Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GnGeDD2bgbNQJgdEZvkwKLdHrogsJhjmzzx95ERJtFiu/1/3137392e3130372e34382e302f32322d3234203d3e20323633323834.roa
File:                     3137392e3130372e34382e302f32322d3234203d3e20323633323834.roa (raw, json)
Hash identifier:          ZSMbjQKvGfEQWLPe/3SXwEd8FB5/0j1JaLQcTQDUm7Q=
Subject key identifier:   ED:1C:05:4B:26:2D:5A:1D:FB:EB:56:81:DF:98:4E:BB:DF:3C:C3:16
Certificate issuer:       /CN=99A8F53F3426C983CA87D5D7ACF6AB5E14371554
Certificate serial:       27B9B185212ED6605FCF7ABBCFAF7FDBDC475FFE
Authority key identifier: 99:A8:F5:3F:34:26:C9:83:CA:87:D5:D7:AC:F6:AB:5E:14:37:15:54
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99A8F53F3426C983CA87D5D7ACF6AB5E14371554.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GnGeDD2bgbNQJgdEZvkwKLdHrogsJhjmzzx95ERJtFiu/1/3137392e3130372e34382e302f32322d3234203d3e20323633323834.roa
Signing time:             Wed 03 Apr 2024 20:00:24 +0000
ROA not before:           Wed 03 Apr 2024 19:55:24 +0000
ROA not after:            Wed 02 Apr 2025 20:00:24 +0000
asID:                     263284
IP address blocks:        179.107.48.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GnGeDD2bgbNQJgdEZvkwKLdHrogsJhjmzzx95ERJtFiu/1/99A8F53F3426C983CA87D5D7ACF6AB5E14371554.crl
                          rsync://rpki-repo.registro.br/repo/GnGeDD2bgbNQJgdEZvkwKLdHrogsJhjmzzx95ERJtFiu/1/99A8F53F3426C983CA87D5D7ACF6AB5E14371554.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99A8F53F3426C983CA87D5D7ACF6AB5E14371554.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 11:19:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:b9:b1:85:21:2e:d6:60:5f:cf:7a:bb:cf:af:7f:db:dc:47:5f:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99A8F53F3426C983CA87D5D7ACF6AB5E14371554
        Validity
            Not Before: Apr  3 19:55:24 2024 GMT
            Not After : Apr  2 20:00:24 2025 GMT
        Subject: CN=ED1C054B262D5A1DFBEB5681DF984EBBDF3CC316
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:b4:fb:ce:ae:49:bd:23:9b:ee:9d:0f:a2:7c:
                    db:87:ea:37:4f:68:58:ea:66:16:d6:6f:fe:3e:8f:
                    d9:c0:65:41:47:c8:4f:9e:12:b6:ea:83:ef:65:d0:
                    79:51:5d:8d:ec:9f:be:ed:52:72:f0:f6:fa:4a:ba:
                    f0:f7:9f:54:b6:fe:5d:ea:54:29:c3:1c:4c:c9:84:
                    f7:d7:da:73:eb:15:89:91:88:85:75:11:1e:3e:ba:
                    eb:8b:d9:61:8a:6b:77:b8:36:da:85:87:98:55:0f:
                    20:20:9d:d8:a0:b3:49:6d:10:ec:03:50:97:03:8e:
                    24:1a:27:7b:fb:86:cd:1c:ca:80:2d:07:e6:f0:6a:
                    91:06:0d:59:f5:50:09:d3:c5:fc:2a:4e:35:3d:92:
                    be:86:2c:3c:9f:85:0d:e1:83:82:43:ad:72:d7:a5:
                    7d:72:55:db:2b:ca:62:00:6f:ce:de:53:f5:41:75:
                    71:c0:45:37:5e:20:94:27:6b:a7:8d:fc:df:eb:b1:
                    77:9c:de:4b:0e:a3:cb:b9:56:4d:95:c5:ce:0f:1a:
                    ed:e9:50:6a:fc:1f:37:f1:9a:5c:02:4e:de:56:b1:
                    7d:7b:83:da:ae:07:aa:7b:27:ad:d0:50:2c:90:ab:
                    c7:1c:44:72:2d:86:7a:bd:b7:3c:0a:74:6a:2d:eb:
                    7f:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:1C:05:4B:26:2D:5A:1D:FB:EB:56:81:DF:98:4E:BB:DF:3C:C3:16
            X509v3 Authority Key Identifier:
                keyid:99:A8:F5:3F:34:26:C9:83:CA:87:D5:D7:AC:F6:AB:5E:14:37:15:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GnGeDD2bgbNQJgdEZvkwKLdHrogsJhjmzzx95ERJtFiu/1/99A8F53F3426C983CA87D5D7ACF6AB5E14371554.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99A8F53F3426C983CA87D5D7ACF6AB5E14371554.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GnGeDD2bgbNQJgdEZvkwKLdHrogsJhjmzzx95ERJtFiu/1/3137392e3130372e34382e302f32322d3234203d3e20323633323834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.107.48.0/22

    Signature Algorithm: sha256WithRSAEncryption
         04:6e:16:b8:d6:3d:d8:62:da:a0:1d:03:ec:c1:bb:54:1c:f4:
         38:0b:ec:90:83:c9:8c:64:02:4b:bd:86:b6:39:db:6e:db:2f:
         19:ad:a6:c4:94:28:b0:da:83:2c:62:f7:3a:8c:61:ac:f3:ae:
         6e:21:c4:86:8f:f9:26:6d:bd:20:78:10:27:e8:5f:30:7d:d5:
         29:aa:9e:07:b1:ca:04:e4:6b:38:51:a2:fe:c9:0d:20:8e:30:
         8d:ea:f3:a5:6e:a9:a7:f8:46:ed:7f:42:c9:4f:85:c1:ae:8c:
         b0:00:7d:7c:66:bd:7f:6d:0a:da:07:ab:e4:ae:40:4d:2e:8a:
         90:9b:a3:c4:de:6b:d8:40:8c:ef:25:d3:5e:fc:5d:d8:23:ed:
         60:03:ec:80:fd:f1:c9:e6:ed:49:86:19:32:cb:aa:70:4f:85:
         cc:b9:5e:29:f7:d8:4b:d6:56:a6:94:15:15:4b:59:83:1a:6a:
         66:33:ee:aa:a0:4e:49:62:aa:fd:35:67:ab:ee:3d:a9:57:fa:
         e8:6b:93:43:86:12:36:d4:78:64:42:b8:82:c5:1d:97:2a:ad:
         8c:2a:6d:97:d2:35:8b:89:b2:c0:c8:fc:c6:09:19:c8:95:54:
         26:c0:9c:71:4d:1b:0c:b8:a5:47:26:86:86:da:df:23:3d:cb:
         ac:21:4d:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 14:19:53 2024 by rpki-client on console-ams.rpki-client.org