Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CYpPsBtEta9JL8S2SgoTnz9v2y4C56FH89bWgVBFTNPS/1/3137392e39372e36342e302f32312d3234203d3e20323632373937.roa
File:                     3137392e39372e36342e302f32312d3234203d3e20323632373937.roa (raw, json)
Hash identifier:          r2p0uuYsaJXsRPm5N1d2fJ6WD3roacHnUevwakXY2Pk=
Subject key identifier:   6A:50:1D:EB:5D:BA:F6:4C:B9:B5:67:BF:1E:AD:77:49:CC:87:F9:BC
Certificate issuer:       /CN=67E5A94F9191C49A9CB7F9CC8CAAEFCC6E6C676C
Certificate serial:       39867E89271FA795A7652BBEE2E5FC27CA204619
Authority key identifier: 67:E5:A9:4F:91:91:C4:9A:9C:B7:F9:CC:8C:AA:EF:CC:6E:6C:67:6C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/67E5A94F9191C49A9CB7F9CC8CAAEFCC6E6C676C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CYpPsBtEta9JL8S2SgoTnz9v2y4C56FH89bWgVBFTNPS/1/3137392e39372e36342e302f32312d3234203d3e20323632373937.roa
Signing time:             Thu 04 Apr 2024 18:30:11 +0000
ROA not before:           Thu 04 Apr 2024 18:25:11 +0000
ROA not after:            Thu 03 Apr 2025 18:30:11 +0000
asID:                     262797
IP address blocks:        179.97.64.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CYpPsBtEta9JL8S2SgoTnz9v2y4C56FH89bWgVBFTNPS/1/67E5A94F9191C49A9CB7F9CC8CAAEFCC6E6C676C.crl
                          rsync://rpki-repo.registro.br/repo/CYpPsBtEta9JL8S2SgoTnz9v2y4C56FH89bWgVBFTNPS/1/67E5A94F9191C49A9CB7F9CC8CAAEFCC6E6C676C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/67E5A94F9191C49A9CB7F9CC8CAAEFCC6E6C676C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 06:14:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:86:7e:89:27:1f:a7:95:a7:65:2b:be:e2:e5:fc:27:ca:20:46:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67E5A94F9191C49A9CB7F9CC8CAAEFCC6E6C676C
        Validity
            Not Before: Apr  4 18:25:11 2024 GMT
            Not After : Apr  3 18:30:11 2025 GMT
        Subject: CN=6A501DEB5DBAF64CB9B567BF1EAD7749CC87F9BC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:ff:e6:ea:0c:51:d8:0e:1d:86:9e:71:58:c3:
                    bc:06:50:0d:c6:08:62:a2:26:a0:87:df:22:15:b9:
                    29:99:52:d3:64:00:78:06:e8:fc:88:47:26:d6:50:
                    0d:90:4f:99:f4:10:01:b0:99:07:c5:88:2b:fd:d2:
                    57:54:70:3f:39:0a:a4:33:cd:88:d2:bc:67:1f:76:
                    43:d7:39:53:c1:a5:4e:d6:2f:82:6a:40:93:03:f2:
                    17:04:31:ff:e1:11:55:ae:f3:18:03:f8:1a:88:fa:
                    e8:cc:cb:41:10:2f:b7:5a:f6:57:ae:a7:8e:67:8c:
                    ff:55:2f:27:17:cf:11:32:21:23:5e:90:46:3d:64:
                    31:a1:2f:ee:52:ad:2d:19:f3:4f:5a:f2:8e:d4:ab:
                    c0:b4:2e:08:4e:cf:75:0f:2c:36:64:6d:9d:4c:21:
                    53:06:62:e4:0b:95:35:09:a4:08:63:18:95:38:76:
                    3d:8f:71:eb:02:d6:6e:20:de:ab:2b:ba:39:e1:3e:
                    b9:79:e3:5d:66:6a:3c:39:e6:ea:cd:9b:8e:e8:68:
                    d7:47:13:9d:98:b7:6b:44:5e:cd:a2:ba:5c:ba:33:
                    08:35:f3:cb:5a:85:13:26:ed:d6:e3:fd:5c:d5:6a:
                    2c:e3:90:8f:a1:f1:34:84:e2:31:c1:06:69:6f:df:
                    1a:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:50:1D:EB:5D:BA:F6:4C:B9:B5:67:BF:1E:AD:77:49:CC:87:F9:BC
            X509v3 Authority Key Identifier:
                keyid:67:E5:A9:4F:91:91:C4:9A:9C:B7:F9:CC:8C:AA:EF:CC:6E:6C:67:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CYpPsBtEta9JL8S2SgoTnz9v2y4C56FH89bWgVBFTNPS/1/67E5A94F9191C49A9CB7F9CC8CAAEFCC6E6C676C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/67E5A94F9191C49A9CB7F9CC8CAAEFCC6E6C676C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CYpPsBtEta9JL8S2SgoTnz9v2y4C56FH89bWgVBFTNPS/1/3137392e39372e36342e302f32312d3234203d3e20323632373937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.97.64.0/21

    Signature Algorithm: sha256WithRSAEncryption
         3f:86:52:15:b2:2a:39:1c:be:ab:29:2e:f1:c5:54:5d:9d:4c:
         01:91:1a:14:84:22:d1:da:6d:ec:54:4a:e8:25:e8:57:95:00:
         2f:db:0b:77:48:17:d3:17:93:ea:68:65:79:08:07:20:ca:17:
         16:8b:5e:95:1e:22:cf:46:ee:40:66:e3:9b:67:7e:68:f2:ee:
         fb:cd:3d:c3:9d:9d:9d:03:20:ba:eb:dd:f8:71:c5:eb:cc:c1:
         c8:c8:15:61:16:9d:aa:5d:cf:b2:c4:c5:3c:82:fe:d8:71:5f:
         32:00:0e:5a:27:22:03:5d:6c:49:7d:e7:2a:f7:60:b3:0a:13:
         9a:81:20:8d:7a:84:88:e0:bf:6d:f2:11:2a:01:f2:04:fb:17:
         bc:4f:93:3f:10:3a:e6:b0:78:1d:44:93:55:1b:1a:5d:d2:90:
         21:71:ce:99:2c:7a:a8:b0:5a:0c:8e:5c:5a:1c:db:2f:02:ee:
         e7:87:e3:09:a5:bf:02:53:0c:86:1b:12:9d:81:fc:5c:46:09:
         af:29:fe:11:da:e9:e6:b0:db:d3:b9:49:23:52:d5:8d:47:a2:
         6f:64:d1:4d:0e:17:29:2d:4b:83:5b:40:99:3f:90:3b:f8:30:
         35:39:d4:65:f4:ad:c3:e0:24:9e:57:7d:c8:3a:e9:da:10:90:
         5e:9d:74:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 05:01:01 2024 by rpki-client on console-fra.rpki-client.org