Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DqCUg3EZkJYyeFXxPWTTRJShaBLnD2cQP9yZ9ke6rzmN/1/3137392e36332e3131322e302f32322d3234203d3e20323731353338.roa
File:                     3137392e36332e3131322e302f32322d3234203d3e20323731353338.roa (raw, json)
Hash identifier:          Zb0y1SEvRGZcF0UfR/FVrrOVlz0z9N1TU0nxWSZ1Pbc=
Subject key identifier:   B9:5F:3B:19:9C:6C:48:ED:2D:AD:F5:BB:20:C4:3B:A0:97:54:FA:3A
Certificate issuer:       /CN=46B61BC4E2B42CC11F0C5FDB2E2BA85C3594CFED
Certificate serial:       52A119C41895C21BBD8B8BE4FDE28645EE1B10CB
Authority key identifier: 46:B6:1B:C4:E2:B4:2C:C1:1F:0C:5F:DB:2E:2B:A8:5C:35:94:CF:ED
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/46B61BC4E2B42CC11F0C5FDB2E2BA85C3594CFED.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DqCUg3EZkJYyeFXxPWTTRJShaBLnD2cQP9yZ9ke6rzmN/1/3137392e36332e3131322e302f32322d3234203d3e20323731353338.roa
Signing time:             Wed 03 Apr 2024 19:00:01 +0000
ROA not before:           Wed 03 Apr 2024 18:55:01 +0000
ROA not after:            Thu 03 Apr 2025 19:00:01 +0000
asID:                     271538
IP address blocks:        179.63.112.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DqCUg3EZkJYyeFXxPWTTRJShaBLnD2cQP9yZ9ke6rzmN/1/46B61BC4E2B42CC11F0C5FDB2E2BA85C3594CFED.crl
                          rsync://rpki-repo.registro.br/repo/DqCUg3EZkJYyeFXxPWTTRJShaBLnD2cQP9yZ9ke6rzmN/1/46B61BC4E2B42CC11F0C5FDB2E2BA85C3594CFED.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/46B61BC4E2B42CC11F0C5FDB2E2BA85C3594CFED.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 06:14:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:a1:19:c4:18:95:c2:1b:bd:8b:8b:e4:fd:e2:86:45:ee:1b:10:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46B61BC4E2B42CC11F0C5FDB2E2BA85C3594CFED
        Validity
            Not Before: Apr  3 18:55:01 2024 GMT
            Not After : Apr  3 19:00:01 2025 GMT
        Subject: CN=3082010A0282010100B8FA0A9040660C8B66C8C7837F80A2BEC162AF74BF645B0EEE24BB0DCEF72C797118102CD9DEED7435D40034B2B0AD8952A5CE5C9C8E679555F60AAACB972E5194558DEB4E352A88F7E965C68636A97AC35BE67EAC255A92ED279E2B271611DEDF1F25F587B0BEF6DE2D2E27F01ACEA9A08939B316C5B7B2ECA40F95EB219B824F7E986359D0DD6DBE0D01339AE472A1FFC253F6A07AE56D11C85F083A4FE68AB3702DA2992550ACD73CE8F7D01E4BDE8E5508DE27DE4C16C9F6768AA626893C14A1C296151640184859C77A1DC002EF796499FFC4A97B5C49F75AFD08EBF9B68B61B0145099ED857E34766C1FF4ABAC6D12F92CF6C101D061D9E779EEE4B1890203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:fa:0a:90:40:66:0c:8b:66:c8:c7:83:7f:80:
                    a2:be:c1:62:af:74:bf:64:5b:0e:ee:24:bb:0d:ce:
                    f7:2c:79:71:18:10:2c:d9:de:ed:74:35:d4:00:34:
                    b2:b0:ad:89:52:a5:ce:5c:9c:8e:67:95:55:f6:0a:
                    aa:cb:97:2e:51:94:55:8d:eb:4e:35:2a:88:f7:e9:
                    65:c6:86:36:a9:7a:c3:5b:e6:7e:ac:25:5a:92:ed:
                    27:9e:2b:27:16:11:de:df:1f:25:f5:87:b0:be:f6:
                    de:2d:2e:27:f0:1a:ce:a9:a0:89:39:b3:16:c5:b7:
                    b2:ec:a4:0f:95:eb:21:9b:82:4f:7e:98:63:59:d0:
                    dd:6d:be:0d:01:33:9a:e4:72:a1:ff:c2:53:f6:a0:
                    7a:e5:6d:11:c8:5f:08:3a:4f:e6:8a:b3:70:2d:a2:
                    99:25:50:ac:d7:3c:e8:f7:d0:1e:4b:de:8e:55:08:
                    de:27:de:4c:16:c9:f6:76:8a:a6:26:89:3c:14:a1:
                    c2:96:15:16:40:18:48:59:c7:7a:1d:c0:02:ef:79:
                    64:99:ff:c4:a9:7b:5c:49:f7:5a:fd:08:eb:f9:b6:
                    8b:61:b0:14:50:99:ed:85:7e:34:76:6c:1f:f4:ab:
                    ac:6d:12:f9:2c:f6:c1:01:d0:61:d9:e7:79:ee:e4:
                    b1:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:5F:3B:19:9C:6C:48:ED:2D:AD:F5:BB:20:C4:3B:A0:97:54:FA:3A
            X509v3 Authority Key Identifier:
                keyid:46:B6:1B:C4:E2:B4:2C:C1:1F:0C:5F:DB:2E:2B:A8:5C:35:94:CF:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DqCUg3EZkJYyeFXxPWTTRJShaBLnD2cQP9yZ9ke6rzmN/1/46B61BC4E2B42CC11F0C5FDB2E2BA85C3594CFED.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/46B61BC4E2B42CC11F0C5FDB2E2BA85C3594CFED.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DqCUg3EZkJYyeFXxPWTTRJShaBLnD2cQP9yZ9ke6rzmN/1/3137392e36332e3131322e302f32322d3234203d3e20323731353338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.63.112.0/22

    Signature Algorithm: sha256WithRSAEncryption
         60:0a:ed:27:89:7a:6d:b6:00:e4:18:7a:20:ee:69:6b:17:25:
         c8:7c:aa:21:89:68:44:ff:c8:51:26:83:3d:e5:a4:ce:31:15:
         77:d6:63:2e:c9:4e:60:88:22:d4:23:02:f6:80:0d:4a:df:68:
         4e:61:9e:d0:d0:06:52:80:0f:4f:02:10:c5:58:88:94:2b:00:
         de:e3:a2:83:8b:43:dd:30:86:a5:99:18:8a:f6:18:1b:16:f3:
         0b:ae:aa:0b:63:cd:37:06:d5:5f:c3:55:93:70:a7:69:c5:78:
         1f:ac:7b:fe:94:08:36:39:3b:43:8b:ad:f2:02:47:cf:62:bb:
         10:13:dc:20:6b:e4:68:33:95:16:23:70:26:27:69:df:bc:bd:
         cf:8f:9e:23:4d:3a:9c:c5:45:b1:97:2d:b9:18:41:2c:b6:87:
         3d:d9:34:53:ec:7f:e7:5d:1c:e3:91:39:a3:b4:07:38:1e:5a:
         cd:ec:c0:43:9a:c2:7a:d7:9e:9b:de:8f:6f:6f:73:55:c0:f4:
         71:4d:97:23:90:c2:a6:75:3f:e7:22:e2:7f:0f:d3:26:98:3c:
         0b:8a:c7:d6:6c:24:65:43:af:3a:0b:49:2a:84:d7:ce:19:6b:
         cd:1c:74:b5:d0:73:a7:9e:7c:54:e4:0e:68:c7:11:2d:d2:b2:
         7b:70:33:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 08:00:19 2024 by rpki-client on console-ams.rpki-client.org