Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Hz5ZvdbTMw1xhkD5FDw9Zbk12PJAW2ZY5UcUGGT5U8F7/1/3137392e34382e3134372e302f32342d3234203d3e20323731303930.roa
File:                     3137392e34382e3134372e302f32342d3234203d3e20323731303930.roa (raw, json)
Hash identifier:          UQYE/geOD5iiPOoNeqEm8ZSJyvRgCegnFxVb0bzC540=
Subject key identifier:   57:BB:C9:31:6A:E6:B4:F8:52:FC:6C:92:58:54:90:E6:70:AB:62:E5
Certificate issuer:       /CN=54CEDD2E24960DE589D4B16EB4D662384CCC0FAF
Certificate serial:       792D0BEE1020DE932C650C20983CCC4433592437
Authority key identifier: 54:CE:DD:2E:24:96:0D:E5:89:D4:B1:6E:B4:D6:62:38:4C:CC:0F:AF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/54CEDD2E24960DE589D4B16EB4D662384CCC0FAF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Hz5ZvdbTMw1xhkD5FDw9Zbk12PJAW2ZY5UcUGGT5U8F7/1/3137392e34382e3134372e302f32342d3234203d3e20323731303930.roa
Signing time:             Thu 04 Apr 2024 20:35:35 +0000
ROA not before:           Thu 04 Apr 2024 20:30:35 +0000
ROA not after:            Thu 03 Apr 2025 20:35:35 +0000
asID:                     271090
IP address blocks:        179.48.147.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Hz5ZvdbTMw1xhkD5FDw9Zbk12PJAW2ZY5UcUGGT5U8F7/1/54CEDD2E24960DE589D4B16EB4D662384CCC0FAF.crl
                          rsync://rpki-repo.registro.br/repo/Hz5ZvdbTMw1xhkD5FDw9Zbk12PJAW2ZY5UcUGGT5U8F7/1/54CEDD2E24960DE589D4B16EB4D662384CCC0FAF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/54CEDD2E24960DE589D4B16EB4D662384CCC0FAF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 18:23:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:2d:0b:ee:10:20:de:93:2c:65:0c:20:98:3c:cc:44:33:59:24:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54CEDD2E24960DE589D4B16EB4D662384CCC0FAF
        Validity
            Not Before: Apr  4 20:30:35 2024 GMT
            Not After : Apr  3 20:35:35 2025 GMT
        Subject: CN=57BBC9316AE6B4F852FC6C92585490E670AB62E5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:a6:5f:a0:29:62:7e:f1:da:02:66:8d:2d:da:
                    92:62:a6:7a:79:d3:6f:91:56:be:3c:4e:fd:09:28:
                    9c:cb:35:ec:ac:bb:b8:e0:c4:5c:79:7a:80:d2:c1:
                    43:be:99:d1:88:de:57:5a:27:80:09:fc:65:6a:a1:
                    d4:10:ec:f7:89:14:39:2e:b2:5d:4e:a9:28:a2:b7:
                    50:1e:dd:93:3a:06:c3:b1:24:6d:26:8b:03:1d:42:
                    df:a5:ee:7e:8c:fd:0f:f7:ad:37:6c:cf:47:de:51:
                    88:b6:25:d5:59:96:75:14:da:67:16:32:92:cb:fd:
                    54:24:bd:63:2a:4c:bd:cd:c9:35:17:14:85:a9:98:
                    9b:d6:8f:c6:2f:62:98:4c:3d:22:c3:6e:be:2f:aa:
                    1b:44:47:bc:3c:37:3d:a4:ee:a4:9d:aa:8e:9d:1e:
                    4f:6b:f8:d5:53:7e:af:14:f8:59:d6:14:b9:fd:8e:
                    ec:0b:56:72:42:40:92:34:ba:f4:97:36:63:68:2b:
                    f0:60:ff:72:94:87:ed:6e:49:cf:7f:81:91:ab:7f:
                    ba:0b:08:86:d0:37:e4:49:3c:42:82:18:85:e5:de:
                    79:5e:5c:7c:e4:2e:54:95:40:be:26:c3:46:2f:90:
                    9e:17:22:97:01:24:69:2c:44:aa:30:52:a0:4f:a0:
                    15:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:BB:C9:31:6A:E6:B4:F8:52:FC:6C:92:58:54:90:E6:70:AB:62:E5
            X509v3 Authority Key Identifier:
                keyid:54:CE:DD:2E:24:96:0D:E5:89:D4:B1:6E:B4:D6:62:38:4C:CC:0F:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Hz5ZvdbTMw1xhkD5FDw9Zbk12PJAW2ZY5UcUGGT5U8F7/1/54CEDD2E24960DE589D4B16EB4D662384CCC0FAF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/54CEDD2E24960DE589D4B16EB4D662384CCC0FAF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Hz5ZvdbTMw1xhkD5FDw9Zbk12PJAW2ZY5UcUGGT5U8F7/1/3137392e34382e3134372e302f32342d3234203d3e20323731303930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.48.147.0/24

    Signature Algorithm: sha256WithRSAEncryption
         24:fb:2c:3a:68:8c:47:08:99:6f:91:77:a9:17:c7:f8:cd:5f:
         a8:5e:fe:93:ce:ba:4c:60:ef:3f:e5:24:09:19:f9:40:80:6c:
         c8:37:46:6e:48:75:d2:f4:bc:27:9f:5a:27:e5:94:fa:65:99:
         44:dc:b6:5b:4b:a8:a3:8e:62:a6:3b:fd:8f:08:f4:6e:3a:e2:
         76:76:b0:ea:d8:e0:b3:4f:aa:aa:ae:1d:b6:a2:c3:2b:d1:f0:
         1c:2c:fd:fc:b2:70:1a:d3:95:45:19:2e:09:87:b2:92:94:dc:
         1d:4c:94:14:99:73:9d:65:dc:8e:12:a7:00:5a:91:c7:3c:ee:
         1c:c7:81:c0:6c:08:92:d0:54:fa:93:2d:6f:30:5d:8a:d1:47:
         de:fa:44:a7:8b:86:f0:cd:53:ef:1b:71:f4:a6:c8:f8:74:de:
         01:0e:aa:2a:37:79:4c:02:7c:36:e7:c1:42:da:08:1c:7f:a1:
         b4:b7:51:e8:cd:ee:04:6d:e3:c0:fd:e2:c7:7a:53:d4:24:99:
         02:1a:27:6c:22:ec:43:e1:b7:6e:65:ca:8f:78:1d:d4:38:3a:
         78:93:52:fe:9e:26:a4:e6:e7:b9:9c:1e:d3:20:d9:0d:f5:72:
         cd:e5:37:1b:60:fa:dd:73:70:4a:ba:30:93:0c:e4:cd:63:2a:
         05:4a:bd:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 17:27:57 2024 by rpki-client on console-fra.rpki-client.org