Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Hz5ZvdbTMw1xhkD5FDw9Zbk12PJAW2ZY5UcUGGT5U8F7/1/3137392e34382e3134362e302f32332d3233203d3e20323731303930.roa
File:                     3137392e34382e3134362e302f32332d3233203d3e20323731303930.roa (raw, json)
Hash identifier:          quMap1/MtQ7x+Hb+l1C7QpCbdrseyl3zQdcEEPm0/KE=
Subject key identifier:   8F:99:C0:5E:32:2E:F1:E2:E3:FF:46:78:46:7C:CD:9B:B1:2D:B6:AC
Certificate issuer:       /CN=54CEDD2E24960DE589D4B16EB4D662384CCC0FAF
Certificate serial:       252645C54EF1FDCA46C96901FCA9E807C72A5D52
Authority key identifier: 54:CE:DD:2E:24:96:0D:E5:89:D4:B1:6E:B4:D6:62:38:4C:CC:0F:AF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/54CEDD2E24960DE589D4B16EB4D662384CCC0FAF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Hz5ZvdbTMw1xhkD5FDw9Zbk12PJAW2ZY5UcUGGT5U8F7/1/3137392e34382e3134362e302f32332d3233203d3e20323731303930.roa
Signing time:             Thu 04 Apr 2024 20:35:35 +0000
ROA not before:           Thu 04 Apr 2024 20:30:35 +0000
ROA not after:            Thu 03 Apr 2025 20:35:35 +0000
asID:                     271090
IP address blocks:        179.48.146.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Hz5ZvdbTMw1xhkD5FDw9Zbk12PJAW2ZY5UcUGGT5U8F7/1/54CEDD2E24960DE589D4B16EB4D662384CCC0FAF.crl
                          rsync://rpki-repo.registro.br/repo/Hz5ZvdbTMw1xhkD5FDw9Zbk12PJAW2ZY5UcUGGT5U8F7/1/54CEDD2E24960DE589D4B16EB4D662384CCC0FAF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/54CEDD2E24960DE589D4B16EB4D662384CCC0FAF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 15:34:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:26:45:c5:4e:f1:fd:ca:46:c9:69:01:fc:a9:e8:07:c7:2a:5d:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54CEDD2E24960DE589D4B16EB4D662384CCC0FAF
        Validity
            Not Before: Apr  4 20:30:35 2024 GMT
            Not After : Apr  3 20:35:35 2025 GMT
        Subject: CN=8F99C05E322EF1E2E3FF4678467CCD9BB12DB6AC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:65:04:7d:c7:4c:ce:8c:f3:06:23:06:e1:59:
                    21:67:1d:88:d3:a3:0d:31:36:b1:c3:2d:4f:af:97:
                    c1:ae:f2:9d:b1:89:5e:40:b9:72:25:85:8b:f4:be:
                    47:ce:f7:50:36:ae:95:16:e6:8f:40:02:79:4e:59:
                    b7:02:1f:43:24:d1:82:0f:6a:cc:1e:1e:84:de:60:
                    e8:51:ed:9a:75:9c:32:79:f8:11:1e:12:10:10:22:
                    09:c0:e3:2e:0d:03:6a:f4:19:d4:4d:df:73:b7:e7:
                    7a:ad:f0:2e:86:62:94:aa:c4:c8:2a:ef:b2:3a:fc:
                    0e:7b:7a:5e:da:40:0d:6a:e5:d1:19:e6:79:0e:7d:
                    65:ca:9a:9c:a1:e2:43:18:e8:00:09:82:3b:82:be:
                    3f:a8:3e:6d:42:b4:80:5b:a0:ab:ca:18:9d:a9:37:
                    dc:57:49:b1:0f:c5:f1:0c:02:07:01:f8:04:04:d2:
                    5e:49:f0:0c:1d:39:c2:52:c4:d9:5d:df:9d:77:b4:
                    b8:86:c9:f2:c9:ad:19:15:16:b6:a6:25:31:5a:1d:
                    db:81:8e:eb:a4:d9:8b:37:28:fe:f2:b7:e2:ae:6a:
                    77:28:0a:96:09:f7:ef:ab:b0:e2:09:96:89:9f:b3:
                    68:44:79:69:05:58:e2:fb:40:ff:1b:56:c4:00:23:
                    a0:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:99:C0:5E:32:2E:F1:E2:E3:FF:46:78:46:7C:CD:9B:B1:2D:B6:AC
            X509v3 Authority Key Identifier:
                keyid:54:CE:DD:2E:24:96:0D:E5:89:D4:B1:6E:B4:D6:62:38:4C:CC:0F:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Hz5ZvdbTMw1xhkD5FDw9Zbk12PJAW2ZY5UcUGGT5U8F7/1/54CEDD2E24960DE589D4B16EB4D662384CCC0FAF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/54CEDD2E24960DE589D4B16EB4D662384CCC0FAF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Hz5ZvdbTMw1xhkD5FDw9Zbk12PJAW2ZY5UcUGGT5U8F7/1/3137392e34382e3134362e302f32332d3233203d3e20323731303930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.48.146.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a3:51:d4:c6:b6:f3:9a:fb:c4:67:90:b9:e6:47:e7:b0:e3:7f:
         13:4c:d7:96:87:ba:e6:76:d7:46:e6:1e:9c:85:5f:b1:70:c6:
         ab:c3:4a:94:0f:79:62:83:02:ad:b0:b6:0d:bc:b5:67:23:5e:
         42:9b:3c:48:89:b8:18:dc:9c:48:da:ba:83:44:e5:eb:9e:68:
         fc:f6:b2:c6:9f:9c:54:f0:28:2f:89:51:9c:19:6c:ef:a8:29:
         34:eb:f9:6d:72:c8:be:60:d4:ce:c2:4c:ee:2a:b5:6b:72:dd:
         70:28:48:1a:7f:c7:69:27:f7:72:e0:46:1b:04:b6:e2:3b:ac:
         0e:1e:e1:31:e4:dc:8d:37:c9:1e:68:d9:94:27:2c:af:8c:28:
         d7:db:bf:00:a5:3a:84:3e:b6:2b:ce:c7:e7:a2:38:59:2b:dd:
         d9:c0:da:de:8a:52:75:2e:d7:98:b1:3f:76:10:28:c1:aa:5c:
         06:fd:ae:32:3c:8b:00:9f:4d:e6:aa:31:04:ff:65:6f:45:b3:
         c4:6d:59:0a:95:d7:09:8a:78:f1:90:52:ed:a1:10:fe:6e:43:
         4c:7d:2d:76:d5:cc:68:18:cb:36:55:42:48:39:6f:b6:49:dc:
         9a:5d:81:4e:a9:88:20:1a:76:26:11:96:2f:f5:90:75:2b:ac:
         20:a7:81:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 15:22:47 2024 by rpki-client on console-fra.rpki-client.org