Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9SF3ELzzbBNW2b1uf6GK8c5oSGQAtxHXCQoNZnvBarQE/1/3137392e39372e39312e302f32342d3234203d3e20323633343133.roa
File:                     3137392e39372e39312e302f32342d3234203d3e20323633343133.roa (raw, json)
Hash identifier:          aW9V0V7XsZXlwDtiwWGZaJC1dXQDBTEVTX9wSsaXDM4=
Subject key identifier:   E8:4A:62:4D:F2:F2:D0:5A:48:D2:5B:88:B7:4B:94:1E:14:C5:C2:BA
Certificate issuer:       /CN=E1989BB07C22369442D0A08B2212D584A657A415
Certificate serial:       6FCFE56491E24680FB100E0092B6BD4925ED4FD9
Authority key identifier: E1:98:9B:B0:7C:22:36:94:42:D0:A0:8B:22:12:D5:84:A6:57:A4:15
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E1989BB07C22369442D0A08B2212D584A657A415.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9SF3ELzzbBNW2b1uf6GK8c5oSGQAtxHXCQoNZnvBarQE/1/3137392e39372e39312e302f32342d3234203d3e20323633343133.roa
Signing time:             Tue 02 Jul 2024 11:00:12 +0000
ROA not before:           Tue 02 Jul 2024 10:55:12 +0000
ROA not after:            Tue 01 Jul 2025 11:00:12 +0000
asID:                     263413
IP address blocks:        179.97.91.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9SF3ELzzbBNW2b1uf6GK8c5oSGQAtxHXCQoNZnvBarQE/1/E1989BB07C22369442D0A08B2212D584A657A415.crl
                          rsync://rpki-repo.registro.br/repo/9SF3ELzzbBNW2b1uf6GK8c5oSGQAtxHXCQoNZnvBarQE/1/E1989BB07C22369442D0A08B2212D584A657A415.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E1989BB07C22369442D0A08B2212D584A657A415.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 28 Sep 2024 09:23:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:cf:e5:64:91:e2:46:80:fb:10:0e:00:92:b6:bd:49:25:ed:4f:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E1989BB07C22369442D0A08B2212D584A657A415
        Validity
            Not Before: Jul  2 10:55:12 2024 GMT
            Not After : Jul  1 11:00:12 2025 GMT
        Subject: CN=E84A624DF2F2D05A48D25B88B74B941E14C5C2BA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:2c:8c:b3:98:1a:8e:dd:88:6b:ad:52:54:fa:
                    26:d8:79:82:6b:03:e5:5a:26:67:c0:d4:82:b3:19:
                    5a:c3:f2:a1:8a:43:35:52:12:50:41:2e:68:26:47:
                    02:04:e9:64:7f:02:54:84:ee:a6:1b:6b:00:3e:9c:
                    1f:46:db:16:33:93:46:2d:c3:2b:f0:ed:30:63:6d:
                    eb:62:06:e4:57:47:8e:1b:dc:40:bf:86:70:43:8d:
                    82:ee:3c:9b:3e:ed:a5:85:6f:83:d3:df:3c:bb:77:
                    fb:91:53:a5:df:a5:22:7f:92:5f:a3:d7:93:af:d0:
                    de:22:f5:d6:15:c5:63:c5:2f:f4:a7:46:e6:ba:2d:
                    61:a9:a1:1e:d3:9a:86:b4:3b:ff:71:84:db:29:d7:
                    5b:1e:27:4a:2e:e7:4f:21:cc:86:0e:97:3e:dd:05:
                    28:dc:3c:d9:3b:1a:56:fd:7a:5d:fe:3b:e0:02:3e:
                    3e:fa:98:0d:06:78:9c:22:18:1b:a5:89:05:74:37:
                    40:82:0c:34:32:8d:7f:77:ea:99:b2:cb:cd:19:43:
                    84:e6:e7:41:17:15:7e:bc:f5:2b:cb:0e:3c:7e:3b:
                    8a:72:6b:ec:dd:99:c0:b1:cd:00:1f:df:df:12:2a:
                    f4:3b:76:c8:c5:f4:cc:99:ff:57:9b:3e:02:fc:3e:
                    d1:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:4A:62:4D:F2:F2:D0:5A:48:D2:5B:88:B7:4B:94:1E:14:C5:C2:BA
            X509v3 Authority Key Identifier:
                keyid:E1:98:9B:B0:7C:22:36:94:42:D0:A0:8B:22:12:D5:84:A6:57:A4:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9SF3ELzzbBNW2b1uf6GK8c5oSGQAtxHXCQoNZnvBarQE/1/E1989BB07C22369442D0A08B2212D584A657A415.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E1989BB07C22369442D0A08B2212D584A657A415.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9SF3ELzzbBNW2b1uf6GK8c5oSGQAtxHXCQoNZnvBarQE/1/3137392e39372e39312e302f32342d3234203d3e20323633343133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.97.91.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a3:a7:2b:a7:a5:41:a8:ee:2c:00:59:2b:a3:6a:ba:aa:bb:e2:
         d8:04:27:09:74:d9:86:7f:21:f6:f1:2f:f6:96:a2:6f:79:c2:
         65:48:c5:d8:67:62:b7:56:da:29:0f:00:74:94:c6:6a:9d:d6:
         3c:59:72:a6:46:5a:f3:0e:2c:63:36:6d:95:01:df:9c:30:04:
         fb:49:1a:20:28:a1:25:09:2b:44:34:d4:b5:b3:85:34:f3:49:
         38:c6:a8:bd:9e:2c:ab:22:cc:c1:d2:3c:ce:b8:f8:ea:61:56:
         f4:46:37:59:e2:35:09:cb:ad:8d:52:1f:23:14:20:b0:37:25:
         40:94:fc:92:88:ed:53:c7:3a:fc:79:72:d3:a7:62:ce:1a:3a:
         81:8c:54:9c:e0:ba:19:d4:44:08:3e:9d:da:2b:c8:e9:09:fd:
         4f:98:f1:bb:d6:e1:e4:07:26:0e:e4:fe:68:29:6e:99:3c:b9:
         9d:a0:8d:60:0e:6b:8e:80:51:c9:ce:14:47:c5:b1:2a:8d:35:
         b2:eb:5a:23:d0:10:b4:43:d5:e2:8e:e5:ac:f6:fb:5a:77:32:
         b3:82:ad:44:30:55:9d:5c:3f:ad:dd:c2:00:ef:c6:22:21:0d:
         74:53:ba:65:42:98:de:69:08:ab:de:24:ba:b8:07:16:9c:80:
         02:a5:ba:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 27 09:15:44 2024 by rpki-client on console-fra.rpki-client.org