Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/2/3137392e3130372e302e302f32312d3234203d3e203533313433.roa
File:                     3137392e3130372e302e302f32312d3234203d3e203533313433.roa (raw, json)
Hash identifier:          uBYX28FSr8AS6i9UbAiVZXXqcDDxe6OpCDYYSpHRXHo=
Subject key identifier:   94:6B:59:79:50:0F:DB:7D:9E:11:9B:D4:92:F1:75:A9:E5:55:61:1D
Certificate issuer:       /CN=0DEB92F3307B0E94CC70D9B21B50F6FE2135CD98
Certificate serial:       6DC168E26425CAFA2F820244DA4B955B3F7E2354
Authority key identifier: 0D:EB:92:F3:30:7B:0E:94:CC:70:D9:B2:1B:50:F6:FE:21:35:CD:98
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0DEB92F3307B0E94CC70D9B21B50F6FE2135CD98.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/2/3137392e3130372e302e302f32312d3234203d3e203533313433.roa
Signing time:             Mon 08 Jul 2024 19:43:06 +0000
ROA not before:           Mon 08 Jul 2024 19:38:06 +0000
ROA not after:            Mon 07 Jul 2025 19:43:06 +0000
asID:                     53143
IP address blocks:        179.107.0.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/2/0DEB92F3307B0E94CC70D9B21B50F6FE2135CD98.crl
                          rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/2/0DEB92F3307B0E94CC70D9B21B50F6FE2135CD98.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0DEB92F3307B0E94CC70D9B21B50F6FE2135CD98.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 17 Nov 2024 03:58:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:c1:68:e2:64:25:ca:fa:2f:82:02:44:da:4b:95:5b:3f:7e:23:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0DEB92F3307B0E94CC70D9B21B50F6FE2135CD98
        Validity
            Not Before: Jul  8 19:38:06 2024 GMT
            Not After : Jul  7 19:43:06 2025 GMT
        Subject: CN=946B5979500FDB7D9E119BD492F175A9E555611D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:02:6d:9b:30:2f:85:10:e6:be:77:6d:db:02:
                    1e:cf:cc:f5:ec:75:ed:27:10:e1:5f:d5:40:42:e7:
                    7f:9a:59:f4:48:b1:69:81:e5:21:7a:90:e9:fa:b8:
                    73:d1:2f:5b:fd:53:fa:d3:fb:43:25:fd:6a:82:11:
                    f7:ab:53:46:4e:e6:1c:c2:1c:9f:4f:bb:e3:28:73:
                    2c:0a:93:0d:07:7f:e5:97:21:b0:50:04:d0:ef:93:
                    b4:53:96:21:73:09:9c:75:25:49:98:22:2b:82:e2:
                    4d:a2:b4:ea:01:c9:b6:b0:3d:0c:fc:43:49:f2:b6:
                    b9:6e:bb:2c:7c:db:ff:ef:ce:6c:ba:6f:ee:93:b6:
                    7a:36:76:87:9b:f6:9a:9d:39:40:f8:56:e2:28:d9:
                    4c:0a:d4:a5:53:6d:ac:fd:6a:53:02:4f:ec:94:f3:
                    b8:e9:7b:fe:4d:30:db:90:b5:86:3a:ef:b0:cb:ca:
                    c8:bc:6a:6e:f0:8c:54:10:5d:1d:ec:33:0f:62:a8:
                    4b:7b:34:46:c0:42:71:5d:2b:ba:6c:de:ad:87:2f:
                    e0:61:c2:1f:37:c7:b2:e7:90:4b:d2:69:26:ed:05:
                    4c:e0:0c:3c:fd:d4:8e:e9:6f:9f:bb:4f:e5:1e:4a:
                    ba:37:89:be:e3:23:6b:59:a2:b5:77:0f:43:b0:7f:
                    90:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:6B:59:79:50:0F:DB:7D:9E:11:9B:D4:92:F1:75:A9:E5:55:61:1D
            X509v3 Authority Key Identifier:
                keyid:0D:EB:92:F3:30:7B:0E:94:CC:70:D9:B2:1B:50:F6:FE:21:35:CD:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/2/0DEB92F3307B0E94CC70D9B21B50F6FE2135CD98.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0DEB92F3307B0E94CC70D9B21B50F6FE2135CD98.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/2/3137392e3130372e302e302f32312d3234203d3e203533313433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.107.0.0/21

    Signature Algorithm: sha256WithRSAEncryption
         18:c9:ab:57:98:09:71:d3:7b:58:8d:0a:26:95:ef:05:1d:31:
         88:84:cb:d3:6c:aa:02:3f:78:f4:b9:a9:e6:41:5f:36:a1:ac:
         6b:6f:2a:5d:fc:ab:58:03:16:7c:b8:5c:b3:cf:97:8f:ae:86:
         51:a7:70:95:28:96:d3:08:c1:0a:56:e8:ba:fa:c1:3f:16:9d:
         d9:4f:44:d4:89:5e:ba:5d:04:36:64:b9:3c:fd:43:b1:9a:99:
         9d:93:ee:64:0d:c1:3e:ad:e3:59:22:a8:c9:3e:9d:81:15:8f:
         9e:f0:8f:40:30:84:a0:11:28:3c:57:3e:9e:b8:d1:be:9c:eb:
         94:e8:7f:81:e6:74:ed:00:5a:6e:e3:4e:c0:6b:a1:3b:f7:e4:
         54:58:09:2f:46:b0:96:86:d5:17:d5:c5:bb:15:c7:ae:cd:d6:
         86:0e:95:d4:e2:f0:eb:fc:52:72:16:3a:ba:89:25:00:dd:84:
         2b:3c:a4:5f:39:38:4c:63:6d:29:73:e7:b8:01:1c:73:4c:b0:
         0a:98:80:5b:c1:5a:4e:c6:4a:d9:e0:e5:2c:85:47:ea:c8:89:
         e8:df:8b:d8:22:39:7e:ff:bb:28:53:70:28:66:ae:6d:b5:e1:
         69:7b:96:9d:4b:cf:c4:dc:8a:80:ce:2d:ea:18:7e:a1:c0:5c:
         2c:8b:e1:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 16 04:16:30 2024 by rpki-client on console-fra.rpki-client.org