Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E8FnCKSGhj2z1dTBBrWHFxTEVVw1ZKhFQPYJPnmBw4cj/1/3137392e34322e3134302e302f32322d3234203d3e20323731313532.roa
File:                     3137392e34322e3134302e302f32322d3234203d3e20323731313532.roa (raw, json)
Hash identifier:          N0+FQDNwJefn/Eyz4lMkjHXNJEjc7BeeOm/ZdgkH2J4=
Subject key identifier:   6D:59:30:85:1B:C6:73:06:8C:6A:BC:07:88:30:BA:CC:C6:B8:3B:E0
Certificate issuer:       /CN=DBC91D9240E3E033B5E4C0F07A164AE264F74272
Certificate serial:       6623CF15774475D0D0B88FCBCFFBD64CC827673D
Authority key identifier: DB:C9:1D:92:40:E3:E0:33:B5:E4:C0:F0:7A:16:4A:E2:64:F7:42:72
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DBC91D9240E3E033B5E4C0F07A164AE264F74272.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E8FnCKSGhj2z1dTBBrWHFxTEVVw1ZKhFQPYJPnmBw4cj/1/3137392e34322e3134302e302f32322d3234203d3e20323731313532.roa
Signing time:             Fri 05 Apr 2024 01:00:13 +0000
ROA not before:           Fri 05 Apr 2024 00:55:13 +0000
ROA not after:            Fri 04 Apr 2025 01:00:13 +0000
asID:                     271152
IP address blocks:        179.42.140.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/E8FnCKSGhj2z1dTBBrWHFxTEVVw1ZKhFQPYJPnmBw4cj/1/DBC91D9240E3E033B5E4C0F07A164AE264F74272.crl
                          rsync://rpki-repo.registro.br/repo/E8FnCKSGhj2z1dTBBrWHFxTEVVw1ZKhFQPYJPnmBw4cj/1/DBC91D9240E3E033B5E4C0F07A164AE264F74272.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DBC91D9240E3E033B5E4C0F07A164AE264F74272.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 11:17:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:23:cf:15:77:44:75:d0:d0:b8:8f:cb:cf:fb:d6:4c:c8:27:67:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DBC91D9240E3E033B5E4C0F07A164AE264F74272
        Validity
            Not Before: Apr  5 00:55:13 2024 GMT
            Not After : Apr  4 01:00:13 2025 GMT
        Subject: CN=6D5930851BC673068C6ABC078830BACCC6B83BE0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:5e:72:0c:5d:79:0d:ea:71:60:0c:70:77:5b:
                    b6:d6:66:5e:5d:ef:cf:fe:65:52:18:02:e1:95:8d:
                    c5:1e:78:01:95:79:e4:04:be:95:c3:ca:cd:cd:a4:
                    0c:27:13:91:2c:3d:28:b4:25:44:5d:32:51:c5:3f:
                    2d:9e:b7:de:41:02:9f:9b:9e:81:1d:5e:b7:ff:d8:
                    a7:c1:0f:8d:f0:54:be:a4:95:ad:a8:f0:b8:21:05:
                    ad:87:98:cc:b3:b5:ac:3d:5d:39:d2:f0:38:6a:1c:
                    cd:a4:a6:3f:3b:44:f5:3c:ac:92:32:67:f6:94:0f:
                    8c:53:47:18:4b:0a:37:79:db:01:57:19:f9:d6:92:
                    20:7f:85:29:ec:1d:0e:37:5c:dd:4c:51:fa:ee:61:
                    b8:c8:11:7d:73:e1:bd:22:21:db:d9:76:95:7e:35:
                    af:32:f9:b3:87:ae:8b:30:6b:c0:cc:43:15:1b:a0:
                    08:e2:0e:14:b6:f6:7b:19:e7:cc:22:39:e9:5d:50:
                    2f:ab:7b:02:50:72:e9:fe:5b:ea:f6:b8:ad:1a:bc:
                    ae:c5:4e:d2:38:51:68:54:97:69:8c:9e:b1:6e:68:
                    de:18:2f:56:bd:a8:9a:c2:13:92:6b:7d:eb:a6:0b:
                    94:3f:e2:14:06:02:ec:4c:a6:09:0a:7d:42:44:cb:
                    80:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:59:30:85:1B:C6:73:06:8C:6A:BC:07:88:30:BA:CC:C6:B8:3B:E0
            X509v3 Authority Key Identifier:
                keyid:DB:C9:1D:92:40:E3:E0:33:B5:E4:C0:F0:7A:16:4A:E2:64:F7:42:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E8FnCKSGhj2z1dTBBrWHFxTEVVw1ZKhFQPYJPnmBw4cj/1/DBC91D9240E3E033B5E4C0F07A164AE264F74272.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DBC91D9240E3E033B5E4C0F07A164AE264F74272.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E8FnCKSGhj2z1dTBBrWHFxTEVVw1ZKhFQPYJPnmBw4cj/1/3137392e34322e3134302e302f32322d3234203d3e20323731313532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.42.140.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7b:6e:e4:58:d7:c7:96:f5:8a:b9:91:fc:3e:d4:72:51:a9:d4:
         1d:da:bc:f5:b0:60:7d:03:75:78:bd:f1:91:c1:e8:fe:1c:78:
         d2:b1:15:a4:aa:75:18:6b:37:2e:ba:0e:16:a4:f0:c4:23:8b:
         2c:4b:0d:d0:9d:b2:29:44:d3:aa:6c:4a:5d:81:e9:00:17:8c:
         f1:47:b8:ae:7a:b4:05:5a:4c:49:36:8a:38:7a:0c:27:5a:7f:
         de:ba:32:77:dc:5e:bf:a0:ea:19:f9:ff:f0:6c:8e:72:e4:7c:
         cc:d9:e6:68:85:70:b6:95:e1:ea:49:06:71:c0:b8:83:4d:d0:
         99:08:f4:a0:c8:25:3f:f0:db:b7:60:d8:b0:20:34:50:eb:c4:
         4d:db:bf:29:d6:bd:04:a1:d9:55:e8:f6:a9:ec:99:86:bc:96:
         ee:f3:4c:17:6c:3e:1a:81:04:5d:f2:47:44:a8:8e:d5:0a:bd:
         d1:47:7e:80:fd:d9:b8:57:17:37:11:e1:ea:5e:3c:5e:ed:f4:
         28:90:6b:e1:0c:41:c3:16:ef:8f:74:e5:9b:9a:3d:cb:c8:ee:
         1b:e3:b1:c0:29:1e:ca:7b:9c:9b:84:0a:97:da:ea:80:09:51:
         ac:71:a0:33:33:08:49:4e:13:e7:19:11:bb:ee:4b:b4:d5:01:
         99:a4:2d:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:14:51 2024 by rpki-client on console-fra.rpki-client.org