Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AZJdQuFc5C35gxdFWDqs3zEdVLS5qeKJyQdpYADKFAig/0/3137392e3132342e3231372e302f32342d3234203d3e20323633363234.roa
File:                     3137392e3132342e3231372e302f32342d3234203d3e20323633363234.roa (raw, json)
Hash identifier:          i+8ool2ftbJmBHA3OfOMq9ObCMlgC6xLVs5+01xHlMs=
Subject key identifier:   3D:ED:8C:BD:A0:05:16:68:70:FB:07:1E:BE:A2:9B:BC:10:4C:68:36
Certificate issuer:       /CN=642EA27EA1276FA1CA55EF3FD887CFC6DDA05C47
Certificate serial:       305530C64C8AA13B0CD17804E56533E902047D45
Authority key identifier: 64:2E:A2:7E:A1:27:6F:A1:CA:55:EF:3F:D8:87:CF:C6:DD:A0:5C:47
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/642EA27EA1276FA1CA55EF3FD887CFC6DDA05C47.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AZJdQuFc5C35gxdFWDqs3zEdVLS5qeKJyQdpYADKFAig/0/3137392e3132342e3231372e302f32342d3234203d3e20323633363234.roa
Signing time:             Tue 26 Nov 2024 14:56:43 +0000
ROA not before:           Tue 26 Nov 2024 14:51:43 +0000
ROA not after:            Tue 25 Nov 2025 14:56:43 +0000
asID:                     263624
IP address blocks:        179.124.217.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AZJdQuFc5C35gxdFWDqs3zEdVLS5qeKJyQdpYADKFAig/0/642EA27EA1276FA1CA55EF3FD887CFC6DDA05C47.crl
                          rsync://rpki-repo.registro.br/repo/AZJdQuFc5C35gxdFWDqs3zEdVLS5qeKJyQdpYADKFAig/0/642EA27EA1276FA1CA55EF3FD887CFC6DDA05C47.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/642EA27EA1276FA1CA55EF3FD887CFC6DDA05C47.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 28 Nov 2024 06:15:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:55:30:c6:4c:8a:a1:3b:0c:d1:78:04:e5:65:33:e9:02:04:7d:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=642EA27EA1276FA1CA55EF3FD887CFC6DDA05C47
        Validity
            Not Before: Nov 26 14:51:43 2024 GMT
            Not After : Nov 25 14:56:43 2025 GMT
        Subject: CN=3DED8CBDA005166870FB071EBEA29BBC104C6836
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:7e:0d:79:ad:79:aa:51:5f:cd:53:cc:f1:07:
                    1c:f5:de:51:37:21:a2:72:02:00:e4:ec:62:51:47:
                    29:53:bd:5a:32:64:31:89:7e:e6:19:1e:2d:ab:67:
                    2b:74:c0:b0:15:48:c3:5e:c1:04:92:8e:c2:db:9f:
                    62:8f:f4:1c:cd:a0:e6:7b:84:07:18:a0:bb:64:c0:
                    43:e4:59:01:dd:7d:0a:f9:75:42:15:91:4d:f8:48:
                    0e:fa:15:b6:b7:c2:0c:cc:eb:c0:62:df:5a:24:ee:
                    fe:37:bd:ac:7d:09:d5:b3:d3:44:3c:11:a8:47:66:
                    c1:66:ee:6e:89:a2:a1:4f:b6:c1:da:5a:76:9b:a5:
                    e2:5c:db:b4:7b:5d:58:e1:34:aa:57:23:86:f6:53:
                    26:86:ce:d7:b3:98:ef:dd:fe:01:5e:f8:d3:8c:2e:
                    54:35:1d:e1:32:07:e6:ef:9a:5b:d1:8a:95:84:0d:
                    4f:68:12:d1:90:43:c4:a1:69:bb:51:8a:f0:46:2e:
                    52:8a:16:fd:27:32:55:69:b6:a8:5d:72:a5:75:c0:
                    72:40:7b:b7:01:2b:a4:5a:ac:ea:e5:d2:68:ca:b2:
                    6b:23:8d:c8:5c:45:4b:d6:1a:83:de:47:27:b8:72:
                    e0:1f:b1:9c:b6:15:90:69:ae:0a:54:0f:92:d1:a4:
                    ba:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:ED:8C:BD:A0:05:16:68:70:FB:07:1E:BE:A2:9B:BC:10:4C:68:36
            X509v3 Authority Key Identifier:
                keyid:64:2E:A2:7E:A1:27:6F:A1:CA:55:EF:3F:D8:87:CF:C6:DD:A0:5C:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AZJdQuFc5C35gxdFWDqs3zEdVLS5qeKJyQdpYADKFAig/0/642EA27EA1276FA1CA55EF3FD887CFC6DDA05C47.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/642EA27EA1276FA1CA55EF3FD887CFC6DDA05C47.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AZJdQuFc5C35gxdFWDqs3zEdVLS5qeKJyQdpYADKFAig/0/3137392e3132342e3231372e302f32342d3234203d3e20323633363234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.124.217.0/24

    Signature Algorithm: sha256WithRSAEncryption
         18:23:d0:c8:b7:24:af:0d:e4:f9:b8:8c:18:ee:86:b0:4d:b3:
         19:07:0f:14:47:af:17:b3:f6:97:04:e4:9c:f7:c4:0e:af:26:
         00:30:0a:1f:d4:89:b9:b0:fc:b2:15:ef:ca:77:83:25:c6:22:
         a5:31:df:62:9a:0f:4a:24:33:80:12:3e:18:70:83:cb:18:6f:
         df:69:9b:58:1f:bf:01:69:38:1f:87:31:ae:40:87:0c:6d:8c:
         5a:8d:5a:01:86:bf:42:7c:87:8f:6c:20:49:12:56:c4:f7:cc:
         55:ba:11:e2:36:3e:1e:11:da:05:12:4c:57:ed:a1:2f:91:76:
         53:17:e6:48:90:f5:3a:b6:ec:98:76:30:17:7c:43:e0:79:15:
         67:77:10:6d:6c:de:92:cd:5b:50:e2:90:49:12:18:5c:d8:e0:
         cd:eb:d0:4f:3c:8b:05:84:92:70:7e:21:55:c2:7c:70:9a:90:
         70:67:df:b2:9a:45:6f:41:76:0c:5d:e0:c2:26:ef:31:cc:5c:
         05:f9:a9:0d:d5:60:2a:fb:72:99:29:c0:48:ef:28:ac:d3:06:
         e9:b8:87:17:be:8b:fd:95:fa:0e:5b:35:6d:3b:57:3d:f8:aa:
         a0:69:f0:fe:3f:6c:2c:ac:6d:1e:43:08:91:f2:d6:ed:42:4d:
         8a:19:52:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 09:01:56 2024 by rpki-client on console-ams.rpki-client.org