Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7rAziowefNmFrwbW51SyPKaD3H1wNUj1JwUPwgujmacU/2/3137392e39362e3137362e302f32312d3332203d3e2033333536.roa
File:                     3137392e39362e3137362e302f32312d3332203d3e2033333536.roa (raw, json)
Hash identifier:          ZM6X5rq7N221XCeilAiKgIJX7KQRJ5sjKDKhyKzrLA4=
Subject key identifier:   BE:55:D7:FC:B7:8B:E5:7E:62:3E:6B:DD:9F:B6:43:5D:80:03:10:CB
Certificate issuer:       /CN=4C331098B84DC9296BBDAEE9D2C05BE2AC3CC5A2
Certificate serial:       2981ADB663B1419937C1591B189DFDD170DFDF6C
Authority key identifier: 4C:33:10:98:B8:4D:C9:29:6B:BD:AE:E9:D2:C0:5B:E2:AC:3C:C5:A2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4C331098B84DC9296BBDAEE9D2C05BE2AC3CC5A2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7rAziowefNmFrwbW51SyPKaD3H1wNUj1JwUPwgujmacU/2/3137392e39362e3137362e302f32312d3332203d3e2033333536.roa
Signing time:             Thu 04 Apr 2024 00:30:18 +0000
ROA not before:           Thu 04 Apr 2024 00:25:18 +0000
ROA not after:            Thu 03 Apr 2025 00:30:18 +0000
asID:                     3356
IP address blocks:        179.96.176.0/21 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7rAziowefNmFrwbW51SyPKaD3H1wNUj1JwUPwgujmacU/2/4C331098B84DC9296BBDAEE9D2C05BE2AC3CC5A2.crl
                          rsync://rpki-repo.registro.br/repo/7rAziowefNmFrwbW51SyPKaD3H1wNUj1JwUPwgujmacU/2/4C331098B84DC9296BBDAEE9D2C05BE2AC3CC5A2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4C331098B84DC9296BBDAEE9D2C05BE2AC3CC5A2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 03 May 2024 09:12:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:81:ad:b6:63:b1:41:99:37:c1:59:1b:18:9d:fd:d1:70:df:df:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4C331098B84DC9296BBDAEE9D2C05BE2AC3CC5A2
        Validity
            Not Before: Apr  4 00:25:18 2024 GMT
            Not After : Apr  3 00:30:18 2025 GMT
        Subject: CN=BE55D7FCB78BE57E623E6BDD9FB6435D800310CB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:c1:7d:6b:f6:df:e3:7c:0b:22:12:ee:9b:e2:
                    ab:8a:76:29:90:e3:fe:8d:31:5f:03:21:9f:76:7e:
                    81:b6:b0:b8:ce:5f:f8:9e:ea:1f:e1:5b:b0:ab:f8:
                    ef:ba:d7:1e:05:52:bb:aa:54:65:7b:2d:12:98:c3:
                    85:30:32:d1:da:57:10:a9:00:8e:ed:9d:40:2d:b8:
                    17:45:6a:4d:32:12:0f:46:fa:4c:bf:c3:da:5a:5f:
                    4c:08:8e:9c:53:22:6f:42:a9:35:1a:2f:40:3a:d4:
                    fe:2b:fd:4c:d1:c6:e2:24:75:1a:ac:14:87:7a:d6:
                    12:29:e1:79:91:fa:e1:7d:db:ce:a5:e8:72:9e:8e:
                    6c:79:e0:aa:bb:f6:60:de:48:be:d3:8b:7a:2a:cb:
                    34:6b:09:e5:59:ff:5e:f2:0f:79:14:55:da:02:fd:
                    34:0a:69:f5:23:01:f2:bd:f0:49:25:32:18:30:98:
                    4e:0e:1b:d4:34:64:f8:0b:31:c8:99:cf:71:73:51:
                    df:2b:19:30:81:12:c5:40:81:83:67:af:1a:e6:0a:
                    51:57:3e:ad:a9:48:f9:14:d3:62:84:68:7b:6a:25:
                    eb:d4:9b:4f:5d:12:ea:24:4b:f0:1d:5b:ad:ed:25:
                    bf:c1:c8:00:52:2b:ae:f8:cf:47:7d:27:10:5a:5f:
                    ac:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:55:D7:FC:B7:8B:E5:7E:62:3E:6B:DD:9F:B6:43:5D:80:03:10:CB
            X509v3 Authority Key Identifier:
                keyid:4C:33:10:98:B8:4D:C9:29:6B:BD:AE:E9:D2:C0:5B:E2:AC:3C:C5:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7rAziowefNmFrwbW51SyPKaD3H1wNUj1JwUPwgujmacU/2/4C331098B84DC9296BBDAEE9D2C05BE2AC3CC5A2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4C331098B84DC9296BBDAEE9D2C05BE2AC3CC5A2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7rAziowefNmFrwbW51SyPKaD3H1wNUj1JwUPwgujmacU/2/3137392e39362e3137362e302f32312d3332203d3e2033333536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.96.176.0/21

    Signature Algorithm: sha256WithRSAEncryption
         d9:53:f7:c5:9d:8a:9a:04:fa:bf:70:11:9a:da:0b:43:b0:ae:
         f5:26:21:c0:dc:83:23:f5:ae:50:38:15:5c:67:e8:84:55:c0:
         bd:86:8c:c1:fd:74:01:2f:3c:33:3c:8c:d0:42:c0:6f:6e:39:
         ce:81:3d:a6:43:d5:b9:ab:76:bf:24:bb:bb:c2:df:ef:13:f2:
         ee:aa:62:ed:bd:4f:26:76:8d:17:1e:f7:f5:31:88:5e:de:27:
         94:2c:88:b5:6c:d9:40:cc:10:21:4e:16:8a:74:9e:f0:50:0d:
         f7:49:bf:b8:67:a1:78:54:90:2d:0e:cf:58:b5:94:f7:6f:89:
         82:66:ca:d4:a0:af:9a:ec:9b:31:fd:90:f7:cb:40:95:3f:ba:
         ec:a7:b1:fb:cd:2b:5b:9c:f3:2e:7e:b2:20:d2:77:52:c3:2d:
         b2:b5:76:90:c4:0a:cd:6d:66:4f:14:2d:a9:16:b8:c9:d6:22:
         af:a1:61:30:65:06:17:fd:41:78:15:fc:c6:4b:27:f3:9e:77:
         27:3f:27:07:13:21:00:0c:cf:bf:ef:cf:08:f0:18:ac:3c:c6:
         34:65:b2:28:d3:50:39:cd:d2:e8:2e:a1:23:3a:c0:07:4a:88:
         91:45:40:f3:a2:eb:6b:cd:7b:20:ac:80:f5:c7:4d:4d:85:c8:
         a0:db:ec:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 08:02:02 2024 by rpki-client on console-ams.rpki-client.org