Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FREdJF4yi4hsAuQzKaMr9dzAcATExnskfh3Zq4a1aASR/0/3137392e302e3131372e302f32342d3234203d3e20323731333235.roa
File:                     3137392e302e3131372e302f32342d3234203d3e20323731333235.roa (raw, json)
Hash identifier:          4/of49dMNH70yMdY4zqYKQgXneen0X8t/l2iKDetnTw=
Subject key identifier:   49:B5:A9:72:45:09:BA:30:43:D9:14:51:87:4D:00:41:98:1B:A3:1C
Certificate issuer:       /CN=09251826C5FE59A1110BFFDB5B8AA13FB9F3AC57
Certificate serial:       5704F4397246C01CF63F646BED3AFFD64192A21F
Authority key identifier: 09:25:18:26:C5:FE:59:A1:11:0B:FF:DB:5B:8A:A1:3F:B9:F3:AC:57
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/09251826C5FE59A1110BFFDB5B8AA13FB9F3AC57.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FREdJF4yi4hsAuQzKaMr9dzAcATExnskfh3Zq4a1aASR/0/3137392e302e3131372e302f32342d3234203d3e20323731333235.roa
Signing time:             Fri 16 Aug 2024 01:57:17 +0000
ROA not before:           Fri 16 Aug 2024 01:52:17 +0000
ROA not after:            Fri 15 Aug 2025 01:57:17 +0000
asID:                     271325
IP address blocks:        179.0.117.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FREdJF4yi4hsAuQzKaMr9dzAcATExnskfh3Zq4a1aASR/0/09251826C5FE59A1110BFFDB5B8AA13FB9F3AC57.crl
                          rsync://rpki-repo.registro.br/repo/FREdJF4yi4hsAuQzKaMr9dzAcATExnskfh3Zq4a1aASR/0/09251826C5FE59A1110BFFDB5B8AA13FB9F3AC57.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/09251826C5FE59A1110BFFDB5B8AA13FB9F3AC57.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:04:f4:39:72:46:c0:1c:f6:3f:64:6b:ed:3a:ff:d6:41:92:a2:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09251826C5FE59A1110BFFDB5B8AA13FB9F3AC57
        Validity
            Not Before: Aug 16 01:52:17 2024 GMT
            Not After : Aug 15 01:57:17 2025 GMT
        Subject: CN=49B5A9724509BA3043D91451874D0041981BA31C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:4d:74:b2:e0:f8:00:b9:a2:00:67:26:ae:4e:
                    4b:31:9a:6a:cb:fc:5a:96:42:0b:20:2c:54:8b:74:
                    b1:26:8a:95:6b:73:89:6e:29:fa:ee:7b:36:52:a6:
                    5f:c0:d8:ad:61:26:18:1f:f8:2f:98:c9:52:b0:f2:
                    df:97:a0:b8:fa:74:a0:ca:e0:23:32:96:cb:e2:d5:
                    f8:41:d6:73:24:39:8d:79:b6:99:cc:c0:53:e7:25:
                    d2:0c:d0:f0:11:f0:b8:aa:b9:24:ec:09:c8:88:5a:
                    28:21:8a:8a:30:e2:fb:95:8f:55:2c:73:21:47:7c:
                    e9:1c:22:28:e5:15:f1:30:85:17:57:61:3a:27:ec:
                    50:3c:fe:e6:0f:c0:73:4b:81:f9:5b:49:c3:15:8b:
                    0a:30:23:d6:ae:55:3b:df:05:ce:5b:a5:ba:9c:39:
                    89:31:44:a7:64:62:d5:fb:3f:31:3a:9d:6a:71:f9:
                    80:f7:49:42:2b:87:b4:ee:b7:dd:1d:65:06:a1:f6:
                    8d:4d:e5:d3:ee:ec:26:d7:c5:db:dc:26:a8:0f:2a:
                    c3:3f:37:eb:1d:20:cc:87:3a:1b:d6:45:87:ff:c4:
                    3d:bd:8d:e7:e8:c5:5e:62:73:b2:eb:0e:d0:66:b8:
                    8c:86:30:f5:cb:27:7e:63:4d:76:ff:25:09:ce:d5:
                    e1:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:B5:A9:72:45:09:BA:30:43:D9:14:51:87:4D:00:41:98:1B:A3:1C
            X509v3 Authority Key Identifier:
                keyid:09:25:18:26:C5:FE:59:A1:11:0B:FF:DB:5B:8A:A1:3F:B9:F3:AC:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FREdJF4yi4hsAuQzKaMr9dzAcATExnskfh3Zq4a1aASR/0/09251826C5FE59A1110BFFDB5B8AA13FB9F3AC57.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/09251826C5FE59A1110BFFDB5B8AA13FB9F3AC57.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FREdJF4yi4hsAuQzKaMr9dzAcATExnskfh3Zq4a1aASR/0/3137392e302e3131372e302f32342d3234203d3e20323731333235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.0.117.0/24

    Signature Algorithm: sha256WithRSAEncryption
         96:61:90:16:7f:5a:87:1d:8f:76:e1:1a:65:8b:93:92:03:51:
         78:d7:5a:63:dd:22:d8:b3:98:a2:16:b7:8a:92:b3:c6:22:fd:
         a4:6a:57:00:52:15:32:9c:d9:ff:27:33:53:c8:14:c6:f2:50:
         92:d9:60:e2:d9:9f:67:bc:3c:d6:62:fa:55:ba:09:74:9d:9c:
         9c:14:64:28:ea:26:9f:06:fb:fb:f8:44:c8:76:3f:86:0d:98:
         64:18:05:ee:47:9b:da:0f:e9:a8:ce:84:69:82:b0:45:64:8d:
         ab:cb:2c:5a:05:3b:4b:53:a1:b8:e9:80:0c:65:4d:ee:6f:42:
         8c:cc:8f:e1:ce:68:ee:44:8c:16:b8:cc:dd:d7:9b:a5:f0:26:
         84:d3:31:2c:66:42:65:44:e3:61:c6:ab:33:03:a7:fc:c2:c3:
         41:80:f9:94:49:28:66:35:9f:3d:d9:8e:83:f2:ab:a6:da:2f:
         05:5c:6c:25:15:36:1a:5f:78:e2:dd:27:14:c8:8a:95:60:e8:
         3e:1a:db:bc:08:bc:22:20:24:96:18:4f:5e:f9:18:28:cb:44:
         10:6e:58:d9:e5:7c:34:8b:23:c5:e6:35:02:71:8b:1d:53:e8:
         48:6c:a8:c3:91:f2:e7:61:f9:7e:ae:a2:18:a6:76:51:ec:d4:
         fa:5f:6e:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 14:45:00 2024 by rpki-client on console-ams.rpki-client.org