Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/F9JBDm1hGNHTES2dRhxb3aykNkYMwFJcsrQ1B9bv1f6J/1/3137392e36332e3131362e302f32322d3235203d3e20323731353434.roa
File:                     3137392e36332e3131362e302f32322d3235203d3e20323731353434.roa (raw, json)
Hash identifier:          PE8+/SO2xnGL9NV78ISJZpGT5DP3czRnuvACmpNGL8c=
Subject key identifier:   07:7A:83:9F:95:1F:B8:05:9C:4E:5A:F1:B5:71:EF:80:91:E8:B7:C3
Certificate issuer:       /CN=F1C6B7C46075B4144C904B5F483EC1FC29F974FE
Certificate serial:       26AFCDF00D0511D4EADC0CBAEE19E87231E933DD
Authority key identifier: F1:C6:B7:C4:60:75:B4:14:4C:90:4B:5F:48:3E:C1:FC:29:F9:74:FE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F1C6B7C46075B4144C904B5F483EC1FC29F974FE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F9JBDm1hGNHTES2dRhxb3aykNkYMwFJcsrQ1B9bv1f6J/1/3137392e36332e3131362e302f32322d3235203d3e20323731353434.roa
Signing time:             Thu 04 Apr 2024 02:09:38 +0000
ROA not before:           Thu 04 Apr 2024 02:04:38 +0000
ROA not after:            Thu 03 Apr 2025 02:09:38 +0000
asID:                     271544
IP address blocks:        179.63.116.0/22 maxlen: 25

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/F9JBDm1hGNHTES2dRhxb3aykNkYMwFJcsrQ1B9bv1f6J/1/F1C6B7C46075B4144C904B5F483EC1FC29F974FE.crl
                          rsync://rpki-repo.registro.br/repo/F9JBDm1hGNHTES2dRhxb3aykNkYMwFJcsrQ1B9bv1f6J/1/F1C6B7C46075B4144C904B5F483EC1FC29F974FE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F1C6B7C46075B4144C904B5F483EC1FC29F974FE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 17:38:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:af:cd:f0:0d:05:11:d4:ea:dc:0c:ba:ee:19:e8:72:31:e9:33:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F1C6B7C46075B4144C904B5F483EC1FC29F974FE
        Validity
            Not Before: Apr  4 02:04:38 2024 GMT
            Not After : Apr  3 02:09:38 2025 GMT
        Subject: CN=077A839F951FB8059C4E5AF1B571EF8091E8B7C3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:93:e4:c3:fe:bc:9d:ac:97:5f:7d:7f:f9:1d:
                    5e:83:10:3d:0e:6c:0e:84:ba:df:05:ac:28:e3:e8:
                    e8:63:73:c4:55:1e:27:5b:0a:1c:aa:64:61:66:17:
                    2c:9f:45:8e:fd:e8:e8:96:3d:8f:62:6f:d2:40:12:
                    a9:0a:25:01:3f:04:d2:5e:86:91:0f:cf:96:80:12:
                    b0:69:f2:80:ea:d7:f4:5e:53:1a:32:9d:45:a9:4c:
                    70:fd:36:26:48:d3:d2:4c:4a:3c:b1:3e:a9:31:84:
                    cc:c5:50:c5:19:d3:1a:13:02:9c:d2:e4:e3:45:31:
                    bd:c4:a7:5a:14:2e:1a:f4:df:cd:20:e7:c2:21:d8:
                    5b:ee:14:69:21:7d:5a:b8:e4:52:9e:43:26:2a:d8:
                    fb:3c:e9:77:f0:bd:1f:31:b8:37:09:a1:b1:4b:de:
                    af:df:7d:92:6c:e4:6c:30:77:18:c0:7b:7d:f0:79:
                    31:9e:17:78:dd:84:0e:de:56:50:bd:00:a9:d8:84:
                    24:fa:50:3c:e7:0d:b7:fb:a5:20:20:9d:48:e3:a8:
                    13:1f:9d:90:ab:7f:dd:89:ab:17:86:40:64:78:31:
                    a1:09:37:92:11:9a:96:ad:4c:bf:32:23:f9:7f:8b:
                    c2:50:96:38:8f:56:8e:e1:7b:48:6e:70:ad:da:20:
                    fd:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:7A:83:9F:95:1F:B8:05:9C:4E:5A:F1:B5:71:EF:80:91:E8:B7:C3
            X509v3 Authority Key Identifier:
                keyid:F1:C6:B7:C4:60:75:B4:14:4C:90:4B:5F:48:3E:C1:FC:29:F9:74:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F9JBDm1hGNHTES2dRhxb3aykNkYMwFJcsrQ1B9bv1f6J/1/F1C6B7C46075B4144C904B5F483EC1FC29F974FE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F1C6B7C46075B4144C904B5F483EC1FC29F974FE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F9JBDm1hGNHTES2dRhxb3aykNkYMwFJcsrQ1B9bv1f6J/1/3137392e36332e3131362e302f32322d3235203d3e20323731353434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.63.116.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9a:e4:a0:dc:0d:bb:57:9f:95:31:ab:5b:ef:9c:e7:ab:44:cb:
         b1:a7:ea:ee:5c:14:63:c5:4c:af:cd:78:1c:96:f5:a8:79:30:
         b3:58:5a:8f:29:2d:ff:dd:84:22:10:d4:bf:21:a1:3e:7b:d0:
         ce:e0:a5:ec:c9:dc:f2:4b:ad:1a:8a:01:c3:fd:e0:b8:d6:8f:
         74:30:8c:2e:5f:5a:7d:89:5b:17:00:a0:86:05:4c:50:5b:5e:
         a8:0e:ec:1d:83:8f:b7:4a:4e:28:f8:c8:10:65:56:31:f9:0c:
         06:fa:05:32:69:7b:ee:68:66:34:ec:5e:45:4c:04:06:e5:16:
         28:8b:90:a8:ad:d1:7d:60:37:a2:1e:65:a7:88:60:28:34:b9:
         5b:c5:27:33:a0:1e:dd:fa:5f:01:56:d4:5b:05:db:73:2a:ed:
         44:5d:11:3b:5d:87:85:b8:91:d5:33:ae:6e:52:9e:80:67:c1:
         37:31:eb:e0:41:e6:14:12:b0:2e:90:d3:77:4e:77:9b:20:97:
         b0:28:dc:8c:f9:90:f3:db:b9:1a:e9:02:dd:72:5e:df:c5:59:
         62:61:eb:45:d1:83:d3:72:ee:19:c5:aa:bc:2d:97:0d:6b:78:
         ef:ee:4e:16:c6:d9:85:b0:60:0a:2d:f2:5a:8c:7e:b7:8a:e6:
         89:21:b1:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 17:50:32 2024 by rpki-client on console-fra.rpki-client.org