Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3N4fYrG9tE9XrQPzpKmsyw8wLqdgzq4nY7vsoDKzcEwE/0/3137392e34392e3135322e302f32322d3234203d3e20323731313935.roa
File:                     3137392e34392e3135322e302f32322d3234203d3e20323731313935.roa (raw, json)
Hash identifier:          d9DzIfNg4s24A6FyI3nZvel7ZFxbNigH9WmVg25MAMo=
Subject key identifier:   F1:50:58:44:C7:96:45:66:B5:27:A7:C3:4B:BA:EB:86:A9:67:46:89
Certificate issuer:       /CN=EF7F74C9655ED59EB1DC59F431A39ECCAF84AEB6
Certificate serial:       5C8BE101714563C5FDDF708EF68674D727E4B863
Authority key identifier: EF:7F:74:C9:65:5E:D5:9E:B1:DC:59:F4:31:A3:9E:CC:AF:84:AE:B6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF7F74C9655ED59EB1DC59F431A39ECCAF84AEB6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3N4fYrG9tE9XrQPzpKmsyw8wLqdgzq4nY7vsoDKzcEwE/0/3137392e34392e3135322e302f32322d3234203d3e20323731313935.roa
Signing time:             Wed 05 Jun 2024 19:20:23 +0000
ROA not before:           Wed 05 Jun 2024 19:15:23 +0000
ROA not after:            Wed 04 Jun 2025 19:20:23 +0000
asID:                     271195
IP address blocks:        179.49.152.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3N4fYrG9tE9XrQPzpKmsyw8wLqdgzq4nY7vsoDKzcEwE/0/EF7F74C9655ED59EB1DC59F431A39ECCAF84AEB6.crl
                          rsync://rpki-repo.registro.br/repo/3N4fYrG9tE9XrQPzpKmsyw8wLqdgzq4nY7vsoDKzcEwE/0/EF7F74C9655ED59EB1DC59F431A39ECCAF84AEB6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF7F74C9655ED59EB1DC59F431A39ECCAF84AEB6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 06:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:8b:e1:01:71:45:63:c5:fd:df:70:8e:f6:86:74:d7:27:e4:b8:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EF7F74C9655ED59EB1DC59F431A39ECCAF84AEB6
        Validity
            Not Before: Jun  5 19:15:23 2024 GMT
            Not After : Jun  4 19:20:23 2025 GMT
        Subject: CN=F1505844C7964566B527A7C34BBAEB86A9674689
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:12:25:7d:b2:c5:34:e5:ce:ac:85:e2:23:85:
                    04:7e:71:01:3f:5e:64:13:0b:e7:63:bf:19:28:f2:
                    9b:b2:bc:17:57:bd:a0:83:af:eb:cb:46:49:e4:14:
                    2c:f3:03:18:7f:0f:51:13:d3:9b:8a:bd:49:08:e8:
                    5d:a0:04:6c:9a:dc:51:7e:0a:e6:ee:3c:6c:78:fa:
                    ba:cd:2b:85:78:c1:80:0f:72:24:7f:c9:ee:8c:77:
                    55:e9:a3:c1:bf:fe:88:32:ac:5c:26:a9:18:23:1d:
                    fe:06:36:43:b7:78:6d:ba:43:b8:42:4e:2b:7e:ca:
                    27:b9:98:27:b9:22:02:5c:bc:17:f1:e7:ec:bd:9b:
                    2f:92:65:15:72:ef:a5:f0:e5:53:7e:44:86:ab:43:
                    ae:a4:a4:88:34:70:18:6c:7a:42:e1:95:36:9d:99:
                    fd:18:17:1e:38:c4:58:8d:48:44:04:06:e7:f0:d8:
                    24:04:10:9e:55:6e:e0:40:8d:07:c9:26:69:32:77:
                    2d:0a:3c:78:32:5f:ab:75:4b:2e:50:f6:4d:2d:d9:
                    33:13:fd:93:26:84:ae:d8:79:f3:c0:df:2a:a7:76:
                    70:72:54:ce:df:00:89:22:91:c0:97:70:a4:83:5e:
                    d0:57:05:ce:6c:72:18:81:18:73:95:f2:d7:05:13:
                    26:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:50:58:44:C7:96:45:66:B5:27:A7:C3:4B:BA:EB:86:A9:67:46:89
            X509v3 Authority Key Identifier:
                keyid:EF:7F:74:C9:65:5E:D5:9E:B1:DC:59:F4:31:A3:9E:CC:AF:84:AE:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3N4fYrG9tE9XrQPzpKmsyw8wLqdgzq4nY7vsoDKzcEwE/0/EF7F74C9655ED59EB1DC59F431A39ECCAF84AEB6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF7F74C9655ED59EB1DC59F431A39ECCAF84AEB6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3N4fYrG9tE9XrQPzpKmsyw8wLqdgzq4nY7vsoDKzcEwE/0/3137392e34392e3135322e302f32322d3234203d3e20323731313935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.49.152.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a9:06:82:5d:da:33:79:61:59:1f:2d:9b:7f:31:82:e4:bb:0e:
         ae:fa:0c:50:69:b3:6a:7f:46:48:a4:47:c5:4f:97:2c:03:14:
         47:70:b2:58:e2:41:85:c5:f8:6e:79:80:a4:c0:7b:33:2b:8a:
         89:cc:aa:98:be:2b:f6:1e:a2:d5:74:c6:f5:60:2e:7e:ec:c6:
         d0:b6:5d:8d:72:6c:d4:93:83:2f:a4:96:ee:c5:3a:9a:b5:0f:
         c9:50:d2:95:7c:0b:dc:84:b5:48:2d:fc:30:9d:32:88:f9:fd:
         03:8a:ad:8a:b8:70:91:da:24:8c:e5:2d:96:c2:0a:08:3d:92:
         94:e0:4b:f4:76:fb:bb:92:f0:ad:91:d0:20:5d:6f:21:77:f1:
         61:b0:c1:eb:d7:e2:56:1c:a0:9f:53:4b:1c:2a:da:f2:24:cd:
         ff:4c:b0:fe:60:91:45:90:8a:23:17:bb:27:58:58:28:c2:6e:
         c3:c4:94:36:7f:c5:d6:4d:a0:df:e7:c4:0a:3c:85:3e:56:ee:
         a3:a8:d3:36:06:58:20:2a:37:00:e1:17:95:cd:c3:7d:bc:a4:
         8e:93:f7:88:92:0a:f3:06:3d:ef:c2:e3:ec:b1:25:31:d8:86:
         da:c2:c5:c0:4a:c9:84:f8:b2:87:f5:2b:08:58:8e:ab:96:62:
         4a:22:54:46
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUXIvhAXFFY8X933CO9oZ01yfkuGMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUY3Rjc0Qzk2NTVFRDU5RUIxREM1OUY0MzFBMzlFQ0NB
Rjg0QUVCNjAeFw0yNDA2MDUxOTE1MjNaFw0yNTA2MDQxOTIwMjNaMDMxMTAvBgNV
BAMTKEYxNTA1ODQ0Qzc5NjQ1NjZCNTI3QTdDMzRCQkFFQjg2QTk2NzQ2ODkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8EiV9ssU05c6sheIjhQR+cQE/
XmQTC+djvxko8puyvBdXvaCDr+vLRknkFCzzAxh/D1ET05uKvUkI6F2gBGya3FF+
CubuPGx4+rrNK4V4wYAPciR/ye6Md1Xpo8G//ogyrFwmqRgjHf4GNkO3eG26Q7hC
Tit+yie5mCe5IgJcvBfx5+y9my+SZRVy76Xw5VN+RIarQ66kpIg0cBhsekLhlTad
mf0YFx44xFiNSEQEBufw2CQEEJ5VbuBAjQfJJmkydy0KPHgyX6t1Sy5Q9k0t2TMT
/ZMmhK7YefPA3yqndnByVM7fAIkikcCXcKSDXtBXBc5schiBGHOV8tcFEybfAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU8VBYRMeWRWa1J6fDS7rrhqlnRokwHwYDVR0j
BBgwFoAU7390yWVe1Z6x3Fn0MaOezK+ErrYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM040ZllyRzl0RTlYclFQenBLbXN5dzh3THFkZ3pxNG5ZN3Zzb0RLemNF
d0UvMC9FRjdGNzRDOTY1NUVENTlFQjFEQzU5RjQzMUEzOUVDQ0FGODRBRUI2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0VGN0Y3NEM5NjU1RUQ1OUVC
MURDNTlGNDMxQTM5RUNDQUY4NEFFQjYuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNONGZZckc5dEU5WHJRUHpwS21zeXc4d0xxZGd6cTRuWTd2c29ES3pjRXdFLzAv
MzEzNzM5MmUzNDM5MmUzMTM1MzIyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM3
MzEzMTM5MzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAKzMZgwDQYJKoZIhvcNAQELBQADggEBAKkGgl3a
M3lhWR8tm38xguS7Dq76DFBps2p/RkikR8VPlywDFEdwsljiQYXF+G55gKTAezMr
ionMqpi+K/YeotV0xvVgLn7sxtC2XY1ybNSTgy+klu7FOpq1D8lQ0pV8C9yEtUgt
/DCdMoj5/QOKrYq4cJHaJIzlLZbCCgg9kpTgS/R2+7uS8K2R0CBdbyF38WGwwevX
4lYcoJ9TSxwq2vIkzf9MsP5gkUWQiiMXuydYWCjCbsPElDZ/xdZNoN/nxAo8hT5W
7qOo0zYGWCAqNwDhF5XNw328pI6T94iSCvMGPe/C4+yxJTHYhtrCxcBKyYT4sof1
KwhYjquWYkoiVEY=
-----END CERTIFICATE-----
Generated at Mon Nov 25 06:03:26 2024 by rpki-client on console-fra.rpki-client.org