Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3Mrei7cs5dYYuqE8WRNZQjqUbDY4ofq3epGtQ9KsNFTo/0/3137392e3130362e39362e302f32302d3234203d3e203532353332.roa
File:                     3137392e3130362e39362e302f32302d3234203d3e203532353332.roa (raw, json)
Hash identifier:          ubaD1REiEXqhzEhXFL7XWNAGEmCv5iCLATv/1pV7QDs=
Subject key identifier:   CD:F6:FE:5F:3F:08:2F:91:9F:D5:F7:35:11:5F:70:60:EA:00:B9:74
Certificate issuer:       /CN=8EFC669FD81A6651E6EE3A3A38E7B091B91D08F0
Certificate serial:       018AB3A2CB5D3BC138E599EF66A5943CD46E9D17
Authority key identifier: 8E:FC:66:9F:D8:1A:66:51:E6:EE:3A:3A:38:E7:B0:91:B9:1D:08:F0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8EFC669FD81A6651E6EE3A3A38E7B091B91D08F0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3Mrei7cs5dYYuqE8WRNZQjqUbDY4ofq3epGtQ9KsNFTo/0/3137392e3130362e39362e302f32302d3234203d3e203532353332.roa
Signing time:             Mon 24 Jun 2024 18:00:48 +0000
ROA not before:           Mon 24 Jun 2024 17:55:48 +0000
ROA not after:            Mon 23 Jun 2025 18:00:48 +0000
asID:                     52532
IP address blocks:        179.106.96.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3Mrei7cs5dYYuqE8WRNZQjqUbDY4ofq3epGtQ9KsNFTo/0/8EFC669FD81A6651E6EE3A3A38E7B091B91D08F0.crl
                          rsync://rpki-repo.registro.br/repo/3Mrei7cs5dYYuqE8WRNZQjqUbDY4ofq3epGtQ9KsNFTo/0/8EFC669FD81A6651E6EE3A3A38E7B091B91D08F0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8EFC669FD81A6651E6EE3A3A38E7B091B91D08F0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 30 Jun 2024 04:30:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:b3:a2:cb:5d:3b:c1:38:e5:99:ef:66:a5:94:3c:d4:6e:9d:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8EFC669FD81A6651E6EE3A3A38E7B091B91D08F0
        Validity
            Not Before: Jun 24 17:55:48 2024 GMT
            Not After : Jun 23 18:00:48 2025 GMT
        Subject: CN=CDF6FE5F3F082F919FD5F735115F7060EA00B974
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:f0:9f:ea:c6:27:2e:ee:52:a9:21:21:82:fd:
                    bf:c1:9c:c2:8a:35:15:82:ed:d2:96:ca:86:14:99:
                    1b:7e:87:46:1b:f3:01:24:55:30:8d:f8:bb:93:ae:
                    19:35:5f:a8:da:a4:4f:d6:16:35:dd:8c:80:8f:7d:
                    ae:9e:0b:91:91:56:37:7d:1e:41:c5:a6:27:b8:1d:
                    56:ad:6f:f0:7b:d3:28:0d:c1:d1:b9:33:73:1a:42:
                    66:19:03:0e:de:ca:29:14:1e:77:f9:e0:e8:2c:e2:
                    44:ba:ee:84:4d:bf:40:2d:02:56:23:79:29:25:39:
                    b7:d4:1f:21:4e:1f:51:50:bd:bf:a2:a5:53:e1:4b:
                    49:18:9c:db:1b:15:a0:19:39:a1:b4:2e:80:5f:51:
                    e0:12:07:11:27:28:2d:ff:c4:be:63:15:16:8f:f5:
                    d2:0f:11:31:e9:a8:67:42:eb:6c:3a:49:83:d4:ee:
                    d1:f4:4a:47:45:98:dc:b4:4a:18:ef:24:40:b0:e3:
                    bc:6a:96:d1:d9:be:1e:b0:40:8d:b8:55:3a:ac:76:
                    b7:57:75:f0:8a:aa:ce:29:17:b4:55:cd:ea:a5:76:
                    b4:03:ff:6a:33:d8:1a:f2:c3:d6:97:1a:fe:5d:83:
                    c7:22:e2:1c:8c:04:90:8b:7f:78:c6:55:de:c6:ab:
                    e4:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:F6:FE:5F:3F:08:2F:91:9F:D5:F7:35:11:5F:70:60:EA:00:B9:74
            X509v3 Authority Key Identifier:
                keyid:8E:FC:66:9F:D8:1A:66:51:E6:EE:3A:3A:38:E7:B0:91:B9:1D:08:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3Mrei7cs5dYYuqE8WRNZQjqUbDY4ofq3epGtQ9KsNFTo/0/8EFC669FD81A6651E6EE3A3A38E7B091B91D08F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8EFC669FD81A6651E6EE3A3A38E7B091B91D08F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Mrei7cs5dYYuqE8WRNZQjqUbDY4ofq3epGtQ9KsNFTo/0/3137392e3130362e39362e302f32302d3234203d3e203532353332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.106.96.0/20

    Signature Algorithm: sha256WithRSAEncryption
         64:25:88:c3:af:ba:c7:7c:bc:53:39:07:ea:10:36:09:61:7b:
         00:78:20:b4:8a:44:6a:6e:1d:e3:92:18:92:b9:ef:8d:92:fa:
         48:d6:8b:80:dd:18:17:27:be:16:02:c3:f4:55:74:a9:13:1f:
         7a:11:3b:1c:77:de:46:8c:78:6b:e0:c0:9b:1f:b2:9b:f4:49:
         f0:96:2a:ea:13:e5:1a:51:88:63:a1:7e:1b:81:8a:29:42:fb:
         e4:06:76:7a:57:c8:bb:21:55:71:32:75:9b:25:60:c5:07:0a:
         7d:51:e1:ed:de:c7:18:3d:91:97:48:99:0e:6c:14:ab:12:88:
         46:7c:69:dd:2e:14:84:32:52:d7:55:8c:59:3d:e4:47:9f:b0:
         59:5c:82:fc:51:89:41:0e:e1:5a:bd:56:ce:a2:d4:54:6b:b6:
         95:74:61:fa:c6:3d:ba:9a:0d:eb:a0:ec:1a:9b:4a:78:b7:2f:
         c8:63:f6:af:24:c4:03:77:bf:2e:58:5f:22:19:fc:e2:d3:0f:
         c5:d8:6a:33:9c:64:70:ed:a2:13:d6:f2:8a:d2:60:1a:de:84:
         d7:e6:5f:60:23:bd:78:57:5a:9f:49:2b:0a:d2:83:99:ec:ff:
         66:b3:ac:4a:0f:bc:7a:f6:1d:df:64:18:32:93:6c:a8:7f:70:
         e7:ad:db:96
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUAYqzostdO8E45ZnvZqWUPNRunRcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEVGQzY2OUZEODFBNjY1MUU2RUUzQTNBMzhFN0IwOTFC
OTFEMDhGMDAeFw0yNDA2MjQxNzU1NDhaFw0yNTA2MjMxODAwNDhaMDMxMTAvBgNV
BAMTKENERjZGRTVGM0YwODJGOTE5RkQ1RjczNTExNUY3MDYwRUEwMEI5NzQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCj8J/qxicu7lKpISGC/b/BnMKK
NRWC7dKWyoYUmRt+h0Yb8wEkVTCN+LuTrhk1X6japE/WFjXdjICPfa6eC5GRVjd9
HkHFpie4HVatb/B70ygNwdG5M3MaQmYZAw7eyikUHnf54Ogs4kS67oRNv0AtAlYj
eSklObfUHyFOH1FQvb+ipVPhS0kYnNsbFaAZOaG0LoBfUeASBxEnKC3/xL5jFRaP
9dIPETHpqGdC62w6SYPU7tH0SkdFmNy0ShjvJECw47xqltHZvh6wQI24VTqsdrdX
dfCKqs4pF7RVzeqldrQD/2oz2Bryw9aXGv5dg8ci4hyMBJCLf3jGVd7Gq+RlAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUzfb+Xz8IL5Gf1fc1EV9wYOoAuXQwHwYDVR0j
BBgwFoAUjvxmn9gaZlHm7jo6OOewkbkdCPAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM01yZWk3Y3M1ZFlZdXFFOFdSTlpRanFVYkRZNG9mcTNlcEd0UTlLc05G
VG8vMC84RUZDNjY5RkQ4MUE2NjUxRTZFRTNBM0EzOEU3QjA5MUI5MUQwOEYwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzhFRkM2NjlGRDgxQTY2NTFF
NkVFM0EzQTM4RTdCMDkxQjkxRDA4RjAuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNNcmVpN2NzNWRZWXVxRThXUk5aUWpxVWJEWTRvZnEzZXBHdFE5S3NORlRvLzAv
MzEzNzM5MmUzMTMwMzYyZTM5MzYyZTMwMmYzMjMwMmQzMjM0MjAzZDNlMjAzNTMy
MzUzMzMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQEs2pgMA0GCSqGSIb3DQEBCwUAA4IBAQBkJYjDr7rH
fLxTOQfqEDYJYXsAeCC0ikRqbh3jkhiSue+NkvpI1ouA3RgXJ74WAsP0VXSpEx96
ETscd95GjHhr4MCbH7Kb9EnwlirqE+UaUYhjoX4bgYopQvvkBnZ6V8i7IVVxMnWb
JWDFBwp9UeHt3scYPZGXSJkObBSrEohGfGndLhSEMlLXVYxZPeRHn7BZXIL8UYlB
DuFavVbOotRUa7aVdGH6xj26mg3roOwam0p4ty/IY/avJMQDd78uWF8iGfzi0w/F
2GoznGRw7aIT1vKK0mAa3oTX5l9gI714V1qfSSsK0oOZ7P9ms6xKD7x69h3fZBgy
k2yof3DnrduW
-----END CERTIFICATE-----
Generated at Sat Jun 29 09:54:18 2024 by rpki-client on console-fra.rpki-client.org