1:f2:1c:ef:3f:29:ab:ca:5f:
         8d:a2:4c:a9:5a:ac:a3:d0:f3:3f:47:d4:58:76:ec:c2:73:f9:
         b9:e0:f6:9c:ce:07:37:b3:4e:0e:1c:28:f9:d7:e1:4e:3f:4e:
         23:a3:71:e6:15:34:10:aa:c2:09:8d:95:bb:b9:d8:96:9e:74:
         31:7f:91:c2:22:1f:a1:fa:39:54:6b:3c:d5:64:e6:63:77:7f:
         16:cc:7c:dc:a3:17:00:1e:fa:a3:bd:29:a5:41:63:4d:1e:f8:
         d5:41:a9:da:c7:36:7e:8c:50:7c:78:33:bd:90:d4:57:b7:17:
         53:30:58:eb:95:4c:18:e8:8b:42:ad:9a:07:f6:4e:71:e6:c9:
         41:a7:e9:b0:26:97:60:b0:3f:1b:f2:2c:18:e0:7f:95:e1:2b:
         cc:2f:9e:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 23:06:16 2024 by rpki-client on console-ams.rpki-client.org