Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HzAsTkYSUxE9igNWosi9HdZHrMJFNYFV3FL96jg87bAL/0/3137392e34392e3139362e302f32322d3332203d3e20323731323631.roa
File:                     3137392e34392e3139362e302f32322d3332203d3e20323731323631.roa (raw, json)
Hash identifier:          xBle5fM5gAf7/JdDd3tikQ4mm20krENg1qmp7j4W/AI=
Subject key identifier:   D5:9E:21:5E:02:EA:F3:86:BC:7D:72:F8:5E:4C:8F:75:18:64:3A:7F
Certificate issuer:       /CN=6F967E9BD0ECE30132BF71AD15F8221FE4E31BC4
Certificate serial:       0718E114F1871722C263883B428F42125D7A5F30
Authority key identifier: 6F:96:7E:9B:D0:EC:E3:01:32:BF:71:AD:15:F8:22:1F:E4:E3:1B:C4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F967E9BD0ECE30132BF71AD15F8221FE4E31BC4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HzAsTkYSUxE9igNWosi9HdZHrMJFNYFV3FL96jg87bAL/0/3137392e34392e3139362e302f32322d3332203d3e20323731323631.roa
Signing time:             Fri 25 Oct 2024 14:40:43 +0000
ROA not before:           Fri 25 Oct 2024 14:35:43 +0000
ROA not after:            Fri 24 Oct 2025 14:40:43 +0000
asID:                     271261
IP address blocks:        179.49.196.0/22 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HzAsTkYSUxE9igNWosi9HdZHrMJFNYFV3FL96jg87bAL/0/6F967E9BD0ECE30132BF71AD15F8221FE4E31BC4.crl
                          rsync://rpki-repo.registro.br/repo/HzAsTkYSUxE9igNWosi9HdZHrMJFNYFV3FL96jg87bAL/0/6F967E9BD0ECE30132BF71AD15F8221FE4E31BC4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F967E9BD0ECE30132BF71AD15F8221FE4E31BC4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:18:e1:14:f1:87:17:22:c2:63:88:3b:42:8f:42:12:5d:7a:5f:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6F967E9BD0ECE30132BF71AD15F8221FE4E31BC4
        Validity
            Not Before: Oct 25 14:35:43 2024 GMT
            Not After : Oct 24 14:40:43 2025 GMT
        Subject: CN=D59E215E02EAF386BC7D72F85E4C8F7518643A7F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:ad:92:a6:a9:d2:ba:0a:7d:5d:92:a8:c1:b6:
                    11:2f:66:0c:0e:57:0e:d2:95:85:a4:5f:05:43:60:
                    16:7f:22:48:77:3c:cb:f0:85:a9:22:ba:09:46:38:
                    33:1b:df:84:c7:88:84:2b:d9:ff:47:49:dd:73:8e:
                    6a:f5:63:00:2e:1d:e4:25:d0:f2:03:ec:f0:6b:4b:
                    ae:b7:11:12:cb:d6:bd:cb:ca:f9:56:d5:fc:79:24:
                    4c:5a:be:f9:34:c6:2d:6e:d9:73:64:19:c9:1f:d4:
                    1b:2d:6f:41:8a:31:7d:49:4c:7b:3d:22:21:4e:12:
                    4c:3d:bf:f6:53:0f:43:cb:d0:0f:a2:bf:6d:71:83:
                    77:54:7c:bb:4e:d9:f6:9a:23:30:5c:f3:f8:1c:6d:
                    cf:a2:f0:fd:52:20:9f:6c:df:81:4c:0b:9f:0b:36:
                    ba:ff:98:e1:8e:85:a3:37:1a:92:6b:37:22:a4:5f:
                    16:08:6f:f3:6a:a1:a8:8b:ab:8f:7a:e5:cf:d7:29:
                    2c:5a:4e:e8:18:bb:57:8c:6d:8d:03:67:01:4e:2a:
                    35:00:36:95:4f:6e:c7:c1:3c:6d:a3:d3:e1:01:16:
                    88:48:70:03:85:55:c5:75:0c:1e:8b:6a:85:8c:47:
                    d3:6d:b0:8f:8a:01:16:8d:c1:bc:10:fd:35:5f:b3:
                    2e:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:9E:21:5E:02:EA:F3:86:BC:7D:72:F8:5E:4C:8F:75:18:64:3A:7F
            X509v3 Authority Key Identifier:
                keyid:6F:96:7E:9B:D0:EC:E3:01:32:BF:71:AD:15:F8:22:1F:E4:E3:1B:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HzAsTkYSUxE9igNWosi9HdZHrMJFNYFV3FL96jg87bAL/0/6F967E9BD0ECE30132BF71AD15F8221FE4E31BC4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F967E9BD0ECE30132BF71AD15F8221FE4E31BC4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HzAsTkYSUxE9igNWosi9HdZHrMJFNYFV3FL96jg87bAL/0/3137392e34392e3139362e302f32322d3332203d3e20323731323631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.49.196.0/22

    Signature Algorithm: sha256WithRSAEncryption
         d1:54:9c:4e:6e:ca:d1:26:03:cf:6c:93:bb:c5:fa:65:b9:d0:
         32:cf:45:e0:8f:68:4e:88:19:c3:e2:6d:28:a6:5b:09:48:3c:
         2c:8f:d7:21:db:2e:10:dd:e8:e8:f8:7f:b0:4b:5c:35:f1:db:
         30:b2:27:7e:82:3b:f6:ae:a7:89:be:bd:cd:0c:17:a0:d0:fd:
         67:5e:24:e2:28:75:f5:96:4a:bc:5c:69:04:16:80:c6:d7:9e:
         86:52:b9:3c:fb:bc:65:d9:7c:f7:49:46:ab:15:35:32:b0:10:
         8a:b7:2d:10:4a:f1:1a:6b:fe:af:43:6b:39:4c:ce:c1:80:10:
         dc:3d:10:e3:0a:48:82:3f:ff:f3:34:f9:87:aa:ce:3f:19:12:
         92:21:ec:d3:90:b3:f5:d2:67:5f:93:7e:e5:9c:a7:7e:f0:41:
         a6:02:2c:1e:ed:f8:b9:d2:2f:14:c2:98:1b:ef:44:0c:ca:71:
         66:92:30:7b:1e:4d:8a:b5:64:81:08:ed:30:55:23:88:fc:4f:
         32:a4:f1:1b:07:98:bd:d5:77:72:e7:9b:dc:92:ed:cb:51:ed:
         7d:53:b3:c5:22:71:68:b7:03:ec:82:40:f0:b7:64:3a:d1:80:
         fe:74:77:82:ee:86:f7:eb:52:8f:a6:21:01:8a:5b:39:4f:9b:
         86:95:29:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 09:08:13 2024 by rpki-client on console-ams.rpki-client.org