Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3137372e36372e332e302f32342d3234203d3e20323632353039.roa
File:                     3137372e36372e332e302f32342d3234203d3e20323632353039.roa (raw, json)
Hash identifier:          zn0U9uFNcdL/YHwhsXO5RatoZb0TJ8akgeE/1GCPYOo=
Subject key identifier:   5C:8D:6D:B4:46:59:73:33:9E:42:3A:28:56:76:69:8D:7C:3D:4C:FF
Certificate issuer:       /CN=001C1582B42E32880AA66677B51A015B52D2C781
Certificate serial:       26D456A924FDE8B9E9674478173A695B84CE95BB
Authority key identifier: 00:1C:15:82:B4:2E:32:88:0A:A6:66:77:B5:1A:01:5B:52:D2:C7:81
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/001C1582B42E32880AA66677B51A015B52D2C781.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3137372e36372e332e302f32342d3234203d3e20323632353039.roa
Signing time:             Mon 09 Sep 2024 15:00:19 +0000
ROA not before:           Mon 09 Sep 2024 14:55:19 +0000
ROA not after:            Mon 08 Sep 2025 15:00:19 +0000
asID:                     262509
IP address blocks:        177.67.3.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/001C1582B42E32880AA66677B51A015B52D2C781.crl
                          rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/001C1582B42E32880AA66677B51A015B52D2C781.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/001C1582B42E32880AA66677B51A015B52D2C781.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 09:55:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:d4:56:a9:24:fd:e8:b9:e9:67:44:78:17:3a:69:5b:84:ce:95:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=001C1582B42E32880AA66677B51A015B52D2C781
        Validity
            Not Before: Sep  9 14:55:19 2024 GMT
            Not After : Sep  8 15:00:19 2025 GMT
        Subject: CN=5C8D6DB4465973339E423A285676698D7C3D4CFF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:a6:83:1a:ea:62:6a:4b:a0:d9:e7:76:55:92:
                    fc:3b:bf:9d:51:79:b7:6f:af:18:00:13:34:43:de:
                    c4:e2:b9:ef:47:57:55:b0:d0:1f:f4:35:90:e1:96:
                    eb:aa:fe:78:45:ba:53:f6:5e:46:0b:41:5e:13:fa:
                    26:45:c7:97:5e:28:b6:a0:d8:97:b1:a5:c5:14:64:
                    2a:35:d6:b2:55:6a:6b:df:c0:9c:9c:14:66:b3:e1:
                    bb:f1:d9:3f:db:f2:37:30:4d:b8:bc:85:4f:c7:e6:
                    57:b0:f4:e6:6f:c5:dc:a9:d4:8b:fc:3f:ce:91:1d:
                    91:27:60:d2:27:e9:2e:86:8c:b4:57:66:a2:ff:5a:
                    6c:e0:8d:d9:41:6a:be:bc:48:5b:97:15:73:23:12:
                    48:79:d7:9e:50:14:39:3b:be:e2:e6:29:c1:71:6e:
                    34:0a:fb:b1:37:c6:27:b8:55:0e:5f:da:93:58:85:
                    45:2a:96:a8:53:71:87:fd:1a:f8:97:05:87:3b:d6:
                    ae:b9:90:26:98:db:6a:f6:f9:20:d5:0c:57:78:67:
                    02:4a:07:49:cd:5a:31:8d:af:1f:d0:f2:bb:4b:35:
                    39:dc:9d:66:1a:ee:cb:6f:8e:65:c2:89:a6:50:e1:
                    bf:d8:df:23:cb:f4:4a:47:b2:f9:06:31:8d:19:e9:
                    77:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:8D:6D:B4:46:59:73:33:9E:42:3A:28:56:76:69:8D:7C:3D:4C:FF
            X509v3 Authority Key Identifier:
                keyid:00:1C:15:82:B4:2E:32:88:0A:A6:66:77:B5:1A:01:5B:52:D2:C7:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/001C1582B42E32880AA66677B51A015B52D2C781.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/001C1582B42E32880AA66677B51A015B52D2C781.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3137372e36372e332e302f32342d3234203d3e20323632353039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.67.3.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5f:8b:32:5b:f0:65:7d:0c:f0:3c:2e:84:9d:9b:d0:06:3a:f8:
         b8:20:8a:b5:ce:84:b9:e4:5a:08:2a:5f:cf:d9:e6:07:bb:d4:
         6c:f1:4a:d8:f3:ce:97:fd:cc:e0:45:a9:89:22:9e:db:24:d4:
         26:aa:55:63:eb:37:19:dc:e4:d0:f3:b8:0f:af:94:5b:36:ed:
         76:9e:d3:a2:e0:4a:b4:4c:27:23:67:9b:45:0e:f1:b6:ff:4b:
         7b:2a:54:d1:8e:2b:fa:89:49:83:e0:b1:c5:70:ab:2c:64:1c:
         dc:f2:76:4b:40:f3:90:b1:be:c9:30:7c:7e:fa:cb:a4:c2:ac:
         92:24:42:9b:47:c8:5b:15:ba:fb:cd:9b:c9:61:bf:01:04:f3:
         de:32:22:63:d8:85:df:24:e0:46:5a:96:f0:1a:f9:fc:38:c5:
         e9:18:db:3d:69:d5:37:30:b4:74:f9:07:30:93:57:64:48:8d:
         f3:ce:ef:ee:e4:61:5e:67:50:7a:3a:c3:85:83:44:42:0a:10:
         af:c6:f0:fa:88:85:f4:62:ae:2b:4e:68:ae:1f:71:95:d9:9e:
         63:4c:d7:3a:f1:49:45:3b:a9:18:a4:38:66:48:49:9b:1b:1b:
         c1:80:6b:58:34:ca:f2:e1:bd:73:2c:e0:41:b9:c5:1e:43:33:
         87:73:ec:99
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUJtRWqST96LnpZ0R4FzppW4TOlbswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDAxQzE1ODJCNDJFMzI4ODBBQTY2Njc3QjUxQTAxNUI1
MkQyQzc4MTAeFw0yNDA5MDkxNDU1MTlaFw0yNTA5MDgxNTAwMTlaMDMxMTAvBgNV
BAMTKDVDOEQ2REI0NDY1OTczMzM5RTQyM0EyODU2NzY2OThEN0MzRDRDRkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqpoMa6mJqS6DZ53ZVkvw7v51R
ebdvrxgAEzRD3sTiue9HV1Ww0B/0NZDhluuq/nhFulP2XkYLQV4T+iZFx5deKLag
2JexpcUUZCo11rJVamvfwJycFGaz4bvx2T/b8jcwTbi8hU/H5lew9OZvxdyp1Iv8
P86RHZEnYNIn6S6GjLRXZqL/WmzgjdlBar68SFuXFXMjEkh5155QFDk7vuLmKcFx
bjQK+7E3xie4VQ5f2pNYhUUqlqhTcYf9GviXBYc71q65kCaY22r2+SDVDFd4ZwJK
B0nNWjGNrx/Q8rtLNTncnWYa7stvjmXCiaZQ4b/Y3yPL9EpHsvkGMY0Z6XdrAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUXI1ttEZZczOeQjooVnZpjXw9TP8wHwYDVR0j
BBgwFoAUABwVgrQuMogKpmZ3tRoBW1LSx4EwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM1o5bkVRVmNHc1ZHN3NSQ1RrWTJadnZtREhob0U1WmdiakRLRnFNRnQ3
REYvMC8wMDFDMTU4MkI0MkUzMjg4MEFBNjY2NzdCNTFBMDE1QjUyRDJDNzgxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzAwMUMxNTgyQjQyRTMyODgw
QUE2NjY3N0I1MUEwMTVCNTJEMkM3ODEuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNaOW5FUVZjR3NWRzdzUkNUa1kyWnZ2bURIaG9FNVpnYmpES0ZxTUZ0N0RGLzAv
MzEzNzM3MmUzNjM3MmUzMzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzYzMjM1
MzAzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEALFDAzANBgkqhkiG9w0BAQsFAAOCAQEAX4syW/BlfQzw
PC6EnZvQBjr4uCCKtc6EueRaCCpfz9nmB7vUbPFK2PPOl/3M4EWpiSKe2yTUJqpV
Y+s3Gdzk0PO4D6+UWzbtdp7TouBKtEwnI2ebRQ7xtv9LeypU0Y4r+olJg+CxxXCr
LGQc3PJ2S0DzkLG+yTB8fvrLpMKskiRCm0fIWxW6+82byWG/AQTz3jIiY9iF3yTg
RlqW8Br5/DjF6RjbPWnVNzC0dPkHMJNXZEiN887v7uRhXmdQejrDhYNEQgoQr8bw
+oiF9GKuK05orh9xldmeY0zXOvFJRTupGKQ4ZkhJmxsbwYBrWDTK8uG9cyzgQbnF
HkMzh3PsmQ==
-----END CERTIFICATE-----
Generated at Sat Sep 28 10:27:28 2024 by rpki-client on console-ams.rpki-client.org