Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/3/3137392e3132372e34382e302f32302d3234203d3e20323632363539.roa
File:                     3137392e3132372e34382e302f32302d3234203d3e20323632363539.roa (raw, json)
Hash identifier:          ouvWz/avtBlAARdZUzY85GkIuA0zziLvJrB0EQRkkqY=
Subject key identifier:   87:01:C6:E7:E4:27:46:57:3F:A1:A8:96:EE:D8:65:19:3C:FF:71:96
Certificate issuer:       /CN=BA413927001E29F4D18A0C0FCE1C467924EA1B6B
Certificate serial:       1BF8D14627AC7EDCB8D9CE9CEE37A6814F968FAB
Authority key identifier: BA:41:39:27:00:1E:29:F4:D1:8A:0C:0F:CE:1C:46:79:24:EA:1B:6B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA413927001E29F4D18A0C0FCE1C467924EA1B6B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/3/3137392e3132372e34382e302f32302d3234203d3e20323632363539.roa
Signing time:             Mon 25 Nov 2024 17:04:26 +0000
ROA not before:           Mon 25 Nov 2024 16:59:26 +0000
ROA not after:            Mon 24 Nov 2025 17:04:26 +0000
asID:                     262659
IP address blocks:        179.127.48.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/3/BA413927001E29F4D18A0C0FCE1C467924EA1B6B.crl
                          rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/3/BA413927001E29F4D18A0C0FCE1C467924EA1B6B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA413927001E29F4D18A0C0FCE1C467924EA1B6B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 17:34:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:f8:d1:46:27:ac:7e:dc:b8:d9:ce:9c:ee:37:a6:81:4f:96:8f:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BA413927001E29F4D18A0C0FCE1C467924EA1B6B
        Validity
            Not Before: Nov 25 16:59:26 2024 GMT
            Not After : Nov 24 17:04:26 2025 GMT
        Subject: CN=8701C6E7E42746573FA1A896EED865193CFF7196
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:e1:b9:fb:5b:f3:c4:1f:d8:20:08:56:6a:ca:
                    74:6c:56:5b:48:65:63:49:d8:9c:ec:44:97:97:31:
                    65:39:67:7e:22:5e:4f:2c:87:bc:25:d8:eb:44:95:
                    f6:76:3c:c2:35:29:f7:e3:72:52:d8:e9:5a:cf:ca:
                    4e:4e:cd:60:06:23:49:24:fa:ec:05:92:a8:90:81:
                    67:35:9a:4d:20:cc:61:a4:f2:b6:04:56:52:48:2c:
                    e3:5c:98:33:bd:6d:3e:f4:45:5f:b7:91:ed:07:60:
                    d8:88:89:06:a6:16:35:38:2c:96:ba:95:66:55:bd:
                    23:55:25:6a:ff:26:6b:7e:94:fb:d8:ca:85:dd:95:
                    b1:aa:de:3d:b8:42:44:b2:34:0d:02:83:3a:fc:a2:
                    98:62:9a:e9:73:94:9f:e2:bc:ea:da:81:35:4f:52:
                    84:28:a3:9e:72:8e:31:86:06:7e:de:99:fe:c9:25:
                    6f:91:c0:fe:f3:57:a2:dd:d7:92:c3:85:19:f5:8e:
                    aa:74:22:5b:14:2e:5c:0b:a8:3f:63:b4:85:35:c1:
                    ad:c4:a9:73:9e:a3:13:f5:dd:9e:bc:9f:91:5f:9f:
                    7d:a8:e5:c8:0b:21:b4:45:37:fe:81:11:0f:a2:ea:
                    2e:17:3f:7c:2c:bf:6a:2b:9e:aa:db:45:d6:fc:d9:
                    b4:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:01:C6:E7:E4:27:46:57:3F:A1:A8:96:EE:D8:65:19:3C:FF:71:96
            X509v3 Authority Key Identifier:
                keyid:BA:41:39:27:00:1E:29:F4:D1:8A:0C:0F:CE:1C:46:79:24:EA:1B:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/3/BA413927001E29F4D18A0C0FCE1C467924EA1B6B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA413927001E29F4D18A0C0FCE1C467924EA1B6B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/3/3137392e3132372e34382e302f32302d3234203d3e20323632363539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.127.48.0/20

    Signature Algorithm: sha256WithRSAEncryption
         2d:04:d7:4c:44:c7:65:5a:92:8f:92:44:55:43:7e:94:94:2a:
         f6:3a:ff:4b:84:93:7d:99:aa:c9:d1:26:61:37:90:65:f7:5b:
         24:be:6e:96:dd:77:8d:8e:0f:2f:99:93:af:e1:83:04:7d:76:
         8e:e2:b4:2e:bf:2e:09:1b:8e:19:63:ba:f3:60:55:b8:4d:ab:
         be:a6:6a:db:16:9c:6f:43:f9:49:6d:db:59:74:32:21:42:d7:
         31:cd:3e:a1:55:c0:6d:b5:0a:ea:23:b4:d3:ed:d8:c5:9e:ea:
         f3:53:28:be:e2:46:f4:f9:5d:37:00:01:5c:de:61:42:2a:c7:
         9d:ad:d9:a7:53:56:b8:3e:67:2d:28:07:7a:a6:94:07:a9:90:
         bd:4f:c3:e8:c6:34:c8:9b:af:b9:d1:a4:f4:54:6e:d7:cf:df:
         d0:8f:f5:b2:77:c8:42:40:8c:56:16:14:4c:a3:d8:bd:28:8d:
         50:7e:a4:25:e3:59:74:6c:f1:bb:88:2e:38:38:e6:b5:71:97:
         9e:c3:56:03:c3:2a:77:f7:a2:3f:0a:4c:90:cb:26:bc:8d:40:
         5e:53:04:47:33:d0:b8:26:c4:83:a6:02:3e:55:2d:70:b9:69:
         1b:5d:af:a7:b1:90:07:a2:1c:6d:9c:07:66:29:04:17:5e:b4:
         8e:3b:0a:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 19:46:35 2024 by rpki-client on console-fra.rpki-client.org