Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GaLd6ApocDBCeWjwwPnuPuRnkyXPKRC2YTeDdGc4daE4/0/3137392e34322e3130392e302f32342d3234203d3e20323731313530.roa
File:                     3137392e34322e3130392e302f32342d3234203d3e20323731313530.roa (raw, json)
Hash identifier:          H5A/m7cnFVw1+lc+Cs5FeSbp4QgF56Cw7Qzg+hcFbq0=
Subject key identifier:   A6:56:0C:70:99:63:7B:BF:DB:8D:58:0F:C5:60:13:DA:B9:84:23:EE
Certificate issuer:       /CN=B576170C915419B17FE7F1127C766A8859F42C4E
Certificate serial:       4BAE7889859745D4184DCE9B590557E4721D1CB3
Authority key identifier: B5:76:17:0C:91:54:19:B1:7F:E7:F1:12:7C:76:6A:88:59:F4:2C:4E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B576170C915419B17FE7F1127C766A8859F42C4E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GaLd6ApocDBCeWjwwPnuPuRnkyXPKRC2YTeDdGc4daE4/0/3137392e34322e3130392e302f32342d3234203d3e20323731313530.roa
Signing time:             Sun 18 Aug 2024 14:40:08 +0000
ROA not before:           Sun 18 Aug 2024 14:35:08 +0000
ROA not after:            Sun 17 Aug 2025 14:40:08 +0000
asID:                     271150
IP address blocks:        179.42.109.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GaLd6ApocDBCeWjwwPnuPuRnkyXPKRC2YTeDdGc4daE4/0/B576170C915419B17FE7F1127C766A8859F42C4E.crl
                          rsync://rpki-repo.registro.br/repo/GaLd6ApocDBCeWjwwPnuPuRnkyXPKRC2YTeDdGc4daE4/0/B576170C915419B17FE7F1127C766A8859F42C4E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B576170C915419B17FE7F1127C766A8859F42C4E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:ae:78:89:85:97:45:d4:18:4d:ce:9b:59:05:57:e4:72:1d:1c:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B576170C915419B17FE7F1127C766A8859F42C4E
        Validity
            Not Before: Aug 18 14:35:08 2024 GMT
            Not After : Aug 17 14:40:08 2025 GMT
        Subject: CN=A6560C7099637BBFDB8D580FC56013DAB98423EE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:81:c3:db:0f:cb:a7:4f:8b:fa:68:79:a9:0b:
                    3c:71:e2:79:34:df:aa:95:cb:44:68:9b:6e:e5:83:
                    c7:65:15:83:21:3d:31:9b:85:91:8a:63:fc:ae:9a:
                    bf:df:97:2b:cb:61:d4:a9:9f:12:76:c6:ef:de:e7:
                    a8:49:1f:22:0a:4d:b3:86:c8:6b:5f:87:85:cd:2b:
                    99:e9:02:44:0b:5a:d6:81:ae:d2:38:91:70:4d:7d:
                    f5:09:fc:c9:0d:be:c7:5f:d3:18:9c:42:8a:6b:65:
                    25:be:2e:d7:d7:4c:7b:8a:04:2d:36:8e:53:e4:30:
                    e4:72:65:4b:06:f8:4b:4d:89:71:d4:a7:80:06:36:
                    32:1a:77:80:1a:ea:89:69:a4:5a:00:03:6b:d4:94:
                    b1:92:5d:67:bd:57:25:b2:76:68:54:2b:5f:03:a5:
                    9a:a6:21:d5:ad:5f:ce:a8:c0:a3:f9:d5:d4:ea:2f:
                    50:fb:da:05:ed:0c:15:aa:39:5f:49:f5:b8:00:13:
                    c2:b6:b0:76:5b:77:83:66:29:8b:af:27:b4:c5:09:
                    2d:be:a4:21:e7:2c:68:d7:52:d7:6e:92:16:f9:1d:
                    a2:e3:e1:73:52:06:16:bf:19:19:2a:d5:5c:05:f0:
                    8b:34:1b:6f:50:c7:34:70:c4:e7:ea:c2:1a:92:3e:
                    08:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:56:0C:70:99:63:7B:BF:DB:8D:58:0F:C5:60:13:DA:B9:84:23:EE
            X509v3 Authority Key Identifier:
                keyid:B5:76:17:0C:91:54:19:B1:7F:E7:F1:12:7C:76:6A:88:59:F4:2C:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GaLd6ApocDBCeWjwwPnuPuRnkyXPKRC2YTeDdGc4daE4/0/B576170C915419B17FE7F1127C766A8859F42C4E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B576170C915419B17FE7F1127C766A8859F42C4E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GaLd6ApocDBCeWjwwPnuPuRnkyXPKRC2YTeDdGc4daE4/0/3137392e34322e3130392e302f32342d3234203d3e20323731313530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.42.109.0/24

    Signature Algorithm: sha256WithRSAEncryption
         57:d0:20:69:7b:5e:48:ba:b6:ba:36:7e:37:13:b6:c8:91:d5:
         00:38:fa:25:1f:33:e5:63:78:43:03:45:e1:ce:8a:85:0b:9d:
         8d:76:a0:15:a4:79:d0:ef:23:90:dc:40:f4:e1:8b:70:76:52:
         e2:81:d5:c9:da:11:8b:82:f4:8b:8f:04:e1:26:46:1c:bf:7c:
         59:18:01:40:a9:77:9c:8b:b4:7a:3e:72:11:2d:92:31:d4:7e:
         db:3f:27:42:41:0e:41:40:f6:5f:45:22:b4:f1:ce:6e:4a:73:
         35:f9:09:56:d7:24:f8:f8:14:53:4a:a5:15:ca:1d:19:2b:d5:
         09:89:e5:5d:47:d2:90:7f:f2:b5:05:9e:4d:55:76:e9:11:be:
         00:5f:b9:a2:0a:40:1b:f8:86:93:b3:80:b1:71:f0:f5:0a:dd:
         00:55:65:5d:15:df:68:da:95:fe:48:2b:1b:1f:52:a4:07:91:
         3a:1b:68:bc:fd:bb:64:ae:03:e9:3a:b8:ac:27:73:1a:d8:74:
         b0:08:50:4c:ca:b2:7f:28:db:37:53:4e:da:c3:2a:ec:a0:41:
         5b:91:de:79:ee:b8:c2:a3:34:6a:4c:75:04:61:51:b1:fd:c9:
         b5:71:a9:4a:19:b9:b6:bc:da:b4:b5:67:bd:fc:d4:47:04:91:
         cd:4b:30:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 01:25:41 2024 by rpki-client on console-ams.rpki-client.org