Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GaLd6ApocDBCeWjwwPnuPuRnkyXPKRC2YTeDdGc4daE4/0/3137392e34322e3130382e302f32322d3232203d3e20323731313530.roa
File:                     3137392e34322e3130382e302f32322d3232203d3e20323731313530.roa (raw, json)
Hash identifier:          d8FyGc6kOwQ1ZDbWZHRCKouWywaH9rqPu4qWRGAIqbM=
Subject key identifier:   88:3B:4F:F3:27:CB:76:68:2D:66:59:26:EA:55:90:9E:0F:A4:DA:AD
Certificate issuer:       /CN=B576170C915419B17FE7F1127C766A8859F42C4E
Certificate serial:       38DD2BE633347E10172EE1C09EA947BD0C6D9C86
Authority key identifier: B5:76:17:0C:91:54:19:B1:7F:E7:F1:12:7C:76:6A:88:59:F4:2C:4E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B576170C915419B17FE7F1127C766A8859F42C4E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GaLd6ApocDBCeWjwwPnuPuRnkyXPKRC2YTeDdGc4daE4/0/3137392e34322e3130382e302f32322d3232203d3e20323731313530.roa
Signing time:             Sun 18 Aug 2024 14:47:42 +0000
ROA not before:           Sun 18 Aug 2024 14:42:42 +0000
ROA not after:            Sun 17 Aug 2025 14:47:42 +0000
asID:                     271150
IP address blocks:        179.42.108.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GaLd6ApocDBCeWjwwPnuPuRnkyXPKRC2YTeDdGc4daE4/0/B576170C915419B17FE7F1127C766A8859F42C4E.crl
                          rsync://rpki-repo.registro.br/repo/GaLd6ApocDBCeWjwwPnuPuRnkyXPKRC2YTeDdGc4daE4/0/B576170C915419B17FE7F1127C766A8859F42C4E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B576170C915419B17FE7F1127C766A8859F42C4E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 17:40:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:dd:2b:e6:33:34:7e:10:17:2e:e1:c0:9e:a9:47:bd:0c:6d:9c:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B576170C915419B17FE7F1127C766A8859F42C4E
        Validity
            Not Before: Aug 18 14:42:42 2024 GMT
            Not After : Aug 17 14:47:42 2025 GMT
        Subject: CN=883B4FF327CB76682D665926EA55909E0FA4DAAD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:89:36:17:af:38:21:c8:86:ec:84:78:01:b8:
                    1e:6e:30:3f:d0:1b:9a:f6:99:e8:1a:2f:98:1e:f4:
                    1e:20:59:2f:b8:90:01:43:27:ee:b2:ef:05:83:4d:
                    c3:6c:4e:7c:a3:5a:54:99:6d:79:09:9f:d5:bb:94:
                    dd:77:10:26:dc:d6:70:b3:d5:f8:82:ce:90:ed:21:
                    22:1d:ba:20:e8:26:54:50:e8:17:e3:f3:db:a3:5c:
                    df:d4:88:82:6f:26:94:13:72:62:56:27:eb:24:a3:
                    e2:fa:09:ab:0b:85:78:41:0e:18:2a:f2:87:40:86:
                    2a:c0:46:f8:be:59:1f:ee:1b:c6:e6:95:7c:ea:18:
                    84:5c:38:ac:1b:4f:cf:0d:65:3e:01:36:8f:b8:7c:
                    7b:ec:24:0b:c6:be:be:68:86:a1:c1:0f:78:3f:9c:
                    31:c0:bb:ed:20:82:9c:2c:53:21:fd:88:72:69:cf:
                    f0:1a:e9:94:fd:2d:a2:58:8a:26:f3:20:72:e1:4c:
                    5c:6a:bc:a4:b6:12:e7:8c:96:cd:f5:26:55:ad:2c:
                    0a:b1:7b:65:3e:2c:4b:39:a5:bd:01:9c:ea:c6:1f:
                    77:00:fa:49:93:a8:29:fd:34:34:8e:68:e5:6a:5e:
                    57:5b:eb:d5:84:c8:7e:87:6e:b4:f7:8b:45:81:52:
                    d5:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:3B:4F:F3:27:CB:76:68:2D:66:59:26:EA:55:90:9E:0F:A4:DA:AD
            X509v3 Authority Key Identifier:
                keyid:B5:76:17:0C:91:54:19:B1:7F:E7:F1:12:7C:76:6A:88:59:F4:2C:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GaLd6ApocDBCeWjwwPnuPuRnkyXPKRC2YTeDdGc4daE4/0/B576170C915419B17FE7F1127C766A8859F42C4E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B576170C915419B17FE7F1127C766A8859F42C4E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GaLd6ApocDBCeWjwwPnuPuRnkyXPKRC2YTeDdGc4daE4/0/3137392e34322e3130382e302f32322d3232203d3e20323731313530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.42.108.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8f:fb:61:72:9e:cb:e4:65:09:53:ab:bb:22:82:48:9e:eb:31:
         47:12:28:6c:c2:4b:4a:71:7a:27:63:b2:c8:c7:16:39:d6:11:
         78:69:36:43:02:85:a3:fa:81:0f:70:dc:a5:1f:aa:4c:82:f1:
         a5:22:db:9b:0e:ae:41:13:fb:cb:44:dc:5f:6a:43:d0:9c:ad:
         63:3b:09:06:22:49:be:04:36:4f:2a:99:9f:91:28:ba:2b:c2:
         9f:a1:08:5b:1b:9d:28:20:71:b2:54:9d:72:83:d5:25:94:13:
         45:12:1d:e1:6c:9f:3b:f1:85:b9:e6:88:e1:17:3b:d5:7a:f0:
         aa:a6:b8:2f:38:54:71:93:33:cd:fa:79:d5:e9:6d:b6:46:af:
         f1:dd:c5:b5:ac:08:b9:d2:05:35:7f:ad:69:0d:9f:18:f2:7e:
         bb:63:87:95:92:01:d3:41:af:3f:40:04:50:86:1a:4b:66:25:
         1a:0f:54:e6:78:1e:6c:2d:1a:58:4a:53:e8:45:ee:84:a7:f4:
         de:6c:ad:72:4e:a7:a5:ca:37:ca:8f:ff:03:21:40:a2:1b:ec:
         ab:f1:56:d8:51:12:d2:e3:cf:76:ff:aa:e9:5b:f9:a9:31:d4:
         63:ee:c2:f1:50:52:d1:0d:0b:2a:5f:b5:04:7a:54:ce:5e:05:
         a2:6d:63:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 17:32:00 2024 by rpki-client on console-fra.rpki-client.org