Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/KFe9FG3axHZo5GeHF3fFFbmWC157u5ncTWdc6YAqVmB/0/3137392e3130392e3136302e302f32302d3332203d3e20323633303837.roa
File:                     3137392e3130392e3136302e302f32302d3332203d3e20323633303837.roa (raw, json)
Hash identifier:          AJNOOqPt9YDmVyj7oLMiS+ahRBlnaPrzhm3IG8z6/rY=
Subject key identifier:   FF:9A:9D:CF:2D:68:16:B4:C4:4F:51:0F:5C:DE:CC:B8:12:77:21:57
Certificate issuer:       /CN=2D0D148BDF2ED4FBDBEB80DB1EB377EAA3643F94
Certificate serial:       0AF70409C98176E3F58CE78F7153576D6F0C97ED
Authority key identifier: 2D:0D:14:8B:DF:2E:D4:FB:DB:EB:80:DB:1E:B3:77:EA:A3:64:3F:94
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D0D148BDF2ED4FBDBEB80DB1EB377EAA3643F94.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/KFe9FG3axHZo5GeHF3fFFbmWC157u5ncTWdc6YAqVmB/0/3137392e3130392e3136302e302f32302d3332203d3e20323633303837.roa
Signing time:             Thu 07 Nov 2024 13:53:55 +0000
ROA not before:           Thu 07 Nov 2024 13:48:55 +0000
ROA not after:            Thu 06 Nov 2025 13:53:55 +0000
asID:                     263087
IP address blocks:        179.109.160.0/20 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/KFe9FG3axHZo5GeHF3fFFbmWC157u5ncTWdc6YAqVmB/0/2D0D148BDF2ED4FBDBEB80DB1EB377EAA3643F94.crl
                          rsync://rpki-repo.registro.br/repo/KFe9FG3axHZo5GeHF3fFFbmWC157u5ncTWdc6YAqVmB/0/2D0D148BDF2ED4FBDBEB80DB1EB377EAA3643F94.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D0D148BDF2ED4FBDBEB80DB1EB377EAA3643F94.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 12:23:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:f7:04:09:c9:81:76:e3:f5:8c:e7:8f:71:53:57:6d:6f:0c:97:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2D0D148BDF2ED4FBDBEB80DB1EB377EAA3643F94
        Validity
            Not Before: Nov  7 13:48:55 2024 GMT
            Not After : Nov  6 13:53:55 2025 GMT
        Subject: CN=FF9A9DCF2D6816B4C44F510F5CDECCB812772157
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:8e:5d:bb:44:ec:50:c7:9c:55:e8:01:ca:0f:
                    ed:92:bd:67:6c:0f:7d:7f:ce:28:d4:14:ae:e2:e2:
                    62:20:ed:61:c9:35:11:fb:15:b2:47:69:0d:98:a6:
                    eb:25:27:8c:81:71:b9:ed:82:7f:66:fa:dd:14:47:
                    83:30:43:4f:b6:ad:b8:ef:82:69:5f:de:1e:d9:af:
                    21:9d:0b:6a:d8:24:d5:34:01:a3:05:d4:0e:c9:25:
                    a6:d6:5f:87:61:a0:e0:d2:68:5d:03:41:d2:e2:15:
                    51:46:30:76:65:95:f4:5f:d6:fe:69:14:21:13:dc:
                    23:4f:f5:4b:fc:8c:7f:2d:18:7c:cb:9a:b0:6a:7a:
                    1b:87:a7:92:79:a8:25:fd:a1:f5:52:6c:02:12:ed:
                    d5:cc:93:b4:b9:a3:08:39:34:ea:1a:f2:61:24:33:
                    c5:f6:d4:9c:04:9b:66:f9:c8:83:d2:07:dc:02:17:
                    fa:84:76:98:fe:4f:67:7e:82:19:3f:04:c0:d5:13:
                    9d:10:fa:aa:0c:56:b0:06:78:9a:91:2b:cd:39:3b:
                    5e:7d:ed:19:b1:c7:11:68:92:bc:15:11:c7:fe:ad:
                    2e:8b:cf:0b:08:37:63:ff:b7:7a:fc:dc:57:8a:2b:
                    60:4e:30:46:41:b1:cc:ba:6f:5d:2b:99:4d:bd:1e:
                    f9:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:9A:9D:CF:2D:68:16:B4:C4:4F:51:0F:5C:DE:CC:B8:12:77:21:57
            X509v3 Authority Key Identifier:
                keyid:2D:0D:14:8B:DF:2E:D4:FB:DB:EB:80:DB:1E:B3:77:EA:A3:64:3F:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/KFe9FG3axHZo5GeHF3fFFbmWC157u5ncTWdc6YAqVmB/0/2D0D148BDF2ED4FBDBEB80DB1EB377EAA3643F94.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D0D148BDF2ED4FBDBEB80DB1EB377EAA3643F94.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/KFe9FG3axHZo5GeHF3fFFbmWC157u5ncTWdc6YAqVmB/0/3137392e3130392e3136302e302f32302d3332203d3e20323633303837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.109.160.0/20

    Signature Algorithm: sha256WithRSAEncryption
         7e:73:55:9d:19:e2:46:15:c0:a1:e2:be:c8:aa:5c:5c:84:ee:
         b6:ef:9c:08:fc:a0:ea:a8:46:46:d9:62:95:ec:86:f7:9b:0d:
         7e:a1:3d:29:fb:0b:57:f9:bc:b1:12:bb:fc:19:e8:fe:ee:a9:
         5a:bd:c8:a3:0e:b1:82:f1:6d:d7:38:3a:e4:61:19:b5:65:29:
         90:e0:89:5b:ab:81:0e:7c:5e:2e:11:25:30:ed:2d:e2:9b:98:
         54:ee:42:d8:87:2b:7f:b6:4f:bf:fd:9f:63:55:44:3d:6f:de:
         0e:be:23:ed:62:2b:ce:82:a8:3a:0b:84:e5:9d:31:00:34:c5:
         60:c3:f8:13:68:37:6a:42:04:38:15:7b:53:c6:73:af:04:a7:
         b7:0f:80:ec:e5:af:27:2a:68:ee:10:0b:bb:3e:62:90:57:2e:
         ce:a2:c1:59:63:e7:2a:a9:0d:b2:5d:0d:ee:9b:b5:17:4f:32:
         65:35:32:c8:b6:90:1c:ee:26:50:dd:e5:e1:67:05:18:f2:b1:
         08:51:24:92:a4:08:73:92:6a:e3:6c:3b:e6:1b:01:f6:75:43:
         72:1d:24:d0:9b:da:01:60:09:8f:57:04:c4:39:18:c8:71:da:
         dc:75:c2:9d:34:c1:33:06:3a:26:84:b9:e6:da:0a:52:6f:13:
         4c:f5:2e:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:39:28 2024 by rpki-client on console-ams.rpki-client.org