Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FMSn9xbTQM2cUWMT9DnB3LNGWKMFUwQmSjqtTHmTyp5G/1/3137392e34392e3234342e302f32322d3234203d3e20323731323230.roa
File:                     3137392e34392e3234342e302f32322d3234203d3e20323731323230.roa (raw, json)
Hash identifier:          mk8QUu3WbXk7LSfxX8zoIto0YHlBQqOakmttNm8IRJw=
Subject key identifier:   02:D3:CF:83:41:B2:29:A3:26:61:94:F2:BB:1F:D3:41:ED:C6:AF:8B
Certificate issuer:       /CN=56270EA333BF00580A15474FAE7DE9C32E6CF849
Certificate serial:       335941F3DFAC847897203DDB1D8A15E03150325E
Authority key identifier: 56:27:0E:A3:33:BF:00:58:0A:15:47:4F:AE:7D:E9:C3:2E:6C:F8:49
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/56270EA333BF00580A15474FAE7DE9C32E6CF849.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FMSn9xbTQM2cUWMT9DnB3LNGWKMFUwQmSjqtTHmTyp5G/1/3137392e34392e3234342e302f32322d3234203d3e20323731323230.roa
Signing time:             Thu 04 Apr 2024 01:51:24 +0000
ROA not before:           Thu 04 Apr 2024 01:46:24 +0000
ROA not after:            Thu 03 Apr 2025 01:51:24 +0000
asID:                     271220
IP address blocks:        179.49.244.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FMSn9xbTQM2cUWMT9DnB3LNGWKMFUwQmSjqtTHmTyp5G/1/56270EA333BF00580A15474FAE7DE9C32E6CF849.crl
                          rsync://rpki-repo.registro.br/repo/FMSn9xbTQM2cUWMT9DnB3LNGWKMFUwQmSjqtTHmTyp5G/1/56270EA333BF00580A15474FAE7DE9C32E6CF849.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/56270EA333BF00580A15474FAE7DE9C32E6CF849.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 12:45:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:59:41:f3:df:ac:84:78:97:20:3d:db:1d:8a:15:e0:31:50:32:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56270EA333BF00580A15474FAE7DE9C32E6CF849
        Validity
            Not Before: Apr  4 01:46:24 2024 GMT
            Not After : Apr  3 01:51:24 2025 GMT
        Subject: CN=02D3CF8341B229A3266194F2BB1FD341EDC6AF8B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:eb:c2:d1:f0:8a:0f:c7:fc:74:2d:99:6a:71:
                    b3:1d:4e:39:1d:a2:74:16:1e:72:12:45:e4:f7:62:
                    2c:e5:30:6f:d1:ee:57:4b:64:c5:89:08:a5:6c:ee:
                    85:4d:99:af:45:85:7b:01:1b:c8:14:4f:64:ea:f1:
                    41:bf:fb:72:c7:3b:8e:e1:d6:b7:01:18:40:b6:3f:
                    a8:94:df:8e:f0:ce:e7:95:5c:ef:6c:dc:e6:5e:8f:
                    6f:28:16:ca:16:68:8e:07:6d:0b:93:77:a6:ef:46:
                    8d:f6:1a:93:31:24:b5:18:b6:49:77:6b:48:a0:ae:
                    82:26:55:20:37:80:f9:83:1e:92:1c:be:71:54:3a:
                    2a:cc:0e:1c:c1:26:14:4a:48:23:c2:89:4f:47:7c:
                    60:83:d1:94:05:38:a0:7b:56:2d:16:ab:8e:41:57:
                    79:ea:e6:c9:e5:76:db:91:d5:04:06:03:6b:0a:02:
                    e7:f6:f3:b2:2a:6a:a5:5e:18:d8:92:3e:13:7e:a0:
                    31:d1:5e:c6:cf:78:64:bc:44:64:a0:5c:02:08:fa:
                    f3:86:9e:48:ce:2a:7e:f8:3a:e7:21:22:71:8a:db:
                    2a:ba:9b:1d:c4:89:3e:72:68:e5:9a:26:5a:ed:aa:
                    0a:44:4c:bf:89:9d:b3:3e:24:f4:b2:0e:cd:79:1c:
                    fe:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:D3:CF:83:41:B2:29:A3:26:61:94:F2:BB:1F:D3:41:ED:C6:AF:8B
            X509v3 Authority Key Identifier:
                keyid:56:27:0E:A3:33:BF:00:58:0A:15:47:4F:AE:7D:E9:C3:2E:6C:F8:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FMSn9xbTQM2cUWMT9DnB3LNGWKMFUwQmSjqtTHmTyp5G/1/56270EA333BF00580A15474FAE7DE9C32E6CF849.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/56270EA333BF00580A15474FAE7DE9C32E6CF849.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FMSn9xbTQM2cUWMT9DnB3LNGWKMFUwQmSjqtTHmTyp5G/1/3137392e34392e3234342e302f32322d3234203d3e20323731323230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.49.244.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0a:18:0a:25:f8:6d:fc:13:14:53:15:13:29:b1:4d:99:5c:37:
         72:83:8d:f0:61:4e:52:d1:d7:8a:e4:bc:8a:ec:c5:f9:f1:48:
         d1:60:40:72:d2:30:08:5a:45:78:2e:35:eb:a2:57:81:24:34:
         6a:3e:8a:cd:29:14:d2:8b:b2:72:1e:8c:92:90:38:2f:d6:2b:
         ea:e6:7e:5c:a3:41:ef:f8:8c:aa:65:8f:07:d2:95:26:79:ad:
         bf:12:73:d6:8d:35:0d:a0:d0:4d:bd:18:bc:9d:74:f6:37:e8:
         b5:33:7c:85:be:7c:79:72:6e:79:f8:16:8b:4a:76:c9:b2:ce:
         db:84:eb:33:d6:00:f1:cd:b0:69:ac:00:f7:61:d9:e8:ff:28:
         63:48:ea:36:cd:19:4e:26:6d:4b:d3:50:fa:7f:70:66:b3:49:
         b7:e5:48:1b:32:7c:df:11:45:76:3f:d7:73:05:4d:4f:84:58:
         5a:85:0d:22:d1:53:0a:66:b3:08:92:5b:48:9a:0b:a0:6c:62:
         55:4e:15:fa:3e:29:ce:ba:08:a5:bd:9c:b2:c1:aa:d2:18:fa:
         f3:11:8d:80:bb:4a:01:56:6b:02:78:11:a0:05:40:42:ab:7c:
         66:7e:80:68:60:70:81:70:df:de:f8:7f:6b:9e:9f:d0:90:69:
         2d:6d:3f:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 14:26:58 2024 by rpki-client on console-ams.rpki-client.org