Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3133312e3139362e37362e302f32322d3232203d3e20323632353039.roa
File:                     3133312e3139362e37362e302f32322d3232203d3e20323632353039.roa (raw, json)
Hash identifier:          9IsisQ12hCBAu10jMPTxo2pJSHXwuraF3K6oICKBOuk=
Subject key identifier:   72:6B:50:E5:9F:83:1F:55:F8:34:CC:DF:84:4B:F7:CC:11:C9:41:7D
Certificate issuer:       /CN=001C1582B42E32880AA66677B51A015B52D2C781
Certificate serial:       01F03D47CE40101E2FD385CE0CE5F9926D41D6A9
Authority key identifier: 00:1C:15:82:B4:2E:32:88:0A:A6:66:77:B5:1A:01:5B:52:D2:C7:81
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/001C1582B42E32880AA66677B51A015B52D2C781.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3133312e3139362e37362e302f32322d3232203d3e20323632353039.roa
Signing time:             Mon 09 Sep 2024 15:00:20 +0000
ROA not before:           Mon 09 Sep 2024 14:55:20 +0000
ROA not after:            Mon 08 Sep 2025 15:00:20 +0000
asID:                     262509
IP address blocks:        131.196.76.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/001C1582B42E32880AA66677B51A015B52D2C781.crl
                          rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/001C1582B42E32880AA66677B51A015B52D2C781.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/001C1582B42E32880AA66677B51A015B52D2C781.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 09:55:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:f0:3d:47:ce:40:10:1e:2f:d3:85:ce:0c:e5:f9:92:6d:41:d6:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=001C1582B42E32880AA66677B51A015B52D2C781
        Validity
            Not Before: Sep  9 14:55:20 2024 GMT
            Not After : Sep  8 15:00:20 2025 GMT
        Subject: CN=726B50E59F831F55F834CCDF844BF7CC11C9417D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:ad:a4:83:11:f6:c0:6f:29:af:7f:80:94:60:
                    07:1c:70:bd:74:e3:25:94:e7:1d:02:62:5a:f6:c0:
                    c3:1b:c1:4e:e8:49:f7:36:dc:1e:ec:9e:ba:25:e5:
                    44:a2:55:2e:60:8e:1d:3d:9c:15:69:e9:2b:bd:5c:
                    05:c7:01:7f:83:00:48:f1:0e:cb:e4:19:c1:3e:fb:
                    97:4e:71:58:00:24:8a:48:19:db:7d:b7:4d:50:67:
                    87:94:15:3a:c9:7d:0f:03:be:f9:41:28:b7:6b:55:
                    42:4e:5f:a5:03:02:ed:e8:e6:c9:11:17:17:73:60:
                    d7:71:af:fd:06:54:2a:43:c4:ba:ba:d8:8b:34:6a:
                    53:89:1d:b7:5a:78:70:84:7d:e7:3b:be:ba:0b:52:
                    b8:89:3a:12:0f:00:09:fe:93:3d:37:46:ad:99:ff:
                    00:f5:47:47:35:1c:c9:97:d8:c4:ec:9e:87:05:eb:
                    4c:a7:7f:84:f5:42:7a:c1:97:c7:22:d2:be:e5:e7:
                    20:c8:d2:b2:38:92:9d:9b:09:e5:c5:98:0c:13:f3:
                    dd:89:cf:2a:eb:a3:33:f5:cd:50:c8:26:d0:c6:1d:
                    56:78:eb:4e:ef:31:34:5a:3f:21:fa:e8:a8:6a:8f:
                    7b:db:c3:c6:91:f8:df:25:4e:83:49:14:4c:04:94:
                    44:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:6B:50:E5:9F:83:1F:55:F8:34:CC:DF:84:4B:F7:CC:11:C9:41:7D
            X509v3 Authority Key Identifier:
                keyid:00:1C:15:82:B4:2E:32:88:0A:A6:66:77:B5:1A:01:5B:52:D2:C7:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/001C1582B42E32880AA66677B51A015B52D2C781.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/001C1582B42E32880AA66677B51A015B52D2C781.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3133312e3139362e37362e302f32322d3232203d3e20323632353039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.196.76.0/22

    Signature Algorithm: sha256WithRSAEncryption
         44:ce:00:6c:15:c9:81:22:38:1b:c5:11:57:42:c6:79:9c:d4:
         14:05:ce:49:b9:68:0d:57:71:ef:7a:b4:1d:81:a3:2e:61:8a:
         98:fe:75:bc:45:c9:0a:ae:15:81:17:76:bb:f3:bf:45:48:45:
         fa:cc:bf:68:ce:22:d3:c4:52:21:7e:e4:d2:fd:bd:8f:9c:93:
         bf:c3:03:11:0f:c7:e1:f1:f3:65:8d:1b:57:6f:bd:9d:00:38:
         fc:9a:40:2a:8d:f9:09:8b:c4:f6:37:39:bf:4c:58:cd:ee:a2:
         22:df:3a:b3:fa:4a:4a:48:ec:a0:84:2a:08:cb:b0:6b:5f:06:
         c7:09:d2:46:4f:34:bf:8c:bb:be:9a:03:82:94:5d:3e:af:80:
         fc:53:23:ad:4b:e7:d2:3b:b6:e5:03:a6:9a:89:3b:ad:94:c7:
         e0:8a:80:9b:2a:93:20:20:67:1b:bc:11:f7:61:61:a2:3a:24:
         9d:29:7a:be:5e:51:b5:43:e3:43:b0:7c:dc:37:77:53:85:48:
         10:87:5c:84:f9:e9:29:26:e0:96:37:05:1a:26:83:0a:bc:3c:
         1c:01:2e:a8:8c:ef:c1:86:97:8e:b3:ba:59:e0:4f:92:a7:2d:
         81:55:6d:18:92:0f:8f:f6:59:f6:f5:17:04:58:17:d6:9d:3f:
         98:87:52:e9
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUAfA9R85AEB4v04XODOX5km1B1qkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDAxQzE1ODJCNDJFMzI4ODBBQTY2Njc3QjUxQTAxNUI1
MkQyQzc4MTAeFw0yNDA5MDkxNDU1MjBaFw0yNTA5MDgxNTAwMjBaMDMxMTAvBgNV
BAMTKDcyNkI1MEU1OUY4MzFGNTVGODM0Q0NERjg0NEJGN0NDMTFDOTQxN0QwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEraSDEfbAbymvf4CUYAcccL10
4yWU5x0CYlr2wMMbwU7oSfc23B7snrol5USiVS5gjh09nBVp6Su9XAXHAX+DAEjx
DsvkGcE++5dOcVgAJIpIGdt9t01QZ4eUFTrJfQ8DvvlBKLdrVUJOX6UDAu3o5skR
FxdzYNdxr/0GVCpDxLq62Is0alOJHbdaeHCEfec7vroLUriJOhIPAAn+kz03Rq2Z
/wD1R0c1HMmX2MTsnocF60ynf4T1QnrBl8ci0r7l5yDI0rI4kp2bCeXFmAwT892J
zyrrozP1zVDIJtDGHVZ4607vMTRaPyH66Khqj3vbw8aR+N8lToNJFEwElEQvAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUcmtQ5Z+DH1X4NMzfhEv3zBHJQX0wHwYDVR0j
BBgwFoAUABwVgrQuMogKpmZ3tRoBW1LSx4EwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM1o5bkVRVmNHc1ZHN3NSQ1RrWTJadnZtREhob0U1WmdiakRLRnFNRnQ3
REYvMC8wMDFDMTU4MkI0MkUzMjg4MEFBNjY2NzdCNTFBMDE1QjUyRDJDNzgxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzAwMUMxNTgyQjQyRTMyODgw
QUE2NjY3N0I1MUEwMTVCNTJEMkM3ODEuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNaOW5FUVZjR3NWRzdzUkNUa1kyWnZ2bURIaG9FNVpnYmpES0ZxTUZ0N0RGLzAv
MzEzMzMxMmUzMTM5MzYyZTM3MzYyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzMjM2
MzIzNTMwMzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAKDxEwwDQYJKoZIhvcNAQELBQADggEBAETOAGwV
yYEiOBvFEVdCxnmc1BQFzkm5aA1Xce96tB2Boy5hipj+dbxFyQquFYEXdrvzv0VI
RfrMv2jOItPEUiF+5NL9vY+ck7/DAxEPx+Hx82WNG1dvvZ0AOPyaQCqN+QmLxPY3
Ob9MWM3uoiLfOrP6SkpI7KCEKgjLsGtfBscJ0kZPNL+Mu76aA4KUXT6vgPxTI61L
59I7tuUDppqJO62Ux+CKgJsqkyAgZxu8EfdhYaI6JJ0per5eUbVD40OwfNw3d1OF
SBCHXIT56Skm4JY3BRomgwq8PBwBLqiM78GGl46zulngT5KnLYFVbRiSD4/2Wfb1
FwRYF9adP5iHUuk=
-----END CERTIFICATE-----
Generated at Sat Sep 28 10:27:28 2024 by rpki-client on console-ams.rpki-client.org