Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EszSqXU6su93trtn878XarKoRMGuTgTSwkRxVzm8xiu2/1/3137392e3130362e37322e302f32312d3234203d3e20323633343135.roa
File:                     3137392e3130362e37322e302f32312d3234203d3e20323633343135.roa (raw, json)
Hash identifier:          cN0MwcgmEC1qoeBHWJJIJLnUyXvht2wPhbuvJT9W/80=
Subject key identifier:   D6:A1:31:2D:1D:7F:51:5A:21:4F:6A:CB:8A:B5:AD:8D:88:D3:3E:3B
Certificate issuer:       /CN=0D48E03F31640B05A5550FBA2E206DC75A155B20
Certificate serial:       5D7CEC182E235B366D400EC3C234BED4937B84DD
Authority key identifier: 0D:48:E0:3F:31:64:0B:05:A5:55:0F:BA:2E:20:6D:C7:5A:15:5B:20
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D48E03F31640B05A5550FBA2E206DC75A155B20.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EszSqXU6su93trtn878XarKoRMGuTgTSwkRxVzm8xiu2/1/3137392e3130362e37322e302f32312d3234203d3e20323633343135.roa
Signing time:             Thu 04 Apr 2024 12:07:12 +0000
ROA not before:           Thu 04 Apr 2024 12:02:12 +0000
ROA not after:            Thu 03 Apr 2025 12:07:12 +0000
asID:                     263415
IP address blocks:        179.106.72.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EszSqXU6su93trtn878XarKoRMGuTgTSwkRxVzm8xiu2/1/0D48E03F31640B05A5550FBA2E206DC75A155B20.crl
                          rsync://rpki-repo.registro.br/repo/EszSqXU6su93trtn878XarKoRMGuTgTSwkRxVzm8xiu2/1/0D48E03F31640B05A5550FBA2E206DC75A155B20.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D48E03F31640B05A5550FBA2E206DC75A155B20.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 14:31:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:7c:ec:18:2e:23:5b:36:6d:40:0e:c3:c2:34:be:d4:93:7b:84:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D48E03F31640B05A5550FBA2E206DC75A155B20
        Validity
            Not Before: Apr  4 12:02:12 2024 GMT
            Not After : Apr  3 12:07:12 2025 GMT
        Subject: CN=D6A1312D1D7F515A214F6ACB8AB5AD8D88D33E3B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:45:38:10:ab:74:61:bd:61:a7:96:63:2b:db:
                    33:0d:7a:1f:5b:a9:b4:12:5c:c4:d2:bc:f8:55:07:
                    36:06:13:f4:a3:44:6b:4f:4e:ab:a1:fd:e7:77:d0:
                    10:f1:2c:dd:b2:31:8d:87:5c:aa:a2:dc:8a:8d:c0:
                    e8:13:8c:c1:ad:db:6e:04:84:e1:04:81:b7:9f:26:
                    1b:50:40:34:25:cf:80:47:1c:4a:7c:81:fd:e5:34:
                    35:2d:87:d9:8b:b0:db:24:d4:80:4e:09:ce:29:3d:
                    61:49:49:11:83:86:c0:d9:8e:65:02:02:cc:23:91:
                    14:da:3a:a2:68:6f:ff:a2:5d:20:47:b2:17:6f:5f:
                    e3:0e:f8:4a:8c:3f:52:8d:d6:7b:40:a0:0d:3a:59:
                    0c:b2:73:57:aa:7f:08:94:b7:0c:78:ac:e6:07:f7:
                    11:c2:f1:59:e0:68:08:0e:83:f3:dc:d1:23:92:3b:
                    56:62:ec:da:f4:b7:22:c9:3f:24:e1:26:78:e2:06:
                    ba:5f:79:37:16:5a:3e:fa:65:09:b0:5b:66:17:6f:
                    06:ad:29:30:cb:19:94:cd:3a:cb:de:4e:58:e2:62:
                    6d:a9:e6:1c:01:61:61:98:de:d5:44:14:95:eb:a9:
                    6a:e0:8b:23:32:be:3c:e7:b2:1e:27:2b:30:67:13:
                    3b:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:A1:31:2D:1D:7F:51:5A:21:4F:6A:CB:8A:B5:AD:8D:88:D3:3E:3B
            X509v3 Authority Key Identifier:
                keyid:0D:48:E0:3F:31:64:0B:05:A5:55:0F:BA:2E:20:6D:C7:5A:15:5B:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EszSqXU6su93trtn878XarKoRMGuTgTSwkRxVzm8xiu2/1/0D48E03F31640B05A5550FBA2E206DC75A155B20.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D48E03F31640B05A5550FBA2E206DC75A155B20.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EszSqXU6su93trtn878XarKoRMGuTgTSwkRxVzm8xiu2/1/3137392e3130362e37322e302f32312d3234203d3e20323633343135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.106.72.0/21

    Signature Algorithm: sha256WithRSAEncryption
         3a:9f:53:82:11:0e:2c:29:89:a2:19:f9:fb:4d:5d:ee:c0:35:
         73:d7:05:f9:f4:30:6f:f9:85:f6:f6:a9:53:66:b6:ef:5c:f4:
         bd:ec:5c:47:b5:b4:c4:e7:f3:db:3c:49:91:b1:86:6b:6e:b8:
         b9:54:7b:10:1e:ac:12:d6:af:55:86:83:da:88:ac:b1:5d:a6:
         ef:ed:3f:21:33:4b:b0:75:68:fe:b4:d6:f3:07:f0:ab:b6:aa:
         6f:5d:60:2b:9b:6f:a1:a7:88:6d:1c:6f:06:05:fb:d7:a6:86:
         17:ce:76:03:10:49:d5:1a:cc:6a:28:df:87:03:af:9c:6b:6e:
         e8:cf:0a:41:3c:ec:72:a9:db:61:9f:23:d1:e3:11:02:1f:be:
         d7:0f:36:00:41:46:e5:47:7f:c8:e4:21:5a:54:9e:63:2d:53:
         47:6a:d7:b7:de:6f:c8:f8:cd:1f:0c:dc:fe:0a:e9:67:47:65:
         e2:f4:36:6c:de:40:d8:61:76:b2:7d:4a:b1:0b:e9:7f:aa:a7:
         ee:2e:b2:6a:ce:56:f8:76:62:60:0a:93:ae:db:25:3f:8f:75:
         db:42:b8:98:fe:06:b1:bf:fe:46:55:6f:c0:db:36:3f:36:50:
         df:8b:f0:2e:f2:b6:24:b9:59:3f:84:ea:d3:6a:28:35:6b:f2:
         a9:d6:c8:30
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUXXzsGC4jWzZtQA7DwjS+1JN7hN0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEQ0OEUwM0YzMTY0MEIwNUE1NTUwRkJBMkUyMDZEQzc1
QTE1NUIyMDAeFw0yNDA0MDQxMjAyMTJaFw0yNTA0MDMxMjA3MTJaMDMxMTAvBgNV
BAMTKEQ2QTEzMTJEMUQ3RjUxNUEyMTRGNkFDQjhBQjVBRDhEODhEMzNFM0IwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwRTgQq3RhvWGnlmMr2zMNeh9b
qbQSXMTSvPhVBzYGE/SjRGtPTquh/ed30BDxLN2yMY2HXKqi3IqNwOgTjMGt224E
hOEEgbefJhtQQDQlz4BHHEp8gf3lNDUth9mLsNsk1IBOCc4pPWFJSRGDhsDZjmUC
AswjkRTaOqJob/+iXSBHshdvX+MO+EqMP1KN1ntAoA06WQyyc1eqfwiUtwx4rOYH
9xHC8VngaAgOg/Pc0SOSO1Zi7Nr0tyLJPyThJnjiBrpfeTcWWj76ZQmwW2YXbwat
KTDLGZTNOsveTljiYm2p5hwBYWGY3tVEFJXrqWrgiyMyvjznsh4nKzBnEzvVAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU1qExLR1/UVohT2rLirWtjYjTPjswHwYDVR0j
BBgwFoAUDUjgPzFkCwWlVQ+6LiBtx1oVWyAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRXN6U3FYVTZzdTkzdHJ0bjg3OFhhcktvUk1HdVRnVFN3a1J4VnptOHhp
dTIvMS8wRDQ4RTAzRjMxNjQwQjA1QTU1NTBGQkEyRTIwNkRDNzVBMTU1QjIwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzBENDhFMDNGMzE2NDBCMDVB
NTU1MEZCQTJFMjA2REM3NUExNTVCMjAuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0VzelNxWFU2c3U5M3RydG44NzhYYXJLb1JNR3VUZ1RTd2tSeFZ6bTh4aXUyLzEv
MzEzNzM5MmUzMTMwMzYyZTM3MzIyZTMwMmYzMjMxMmQzMjM0MjAzZDNlMjAzMjM2
MzMzNDMxMzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAOzakgwDQYJKoZIhvcNAQELBQADggEBADqfU4IR
DiwpiaIZ+ftNXe7ANXPXBfn0MG/5hfb2qVNmtu9c9L3sXEe1tMTn89s8SZGxhmtu
uLlUexAerBLWr1WGg9qIrLFdpu/tPyEzS7B1aP601vMH8Ku2qm9dYCubb6GniG0c
bwYF+9emhhfOdgMQSdUazGoo34cDr5xrbujPCkE87HKp22GfI9HjEQIfvtcPNgBB
RuVHf8jkIVpUnmMtU0dq17feb8j4zR8M3P4K6WdHZeL0NmzeQNhhdrJ9SrEL6X+q
p+4usmrOVvh2YmAKk67bJT+PddtCuJj+BrG//kZVb8DbNj82UN+L8C7ytiS5WT+E
6tNqKDVr8qnWyDA=
-----END CERTIFICATE-----
Generated at Mon Nov 25 13:14:53 2024 by rpki-client on console-ams.rpki-client.org