Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8PRRWCWWjQLndTthx7PeGWhN8ueobvJumDr98phSkmMT/1/3137392e3130392e3132382e302f31392d3234203d3e20323633303039.roa
File:                     3137392e3130392e3132382e302f31392d3234203d3e20323633303039.roa (raw, json)
Hash identifier:          uyXhLsUXGZRiNrgThquGKqy5282INJqamJ9baUXd3cA=
Subject key identifier:   E5:CC:4F:B0:E9:6D:D5:F1:44:6E:AF:7E:EE:77:B3:CA:A0:B3:81:73
Certificate issuer:       /CN=1D8D631665748A7E3D1B22EAB3E9675F5F6756D0
Certificate serial:       34E9AB0FCF239BED1EAEF6FC9817337E4646936A
Authority key identifier: 1D:8D:63:16:65:74:8A:7E:3D:1B:22:EA:B3:E9:67:5F:5F:67:56:D0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1D8D631665748A7E3D1B22EAB3E9675F5F6756D0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8PRRWCWWjQLndTthx7PeGWhN8ueobvJumDr98phSkmMT/1/3137392e3130392e3132382e302f31392d3234203d3e20323633303039.roa
Signing time:             Wed 03 Apr 2024 19:00:01 +0000
ROA not before:           Wed 03 Apr 2024 18:55:01 +0000
ROA not after:            Thu 03 Apr 2025 19:00:01 +0000
asID:                     263009
IP address blocks:        179.109.128.0/19 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8PRRWCWWjQLndTthx7PeGWhN8ueobvJumDr98phSkmMT/1/1D8D631665748A7E3D1B22EAB3E9675F5F6756D0.crl
                          rsync://rpki-repo.registro.br/repo/8PRRWCWWjQLndTthx7PeGWhN8ueobvJumDr98phSkmMT/1/1D8D631665748A7E3D1B22EAB3E9675F5F6756D0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1D8D631665748A7E3D1B22EAB3E9675F5F6756D0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 03:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:e9:ab:0f:cf:23:9b:ed:1e:ae:f6:fc:98:17:33:7e:46:46:93:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1D8D631665748A7E3D1B22EAB3E9675F5F6756D0
        Validity
            Not Before: Apr  3 18:55:01 2024 GMT
            Not After : Apr  3 19:00:01 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:5c:3e:ca:42:58:28:65:8c:67:b2:9b:08:a7:
                    9f:bc:a2:e8:2a:3f:53:7e:b4:a5:e9:13:c1:4e:7d:
                    85:be:8e:2c:66:b5:71:71:37:22:3c:2e:01:99:52:
                    1a:cd:f7:a4:1c:81:21:b6:ba:a9:1e:13:7c:5d:67:
                    79:82:fe:36:e8:81:1e:d6:0b:34:e4:02:51:b7:19:
                    b7:f8:a8:93:23:bd:0a:fb:5a:e9:95:15:11:d1:ee:
                    ee:51:76:3a:72:7f:4e:71:05:24:3b:cd:58:08:53:
                    4d:4c:6b:94:88:f3:46:30:fd:5c:83:5e:be:11:ae:
                    3d:f3:02:a3:95:78:91:28:41:48:74:7f:d4:5e:3d:
                    47:e3:00:cc:d0:9a:17:60:b3:01:d6:57:6c:7f:5e:
                    22:11:cb:62:ca:90:82:ea:a9:ca:43:22:eb:76:c0:
                    89:8d:40:f5:66:a1:93:50:f0:2a:29:e3:00:41:68:
                    fd:f0:3f:6f:95:7e:0f:18:8b:29:99:8e:7b:be:aa:
                    04:c2:b4:3f:c3:09:c8:ef:b0:9b:f0:fa:1f:b2:54:
                    34:e4:45:89:b2:01:88:c5:b5:d0:01:23:f8:94:7d:
                    65:9c:84:80:3e:11:a6:9a:6e:30:99:e3:ce:ae:18:
                    0f:fc:50:78:81:ee:33:49:c2:43:87:af:08:d5:6a:
                    34:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:CC:4F:B0:E9:6D:D5:F1:44:6E:AF:7E:EE:77:B3:CA:A0:B3:81:73
            X509v3 Authority Key Identifier:
                keyid:1D:8D:63:16:65:74:8A:7E:3D:1B:22:EA:B3:E9:67:5F:5F:67:56:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8PRRWCWWjQLndTthx7PeGWhN8ueobvJumDr98phSkmMT/1/1D8D631665748A7E3D1B22EAB3E9675F5F6756D0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1D8D631665748A7E3D1B22EAB3E9675F5F6756D0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8PRRWCWWjQLndTthx7PeGWhN8ueobvJumDr98phSkmMT/1/3137392e3130392e3132382e302f31392d3234203d3e20323633303039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.109.128.0/19

    Signature Algorithm: sha256WithRSAEncryption
         4f:7c:5a:09:d7:b0:78:04:78:fc:50:eb:6b:c9:66:f5:b5:6c:
         6d:f0:86:70:f4:33:93:26:3a:29:0f:d9:02:d2:6a:b5:0c:f8:
         8e:35:4a:50:c1:ff:88:3a:67:6e:87:ad:49:1b:7d:5e:18:2e:
         1a:72:57:dd:5e:1d:15:aa:f4:de:9c:19:13:e6:bf:82:9a:ba:
         a2:f7:e3:a3:e9:e4:68:30:52:bc:81:db:ff:d1:d2:8c:a6:ac:
         4f:72:84:33:d4:43:ec:20:00:cf:89:28:ec:2f:ab:fd:f0:3b:
         02:93:44:85:6f:7c:ae:f2:a2:56:ba:21:20:5e:83:fe:93:f9:
         cb:4d:8f:71:92:35:e6:7d:dc:2a:5e:72:75:03:c8:7a:b1:ae:
         19:d4:86:94:df:86:ce:fe:69:e6:95:51:f0:a9:a4:7f:35:ef:
         99:4a:de:e2:75:73:6d:0f:9b:3b:bd:06:e8:2c:98:ce:f5:c6:
         a7:ba:d5:ee:1a:b0:ed:33:a7:04:82:4f:b5:05:e7:41:c7:09:
         72:16:db:f7:74:05:6a:4d:ed:5b:8c:4e:56:18:b7:ef:6f:3a:
         2d:91:0b:e4:4c:06:5e:54:e8:2d:24:45:b5:da:cc:cb:ff:34:
         47:90:bb:1e:ae:e8:83:7f:51:f3:7e:ee:49:1b:e4:df:68:de:
         c2:c8:87:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 05:00:57 2024 by rpki-client on console-fra.rpki-client.org