Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AshjTbxxikcwvN2KExwCFhdDhBtV7DWJJLc65C11AThu/0/3137392e3130392e36342e302f32302d3332203d3e20323633353738.roa
File:                     3137392e3130392e36342e302f32302d3332203d3e20323633353738.roa (raw, json)
Hash identifier:          GrklC+iJFrsRI0w34SWrbnIjXmvJwXpX2cd9jvwvrmw=
Subject key identifier:   3D:F2:B1:DD:F4:92:B6:0A:AD:03:90:CA:1E:C7:9F:FC:73:DC:5F:7D
Certificate issuer:       /CN=9397C28E3065FBE481254AA8C0CEF6906F66ABE9
Certificate serial:       45C32D3AA9EE069AF42F88A64094FB0C4C335853
Authority key identifier: 93:97:C2:8E:30:65:FB:E4:81:25:4A:A8:C0:CE:F6:90:6F:66:AB:E9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9397C28E3065FBE481254AA8C0CEF6906F66ABE9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AshjTbxxikcwvN2KExwCFhdDhBtV7DWJJLc65C11AThu/0/3137392e3130392e36342e302f32302d3332203d3e20323633353738.roa
Signing time:             Fri 23 Aug 2024 19:33:44 +0000
ROA not before:           Fri 23 Aug 2024 19:28:44 +0000
ROA not after:            Fri 22 Aug 2025 19:33:44 +0000
asID:                     263578
IP address blocks:        179.109.64.0/20 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AshjTbxxikcwvN2KExwCFhdDhBtV7DWJJLc65C11AThu/0/9397C28E3065FBE481254AA8C0CEF6906F66ABE9.crl
                          rsync://rpki-repo.registro.br/repo/AshjTbxxikcwvN2KExwCFhdDhBtV7DWJJLc65C11AThu/0/9397C28E3065FBE481254AA8C0CEF6906F66ABE9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9397C28E3065FBE481254AA8C0CEF6906F66ABE9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:c3:2d:3a:a9:ee:06:9a:f4:2f:88:a6:40:94:fb:0c:4c:33:58:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9397C28E3065FBE481254AA8C0CEF6906F66ABE9
        Validity
            Not Before: Aug 23 19:28:44 2024 GMT
            Not After : Aug 22 19:33:44 2025 GMT
        Subject: CN=3DF2B1DDF492B60AAD0390CA1EC79FFC73DC5F7D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:6d:86:7c:1e:03:d6:32:e5:ad:36:5d:2d:0f:
                    5c:b0:e5:ce:f2:6b:f1:bc:a6:81:ea:13:57:e6:ff:
                    f1:36:2d:37:93:15:2d:f3:fc:54:5d:7e:7b:07:a0:
                    12:54:09:ec:50:d3:0e:b2:4f:a5:c2:c6:89:70:56:
                    d3:bd:49:82:ae:fd:8a:11:08:88:b6:e8:a8:9a:f2:
                    1d:cf:01:e4:0e:37:f5:bb:fc:ba:6d:12:07:35:3a:
                    39:a9:73:74:e5:a4:2a:97:8e:a9:da:7f:ba:0e:7f:
                    70:12:23:d3:dc:22:34:18:8f:d3:81:07:a8:bb:ce:
                    7d:62:47:08:ae:5c:6c:fd:b8:f7:49:c4:86:ff:00:
                    0b:1f:ad:b4:0a:71:da:a5:09:28:40:3c:4f:53:22:
                    a9:8f:1d:f5:ca:6e:0a:58:a0:63:cc:a5:a5:77:df:
                    22:66:3b:61:9a:df:e1:3b:6f:ca:14:5b:34:b9:2e:
                    99:b3:e9:4d:8e:e4:8a:9d:6a:d5:69:05:2c:99:44:
                    9d:7f:8e:57:65:ea:5a:b4:a3:04:6e:7e:eb:a9:4a:
                    e0:f2:cc:c3:e6:75:ea:45:d1:5d:d8:18:54:12:9e:
                    e9:6d:eb:45:ba:2b:f7:d8:1d:98:5b:77:96:4f:08:
                    4d:d2:e0:a6:50:a5:a1:43:ce:1e:8b:15:a4:f2:cf:
                    45:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:F2:B1:DD:F4:92:B6:0A:AD:03:90:CA:1E:C7:9F:FC:73:DC:5F:7D
            X509v3 Authority Key Identifier:
                keyid:93:97:C2:8E:30:65:FB:E4:81:25:4A:A8:C0:CE:F6:90:6F:66:AB:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AshjTbxxikcwvN2KExwCFhdDhBtV7DWJJLc65C11AThu/0/9397C28E3065FBE481254AA8C0CEF6906F66ABE9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9397C28E3065FBE481254AA8C0CEF6906F66ABE9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AshjTbxxikcwvN2KExwCFhdDhBtV7DWJJLc65C11AThu/0/3137392e3130392e36342e302f32302d3332203d3e20323633353738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.109.64.0/20

    Signature Algorithm: sha256WithRSAEncryption
         0a:67:a6:2e:55:01:ed:63:1f:e8:24:1d:ef:d8:3e:11:98:cc:
         fc:14:d8:c4:46:83:0f:39:fc:67:19:cb:e1:41:eb:09:09:44:
         0a:fb:19:29:08:ef:f5:a1:5d:09:0c:61:4e:02:02:6f:69:75:
         b8:74:7a:1c:9f:ed:52:a7:d6:36:e0:31:7e:bd:de:fe:a8:65:
         9e:3b:14:e9:41:5a:41:5d:d8:5c:f8:fb:68:40:5f:bf:ca:82:
         15:9e:e8:d5:7c:57:a7:8f:ec:66:23:d3:47:fa:ba:d1:f1:de:
         28:96:e0:91:4a:a6:6c:64:67:bb:31:1b:24:be:05:75:45:10:
         46:12:b2:4a:03:04:ff:7e:df:ab:a8:0b:b1:e6:a0:43:13:e9:
         17:84:e4:a4:fd:ac:3d:ca:95:37:2b:ca:7a:88:ca:cb:c6:5a:
         cf:a4:5f:bc:df:59:c5:bd:13:6b:fb:32:36:67:3f:9b:64:08:
         33:db:fa:b1:71:6e:c7:f2:d9:11:fe:e3:ae:52:9f:0f:53:a2:
         ae:4b:5c:bc:90:82:60:50:f0:aa:b9:bf:72:2b:89:3a:d5:4a:
         3e:e3:c4:4b:cc:77:f1:c7:4a:de:a1:9b:cc:b1:e9:cb:cc:8d:
         b1:42:cb:95:8f:64:86:c3:20:5c:a9:ee:16:18:82:a3:a0:9e:
         63:4e:7d:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 11:32:50 2024 by rpki-client on console-fra.rpki-client.org