Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HeYJ3oZKSkUEgnChRtwvA2R9WhgmWFbL8k5M1TSyzXHD/1/3137392e34322e37302e302f32332d3332203d3e20323731313330.roa
File:                     3137392e34322e37302e302f32332d3332203d3e20323731313330.roa (raw, json)
Hash identifier:          kSc9E9C0E5PBgKTd+hlHNhqEsIynSw9mI4uhQwqmowU=
Subject key identifier:   39:58:2B:A3:77:44:68:00:17:BF:8C:FA:2A:04:B8:45:CA:D5:F0:73
Certificate issuer:       /CN=E8152E596079B8640CD4A49A76E332DB59F626EF
Certificate serial:       1146A394C8044AA339DDA03D006BFA6FBAA9714A
Authority key identifier: E8:15:2E:59:60:79:B8:64:0C:D4:A4:9A:76:E3:32:DB:59:F6:26:EF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E8152E596079B8640CD4A49A76E332DB59F626EF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HeYJ3oZKSkUEgnChRtwvA2R9WhgmWFbL8k5M1TSyzXHD/1/3137392e34322e37302e302f32332d3332203d3e20323731313330.roa
Signing time:             Thu 04 Apr 2024 05:33:50 +0000
ROA not before:           Thu 04 Apr 2024 05:28:50 +0000
ROA not after:            Thu 03 Apr 2025 05:33:50 +0000
asID:                     271130
IP address blocks:        179.42.70.0/23 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HeYJ3oZKSkUEgnChRtwvA2R9WhgmWFbL8k5M1TSyzXHD/1/E8152E596079B8640CD4A49A76E332DB59F626EF.crl
                          rsync://rpki-repo.registro.br/repo/HeYJ3oZKSkUEgnChRtwvA2R9WhgmWFbL8k5M1TSyzXHD/1/E8152E596079B8640CD4A49A76E332DB59F626EF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E8152E596079B8640CD4A49A76E332DB59F626EF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:46:a3:94:c8:04:4a:a3:39:dd:a0:3d:00:6b:fa:6f:ba:a9:71:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E8152E596079B8640CD4A49A76E332DB59F626EF
        Validity
            Not Before: Apr  4 05:28:50 2024 GMT
            Not After : Apr  3 05:33:50 2025 GMT
        Subject: CN=39582BA37744680017BF8CFA2A04B845CAD5F073
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:67:a6:c5:4d:82:ee:6b:be:b2:35:7f:9a:c7:
                    f1:d1:ed:e4:1d:c4:5c:5d:01:fc:70:fc:cf:f8:de:
                    93:4e:11:43:79:c5:31:76:4d:fb:19:b5:77:37:e0:
                    1a:43:a3:77:4b:0d:1e:6b:9a:f9:70:4f:4f:ae:7c:
                    22:82:9f:49:1d:cd:6d:5d:9b:90:68:a4:b2:99:7e:
                    59:eb:11:9b:cd:66:79:73:75:9b:98:58:d8:ae:d9:
                    fd:73:ce:c6:9b:cf:8e:bd:e6:1a:9d:97:29:e1:eb:
                    66:dd:b2:54:78:8b:bf:a2:2e:30:74:40:85:b4:f8:
                    cf:cd:c7:4b:3f:b2:58:c9:6e:8f:d1:b4:64:cd:18:
                    7f:f4:96:d0:59:b7:4c:82:2f:4d:6a:11:41:ff:ec:
                    62:0c:83:ba:9e:3c:4d:3d:a9:2c:d9:d9:d1:0d:f2:
                    e6:06:37:60:c2:6e:2a:7b:31:66:6b:dd:44:10:57:
                    cd:dd:ad:80:9d:0a:b4:c2:9d:10:a5:89:85:45:b3:
                    f6:3f:92:77:19:a4:c1:1a:50:47:0c:b2:a0:86:44:
                    45:e1:71:59:89:33:88:64:23:c6:15:43:cd:b6:a9:
                    25:47:fa:9a:6e:30:55:90:26:de:8e:ce:1a:e3:f5:
                    da:03:be:1a:c0:4a:db:58:ca:5d:eb:11:70:23:ab:
                    ad:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:58:2B:A3:77:44:68:00:17:BF:8C:FA:2A:04:B8:45:CA:D5:F0:73
            X509v3 Authority Key Identifier:
                keyid:E8:15:2E:59:60:79:B8:64:0C:D4:A4:9A:76:E3:32:DB:59:F6:26:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HeYJ3oZKSkUEgnChRtwvA2R9WhgmWFbL8k5M1TSyzXHD/1/E8152E596079B8640CD4A49A76E332DB59F626EF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E8152E596079B8640CD4A49A76E332DB59F626EF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HeYJ3oZKSkUEgnChRtwvA2R9WhgmWFbL8k5M1TSyzXHD/1/3137392e34322e37302e302f32332d3332203d3e20323731313330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.42.70.0/23

    Signature Algorithm: sha256WithRSAEncryption
         52:df:42:78:5b:f2:78:ed:7b:ef:50:f0:e9:48:a3:ae:77:b6:
         d1:e8:f7:86:cc:af:66:7f:3d:aa:0c:8f:6e:a4:aa:dc:43:7e:
         70:ca:87:4e:92:ab:2d:a8:25:4e:af:b7:7a:a3:cd:e0:3e:c3:
         0e:58:c8:5f:0a:19:ad:5f:2d:8f:50:13:7a:59:24:34:fc:ef:
         86:6b:5c:04:5a:b7:51:de:96:40:b2:04:9c:b4:88:c4:fd:99:
         f2:43:f5:81:69:63:71:6e:58:c6:c9:45:1b:f3:a8:f7:1f:a7:
         1c:5a:e9:df:7c:0d:b1:31:2f:47:e3:78:27:02:79:37:7f:57:
         36:77:98:9a:05:44:3d:4c:17:1f:a3:c5:f7:15:aa:91:55:11:
         58:65:b3:2a:95:a2:59:c8:b0:ff:57:48:60:61:bd:06:02:20:
         e0:8d:a3:94:7d:b6:d0:bc:99:3d:36:c5:8f:97:30:ab:9f:0c:
         ef:e7:35:7a:7c:aa:1b:79:be:cb:4a:bf:57:a6:76:4d:27:86:
         5a:c0:75:21:8d:5a:d8:68:e4:df:48:fc:9c:42:bf:f1:d1:fa:
         35:b2:8a:ef:1d:ae:43:61:1c:06:f4:a9:c2:82:11:e5:d5:00:
         8f:7f:f0:81:e7:66:2d:9f:21:40:2d:c1:c0:4d:ce:07:8d:0a:
         5b:2b:04:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 00:05:47 2024 by rpki-client on console-ams.rpki-client.org