Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H3DFxouR7EKGTRz3ZbfSBuhy24PPqubYwrXeQT6GURG5/0/3137392e34382e37362e302f32322d3234203d3e20323731313136.roa
File:                     3137392e34382e37362e302f32322d3234203d3e20323731313136.roa (raw, json)
Hash identifier:          5HpdiiE4pEXn6e4wol1K+ngSH2zdRQdR+ogeNDVW5Rk=
Subject key identifier:   6E:EA:D7:A5:EF:94:7C:DD:E8:E5:38:8E:E0:AF:D4:03:CD:92:33:AE
Certificate issuer:       /CN=278075463571E15A322ACDFA4EA429CD983E3EFB
Certificate serial:       2BBC32A256A685F74343DAD208031F8334AF9EBE
Authority key identifier: 27:80:75:46:35:71:E1:5A:32:2A:CD:FA:4E:A4:29:CD:98:3E:3E:FB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/278075463571E15A322ACDFA4EA429CD983E3EFB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H3DFxouR7EKGTRz3ZbfSBuhy24PPqubYwrXeQT6GURG5/0/3137392e34382e37362e302f32322d3234203d3e20323731313136.roa
Signing time:             Wed 10 Jul 2024 15:04:16 +0000
ROA not before:           Wed 10 Jul 2024 14:59:16 +0000
ROA not after:            Wed 09 Jul 2025 15:04:16 +0000
asID:                     271116
IP address blocks:        179.48.76.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/H3DFxouR7EKGTRz3ZbfSBuhy24PPqubYwrXeQT6GURG5/0/278075463571E15A322ACDFA4EA429CD983E3EFB.crl
                          rsync://rpki-repo.registro.br/repo/H3DFxouR7EKGTRz3ZbfSBuhy24PPqubYwrXeQT6GURG5/0/278075463571E15A322ACDFA4EA429CD983E3EFB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/278075463571E15A322ACDFA4EA429CD983E3EFB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 18 Feb 2025 18:30:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:bc:32:a2:56:a6:85:f7:43:43:da:d2:08:03:1f:83:34:af:9e:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278075463571E15A322ACDFA4EA429CD983E3EFB
        Validity
            Not Before: Jul 10 14:59:16 2024 GMT
            Not After : Jul  9 15:04:16 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:57:d7:fe:4d:1d:5e:66:c0:1c:f3:2c:07:8c:
                    f0:57:af:ea:ad:87:0b:9a:0b:2c:ed:29:64:e0:5a:
                    7f:32:b9:6d:27:a6:63:fc:23:34:24:c7:49:79:60:
                    14:1b:2d:8c:ce:61:62:d3:ee:c1:02:1e:55:12:77:
                    c2:17:98:c8:01:09:04:40:42:d8:33:83:70:03:37:
                    a2:a9:ec:bb:ca:e2:7f:de:32:50:e2:05:57:33:db:
                    41:13:b2:4d:c3:d8:5f:10:02:2c:6a:64:de:e4:aa:
                    88:de:f5:ff:15:28:d6:29:bb:24:fd:b3:6f:30:7d:
                    7d:a5:20:ff:9e:7d:bb:1a:1c:fb:9c:5d:e5:99:d3:
                    46:bb:dd:3e:2b:d2:9d:29:8a:d0:7d:92:a1:af:fb:
                    72:19:ad:3f:d3:38:2e:9c:1e:3f:28:57:4a:7b:4f:
                    c5:c4:1e:71:ee:e3:55:6d:6e:54:3e:1c:52:b4:d9:
                    78:ac:b1:40:ba:21:c0:5c:8f:2c:36:6d:70:8d:e2:
                    dd:c3:d1:f0:b0:ed:23:4c:10:c7:99:f3:fa:94:52:
                    4b:c6:a6:0b:31:8c:29:b9:f3:62:56:85:ad:69:6b:
                    bb:fd:3c:88:91:e4:4c:c1:2f:af:fb:df:60:17:5a:
                    22:ac:d5:f8:88:84:cc:a4:67:8a:7a:2f:de:1d:af:
                    86:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:EA:D7:A5:EF:94:7C:DD:E8:E5:38:8E:E0:AF:D4:03:CD:92:33:AE
            X509v3 Authority Key Identifier:
                keyid:27:80:75:46:35:71:E1:5A:32:2A:CD:FA:4E:A4:29:CD:98:3E:3E:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H3DFxouR7EKGTRz3ZbfSBuhy24PPqubYwrXeQT6GURG5/0/278075463571E15A322ACDFA4EA429CD983E3EFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/278075463571E15A322ACDFA4EA429CD983E3EFB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H3DFxouR7EKGTRz3ZbfSBuhy24PPqubYwrXeQT6GURG5/0/3137392e34382e37362e302f32322d3234203d3e20323731313136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.48.76.0/22

    Signature Algorithm: sha256WithRSAEncryption
         bc:e3:93:df:e0:ab:3d:27:90:bc:6c:cc:0d:68:3e:80:93:f1:
         32:3b:c9:5a:38:17:51:1b:37:09:19:bb:0d:20:cd:70:8d:47:
         c6:32:9f:1b:d1:13:a4:79:77:e5:7f:59:30:41:bc:17:ee:4e:
         72:d0:ee:ee:57:dd:b1:5f:5d:3a:35:18:c2:0b:3f:07:e2:9f:
         82:98:24:e4:3b:cc:81:97:9b:33:37:a7:cf:6a:18:14:5f:33:
         f6:37:99:88:47:63:82:3c:d2:12:a1:91:ec:1b:0d:f3:5f:4e:
         e8:d6:e0:4d:92:96:1f:55:34:59:3e:46:06:20:0e:37:2f:b3:
         e7:47:41:81:f5:62:ee:93:d9:f6:f6:1b:a4:85:c0:f7:5f:a9:
         52:86:86:b2:3b:e4:12:2e:9a:65:23:51:86:ac:9b:ed:22:3d:
         88:5d:57:06:86:98:46:33:94:a9:2d:ef:be:6e:87:49:a5:b1:
         d0:85:05:26:6c:f2:a6:fa:7b:f4:cd:82:50:2d:58:82:a9:b8:
         ea:2c:f5:51:f8:66:a2:2e:6d:9a:31:b6:10:32:17:42:c1:14:
         7c:1b:27:21:9d:27:3d:40:cc:cd:41:a2:20:d3:ed:43:88:9d:
         ad:ad:22:40:e0:4b:08:a8:3d:b8:30:ba:cb:bf:91:a0:80:8e:
         37:07:89:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:40:51 2025 by rpki-client