Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Hz5ZvdbTMw1xhkD5FDw9Zbk12PJAW2ZY5UcUGGT5U8F7/1/3137392e34382e3134342e302f32342d3234203d3e20323731303930.roa
File:                     3137392e34382e3134342e302f32342d3234203d3e20323731303930.roa (raw, json)
Hash identifier:          PLRHLFW4iwN4sblF1fHWOmx+WhMgyQer+aKvUj+bS6g=
Subject key identifier:   48:3E:BC:CE:64:E0:17:6E:2A:D8:45:BD:2D:4D:58:9E:8F:47:C7:A7
Certificate issuer:       /CN=54CEDD2E24960DE589D4B16EB4D662384CCC0FAF
Certificate serial:       0481C3141F1B5475DCC0855721BF895680BFFC26
Authority key identifier: 54:CE:DD:2E:24:96:0D:E5:89:D4:B1:6E:B4:D6:62:38:4C:CC:0F:AF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/54CEDD2E24960DE589D4B16EB4D662384CCC0FAF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Hz5ZvdbTMw1xhkD5FDw9Zbk12PJAW2ZY5UcUGGT5U8F7/1/3137392e34382e3134342e302f32342d3234203d3e20323731303930.roa
Signing time:             Thu 04 Apr 2024 20:35:35 +0000
ROA not before:           Thu 04 Apr 2024 20:30:35 +0000
ROA not after:            Thu 03 Apr 2025 20:35:35 +0000
asID:                     271090
IP address blocks:        179.48.144.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Hz5ZvdbTMw1xhkD5FDw9Zbk12PJAW2ZY5UcUGGT5U8F7/1/54CEDD2E24960DE589D4B16EB4D662384CCC0FAF.crl
                          rsync://rpki-repo.registro.br/repo/Hz5ZvdbTMw1xhkD5FDw9Zbk12PJAW2ZY5UcUGGT5U8F7/1/54CEDD2E24960DE589D4B16EB4D662384CCC0FAF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/54CEDD2E24960DE589D4B16EB4D662384CCC0FAF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 15:56:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:81:c3:14:1f:1b:54:75:dc:c0:85:57:21:bf:89:56:80:bf:fc:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54CEDD2E24960DE589D4B16EB4D662384CCC0FAF
        Validity
            Not Before: Apr  4 20:30:35 2024 GMT
            Not After : Apr  3 20:35:35 2025 GMT
        Subject: CN=483EBCCE64E0176E2AD845BD2D4D589E8F47C7A7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:3b:21:ac:d7:13:62:fb:1d:39:a7:9a:4d:62:
                    de:10:23:18:83:61:f1:b4:af:e7:a6:57:de:55:b1:
                    90:f9:ea:fa:74:4c:6c:6c:2a:dc:ca:be:a5:b8:d3:
                    48:3e:ca:8e:0e:2d:97:33:12:6e:29:91:05:14:c6:
                    2f:c0:c0:ba:ce:c4:02:d9:b4:c3:44:75:4c:c0:7e:
                    71:33:8c:58:5a:5b:20:0e:0a:1a:00:5f:13:2d:f8:
                    df:dd:c4:90:26:33:67:6b:4b:53:8e:fa:fa:9f:26:
                    16:b2:b0:13:24:eb:dd:32:b9:32:25:64:c8:d4:1f:
                    52:e2:90:68:f8:d0:55:4b:b0:04:6b:5f:58:13:16:
                    dd:06:17:bc:09:01:c1:b4:db:48:05:40:e5:34:b2:
                    2f:fe:f4:ab:01:d2:76:2b:82:57:43:92:ef:24:5f:
                    cd:9f:be:a2:a8:cb:29:12:dc:a9:9c:1e:42:16:61:
                    aa:02:cf:60:2e:3a:02:e7:e1:64:0e:82:39:6c:58:
                    bf:e1:00:97:fb:0c:be:10:25:19:cb:5f:8b:81:d6:
                    e2:41:8e:2c:4b:0c:b0:0f:07:8b:f3:fe:c8:d2:fa:
                    55:a1:c7:14:a0:cb:1c:2a:4d:70:93:7c:b9:13:42:
                    f4:5e:23:40:6a:f9:69:2e:cf:24:0d:e6:75:0b:97:
                    50:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:3E:BC:CE:64:E0:17:6E:2A:D8:45:BD:2D:4D:58:9E:8F:47:C7:A7
            X509v3 Authority Key Identifier:
                keyid:54:CE:DD:2E:24:96:0D:E5:89:D4:B1:6E:B4:D6:62:38:4C:CC:0F:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Hz5ZvdbTMw1xhkD5FDw9Zbk12PJAW2ZY5UcUGGT5U8F7/1/54CEDD2E24960DE589D4B16EB4D662384CCC0FAF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/54CEDD2E24960DE589D4B16EB4D662384CCC0FAF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Hz5ZvdbTMw1xhkD5FDw9Zbk12PJAW2ZY5UcUGGT5U8F7/1/3137392e34382e3134342e302f32342d3234203d3e20323731303930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.48.144.0/24

    Signature Algorithm: sha256WithRSAEncryption
         69:23:b3:b3:be:c6:4a:7a:d9:27:31:d8:6f:e5:bd:43:2d:75:
         aa:de:67:68:a4:6f:97:c6:46:b1:07:4b:aa:c8:35:49:21:a6:
         aa:8e:a9:13:cb:0c:8d:06:b7:09:8a:9a:04:39:2c:25:92:a3:
         21:d7:fe:52:60:98:60:b4:12:e4:2d:9f:c9:db:7b:a6:ca:42:
         84:2c:2b:19:b8:86:d2:a1:e6:dd:d1:95:95:56:eb:13:54:c8:
         c7:39:9c:4e:fc:26:5a:d2:79:cf:77:bc:0d:f1:76:a4:05:a7:
         19:bf:63:5b:3a:f2:9a:e5:f0:fd:c8:b8:bf:84:11:6a:ae:99:
         99:aa:77:f6:79:97:c5:7d:18:d4:07:fa:57:4b:91:cf:02:d6:
         c5:15:49:5a:a1:64:d0:09:a9:25:35:97:d1:ce:36:5d:16:98:
         fd:1e:f4:64:cc:e1:d4:59:af:22:e1:d1:76:54:f7:7a:18:5f:
         21:d1:ae:5c:66:b9:c7:b7:52:f0:0d:dd:e2:09:17:de:5b:02:
         fe:a9:76:55:37:73:9a:1d:10:64:bf:c4:85:04:6a:f0:1e:b4:
         ae:ed:a2:b4:08:53:78:8c:ef:2f:de:75:47:d2:00:8f:4f:53:
         b0:0a:47:2d:cc:9d:3a:62:c3:0c:d8:d1:f8:a8:0b:15:a7:58:
         31:a5:3f:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:44:11 2024 by rpki-client on console-ams.rpki-client.org