Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HFGrK8RodyYfdZVv2hdamZPzQF6jJiaReZ6nMqdYkEnu/2/3137392e302e36342e302f32322d3234203d3e20323731343539.roa
File:                     3137392e302e36342e302f32322d3234203d3e20323731343539.roa (raw, json)
Hash identifier:          ul2dmw/odzhvhbRdchBbBMjbsCzuqLR1mYBrVGazvEo=
Subject key identifier:   7F:63:58:9D:22:1F:BC:9E:CC:83:43:F5:67:E4:E1:85:30:E8:5C:74
Certificate issuer:       /CN=9B57A6172822ADD9870A24E746B19FCFAD78E2E9
Certificate serial:       71ED0D63A167F8D0E1B405059EF1485DFA8A7110
Authority key identifier: 9B:57:A6:17:28:22:AD:D9:87:0A:24:E7:46:B1:9F:CF:AD:78:E2:E9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9B57A6172822ADD9870A24E746B19FCFAD78E2E9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HFGrK8RodyYfdZVv2hdamZPzQF6jJiaReZ6nMqdYkEnu/2/3137392e302e36342e302f32322d3234203d3e20323731343539.roa
Signing time:             Wed 03 Apr 2024 23:59:56 +0000
ROA not before:           Wed 03 Apr 2024 23:54:56 +0000
ROA not after:            Wed 02 Apr 2025 23:59:56 +0000
asID:                     271459
IP address blocks:        179.0.64.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HFGrK8RodyYfdZVv2hdamZPzQF6jJiaReZ6nMqdYkEnu/2/9B57A6172822ADD9870A24E746B19FCFAD78E2E9.crl
                          rsync://rpki-repo.registro.br/repo/HFGrK8RodyYfdZVv2hdamZPzQF6jJiaReZ6nMqdYkEnu/2/9B57A6172822ADD9870A24E746B19FCFAD78E2E9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9B57A6172822ADD9870A24E746B19FCFAD78E2E9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 18:22:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:ed:0d:63:a1:67:f8:d0:e1:b4:05:05:9e:f1:48:5d:fa:8a:71:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9B57A6172822ADD9870A24E746B19FCFAD78E2E9
        Validity
            Not Before: Apr  3 23:54:56 2024 GMT
            Not After : Apr  2 23:59:56 2025 GMT
        Subject: CN=7F63589D221FBC9ECC8343F567E4E18530E85C74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:60:8d:db:8d:62:61:1e:05:1f:aa:8d:db:99:
                    09:f1:2f:24:3d:52:a5:6c:c7:b8:3d:74:46:ed:74:
                    c8:cf:a6:1c:69:63:da:6b:9c:31:5a:b8:75:d2:53:
                    89:ca:5c:8a:ff:44:fb:59:e0:f5:4a:5d:35:44:ea:
                    26:11:76:95:9b:49:5e:56:5f:ec:3e:aa:10:56:77:
                    7f:65:75:a4:44:d0:2e:42:28:0b:3d:5b:59:05:e4:
                    2a:3d:b5:58:a2:53:3b:52:c3:a0:3b:05:0a:e1:79:
                    65:15:60:15:2d:62:9c:05:97:03:41:f6:96:fb:8c:
                    1f:1c:a9:c3:93:48:13:03:3d:da:93:ab:d1:b5:ff:
                    08:10:e2:c1:43:43:55:87:14:a1:8c:b9:4e:c5:10:
                    87:70:32:0c:fd:fe:1c:9d:71:dd:41:48:b1:c6:53:
                    5f:86:5d:85:16:bb:fd:05:d9:7e:40:ac:2d:2b:1a:
                    e8:fb:87:ec:72:8d:54:70:f6:ee:68:c4:cf:f2:91:
                    50:27:fe:f7:d5:00:2f:e6:ba:8e:5c:c2:3e:f5:fd:
                    a6:47:fe:b3:4e:92:92:05:6f:9b:6f:3a:28:7a:7f:
                    5b:13:ca:5e:e1:b4:65:16:5d:4d:9b:46:35:6c:f9:
                    c1:cb:36:80:76:13:8f:6b:d4:3f:03:ff:c2:1f:f8:
                    15:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:63:58:9D:22:1F:BC:9E:CC:83:43:F5:67:E4:E1:85:30:E8:5C:74
            X509v3 Authority Key Identifier:
                keyid:9B:57:A6:17:28:22:AD:D9:87:0A:24:E7:46:B1:9F:CF:AD:78:E2:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HFGrK8RodyYfdZVv2hdamZPzQF6jJiaReZ6nMqdYkEnu/2/9B57A6172822ADD9870A24E746B19FCFAD78E2E9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9B57A6172822ADD9870A24E746B19FCFAD78E2E9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HFGrK8RodyYfdZVv2hdamZPzQF6jJiaReZ6nMqdYkEnu/2/3137392e302e36342e302f32322d3234203d3e20323731343539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.0.64.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8d:b8:77:a4:4a:72:83:2c:09:8f:d0:0b:6d:1a:4e:3a:1a:b3:
         92:ac:cd:60:29:94:0a:82:a4:3d:2b:dd:1b:22:1d:f1:ed:6d:
         b2:5c:71:18:94:3f:e1:f5:74:ef:04:e1:c2:80:26:38:e0:f4:
         05:02:30:f4:a7:ef:9b:24:e2:7e:78:01:d8:90:59:e2:29:94:
         80:10:52:63:47:d0:78:75:ee:07:6c:24:1e:89:1e:5b:fe:af:
         de:76:c3:f8:39:2f:ba:54:f0:11:8a:13:36:3b:28:9a:69:f9:
         2d:57:e5:9e:84:43:b6:3f:24:ec:4b:11:b4:e9:ee:3f:04:f6:
         0c:b1:90:27:b2:91:2d:a0:1c:93:54:4b:0a:9b:28:94:c4:3f:
         36:2d:6c:4b:34:54:7f:99:89:3b:cf:d7:fa:c2:92:92:46:68:
         ab:db:30:71:4b:0c:e0:bb:1a:1a:51:aa:ab:15:fd:5a:12:9e:
         82:2c:8d:a5:7e:c0:e8:3a:af:b5:7a:c7:b5:de:50:f0:4a:b7:
         50:6a:35:7d:81:e9:e1:d3:c1:b9:4f:e0:08:bf:91:55:e0:de:
         7d:2b:c0:0d:12:06:14:f2:ef:a2:35:09:2d:af:36:31:a5:7d:
         cf:88:a8:26:f2:f7:9b:c0:03:8c:35:2c:23:98:ff:e0:a9:57:
         3b:b8:d7:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 19:18:12 2024 by rpki-client on console-fra.rpki-client.org