Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AHfbjT1qfeT8Psh5q2zFh1y3yvFSXQbmZUbbrrZnoZB4/1/3137392e34382e38382e302f32342d3234203d3e20323731313137.roa
File:                     3137392e34382e38382e302f32342d3234203d3e20323731313137.roa (raw, json)
Hash identifier:          I9apYPj+yOveJ4jGAONzlyvDqwulP11E7PhkM/S/6Qo=
Subject key identifier:   51:26:2F:7A:5B:09:AD:04:2C:E1:B6:AE:04:4D:7A:C3:26:BC:E8:45
Certificate issuer:       /CN=62D01A32125D7B1F626C38C25BC340B899793CFA
Certificate serial:       349315CFE2B36B27BF692A7A99ED24C5BA5E9D5B
Authority key identifier: 62:D0:1A:32:12:5D:7B:1F:62:6C:38:C2:5B:C3:40:B8:99:79:3C:FA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/62D01A32125D7B1F626C38C25BC340B899793CFA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AHfbjT1qfeT8Psh5q2zFh1y3yvFSXQbmZUbbrrZnoZB4/1/3137392e34382e38382e302f32342d3234203d3e20323731313137.roa
Signing time:             Thu 04 Apr 2024 21:36:57 +0000
ROA not before:           Thu 04 Apr 2024 21:31:57 +0000
ROA not after:            Thu 03 Apr 2025 21:36:57 +0000
asID:                     271117
IP address blocks:        179.48.88.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AHfbjT1qfeT8Psh5q2zFh1y3yvFSXQbmZUbbrrZnoZB4/1/62D01A32125D7B1F626C38C25BC340B899793CFA.crl
                          rsync://rpki-repo.registro.br/repo/AHfbjT1qfeT8Psh5q2zFh1y3yvFSXQbmZUbbrrZnoZB4/1/62D01A32125D7B1F626C38C25BC340B899793CFA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/62D01A32125D7B1F626C38C25BC340B899793CFA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 15:34:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:93:15:cf:e2:b3:6b:27:bf:69:2a:7a:99:ed:24:c5:ba:5e:9d:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62D01A32125D7B1F626C38C25BC340B899793CFA
        Validity
            Not Before: Apr  4 21:31:57 2024 GMT
            Not After : Apr  3 21:36:57 2025 GMT
        Subject: CN=51262F7A5B09AD042CE1B6AE044D7AC326BCE845
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:1b:32:8a:40:a2:f9:29:b0:f4:da:b5:ee:25:
                    5c:08:87:8a:ac:27:57:e4:80:94:c3:f9:e1:68:e8:
                    9a:02:7a:47:d6:83:ef:d4:69:45:d1:8b:5d:b0:02:
                    bd:d0:35:2c:69:d0:f5:e7:2a:2f:09:6e:52:fe:9d:
                    25:96:78:9d:dc:7c:00:f0:6a:ef:48:74:a4:2a:2f:
                    90:06:a6:81:9c:d0:ef:77:43:c2:f4:28:f7:02:c6:
                    5b:f2:a5:ed:02:ca:88:e1:50:18:b7:13:16:d3:15:
                    bd:ba:6e:93:36:9b:a3:c4:5f:58:ec:0d:30:79:46:
                    54:b7:fa:8d:bc:a5:3c:0c:85:cb:d9:7f:12:1e:e0:
                    32:ef:c3:3a:9a:c7:97:75:77:c2:17:e4:7c:11:36:
                    1e:42:93:c0:0c:9c:75:29:bd:db:a1:f7:06:35:47:
                    e2:99:6b:2c:ee:c0:86:6d:3d:c9:96:40:a6:c9:29:
                    7a:32:7c:bf:b2:56:8a:07:2e:54:50:14:57:b2:d8:
                    12:95:b1:80:76:e1:57:e8:5f:16:bd:47:5b:bd:33:
                    2c:65:e5:88:17:d8:0c:ac:35:2b:f7:4d:2c:5b:74:
                    c9:36:3e:d5:de:41:6f:d5:f6:fc:93:94:d1:04:35:
                    d3:4c:ab:23:45:c2:d3:32:d0:c1:4b:36:1b:dc:32:
                    30:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:26:2F:7A:5B:09:AD:04:2C:E1:B6:AE:04:4D:7A:C3:26:BC:E8:45
            X509v3 Authority Key Identifier:
                keyid:62:D0:1A:32:12:5D:7B:1F:62:6C:38:C2:5B:C3:40:B8:99:79:3C:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AHfbjT1qfeT8Psh5q2zFh1y3yvFSXQbmZUbbrrZnoZB4/1/62D01A32125D7B1F626C38C25BC340B899793CFA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/62D01A32125D7B1F626C38C25BC340B899793CFA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AHfbjT1qfeT8Psh5q2zFh1y3yvFSXQbmZUbbrrZnoZB4/1/3137392e34382e38382e302f32342d3234203d3e20323731313137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.48.88.0/24

    Signature Algorithm: sha256WithRSAEncryption
         21:03:9a:fe:5f:9e:d2:df:fe:c6:5e:69:14:ba:43:01:13:dc:
         d4:26:b9:78:60:ce:5e:4d:68:ac:ce:31:67:db:1e:d0:91:a5:
         31:ff:1f:49:fd:c9:28:12:81:9b:01:fe:40:68:21:f8:19:a2:
         f9:af:34:f0:c9:2d:a6:9d:55:b1:87:24:e1:18:83:91:65:42:
         c2:f3:d1:0d:3a:00:84:e0:31:f7:70:a9:ef:36:23:01:e0:60:
         ae:62:5e:c1:ac:0c:60:a5:20:91:76:f4:ee:69:ef:ad:5a:3e:
         de:1b:c1:4b:6e:51:0e:dc:cd:67:0b:22:6c:76:ec:e1:02:be:
         7c:88:d1:9f:f6:d8:51:cf:d7:71:d4:07:69:1e:16:3d:8a:76:
         64:22:d2:d7:1f:56:45:7b:62:0c:db:61:6b:63:c6:e6:96:55:
         2d:51:5c:0f:93:2a:07:5a:ae:4c:d0:8f:d8:65:e5:56:58:0b:
         e1:aa:6f:60:a9:b4:fa:20:71:2c:bf:ea:fc:3e:ae:1a:f2:10:
         ba:2f:ff:9c:c1:f6:e1:4c:ac:f9:36:44:df:f0:06:06:5c:d0:
         3f:80:6d:62:1c:74:f3:11:16:b5:47:2d:a3:c3:6f:ff:ef:ed:
         80:4d:4a:8b:f5:d4:db:d2:be:14:10:ed:8b:a9:df:e5:48:8f:
         2e:4e:df:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 15:22:40 2024 by rpki-client on console-fra.rpki-client.org