Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/0/3137392e3132372e3232342e302f32302d3234203d3e20323632363838.roa
File:                     3137392e3132372e3232342e302f32302d3234203d3e20323632363838.roa (raw, json)
Hash identifier:          8MPytMtP61IAdC534Wc5Xa3vJ93WPe/5yfqAr+cv/Qk=
Subject key identifier:   20:C2:37:7C:73:60:67:BD:3D:DD:C5:E3:C4:50:59:AB:34:A7:A3:AF
Certificate issuer:       /CN=C33A5DDC754BD16555FE132A7EE0F058C2FF7B56
Certificate serial:       72FEAFC9602A0BC3007386B315D49F0E1A45A0E7
Authority key identifier: C3:3A:5D:DC:75:4B:D1:65:55:FE:13:2A:7E:E0:F0:58:C2:FF:7B:56
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C33A5DDC754BD16555FE132A7EE0F058C2FF7B56.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/0/3137392e3132372e3232342e302f32302d3234203d3e20323632363838.roa
Signing time:             Fri 08 Nov 2024 18:39:01 +0000
ROA not before:           Fri 08 Nov 2024 18:34:01 +0000
ROA not after:            Fri 07 Nov 2025 18:39:01 +0000
asID:                     262688
IP address blocks:        179.127.224.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/0/C33A5DDC754BD16555FE132A7EE0F058C2FF7B56.crl
                          rsync://rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/0/C33A5DDC754BD16555FE132A7EE0F058C2FF7B56.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C33A5DDC754BD16555FE132A7EE0F058C2FF7B56.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 30 Nov 2024 16:40:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:fe:af:c9:60:2a:0b:c3:00:73:86:b3:15:d4:9f:0e:1a:45:a0:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C33A5DDC754BD16555FE132A7EE0F058C2FF7B56
        Validity
            Not Before: Nov  8 18:34:01 2024 GMT
            Not After : Nov  7 18:39:01 2025 GMT
        Subject: CN=20C2377C736067BD3DDDC5E3C45059AB34A7A3AF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:c6:f5:7f:1b:a2:1c:32:ab:fc:8b:16:53:9f:
                    32:b7:18:84:56:86:ad:66:0a:80:14:06:9e:9c:e5:
                    dd:02:75:9f:4c:f6:7f:60:65:92:47:63:5e:11:7e:
                    bd:db:32:a9:1e:3f:65:84:20:90:b4:64:f6:9d:67:
                    1d:d3:19:15:7e:75:bd:c7:71:4b:71:12:66:8f:fb:
                    04:2c:f5:32:4d:2e:61:5a:bc:79:7f:0c:6c:02:6c:
                    af:51:d8:1a:6c:2f:93:46:e0:3d:69:dd:7c:45:e1:
                    66:39:29:89:a2:40:cd:2a:6b:4f:b1:f6:93:ac:02:
                    e7:34:1b:c0:c4:c3:66:c7:7c:03:79:9b:8c:b2:78:
                    25:e6:3e:03:69:18:3b:33:c2:f4:38:7c:e2:60:af:
                    a3:12:27:2a:c1:61:b5:a2:0b:25:73:7e:e6:d3:55:
                    83:00:3d:c8:89:05:95:95:85:98:24:4d:6a:d1:f6:
                    0d:65:e5:20:0e:c8:a0:63:9b:d3:74:f6:f2:a1:ff:
                    da:e7:1c:6c:85:91:e9:db:09:10:c3:ae:bc:ce:84:
                    38:cc:a3:32:13:0e:d5:aa:83:ec:36:47:9a:29:aa:
                    57:84:4c:a9:90:f1:d0:bd:f7:e0:26:c8:9c:a3:a6:
                    48:76:28:21:08:c0:96:7b:91:ad:77:e4:87:5d:8f:
                    21:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:C2:37:7C:73:60:67:BD:3D:DD:C5:E3:C4:50:59:AB:34:A7:A3:AF
            X509v3 Authority Key Identifier:
                keyid:C3:3A:5D:DC:75:4B:D1:65:55:FE:13:2A:7E:E0:F0:58:C2:FF:7B:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/0/C33A5DDC754BD16555FE132A7EE0F058C2FF7B56.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C33A5DDC754BD16555FE132A7EE0F058C2FF7B56.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/0/3137392e3132372e3232342e302f32302d3234203d3e20323632363838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.127.224.0/20

    Signature Algorithm: sha256WithRSAEncryption
         97:a6:f3:bb:02:cd:24:80:a6:99:30:c9:0d:69:7d:8a:72:55:
         3c:ec:d3:ff:0c:bb:a3:81:8b:96:19:39:d1:ee:81:2f:d1:69:
         7c:e6:ac:f6:7f:37:3b:2b:d5:66:a8:ae:93:6e:8f:32:d9:56:
         81:30:4e:c1:c3:01:42:fd:c9:3d:28:e0:ac:cc:4b:fb:99:e2:
         00:37:76:72:71:10:cf:7d:04:e3:75:8b:14:82:70:d0:12:28:
         1a:6a:06:57:94:c5:0a:c3:e3:96:37:03:5f:e8:02:a4:07:91:
         46:e5:fd:49:09:ef:08:62:bf:87:8b:07:b0:7b:30:e9:48:2d:
         8c:fa:21:e8:38:5c:f5:8b:1a:31:e6:8c:32:47:0f:2b:6d:96:
         e8:6b:e2:ac:f3:cf:b8:6b:99:21:f0:41:e1:8e:1b:4d:8b:fb:
         e8:ce:06:e8:49:c9:53:3e:c2:5d:6f:df:7c:71:54:4a:40:d4:
         36:04:dd:18:61:cf:61:f8:d1:8c:a4:03:7e:1d:de:b3:ce:87:
         8c:a0:04:d0:5e:c1:4d:78:21:33:12:1f:68:01:d2:48:73:e3:
         fc:ae:97:4a:05:16:1f:bf:c7:80:72:03:53:fb:a8:95:59:4f:
         14:4b:1e:d1:44:9d:ea:ab:06:3a:a1:ce:4c:87:28:86:9f:21:
         86:dc:c0:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 29 17:14:37 2024 by rpki-client on console-fra.rpki-client.org