Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AZJdQuFc5C35gxdFWDqs3zEdVLS5qeKJyQdpYADKFAig/0/3137392e3132342e3232302e302f32342d3234203d3e20323633363234.roa
File:                     3137392e3132342e3232302e302f32342d3234203d3e20323633363234.roa (raw, json)
Hash identifier:          pSFSG3eSD0U4Ymsfh9iEZuaPf/gRRJ51o2KT4D5UAww=
Subject key identifier:   FC:9A:E0:66:EA:16:25:5B:16:B5:B6:1C:BE:8C:02:4A:E9:59:D9:3E
Certificate issuer:       /CN=642EA27EA1276FA1CA55EF3FD887CFC6DDA05C47
Certificate serial:       0E4756AD7F6E8CBBAD51E121F1762762F209C200
Authority key identifier: 64:2E:A2:7E:A1:27:6F:A1:CA:55:EF:3F:D8:87:CF:C6:DD:A0:5C:47
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/642EA27EA1276FA1CA55EF3FD887CFC6DDA05C47.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AZJdQuFc5C35gxdFWDqs3zEdVLS5qeKJyQdpYADKFAig/0/3137392e3132342e3232302e302f32342d3234203d3e20323633363234.roa
Signing time:             Tue 26 Nov 2024 14:57:02 +0000
ROA not before:           Tue 26 Nov 2024 14:52:02 +0000
ROA not after:            Tue 25 Nov 2025 14:57:02 +0000
asID:                     263624
IP address blocks:        179.124.220.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AZJdQuFc5C35gxdFWDqs3zEdVLS5qeKJyQdpYADKFAig/0/642EA27EA1276FA1CA55EF3FD887CFC6DDA05C47.crl
                          rsync://rpki-repo.registro.br/repo/AZJdQuFc5C35gxdFWDqs3zEdVLS5qeKJyQdpYADKFAig/0/642EA27EA1276FA1CA55EF3FD887CFC6DDA05C47.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/642EA27EA1276FA1CA55EF3FD887CFC6DDA05C47.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 28 Nov 2024 06:15:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:47:56:ad:7f:6e:8c:bb:ad:51:e1:21:f1:76:27:62:f2:09:c2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=642EA27EA1276FA1CA55EF3FD887CFC6DDA05C47
        Validity
            Not Before: Nov 26 14:52:02 2024 GMT
            Not After : Nov 25 14:57:02 2025 GMT
        Subject: CN=FC9AE066EA16255B16B5B61CBE8C024AE959D93E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:1c:d5:e0:8e:bf:67:b9:12:f1:0c:ca:46:7d:
                    c4:c5:31:45:bd:e5:7d:26:62:e1:70:46:c5:13:f6:
                    bd:33:d7:de:e1:e2:65:e6:40:07:45:f1:b3:89:c9:
                    6f:f9:62:79:ec:c6:c5:88:59:da:44:32:66:8e:df:
                    10:87:ce:9b:21:14:b4:91:5f:d9:e9:3d:a3:2a:b3:
                    08:86:fe:38:b5:94:0a:e8:a9:6b:fd:38:18:a3:05:
                    6f:fc:52:d5:64:6f:7e:62:fa:11:4b:1f:84:cf:bd:
                    d4:61:fb:b2:c9:d0:79:bd:bc:ed:ba:e4:fc:a2:36:
                    a8:05:ad:6b:44:08:f9:3b:ad:31:b9:3f:ee:27:fe:
                    98:87:76:86:e7:cf:3d:34:a2:ec:cf:69:d3:01:22:
                    66:df:53:72:be:32:ce:00:e2:ef:72:9e:0d:b8:8e:
                    54:fa:63:b9:08:7f:d1:29:31:3f:88:7f:49:71:7d:
                    2b:92:44:b8:b3:28:e5:a2:d7:d0:79:f4:ab:fe:34:
                    d5:20:36:49:fe:73:2e:16:7f:e4:c6:3a:ce:58:00:
                    28:91:ad:aa:79:0d:d3:db:5c:cb:bf:bd:1d:bd:58:
                    fb:6b:0e:4e:b3:6e:8b:5f:ea:41:2d:e1:98:fd:d5:
                    0a:59:76:7a:8b:c1:9a:79:ae:6f:2b:46:86:61:e4:
                    c5:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:9A:E0:66:EA:16:25:5B:16:B5:B6:1C:BE:8C:02:4A:E9:59:D9:3E
            X509v3 Authority Key Identifier:
                keyid:64:2E:A2:7E:A1:27:6F:A1:CA:55:EF:3F:D8:87:CF:C6:DD:A0:5C:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AZJdQuFc5C35gxdFWDqs3zEdVLS5qeKJyQdpYADKFAig/0/642EA27EA1276FA1CA55EF3FD887CFC6DDA05C47.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/642EA27EA1276FA1CA55EF3FD887CFC6DDA05C47.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AZJdQuFc5C35gxdFWDqs3zEdVLS5qeKJyQdpYADKFAig/0/3137392e3132342e3232302e302f32342d3234203d3e20323633363234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.124.220.0/24

    Signature Algorithm: sha256WithRSAEncryption
         58:c2:85:1a:a3:28:6e:53:07:53:a7:b1:47:63:7b:82:cd:44:
         cb:6c:0c:9b:f7:74:ab:3e:a7:4a:fd:e8:9e:3c:c6:38:fe:ef:
         e6:0e:66:7d:57:23:2b:e5:e2:a1:5e:c9:83:5d:a1:74:ec:97:
         d8:cf:f6:a4:67:ec:e8:68:f9:2f:9a:37:b5:2a:91:75:56:ec:
         f8:ce:03:a3:5c:44:7c:aa:cd:d8:9e:ed:77:cf:29:fc:91:9d:
         16:65:a4:2e:56:46:0e:d5:21:7d:79:c1:12:73:f2:aa:47:f7:
         73:ea:9d:b9:32:68:db:07:ce:a7:90:7a:4d:61:cc:a1:bf:f2:
         3c:6f:bb:ea:72:cd:e4:40:fa:c6:8d:2d:00:60:ee:9e:66:73:
         02:8d:22:15:ae:d5:01:1a:bd:dc:30:60:08:90:73:92:c2:c7:
         aa:62:03:7e:12:1a:06:32:75:38:ea:2c:40:3c:f1:b5:1b:01:
         47:1a:3f:58:95:15:1f:bb:c8:c3:22:4d:99:30:ec:49:f1:71:
         94:f2:2f:72:f6:d7:ac:bf:18:b3:c5:ac:2b:5e:33:21:05:da:
         12:8d:c4:0a:ae:fc:c5:46:24:ec:86:9a:3b:d6:11:a9:fe:1a:
         60:5e:8b:f7:fc:5e:2d:65:fb:33:c1:de:ea:91:07:d6:25:e0:
         71:2d:bf:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 08:26:06 2024 by rpki-client on console-fra.rpki-client.org