Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8PRRWCWWjQLndTthx7PeGWhN8ueobvJumDr98phSkmMT/1/3137392e3130392e3132382e302f31392d3234203d3e20323633353835.roa
File:                     3137392e3130392e3132382e302f31392d3234203d3e20323633353835.roa (raw, json)
Hash identifier:          0ZsMNGkYsOgVyMDyPNB4zh2GVRyIdPB9PQHazAXGU9Y=
Subject key identifier:   07:E5:87:92:30:30:DE:D7:CC:6D:C0:9B:86:20:2D:60:67:EE:9C:6F
Certificate issuer:       /CN=1D8D631665748A7E3D1B22EAB3E9675F5F6756D0
Certificate serial:       38A07668A327383D4B9305FB7ADA710B34B8EFBB
Authority key identifier: 1D:8D:63:16:65:74:8A:7E:3D:1B:22:EA:B3:E9:67:5F:5F:67:56:D0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1D8D631665748A7E3D1B22EAB3E9675F5F6756D0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8PRRWCWWjQLndTthx7PeGWhN8ueobvJumDr98phSkmMT/1/3137392e3130392e3132382e302f31392d3234203d3e20323633353835.roa
Signing time:             Wed 03 Apr 2024 19:00:01 +0000
ROA not before:           Wed 03 Apr 2024 18:55:01 +0000
ROA not after:            Thu 03 Apr 2025 19:00:01 +0000
asID:                     263585
IP address blocks:        179.109.128.0/19 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8PRRWCWWjQLndTthx7PeGWhN8ueobvJumDr98phSkmMT/1/1D8D631665748A7E3D1B22EAB3E9675F5F6756D0.crl
                          rsync://rpki-repo.registro.br/repo/8PRRWCWWjQLndTthx7PeGWhN8ueobvJumDr98phSkmMT/1/1D8D631665748A7E3D1B22EAB3E9675F5F6756D0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1D8D631665748A7E3D1B22EAB3E9675F5F6756D0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 03 Jul 2024 20:51:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:a0:76:68:a3:27:38:3d:4b:93:05:fb:7a:da:71:0b:34:b8:ef:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1D8D631665748A7E3D1B22EAB3E9675F5F6756D0
        Validity
            Not Before: Apr  3 18:55:01 2024 GMT
            Not After : Apr  3 19:00:01 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:01:79:a4:20:eb:a5:be:d9:7a:fe:4b:f7:46:
                    5d:40:b1:a0:e1:17:9e:f0:ce:70:b3:cd:2e:38:cc:
                    20:87:bb:8f:9f:97:de:00:e0:0e:6a:ef:27:47:c5:
                    62:0e:0c:2d:33:91:e1:9b:ce:ac:92:06:3f:ca:4e:
                    b0:ea:48:91:76:e8:b1:1d:03:99:0f:40:99:9d:f8:
                    ae:8d:fd:dc:6a:04:02:2a:96:0f:51:2e:5b:29:b6:
                    53:9c:33:12:2e:cd:98:ae:3b:ec:00:5a:b8:5c:e3:
                    f1:cf:67:ba:99:ea:5e:1b:3a:a7:63:71:d7:22:0f:
                    8d:71:28:8d:a2:0c:64:51:bf:93:84:2d:6e:54:07:
                    9a:d3:80:f7:b4:12:37:27:ff:d0:df:32:1f:55:06:
                    36:6f:e7:44:ed:39:41:cf:ae:7f:0f:a1:d0:a8:d7:
                    92:3a:2a:f2:bf:fe:71:b3:86:cb:8d:87:6f:22:b0:
                    58:a1:a9:a7:96:0f:28:23:27:4f:4e:41:36:50:f5:
                    8d:1e:6d:87:0b:d3:75:64:54:1d:11:70:c6:c4:82:
                    52:f7:e8:a4:ef:1d:a9:2f:ae:eb:cc:d4:b9:d6:d6:
                    05:94:7f:3d:0d:62:77:48:6d:56:a3:3d:7d:27:eb:
                    ba:5e:6a:b2:c8:66:bc:b8:ec:c0:05:31:3e:49:39:
                    d4:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:E5:87:92:30:30:DE:D7:CC:6D:C0:9B:86:20:2D:60:67:EE:9C:6F
            X509v3 Authority Key Identifier:
                keyid:1D:8D:63:16:65:74:8A:7E:3D:1B:22:EA:B3:E9:67:5F:5F:67:56:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8PRRWCWWjQLndTthx7PeGWhN8ueobvJumDr98phSkmMT/1/1D8D631665748A7E3D1B22EAB3E9675F5F6756D0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1D8D631665748A7E3D1B22EAB3E9675F5F6756D0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8PRRWCWWjQLndTthx7PeGWhN8ueobvJumDr98phSkmMT/1/3137392e3130392e3132382e302f31392d3234203d3e20323633353835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.109.128.0/19

    Signature Algorithm: sha256WithRSAEncryption
         43:b2:38:59:fb:0a:28:26:cf:98:f5:09:ec:f9:e2:d2:f4:c3:
         29:b1:b7:0b:5b:86:48:67:fe:b4:33:6b:09:0f:3f:31:ea:cf:
         be:c7:1e:5d:07:e1:46:ba:75:55:42:39:79:17:38:0c:e2:c5:
         18:ff:f3:a5:32:31:46:42:b1:76:c6:8b:88:cf:9d:b9:8e:47:
         8d:89:c8:ab:b5:20:bb:6a:af:f7:96:73:75:41:b7:46:bc:7d:
         49:73:9d:d5:ad:c1:ea:b0:29:5c:42:55:41:a3:be:d0:a7:03:
         9e:6b:78:04:c0:81:4f:50:29:ef:03:a5:04:1e:91:3d:e9:cb:
         3d:b4:b1:65:3e:6b:8f:fe:02:ab:d0:2d:06:cd:83:24:5f:eb:
         40:da:7f:b3:43:ab:4b:37:87:78:44:0b:98:a6:50:51:a2:ee:
         64:84:a9:85:cd:78:38:51:2b:37:46:ab:88:88:5a:33:7b:00:
         c6:c3:47:59:fd:ab:9c:62:b0:1f:6a:dc:67:34:32:bc:d5:03:
         18:59:bb:fe:26:44:7b:15:c8:53:e2:45:28:1e:13:4b:ba:c3:
         83:1d:0e:a4:0a:6e:3f:36:97:ef:df:3a:40:2e:e4:ac:77:cf:
         a4:85:42:a6:76:5c:85:2e:51:2b:f4:2c:5c:0b:33:09:78:5f:
         c8:d0:68:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 2 22:43:53 2024 by rpki-client on console-ams.rpki-client.org