Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DAZPGb3R92oPJE2nhq9pYfiUDxMeMTM9vkitqtCV8cci/1/3137392e34392e3139302e302f32342d3234203d3e20323731323034.roa
File:                     3137392e34392e3139302e302f32342d3234203d3e20323731323034.roa (raw, json)
Hash identifier:          4vGv2rzCx17eExKGv6dLslVNcInCr1TzVU8IaZfq9iA=
Subject key identifier:   96:6E:E9:EC:43:BA:58:E3:F5:47:DE:C0:11:D2:16:95:52:B9:B8:95
Certificate issuer:       /CN=B8AF676772F0F28F22A98D5FCA20569D94F93703
Certificate serial:       1C70B16BC15B5922FD884C7450A167CADC0C90E5
Authority key identifier: B8:AF:67:67:72:F0:F2:8F:22:A9:8D:5F:CA:20:56:9D:94:F9:37:03
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B8AF676772F0F28F22A98D5FCA20569D94F93703.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DAZPGb3R92oPJE2nhq9pYfiUDxMeMTM9vkitqtCV8cci/1/3137392e34392e3139302e302f32342d3234203d3e20323731323034.roa
Signing time:             Fri 05 Apr 2024 02:13:33 +0000
ROA not before:           Fri 05 Apr 2024 02:08:33 +0000
ROA not after:            Fri 04 Apr 2025 02:13:33 +0000
asID:                     271204
IP address blocks:        179.49.190.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DAZPGb3R92oPJE2nhq9pYfiUDxMeMTM9vkitqtCV8cci/1/B8AF676772F0F28F22A98D5FCA20569D94F93703.crl
                          rsync://rpki-repo.registro.br/repo/DAZPGb3R92oPJE2nhq9pYfiUDxMeMTM9vkitqtCV8cci/1/B8AF676772F0F28F22A98D5FCA20569D94F93703.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B8AF676772F0F28F22A98D5FCA20569D94F93703.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 12:05:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:70:b1:6b:c1:5b:59:22:fd:88:4c:74:50:a1:67:ca:dc:0c:90:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B8AF676772F0F28F22A98D5FCA20569D94F93703
        Validity
            Not Before: Apr  5 02:08:33 2024 GMT
            Not After : Apr  4 02:13:33 2025 GMT
        Subject: CN=966EE9EC43BA58E3F547DEC011D2169552B9B895
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:89:b0:6b:2e:9f:05:5d:bb:18:a1:6d:54:fa:
                    b6:e4:d6:7f:a0:56:55:d8:13:90:e3:f8:d1:0b:38:
                    28:03:75:7b:55:48:a4:40:df:1b:b1:01:af:31:45:
                    92:51:73:5a:7f:d6:5b:ab:0a:9d:45:78:9a:61:a9:
                    1c:36:86:85:16:12:67:04:4d:04:85:a6:12:15:92:
                    34:19:9a:37:92:7c:88:28:ea:e8:7d:12:4c:39:04:
                    2e:1f:99:fa:04:28:b3:73:d7:87:7b:4e:4e:94:83:
                    fb:15:f3:32:07:77:41:5c:12:02:24:5e:2b:fc:aa:
                    4b:d5:7e:a1:3c:e3:12:11:a7:d8:94:03:b4:fe:d5:
                    59:10:b8:e2:59:b2:c9:ff:91:c8:f0:99:83:71:9c:
                    5e:54:1a:8f:04:49:72:e8:ee:5e:c3:50:59:26:50:
                    cc:1c:10:ef:80:c5:c1:45:9a:27:3f:0a:61:fd:9a:
                    2b:75:92:9b:4c:ef:98:8c:eb:df:43:bb:6a:9a:be:
                    75:fd:d2:69:9a:ba:bd:e2:b5:f4:07:b9:00:9f:91:
                    b0:b7:e3:0b:48:04:f1:54:77:b2:06:a8:8d:2e:35:
                    1e:f6:34:10:5c:e3:12:33:ae:08:43:23:cc:ca:b1:
                    09:18:15:4d:76:3f:6a:ce:c9:77:a4:1f:b2:31:7f:
                    71:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:6E:E9:EC:43:BA:58:E3:F5:47:DE:C0:11:D2:16:95:52:B9:B8:95
            X509v3 Authority Key Identifier:
                keyid:B8:AF:67:67:72:F0:F2:8F:22:A9:8D:5F:CA:20:56:9D:94:F9:37:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DAZPGb3R92oPJE2nhq9pYfiUDxMeMTM9vkitqtCV8cci/1/B8AF676772F0F28F22A98D5FCA20569D94F93703.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B8AF676772F0F28F22A98D5FCA20569D94F93703.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DAZPGb3R92oPJE2nhq9pYfiUDxMeMTM9vkitqtCV8cci/1/3137392e34392e3139302e302f32342d3234203d3e20323731323034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.49.190.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4d:8d:dd:fa:6d:de:60:2e:90:f2:d3:5d:cb:9e:d7:f9:1f:df:
         3c:cc:71:4b:33:58:93:29:2c:71:23:7e:3c:a5:a5:ad:e7:ac:
         df:8e:c2:11:d3:a5:14:a5:93:d8:11:14:93:73:f2:38:d5:1f:
         1f:78:f3:fa:3a:e7:bb:c8:8a:04:fa:91:72:ea:88:cb:9b:a6:
         71:19:c0:e3:e5:e0:43:ed:35:90:28:39:09:d8:f0:4a:f8:3c:
         7a:16:a3:47:40:a5:82:52:2d:60:df:60:1e:6c:34:7f:88:cc:
         66:52:f9:46:01:4f:3d:70:f0:1e:17:1b:44:fc:2f:cb:78:6a:
         44:09:7f:98:50:ff:83:73:e2:2c:aa:eb:39:54:10:c4:26:8b:
         b0:17:09:84:df:6a:f2:c9:ae:94:56:17:9a:b7:d3:31:25:43:
         d1:b4:58:d2:3b:78:a3:25:77:e4:a1:d3:e1:98:20:4e:c5:f0:
         c7:8e:7e:42:65:b6:81:a8:5c:57:79:e7:8b:c8:9a:21:4c:15:
         4c:da:06:97:01:09:59:a3:95:2b:29:c7:ab:89:7d:49:39:ac:
         2e:8d:10:22:49:d5:0d:95:b0:83:5c:71:3a:de:78:6b:9d:11:
         72:aa:61:71:73:4d:1d:f7:f6:61:06:15:36:35:61:aa:99:49:
         29:18:c5:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 14:19:47 2024 by rpki-client on console-ams.rpki-client.org