Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2JfybCh4P1fahviQCP8NLH9hh4qSKu4GjBCVGe8ZvEeZ/0/3137392e34322e39362e302f32322d3234203d3e203532353733.roa
File:                     3137392e34322e39362e302f32322d3234203d3e203532353733.roa (raw, json)
Hash identifier:          IBDnEM4vkjvWfyYt0S9LIyNDGk9lYmSv1FZ+Qvt2C7A=
Subject key identifier:   93:6F:31:89:37:42:30:CC:A1:03:80:D6:2B:A0:89:68:62:4B:FA:A0
Certificate issuer:       /CN=D686F2D1C8D6F0E18200D7BA3B4E138A867E25C7
Certificate serial:       08CBA90778B3B4932D9F52B6471121CAF648A16C
Authority key identifier: D6:86:F2:D1:C8:D6:F0:E1:82:00:D7:BA:3B:4E:13:8A:86:7E:25:C7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D686F2D1C8D6F0E18200D7BA3B4E138A867E25C7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2JfybCh4P1fahviQCP8NLH9hh4qSKu4GjBCVGe8ZvEeZ/0/3137392e34322e39362e302f32322d3234203d3e203532353733.roa
Signing time:             Sat 29 Jun 2024 13:18:53 +0000
ROA not before:           Sat 29 Jun 2024 13:13:53 +0000
ROA not after:            Sat 28 Jun 2025 13:18:53 +0000
asID:                     52573
IP address blocks:        179.42.96.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2JfybCh4P1fahviQCP8NLH9hh4qSKu4GjBCVGe8ZvEeZ/0/D686F2D1C8D6F0E18200D7BA3B4E138A867E25C7.crl
                          rsync://rpki-repo.registro.br/repo/2JfybCh4P1fahviQCP8NLH9hh4qSKu4GjBCVGe8ZvEeZ/0/D686F2D1C8D6F0E18200D7BA3B4E138A867E25C7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D686F2D1C8D6F0E18200D7BA3B4E138A867E25C7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 17:42:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:cb:a9:07:78:b3:b4:93:2d:9f:52:b6:47:11:21:ca:f6:48:a1:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D686F2D1C8D6F0E18200D7BA3B4E138A867E25C7
        Validity
            Not Before: Jun 29 13:13:53 2024 GMT
            Not After : Jun 28 13:18:53 2025 GMT
        Subject: CN=936F3189374230CCA10380D62BA08968624BFAA0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:0a:eb:a3:7a:48:2b:e3:69:9b:0c:ee:43:29:
                    d9:f9:be:56:76:37:61:d2:cb:51:76:c7:83:e3:9f:
                    75:37:e9:28:63:56:1c:c9:48:e4:89:a4:8a:d1:10:
                    ae:3b:ef:db:9d:21:52:54:d3:99:01:a9:68:3f:19:
                    ea:0e:9e:03:06:66:cd:5c:61:43:f8:15:4c:ab:e8:
                    3f:15:5d:ad:4b:98:8f:09:70:06:4b:6e:23:ed:32:
                    44:76:8b:5e:a1:a7:74:64:bc:94:6a:10:3a:4d:02:
                    90:f3:2c:38:99:7f:0f:d9:16:64:a7:62:d2:5e:68:
                    4f:f7:a4:98:97:2a:d5:6d:db:bc:9f:ff:79:f6:e7:
                    ce:b0:bc:7b:69:3d:b5:86:9f:2b:aa:cb:5c:2d:d7:
                    0e:48:a3:ee:00:0b:4a:aa:e1:7a:6e:12:1c:c8:68:
                    f6:f9:3f:75:42:c3:15:fa:46:d8:13:db:1c:1f:c6:
                    8b:58:4b:3e:41:77:f5:8c:64:eb:82:d8:89:d5:a1:
                    e3:70:d5:2c:79:b6:cf:86:44:3a:71:df:e7:08:85:
                    52:e2:ea:de:b8:90:33:a2:2c:e6:a5:01:4d:c4:88:
                    d5:56:44:de:7e:43:90:87:d4:ea:d2:75:97:e6:a8:
                    64:0a:f7:da:ee:eb:70:38:90:1c:1d:24:a8:5f:1b:
                    f2:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:6F:31:89:37:42:30:CC:A1:03:80:D6:2B:A0:89:68:62:4B:FA:A0
            X509v3 Authority Key Identifier:
                keyid:D6:86:F2:D1:C8:D6:F0:E1:82:00:D7:BA:3B:4E:13:8A:86:7E:25:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2JfybCh4P1fahviQCP8NLH9hh4qSKu4GjBCVGe8ZvEeZ/0/D686F2D1C8D6F0E18200D7BA3B4E138A867E25C7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D686F2D1C8D6F0E18200D7BA3B4E138A867E25C7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2JfybCh4P1fahviQCP8NLH9hh4qSKu4GjBCVGe8ZvEeZ/0/3137392e34322e39362e302f32322d3234203d3e203532353733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.42.96.0/22

    Signature Algorithm: sha256WithRSAEncryption
         07:14:08:53:bc:f2:75:a8:ed:39:7a:a3:13:38:1e:85:bc:72:
         9d:b2:c8:23:14:0a:61:64:19:e6:66:a8:a6:86:b2:6f:05:94:
         93:0a:f1:88:6e:91:cf:8c:c5:8e:d8:6c:2d:0a:cc:47:f2:d6:
         ed:b3:f4:56:c6:05:72:67:d3:e7:af:36:f4:03:1b:54:02:cc:
         fb:37:a4:aa:86:1b:0b:9a:9c:51:17:14:c4:d3:47:ce:c1:9b:
         bb:61:b7:05:4a:01:0b:c1:dc:de:80:60:24:48:61:19:40:c2:
         64:59:c3:3f:95:56:1c:96:9d:16:6e:7a:6d:f4:ab:7e:2d:8e:
         2d:27:75:0c:8c:42:fe:a1:73:fd:eb:24:3b:c9:da:0d:33:a9:
         7c:9b:92:d4:2d:5e:cd:5c:d8:7f:86:27:6c:b0:f8:c2:02:91:
         42:13:7b:a1:b3:9b:45:d2:16:30:a0:82:41:c0:70:71:59:f1:
         d2:4a:52:5d:3b:15:f7:87:d1:fe:86:43:40:1e:0b:59:bb:48:
         5b:51:f7:90:e2:44:25:3c:79:3e:36:29:9c:5a:93:19:6b:dc:
         22:37:63:08:13:54:6c:36:c8:09:66:1c:3f:71:f1:9e:5b:aa:
         fa:17:77:4f:1d:ba:7e:eb:50:76:70:1a:ab:4e:08:d0:50:e9:
         eb:ca:64:05
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUCMupB3iztJMtn1K2RxEhyvZIoWwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDY4NkYyRDFDOEQ2RjBFMTgyMDBEN0JBM0I0RTEzOEE4
NjdFMjVDNzAeFw0yNDA2MjkxMzEzNTNaFw0yNTA2MjgxMzE4NTNaMDMxMTAvBgNV
BAMTKDkzNkYzMTg5Mzc0MjMwQ0NBMTAzODBENjJCQTA4OTY4NjI0QkZBQTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCCuujekgr42mbDO5DKdn5vlZ2
N2HSy1F2x4Pjn3U36ShjVhzJSOSJpIrREK4779udIVJU05kBqWg/GeoOngMGZs1c
YUP4FUyr6D8VXa1LmI8JcAZLbiPtMkR2i16hp3RkvJRqEDpNApDzLDiZfw/ZFmSn
YtJeaE/3pJiXKtVt27yf/3n2586wvHtpPbWGnyuqy1wt1w5Io+4AC0qq4XpuEhzI
aPb5P3VCwxX6RtgT2xwfxotYSz5Bd/WMZOuC2InVoeNw1Sx5ts+GRDpx3+cIhVLi
6t64kDOiLOalAU3EiNVWRN5+Q5CH1OrSdZfmqGQK99ru63A4kBwdJKhfG/ItAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUk28xiTdCMMyhA4DWK6CJaGJL+qAwHwYDVR0j
BBgwFoAU1oby0cjW8OGCANe6O04TioZ+JccwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMkpmeWJDaDRQMWZhaHZpUUNQOE5MSDloaDRxU0t1NEdqQkNWR2U4WnZF
ZVovMC9ENjg2RjJEMUM4RDZGMEUxODIwMEQ3QkEzQjRFMTM4QTg2N0UyNUM3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Q2ODZGMkQxQzhENkYwRTE4
MjAwRDdCQTNCNEUxMzhBODY3RTI1QzcuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJKZnliQ2g0UDFmYWh2aVFDUDhOTEg5aGg0cVNLdTRHakJDVkdlOFp2RWVaLzAv
MzEzNzM5MmUzNDMyMmUzOTM2MmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzUzMjM1
MzczMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEArMqYDANBgkqhkiG9w0BAQsFAAOCAQEABxQIU7zydajt
OXqjEzgehbxynbLIIxQKYWQZ5maopoaybwWUkwrxiG6Rz4zFjthsLQrMR/LW7bP0
VsYFcmfT56829AMbVALM+zekqoYbC5qcURcUxNNHzsGbu2G3BUoBC8Hc3oBgJEhh
GUDCZFnDP5VWHJadFm56bfSrfi2OLSd1DIxC/qFz/eskO8naDTOpfJuS1C1ezVzY
f4YnbLD4wgKRQhN7obObRdIWMKCCQcBwcVnx0kpSXTsV94fR/oZDQB4LWbtIW1H3
kOJEJTx5PjYpnFqTGWvcIjdjCBNUbDbICWYcP3Hxnluq+hd3Tx26futQdnAaq04I
0FDp68pkBQ==
-----END CERTIFICATE-----
Generated at Fri Nov 22 19:44:13 2024 by rpki-client on console-ams.rpki-client.org