Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AZJdQuFc5C35gxdFWDqs3zEdVLS5qeKJyQdpYADKFAig/0/3137392e3132342e3232312e302f32342d3234203d3e20323633363234.roa
File:                     3137392e3132342e3232312e302f32342d3234203d3e20323633363234.roa (raw, json)
Hash identifier:          Myw2mue3sDE75J1a7W5VJTpJ/2KYeEy70uoUOEUvvWA=
Subject key identifier:   A4:1D:24:56:28:34:F6:EC:95:7A:5A:2C:40:62:8F:1A:04:BE:AA:E0
Certificate issuer:       /CN=642EA27EA1276FA1CA55EF3FD887CFC6DDA05C47
Certificate serial:       7D6DCF03A70E6A10E94AB7187CF2B32BDCEAEB67
Authority key identifier: 64:2E:A2:7E:A1:27:6F:A1:CA:55:EF:3F:D8:87:CF:C6:DD:A0:5C:47
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/642EA27EA1276FA1CA55EF3FD887CFC6DDA05C47.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AZJdQuFc5C35gxdFWDqs3zEdVLS5qeKJyQdpYADKFAig/0/3137392e3132342e3232312e302f32342d3234203d3e20323633363234.roa
Signing time:             Tue 26 Nov 2024 14:56:58 +0000
ROA not before:           Tue 26 Nov 2024 14:51:58 +0000
ROA not after:            Tue 25 Nov 2025 14:56:58 +0000
asID:                     263624
IP address blocks:        179.124.221.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AZJdQuFc5C35gxdFWDqs3zEdVLS5qeKJyQdpYADKFAig/0/642EA27EA1276FA1CA55EF3FD887CFC6DDA05C47.crl
                          rsync://rpki-repo.registro.br/repo/AZJdQuFc5C35gxdFWDqs3zEdVLS5qeKJyQdpYADKFAig/0/642EA27EA1276FA1CA55EF3FD887CFC6DDA05C47.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/642EA27EA1276FA1CA55EF3FD887CFC6DDA05C47.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 28 Nov 2024 06:15:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:6d:cf:03:a7:0e:6a:10:e9:4a:b7:18:7c:f2:b3:2b:dc:ea:eb:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=642EA27EA1276FA1CA55EF3FD887CFC6DDA05C47
        Validity
            Not Before: Nov 26 14:51:58 2024 GMT
            Not After : Nov 25 14:56:58 2025 GMT
        Subject: CN=A41D24562834F6EC957A5A2C40628F1A04BEAAE0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:3a:48:30:da:3c:2e:a0:1d:17:73:ab:8e:69:
                    04:26:b6:8a:4f:02:8c:ae:c9:85:f9:c2:ba:53:ab:
                    fe:93:c8:70:32:43:ba:c6:9d:ba:f9:aa:32:e2:24:
                    9e:3b:11:34:91:d1:de:d5:95:06:5d:b2:e4:3f:4e:
                    25:b3:61:ed:8b:1a:bd:10:08:be:0a:9f:73:ae:50:
                    a6:b8:2c:8e:1b:0d:4b:01:a7:0c:f3:7b:27:58:bf:
                    46:ce:95:9a:67:0e:56:02:a5:f0:15:14:78:d0:03:
                    77:eb:8b:60:3e:96:73:c1:5f:44:38:67:21:f4:09:
                    21:0e:28:66:8e:b9:c4:4b:b1:f4:50:7c:d4:75:31:
                    a6:fa:f8:d2:fc:f6:01:9f:94:ad:87:a7:99:80:d2:
                    ba:f4:c1:81:a3:ec:2a:f7:3d:f9:a3:6c:e2:e9:b0:
                    63:ca:81:11:ef:ee:5c:cb:b9:af:e5:19:52:48:71:
                    25:ea:4b:44:f0:a7:48:b9:05:59:92:cd:f9:28:f3:
                    88:46:5d:b6:ab:07:2d:00:c9:b9:b6:5b:67:c0:6a:
                    1e:6e:34:ae:74:dd:17:ff:01:12:11:94:aa:80:76:
                    3d:06:60:bd:1d:36:77:c9:0f:7a:35:28:c0:37:4d:
                    17:18:fb:ce:9f:cc:87:74:69:a9:b4:6d:61:23:eb:
                    a6:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:1D:24:56:28:34:F6:EC:95:7A:5A:2C:40:62:8F:1A:04:BE:AA:E0
            X509v3 Authority Key Identifier:
                keyid:64:2E:A2:7E:A1:27:6F:A1:CA:55:EF:3F:D8:87:CF:C6:DD:A0:5C:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AZJdQuFc5C35gxdFWDqs3zEdVLS5qeKJyQdpYADKFAig/0/642EA27EA1276FA1CA55EF3FD887CFC6DDA05C47.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/642EA27EA1276FA1CA55EF3FD887CFC6DDA05C47.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AZJdQuFc5C35gxdFWDqs3zEdVLS5qeKJyQdpYADKFAig/0/3137392e3132342e3232312e302f32342d3234203d3e20323633363234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.124.221.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4e:6d:d2:7f:d7:90:10:ff:f9:54:72:68:7c:b4:9a:c3:a4:7a:
         23:08:b4:1b:e6:87:fa:fa:52:2e:b2:b4:05:a1:6c:aa:75:b8:
         93:12:1d:c0:82:6c:dc:e3:19:24:72:c6:e0:fe:df:84:be:ea:
         91:18:19:19:7e:30:f2:f5:8e:56:b3:7f:34:57:06:a2:f6:97:
         04:47:0b:1f:91:44:e4:9b:26:f4:fd:d9:6b:0b:85:d6:29:09:
         fd:3b:7a:e1:70:00:18:76:da:f0:20:f0:a5:60:b3:6a:a8:d4:
         05:62:e6:5c:5e:32:12:43:3b:06:b6:84:8e:32:0e:2c:70:d4:
         1e:6b:ac:73:48:fe:b0:dd:df:25:ec:e5:9e:41:1f:ad:86:93:
         45:ff:68:ba:08:08:d1:fb:57:5c:15:ca:1b:ba:b7:61:e9:91:
         06:bf:68:60:42:80:28:d4:31:ef:0b:a3:9b:16:30:ba:3a:b2:
         0b:67:de:38:e0:5e:f0:b2:9d:70:1c:bc:73:e7:8b:9c:65:fd:
         d7:e8:61:aa:8c:3d:b8:52:b0:e6:2d:7d:99:4d:5c:e5:14:f0:
         c4:ef:f0:2a:99:e5:cb:13:88:7b:fb:2c:b6:3f:30:70:97:7d:
         91:74:1c:55:b0:f2:77:eb:6a:ce:47:7e:e9:17:72:11:a4:c9:
         40:e0:cb:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 09:01:56 2024 by rpki-client on console-ams.rpki-client.org