Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8m3LcL6b4YVrEFHsFNwDkZtMS2pcjbhQ35fFbDVECEfA/0/3137392e3130362e3138382e302f32322d3232203d3e203532353339.roa
File:                     3137392e3130362e3138382e302f32322d3232203d3e203532353339.roa (raw, json)
Hash identifier:          QD/tAqcyU96A24zw4x0ckYuEj/pTzWBALER/iSZHGgw=
Subject key identifier:   39:AD:0C:62:AA:A2:FB:2F:77:D1:5D:D4:47:6A:78:65:D0:BB:85:21
Certificate issuer:       /CN=EDAC2B7F8EA03E6BEEB3716358CCDB98B47D9FE4
Certificate serial:       1DA156B3D24A4FA77AE59125070680D6023A80ED
Authority key identifier: ED:AC:2B:7F:8E:A0:3E:6B:EE:B3:71:63:58:CC:DB:98:B4:7D:9F:E4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EDAC2B7F8EA03E6BEEB3716358CCDB98B47D9FE4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8m3LcL6b4YVrEFHsFNwDkZtMS2pcjbhQ35fFbDVECEfA/0/3137392e3130362e3138382e302f32322d3232203d3e203532353339.roa
Signing time:             Tue 27 Aug 2024 16:36:31 +0000
ROA not before:           Tue 27 Aug 2024 16:31:31 +0000
ROA not after:            Tue 26 Aug 2025 16:36:31 +0000
asID:                     52539
IP address blocks:        179.106.188.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8m3LcL6b4YVrEFHsFNwDkZtMS2pcjbhQ35fFbDVECEfA/0/EDAC2B7F8EA03E6BEEB3716358CCDB98B47D9FE4.crl
                          rsync://rpki-repo.registro.br/repo/8m3LcL6b4YVrEFHsFNwDkZtMS2pcjbhQ35fFbDVECEfA/0/EDAC2B7F8EA03E6BEEB3716358CCDB98B47D9FE4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EDAC2B7F8EA03E6BEEB3716358CCDB98B47D9FE4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 18:06:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:a1:56:b3:d2:4a:4f:a7:7a:e5:91:25:07:06:80:d6:02:3a:80:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EDAC2B7F8EA03E6BEEB3716358CCDB98B47D9FE4
        Validity
            Not Before: Aug 27 16:31:31 2024 GMT
            Not After : Aug 26 16:36:31 2025 GMT
        Subject: CN=39AD0C62AAA2FB2F77D15DD4476A7865D0BB8521
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:8e:44:06:3a:90:78:c3:1d:35:4d:8a:1d:b0:
                    6b:87:de:93:b3:cf:a9:23:7d:55:87:ee:9e:19:c9:
                    6d:8b:a9:5f:f8:0b:6b:d4:51:75:d2:59:12:2b:b0:
                    72:22:e6:76:48:be:a9:d4:74:44:43:c1:4d:2f:28:
                    a3:f8:e1:83:b0:82:57:d7:b9:36:a7:a6:9e:48:da:
                    29:11:7a:95:33:11:40:ba:e4:cb:4f:3a:07:a0:59:
                    7f:ad:83:06:46:24:b9:f0:da:de:ac:a4:cd:d5:f0:
                    b5:d5:1f:04:08:c4:ca:5d:22:56:d9:43:c2:9b:40:
                    36:5a:ab:04:c1:0f:aa:a9:6b:a2:46:f2:ba:ed:88:
                    66:f4:72:2f:a5:4a:8e:db:f1:21:92:ce:df:76:aa:
                    e4:41:9a:19:c4:87:d3:f3:09:4f:59:88:6a:8f:5d:
                    b0:f5:26:ed:b4:41:5b:6d:00:4b:c7:f6:71:75:48:
                    fd:a0:94:75:f5:23:95:ab:71:b5:00:0d:b2:b8:56:
                    0e:c0:2b:77:ed:e4:8c:8e:8d:6e:7d:9e:bc:70:4d:
                    f5:bd:51:2a:13:a1:0b:a7:89:09:62:c3:ab:b6:0c:
                    f9:31:f6:37:e0:43:90:87:47:eb:63:6f:45:5a:e5:
                    97:36:52:47:be:87:96:5b:3b:f4:7f:46:88:5b:34:
                    71:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:AD:0C:62:AA:A2:FB:2F:77:D1:5D:D4:47:6A:78:65:D0:BB:85:21
            X509v3 Authority Key Identifier:
                keyid:ED:AC:2B:7F:8E:A0:3E:6B:EE:B3:71:63:58:CC:DB:98:B4:7D:9F:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8m3LcL6b4YVrEFHsFNwDkZtMS2pcjbhQ35fFbDVECEfA/0/EDAC2B7F8EA03E6BEEB3716358CCDB98B47D9FE4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EDAC2B7F8EA03E6BEEB3716358CCDB98B47D9FE4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8m3LcL6b4YVrEFHsFNwDkZtMS2pcjbhQ35fFbDVECEfA/0/3137392e3130362e3138382e302f32322d3232203d3e203532353339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.106.188.0/22

    Signature Algorithm: sha256WithRSAEncryption
         81:bd:98:39:bd:5f:3d:73:5e:35:b3:ca:58:52:c8:eb:e7:8b:
         e1:4d:3b:39:55:70:23:ec:c1:64:eb:a0:6a:fc:7a:08:77:da:
         cf:9f:ae:e1:1b:88:d8:dd:e2:47:23:3a:a3:d9:da:41:44:57:
         f3:fa:8e:b0:a6:45:0a:08:00:19:49:77:09:a7:d5:76:f1:4b:
         c9:33:eb:ee:75:3f:e6:e5:5e:ba:81:81:4b:7f:45:bc:b8:2c:
         42:d9:bb:ef:d6:68:44:f6:57:68:41:0d:cf:75:56:da:e4:8f:
         23:9c:61:94:38:b6:1e:39:de:2e:8f:12:fc:79:f0:72:16:50:
         13:8f:e2:06:b0:2e:f5:a1:e3:5a:ac:49:a3:5c:4f:32:8d:b1:
         b1:3d:6a:7e:f3:5c:b5:2d:f0:38:4c:1f:bb:e1:c6:3d:9b:24:
         dd:4d:65:df:0d:93:f9:ad:63:e7:89:78:5b:f1:33:8b:fd:b0:
         c7:4a:52:fb:78:d8:f8:40:3a:4c:d8:84:06:dc:ac:ce:86:04:
         3f:74:e2:09:ef:47:5b:52:d8:b7:fd:07:7e:3d:16:37:f3:14:
         a5:11:0f:39:a9:10:14:99:2c:ac:c4:08:49:a6:4f:dc:3b:35:
         f8:67:ef:c1:55:1d:98:7e:b1:8a:89:ce:11:c0:7d:8f:02:5f:
         ac:2e:70:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 17:27:47 2024 by rpki-client on console-fra.rpki-client.org