Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DCn7oU326hBXfHm3QQxEtsbEtNHWVj7MhWWpadKGWQcT/0/3137392e34382e3133372e302f32342d3234203d3e20323734363430.roa
File:                     3137392e34382e3133372e302f32342d3234203d3e20323734363430.roa (raw, json)
Hash identifier:          pQEQlRwKVVCvE7av7lhBHP+xdFaTf6Yo50+yHZSAJFg=
Subject key identifier:   27:3B:C4:20:B8:FD:71:8C:4E:EF:AE:42:85:20:AA:17:93:84:CD:C6
Certificate issuer:       /CN=2DF5549CA90B47D8FA5217800F005C7EC0D966E7
Certificate serial:       0A508B135B4CD4660935CFABF14E08F5E3F98609
Authority key identifier: 2D:F5:54:9C:A9:0B:47:D8:FA:52:17:80:0F:00:5C:7E:C0:D9:66:E7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2DF5549CA90B47D8FA5217800F005C7EC0D966E7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DCn7oU326hBXfHm3QQxEtsbEtNHWVj7MhWWpadKGWQcT/0/3137392e34382e3133372e302f32342d3234203d3e20323734363430.roa
Signing time:             Wed 06 Nov 2024 14:56:10 +0000
ROA not before:           Wed 06 Nov 2024 14:51:10 +0000
ROA not after:            Wed 05 Nov 2025 14:56:10 +0000
asID:                     274640
IP address blocks:        179.48.137.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DCn7oU326hBXfHm3QQxEtsbEtNHWVj7MhWWpadKGWQcT/0/2DF5549CA90B47D8FA5217800F005C7EC0D966E7.crl
                          rsync://rpki-repo.registro.br/repo/DCn7oU326hBXfHm3QQxEtsbEtNHWVj7MhWWpadKGWQcT/0/2DF5549CA90B47D8FA5217800F005C7EC0D966E7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2DF5549CA90B47D8FA5217800F005C7EC0D966E7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:50:8b:13:5b:4c:d4:66:09:35:cf:ab:f1:4e:08:f5:e3:f9:86:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2DF5549CA90B47D8FA5217800F005C7EC0D966E7
        Validity
            Not Before: Nov  6 14:51:10 2024 GMT
            Not After : Nov  5 14:56:10 2025 GMT
        Subject: CN=273BC420B8FD718C4EEFAE428520AA179384CDC6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:44:2b:44:97:d7:1a:3f:00:d7:3a:5c:16:7d:
                    c7:5d:c4:ff:0f:4b:d3:31:6c:ac:ea:5d:57:02:50:
                    91:a2:99:9f:f5:58:3e:19:46:7e:14:8a:fd:42:47:
                    39:64:90:91:39:2e:5c:5a:25:68:1c:30:83:8d:22:
                    29:00:75:5d:7a:1f:11:8e:21:f1:68:f1:45:c7:13:
                    15:30:46:65:bd:e1:fd:9d:44:77:37:5a:81:62:c1:
                    eb:fa:1f:e3:a4:2e:a8:1b:61:a5:0d:1e:83:a0:cd:
                    2d:8a:2a:8e:bf:91:a5:f7:2a:8c:9d:1a:80:3e:37:
                    b1:10:fb:65:0f:94:cd:32:4b:5b:9d:c0:3c:d6:e9:
                    27:96:2a:11:a3:4e:2b:8d:40:ca:ea:5a:0d:0c:3b:
                    71:db:45:77:04:3a:4c:d3:59:ed:4c:56:38:3e:d5:
                    b0:73:39:97:9f:71:9a:93:e9:d4:73:db:01:56:2b:
                    40:37:32:93:1a:2e:59:97:5f:57:af:4f:54:a3:15:
                    53:2c:bd:9b:d6:96:93:8c:f9:e4:bd:c7:74:d5:7a:
                    5e:e2:d3:b8:78:34:ae:05:d0:a7:bd:8b:a1:ca:06:
                    ca:5e:bd:0b:8a:44:74:de:f9:2e:e8:52:cd:34:6b:
                    ec:b1:3a:28:56:8b:bb:b6:9b:0d:30:40:af:f9:74:
                    cc:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:3B:C4:20:B8:FD:71:8C:4E:EF:AE:42:85:20:AA:17:93:84:CD:C6
            X509v3 Authority Key Identifier:
                keyid:2D:F5:54:9C:A9:0B:47:D8:FA:52:17:80:0F:00:5C:7E:C0:D9:66:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DCn7oU326hBXfHm3QQxEtsbEtNHWVj7MhWWpadKGWQcT/0/2DF5549CA90B47D8FA5217800F005C7EC0D966E7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2DF5549CA90B47D8FA5217800F005C7EC0D966E7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DCn7oU326hBXfHm3QQxEtsbEtNHWVj7MhWWpadKGWQcT/0/3137392e34382e3133372e302f32342d3234203d3e20323734363430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.48.137.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2d:8c:57:13:d3:e7:f0:64:69:9b:97:f4:e4:a6:62:78:52:f4:
         4b:0f:4f:84:7a:95:a4:ec:92:88:ca:8f:a2:a4:16:63:d5:28:
         31:16:06:d2:81:c7:29:5c:a5:fe:06:4d:db:31:c2:d9:e5:66:
         ce:1c:dd:8e:fc:81:79:1f:c8:16:0f:94:79:54:d8:42:0a:82:
         3a:84:48:37:b2:17:9b:cf:97:e5:a3:4a:0a:75:62:45:fc:37:
         99:25:d7:ff:ee:49:21:cf:ab:89:9b:dd:92:9d:3c:93:9c:1c:
         ed:d5:d2:40:e2:46:cb:88:03:74:3c:2d:f4:75:60:23:fb:d0:
         10:65:bc:f9:20:a1:52:87:30:fa:c8:4d:26:c3:1c:04:ab:e2:
         94:2b:b8:6b:a3:00:c4:67:5f:4e:25:c4:35:e5:3b:71:3f:ab:
         b9:53:04:dd:f7:e5:94:b9:9b:20:c9:d9:13:d2:ff:15:ce:48:
         d6:df:a3:42:ac:c0:45:bf:77:13:8c:8d:35:ca:17:fe:8f:66:
         92:e4:cc:94:e2:89:c8:44:bb:3f:d6:e0:a5:e8:49:bc:37:bd:
         53:1d:a3:8c:5e:f4:79:44:90:7f:ee:e1:46:c7:6a:f7:55:1f:
         e8:8d:fa:90:d3:e2:98:53:ba:4f:f2:53:46:6c:95:b6:8e:32:
         ad:fe:0b:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 07:30:02 2024 by rpki-client on console-fra.rpki-client.org