Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AZJdQuFc5C35gxdFWDqs3zEdVLS5qeKJyQdpYADKFAig/0/3137392e3132342e3231362e302f32342d3234203d3e20323633363234.roa
File:                     3137392e3132342e3231362e302f32342d3234203d3e20323633363234.roa (raw, json)
Hash identifier:          N6RfvtwbLUXfHobOOgyiSaEXfavsuIIYtt9tJcABf80=
Subject key identifier:   AD:2C:01:BA:7B:FD:5C:98:49:77:FE:E4:18:8F:2B:B9:3F:87:0E:D1
Certificate issuer:       /CN=642EA27EA1276FA1CA55EF3FD887CFC6DDA05C47
Certificate serial:       66B6E62ED75C9B2FCFA55EF6707B5A6EE8784D79
Authority key identifier: 64:2E:A2:7E:A1:27:6F:A1:CA:55:EF:3F:D8:87:CF:C6:DD:A0:5C:47
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/642EA27EA1276FA1CA55EF3FD887CFC6DDA05C47.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AZJdQuFc5C35gxdFWDqs3zEdVLS5qeKJyQdpYADKFAig/0/3137392e3132342e3231362e302f32342d3234203d3e20323633363234.roa
Signing time:             Tue 26 Nov 2024 14:56:38 +0000
ROA not before:           Tue 26 Nov 2024 14:51:38 +0000
ROA not after:            Tue 25 Nov 2025 14:56:38 +0000
asID:                     263624
IP address blocks:        179.124.216.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AZJdQuFc5C35gxdFWDqs3zEdVLS5qeKJyQdpYADKFAig/0/642EA27EA1276FA1CA55EF3FD887CFC6DDA05C47.crl
                          rsync://rpki-repo.registro.br/repo/AZJdQuFc5C35gxdFWDqs3zEdVLS5qeKJyQdpYADKFAig/0/642EA27EA1276FA1CA55EF3FD887CFC6DDA05C47.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/642EA27EA1276FA1CA55EF3FD887CFC6DDA05C47.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 28 Nov 2024 06:15:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:b6:e6:2e:d7:5c:9b:2f:cf:a5:5e:f6:70:7b:5a:6e:e8:78:4d:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=642EA27EA1276FA1CA55EF3FD887CFC6DDA05C47
        Validity
            Not Before: Nov 26 14:51:38 2024 GMT
            Not After : Nov 25 14:56:38 2025 GMT
        Subject: CN=AD2C01BA7BFD5C984977FEE4188F2BB93F870ED1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:2a:84:10:62:d8:6e:fb:ce:e4:d8:4b:fb:b7:
                    68:f9:8d:0f:29:31:48:fa:3f:e5:19:81:38:a4:3d:
                    12:e4:7d:09:f1:c1:37:9e:12:7e:0b:aa:97:2b:b4:
                    61:0d:0c:33:11:8c:45:7e:10:bf:1a:d0:96:cf:71:
                    74:d2:93:ed:9b:fc:ca:4f:6f:36:f7:7f:b8:73:23:
                    00:7f:0f:47:d1:9b:8a:61:bb:42:0f:5f:ba:41:fc:
                    95:31:a7:23:fb:22:7b:fb:31:74:e2:15:96:0f:6b:
                    e3:f8:82:93:84:b3:6f:8c:19:b2:5a:ec:7d:80:be:
                    84:9d:7d:e1:9e:19:0a:e9:68:a8:29:4b:23:06:b5:
                    d2:1d:2f:68:c6:ed:ea:08:93:c9:e7:08:c5:4e:33:
                    08:00:19:a5:6f:28:59:4b:48:ed:ce:53:d8:d6:43:
                    e6:37:67:fe:4b:9e:55:ea:cb:e4:16:23:54:eb:7e:
                    34:3c:76:b0:3f:af:14:8c:00:6d:92:9a:ed:7f:df:
                    5d:cd:8b:63:48:b5:17:6a:58:61:98:63:2f:df:d1:
                    e3:ee:96:a9:a9:b1:15:74:19:47:50:fc:ff:94:c5:
                    eb:6b:35:ec:91:f0:5e:06:cc:8e:41:e0:30:12:2f:
                    30:95:f4:f0:65:4e:b6:2e:74:51:a9:e5:28:d5:19:
                    dd:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:2C:01:BA:7B:FD:5C:98:49:77:FE:E4:18:8F:2B:B9:3F:87:0E:D1
            X509v3 Authority Key Identifier:
                keyid:64:2E:A2:7E:A1:27:6F:A1:CA:55:EF:3F:D8:87:CF:C6:DD:A0:5C:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AZJdQuFc5C35gxdFWDqs3zEdVLS5qeKJyQdpYADKFAig/0/642EA27EA1276FA1CA55EF3FD887CFC6DDA05C47.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/642EA27EA1276FA1CA55EF3FD887CFC6DDA05C47.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AZJdQuFc5C35gxdFWDqs3zEdVLS5qeKJyQdpYADKFAig/0/3137392e3132342e3231362e302f32342d3234203d3e20323633363234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.124.216.0/24

    Signature Algorithm: sha256WithRSAEncryption
         47:17:0b:5f:72:22:d0:c6:3b:0d:14:79:40:54:72:a0:7c:1a:
         45:71:7b:44:4b:15:ee:96:a6:33:01:70:18:ba:4e:dd:e4:7f:
         ab:ce:a7:db:7c:b9:3c:c4:d2:a1:b2:52:ba:2b:7c:83:bc:71:
         6a:f8:8c:cb:20:2b:68:66:f0:2c:4a:a2:b5:11:f1:0f:ce:d6:
         77:dd:01:8f:12:62:00:31:5d:0f:8c:2e:0f:e7:ce:52:1e:9b:
         13:7f:3e:fc:ed:a9:19:56:87:14:e7:3b:33:39:13:24:4a:3e:
         f9:01:44:a9:9e:dc:5e:2b:9d:9f:8b:41:23:b2:ae:48:70:1c:
         b6:b0:74:99:1c:05:6b:50:2f:a7:f4:a3:8c:47:79:39:74:32:
         7a:eb:11:a1:72:c3:fb:7e:bf:bd:4e:14:1c:61:c8:18:ac:14:
         da:0a:7d:b4:e7:03:8b:d4:df:c0:c7:82:72:f0:79:5e:c1:84:
         17:39:5c:5a:e5:eb:d7:f2:5e:90:39:19:9d:70:44:ba:a0:5d:
         99:70:c0:1e:93:87:e6:5e:d5:4f:2e:dc:48:86:ee:a8:94:0a:
         8c:80:6a:57:f5:96:0f:8a:e5:3b:cf:64:6a:2a:fb:dc:2b:e8:
         62:ab:0b:43:ba:69:34:64:f2:5f:6d:5b:1c:1c:d0:4c:3e:ae:
         75:8b:7f:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 08:26:06 2024 by rpki-client on console-fra.rpki-client.org