Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BEvjLFZCoTqEfWLBefqc8PuiBKmXXA81sJ6XW5soCe5o/1/3137392e36332e35362e302f32322d3232203d3e20323731353736.roa
File:                     3137392e36332e35362e302f32322d3232203d3e20323731353736.roa (raw, json)
Hash identifier:          x4+XptTWVlv/7bJr3gwvmamXBRjmd47MKWjspafUBqU=
Subject key identifier:   6E:33:73:4E:BB:8A:1E:29:31:49:44:D6:03:BC:03:41:E2:3D:49:55
Certificate issuer:       /CN=75FCFDED5AE160A7254D2397F03C84F6615F3F05
Certificate serial:       44C709D9D79BC496CC1BF9D53A8B47C309C4DB30
Authority key identifier: 75:FC:FD:ED:5A:E1:60:A7:25:4D:23:97:F0:3C:84:F6:61:5F:3F:05
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/75FCFDED5AE160A7254D2397F03C84F6615F3F05.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BEvjLFZCoTqEfWLBefqc8PuiBKmXXA81sJ6XW5soCe5o/1/3137392e36332e35362e302f32322d3232203d3e20323731353736.roa
Signing time:             Thu 04 Apr 2024 18:57:20 +0000
ROA not before:           Thu 04 Apr 2024 18:52:20 +0000
ROA not after:            Thu 03 Apr 2025 18:57:20 +0000
asID:                     271576
IP address blocks:        179.63.56.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BEvjLFZCoTqEfWLBefqc8PuiBKmXXA81sJ6XW5soCe5o/1/75FCFDED5AE160A7254D2397F03C84F6615F3F05.crl
                          rsync://rpki-repo.registro.br/repo/BEvjLFZCoTqEfWLBefqc8PuiBKmXXA81sJ6XW5soCe5o/1/75FCFDED5AE160A7254D2397F03C84F6615F3F05.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/75FCFDED5AE160A7254D2397F03C84F6615F3F05.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 28 Sep 2024 11:07:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:c7:09:d9:d7:9b:c4:96:cc:1b:f9:d5:3a:8b:47:c3:09:c4:db:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75FCFDED5AE160A7254D2397F03C84F6615F3F05
        Validity
            Not Before: Apr  4 18:52:20 2024 GMT
            Not After : Apr  3 18:57:20 2025 GMT
        Subject: CN=6E33734EBB8A1E29314944D603BC0341E23D4955
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:44:7c:5b:10:fc:cc:ea:11:78:12:d7:69:b2:
                    92:45:7a:a0:07:32:98:be:9b:21:67:39:29:77:13:
                    4a:91:7d:9b:c8:26:07:93:e5:3b:c3:1e:a3:0c:a3:
                    8a:ee:0f:5a:96:e9:8f:8b:4b:97:7b:ea:e7:13:de:
                    8f:9d:7f:b0:4b:8c:1b:3d:7d:98:7b:6d:04:03:3b:
                    df:d1:6e:d6:8e:72:b5:ec:90:4a:27:0f:ee:8f:67:
                    98:80:5c:30:97:1c:13:04:a0:19:22:70:24:ea:fd:
                    06:a5:8a:8d:b4:22:3f:9e:ab:41:8e:f4:3d:86:8c:
                    b8:e3:aa:98:6b:05:bf:2b:46:08:a5:9b:8a:5c:1c:
                    2a:d0:22:51:2d:d1:cb:5f:11:18:d5:be:18:47:81:
                    f0:c9:4d:84:e7:1a:7e:73:90:dd:d3:52:1a:82:6b:
                    89:64:28:ee:e9:e1:f8:89:a1:ed:3a:35:84:3a:09:
                    31:6f:22:54:e4:f5:3b:84:78:3e:3f:8e:56:7d:51:
                    ce:36:63:df:6c:56:dc:21:a7:74:44:72:80:74:27:
                    0a:74:24:25:b0:24:30:45:22:6b:00:6b:c0:33:f4:
                    8c:ca:07:d4:b2:52:16:f4:cd:05:1d:03:9a:4b:bd:
                    78:fb:2c:28:6d:78:85:02:25:d3:7e:f9:54:c7:63:
                    d8:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:33:73:4E:BB:8A:1E:29:31:49:44:D6:03:BC:03:41:E2:3D:49:55
            X509v3 Authority Key Identifier:
                keyid:75:FC:FD:ED:5A:E1:60:A7:25:4D:23:97:F0:3C:84:F6:61:5F:3F:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BEvjLFZCoTqEfWLBefqc8PuiBKmXXA81sJ6XW5soCe5o/1/75FCFDED5AE160A7254D2397F03C84F6615F3F05.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/75FCFDED5AE160A7254D2397F03C84F6615F3F05.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BEvjLFZCoTqEfWLBefqc8PuiBKmXXA81sJ6XW5soCe5o/1/3137392e36332e35362e302f32322d3232203d3e20323731353736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.63.56.0/22

    Signature Algorithm: sha256WithRSAEncryption
         33:c5:f4:58:fc:81:6c:a9:38:55:12:9d:2a:23:a2:03:4c:a1:
         94:45:99:25:0b:19:14:18:22:c4:95:c7:e7:4b:f6:08:88:92:
         e6:26:68:70:fb:1b:f2:56:94:73:fc:8b:3f:8c:af:ec:e2:14:
         10:b3:f9:9c:d3:21:20:a8:06:75:97:cc:bf:df:86:de:23:14:
         83:31:46:34:eb:bf:cd:07:50:87:59:7a:b8:6f:25:ea:bf:d5:
         1c:8a:9e:a3:d8:74:3c:92:9c:2a:4e:51:e5:e5:b2:b5:26:1d:
         2a:03:ae:ec:04:b8:82:28:21:10:fb:35:3a:d8:9e:af:99:08:
         0e:ca:7b:12:0c:3a:54:d9:ac:1c:61:e1:3e:11:5a:90:fb:db:
         b2:6d:0b:62:02:62:78:05:32:b4:ed:7b:34:bb:90:d0:4b:71:
         a4:a1:ee:30:9a:e3:27:4b:a6:37:c7:36:27:c5:8a:86:36:c9:
         b3:47:93:b0:03:c8:12:a7:95:04:da:ed:b2:43:f0:bc:dd:6b:
         9d:b8:9e:5e:2c:a1:94:d0:b3:c1:c2:f5:1a:d6:9a:06:16:01:
         f3:e4:72:bf:eb:50:0d:df:04:f8:1d:35:58:15:3b:03:60:08:
         72:bf:f4:af:c5:51:64:39:2c:04:7e:cf:8f:8b:c8:69:f7:25:
         ec:84:34:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 27 10:42:52 2024 by rpki-client on console-ams.rpki-client.org