Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/F6QMEAScoRfEsVdLYoBW2XQkXUAn19FiRR3ytvxihSgh/0/3137392e36332e3137322e302f32332d3233203d3e20323731353636.roa
File:                     3137392e36332e3137322e302f32332d3233203d3e20323731353636.roa (raw, json)
Hash identifier:          nT/gxU2yZROOeGGslfdhnhYXAzFk0zPnZqCPqexXc/k=
Subject key identifier:   C6:B7:E0:64:91:D7:88:16:B7:A2:7C:F4:E0:6C:A7:EA:45:51:94:4A
Certificate issuer:       /CN=E0C95465384623D51149B43BD88C02CDAF39FCCD
Certificate serial:       3464A430BD9359870BCFD983DC7C64C470476866
Authority key identifier: E0:C9:54:65:38:46:23:D5:11:49:B4:3B:D8:8C:02:CD:AF:39:FC:CD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E0C95465384623D51149B43BD88C02CDAF39FCCD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F6QMEAScoRfEsVdLYoBW2XQkXUAn19FiRR3ytvxihSgh/0/3137392e36332e3137322e302f32332d3233203d3e20323731353636.roa
Signing time:             Tue 29 Oct 2024 18:30:54 +0000
ROA not before:           Tue 29 Oct 2024 18:25:54 +0000
ROA not after:            Tue 28 Oct 2025 18:30:54 +0000
asID:                     271566
IP address blocks:        179.63.172.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/F6QMEAScoRfEsVdLYoBW2XQkXUAn19FiRR3ytvxihSgh/0/E0C95465384623D51149B43BD88C02CDAF39FCCD.crl
                          rsync://rpki-repo.registro.br/repo/F6QMEAScoRfEsVdLYoBW2XQkXUAn19FiRR3ytvxihSgh/0/E0C95465384623D51149B43BD88C02CDAF39FCCD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E0C95465384623D51149B43BD88C02CDAF39FCCD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 17 Feb 2025 11:09:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:64:a4:30:bd:93:59:87:0b:cf:d9:83:dc:7c:64:c4:70:47:68:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E0C95465384623D51149B43BD88C02CDAF39FCCD
        Validity
            Not Before: Oct 29 18:25:54 2024 GMT
            Not After : Oct 28 18:30:54 2025 GMT
        Subject: CN=C6B7E06491D78816B7A27CF4E06CA7EA4551944A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:e3:b5:01:9f:48:94:c7:d2:c6:d1:c5:64:79:
                    55:fb:12:57:37:63:a3:da:d6:10:13:22:6d:b7:bb:
                    5a:b6:96:ed:ec:e3:3f:fd:34:3b:0e:45:02:6e:09:
                    44:6a:17:78:f3:f1:42:ab:1b:2d:b9:93:7a:bf:5b:
                    1b:fa:b1:9d:82:fc:4c:4d:d5:e3:83:4c:ec:e3:62:
                    b5:ae:3a:a0:76:20:fb:65:21:86:30:82:02:0f:c2:
                    df:40:69:42:6d:2c:55:76:18:5d:0c:0d:ac:0d:f8:
                    01:7c:ff:ee:ef:3a:20:04:30:bb:db:e6:97:49:ff:
                    b5:3a:6e:31:30:f2:6a:45:3e:10:06:50:cd:a7:d7:
                    3b:3c:ba:3c:7c:04:04:a5:8f:d1:57:4f:d8:27:5a:
                    8a:83:c1:57:6f:a6:55:13:ff:ec:6a:54:08:87:77:
                    39:cf:8e:ce:af:7c:d1:d1:3e:f8:94:b4:7e:0b:99:
                    ca:30:36:7c:9b:c9:32:36:9d:5a:e6:1d:01:3b:e0:
                    29:8c:b4:51:69:82:51:d7:6c:36:c1:b8:48:a2:cb:
                    c1:7c:5b:d6:e6:62:c6:22:f6:08:8c:47:a9:20:b6:
                    ab:49:32:2f:03:40:94:06:9a:27:f0:09:18:22:35:
                    43:af:1e:09:a2:54:51:c6:3d:60:05:d3:c8:af:bf:
                    22:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:B7:E0:64:91:D7:88:16:B7:A2:7C:F4:E0:6C:A7:EA:45:51:94:4A
            X509v3 Authority Key Identifier:
                keyid:E0:C9:54:65:38:46:23:D5:11:49:B4:3B:D8:8C:02:CD:AF:39:FC:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F6QMEAScoRfEsVdLYoBW2XQkXUAn19FiRR3ytvxihSgh/0/E0C95465384623D51149B43BD88C02CDAF39FCCD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E0C95465384623D51149B43BD88C02CDAF39FCCD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F6QMEAScoRfEsVdLYoBW2XQkXUAn19FiRR3ytvxihSgh/0/3137392e36332e3137322e302f32332d3233203d3e20323731353636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.63.172.0/23

    Signature Algorithm: sha256WithRSAEncryption
         62:c1:56:f1:68:3c:e0:00:99:91:f6:5d:6a:35:e6:a9:70:f0:
         0b:ec:38:a8:72:56:7b:b6:be:64:67:4d:3c:e7:02:e1:ab:a0:
         ab:b9:b7:37:3c:52:c2:c3:82:0e:df:c8:84:15:9b:94:62:2d:
         86:6e:61:80:45:bb:72:ec:4d:14:b9:04:49:65:f6:44:7b:82:
         e2:23:7e:1e:0a:79:7f:e5:8b:3c:58:3a:b6:cd:1c:c4:fc:2e:
         06:8c:24:b4:1a:1e:c9:08:22:30:72:01:14:06:d0:86:d3:5d:
         b7:23:70:be:ca:b5:47:ac:7a:a0:1f:e2:c8:70:26:22:5d:c2:
         63:4d:86:fa:1e:05:72:1d:78:a6:47:0f:4b:10:88:75:c0:d0:
         4f:da:60:9c:7d:bf:63:d1:8d:e2:06:6d:72:91:6a:3f:13:a6:
         d8:a8:35:eb:e0:43:19:28:73:9b:3c:3c:7f:85:3b:ce:01:ea:
         77:b4:2f:c9:36:34:38:0d:a4:68:88:1b:43:cc:fa:0a:a4:a5:
         c1:84:07:4f:7b:f3:52:ae:49:63:2f:11:3b:c9:98:7a:08:82:
         e8:60:a1:5e:2a:a0:3c:47:8c:aa:37:5c:45:2f:d0:f3:9a:21:
         b1:e4:21:f2:2e:2d:17:f6:81:67:3c:76:93:ba:a9:ac:7a:dc:
         17:69:ef:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:32:20 2025 by rpki-client