Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BzWL6DcvcB4YQ8A5ZDMp3i3LS2EWBSzh2PwrgZdDuWWB/2/3137392e39362e3136302e302f32312d3234203d3e203532363337.roa
File:                     3137392e39362e3136302e302f32312d3234203d3e203532363337.roa (raw, json)
Hash identifier:          CWUdqJ7LahZjvrSUwd58kQ6/E8c7ye3QkMbVT1cRDWg=
Subject key identifier:   A1:39:5A:57:9B:FC:0C:98:D7:2C:56:22:69:55:45:D4:DC:81:55:30
Certificate issuer:       /CN=BD40CEDDB8E6AC181C713C37060807D151D2B1AE
Certificate serial:       5AA10865A8249AB41E6148B78A41946344B08EC2
Authority key identifier: BD:40:CE:DD:B8:E6:AC:18:1C:71:3C:37:06:08:07:D1:51:D2:B1:AE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD40CEDDB8E6AC181C713C37060807D151D2B1AE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BzWL6DcvcB4YQ8A5ZDMp3i3LS2EWBSzh2PwrgZdDuWWB/2/3137392e39362e3136302e302f32312d3234203d3e203532363337.roa
Signing time:             Wed 03 Apr 2024 18:38:56 +0000
ROA not before:           Wed 03 Apr 2024 18:33:56 +0000
ROA not after:            Wed 02 Apr 2025 18:38:56 +0000
asID:                     52637
IP address blocks:        179.96.160.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BzWL6DcvcB4YQ8A5ZDMp3i3LS2EWBSzh2PwrgZdDuWWB/2/BD40CEDDB8E6AC181C713C37060807D151D2B1AE.crl
                          rsync://rpki-repo.registro.br/repo/BzWL6DcvcB4YQ8A5ZDMp3i3LS2EWBSzh2PwrgZdDuWWB/2/BD40CEDDB8E6AC181C713C37060807D151D2B1AE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD40CEDDB8E6AC181C713C37060807D151D2B1AE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 11:20:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:a1:08:65:a8:24:9a:b4:1e:61:48:b7:8a:41:94:63:44:b0:8e:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BD40CEDDB8E6AC181C713C37060807D151D2B1AE
        Validity
            Not Before: Apr  3 18:33:56 2024 GMT
            Not After : Apr  2 18:38:56 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:6d:35:6b:c2:05:40:9a:d1:4d:81:ee:ea:8b:
                    e3:87:1a:ef:67:44:4d:46:bb:f5:91:a7:e1:cd:64:
                    d5:a8:5b:18:1a:8d:52:41:d2:98:70:b6:bd:a0:93:
                    43:2e:31:c8:3a:f4:43:92:88:e2:d5:9f:a9:46:bd:
                    11:7e:65:de:b1:6c:21:d6:e9:8e:47:b2:90:9b:6c:
                    f3:e2:90:7b:24:cb:2f:82:37:66:a0:91:53:68:c4:
                    7c:cf:29:e5:09:b7:2f:dd:4c:4a:d8:30:92:4f:fb:
                    9b:1e:2f:26:d3:e2:26:9d:78:e9:c7:be:e7:2a:fb:
                    a5:a4:9a:7f:3c:32:0b:d3:c6:4c:c4:cc:9c:b7:10:
                    60:04:57:a4:d5:34:84:a1:b8:b1:54:d8:5b:6f:fa:
                    6a:a7:6c:9f:1b:15:56:20:5f:9f:ef:6f:49:e0:0e:
                    2a:1a:df:68:98:40:5c:41:e6:b4:aa:c3:9a:e7:38:
                    f6:fc:1f:57:bc:b9:20:8d:42:f6:5f:5d:3c:2c:0f:
                    37:60:42:9d:f9:56:13:98:b2:54:36:22:33:56:5a:
                    81:56:37:ab:f1:42:19:d3:ae:38:ad:58:85:32:59:
                    88:6f:3e:3f:4e:b7:82:fa:ec:f2:b0:c0:63:c7:8e:
                    2e:be:3f:ee:26:f4:3d:fe:ed:df:d4:b5:0a:38:1e:
                    4c:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:39:5A:57:9B:FC:0C:98:D7:2C:56:22:69:55:45:D4:DC:81:55:30
            X509v3 Authority Key Identifier:
                keyid:BD:40:CE:DD:B8:E6:AC:18:1C:71:3C:37:06:08:07:D1:51:D2:B1:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BzWL6DcvcB4YQ8A5ZDMp3i3LS2EWBSzh2PwrgZdDuWWB/2/BD40CEDDB8E6AC181C713C37060807D151D2B1AE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD40CEDDB8E6AC181C713C37060807D151D2B1AE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BzWL6DcvcB4YQ8A5ZDMp3i3LS2EWBSzh2PwrgZdDuWWB/2/3137392e39362e3136302e302f32312d3234203d3e203532363337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.96.160.0/21

    Signature Algorithm: sha256WithRSAEncryption
         40:6c:ee:83:ea:aa:17:11:f5:19:58:9e:68:3a:4d:15:a3:16:
         57:60:37:d5:6f:96:8b:83:17:43:94:2c:da:6a:e0:59:83:b6:
         6a:74:38:e2:49:ff:6c:b0:8c:33:f4:25:3f:3c:f4:88:14:b5:
         8d:16:72:9b:d9:33:07:e3:74:ec:33:28:01:3e:53:4b:41:94:
         3d:50:61:a6:93:38:1a:2f:10:48:62:69:70:e9:b6:60:f8:e0:
         8c:0e:15:7f:1d:2e:fc:42:6e:cf:53:22:97:ab:5c:c4:e2:5d:
         f7:12:f6:23:8b:e7:83:12:73:37:19:90:aa:fe:49:a2:8a:e3:
         3a:74:7d:2a:ea:45:2e:a4:aa:e3:45:a7:fa:f3:34:05:9e:fb:
         4a:48:7d:b8:9f:31:38:ee:4b:06:cf:78:8f:aa:85:62:26:14:
         a9:c2:a9:ae:70:c2:9f:c0:1e:08:e8:33:2b:d0:e6:85:cc:fd:
         25:6c:59:79:72:a9:52:be:70:d3:24:ba:0f:0a:10:7b:99:5f:
         c9:6c:fb:95:69:b9:26:5b:92:d3:75:26:ed:59:88:0f:36:5d:
         5b:4d:80:29:f6:f9:a9:cb:63:c3:dd:1f:55:08:c2:ce:9c:f1:
         c6:7a:2e:64:e5:79:6f:31:22:2f:48:85:d8:bb:4a:a7:f2:d4:
         93:4b:2b:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 13:31:58 2024 by rpki-client on console-fra.rpki-client.org