Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3137392e3139312e3134342e302f32302d3230203d3e20323731373234.roa
File:                     3137392e3139312e3134342e302f32302d3230203d3e20323731373234.roa (raw, json)
Hash identifier:          pCpazpLTNOBKwsk4NOjtxQP5ytHBrAPvqx4kMFSZu8U=
Subject key identifier:   9B:1B:DA:0B:9A:54:E1:4A:B1:22:25:06:86:89:3D:A6:3B:7E:D1:BA
Certificate issuer:       /CN=97544BE1E037DEC68470E5CF05CB2966855E710F
Certificate serial:       5445CB0DF4A0E421F92E754AAF67B2C97629C389
Authority key identifier: 97:54:4B:E1:E0:37:DE:C6:84:70:E5:CF:05:CB:29:66:85:5E:71:0F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/97544BE1E037DEC68470E5CF05CB2966855E710F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3137392e3139312e3134342e302f32302d3230203d3e20323731373234.roa
Signing time:             Mon 08 Apr 2024 20:07:15 +0000
ROA not before:           Mon 08 Apr 2024 20:02:15 +0000
ROA not after:            Mon 07 Apr 2025 20:07:15 +0000
asID:                     271724
IP address blocks:        179.191.144.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/97544BE1E037DEC68470E5CF05CB2966855E710F.crl
                          rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/97544BE1E037DEC68470E5CF05CB2966855E710F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/97544BE1E037DEC68470E5CF05CB2966855E710F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 15:13:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:45:cb:0d:f4:a0:e4:21:f9:2e:75:4a:af:67:b2:c9:76:29:c3:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97544BE1E037DEC68470E5CF05CB2966855E710F
        Validity
            Not Before: Apr  8 20:02:15 2024 GMT
            Not After : Apr  7 20:07:15 2025 GMT
        Subject: CN=9B1BDA0B9A54E14AB122250686893DA63B7ED1BA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:99:ff:91:ab:6f:4e:a3:aa:62:cd:8f:15:9a:
                    fc:b0:bd:af:82:57:f1:fb:51:f3:a7:88:64:06:5f:
                    c0:2e:31:f4:8e:cb:af:e8:12:1d:07:81:4b:a0:03:
                    e5:9f:19:cc:96:3f:57:36:99:63:79:aa:38:21:a8:
                    5e:73:88:1d:e3:49:56:7f:29:23:bc:9f:48:a6:d1:
                    57:82:a3:94:f5:78:47:28:e6:94:7d:48:4e:02:87:
                    e7:39:d3:98:46:69:7f:fd:25:95:4b:6d:4c:11:d3:
                    95:3b:08:ea:9d:46:d6:20:f4:4f:d5:d4:5c:d0:53:
                    ef:e1:8f:e6:a7:f5:44:6d:f7:36:66:aa:1b:70:77:
                    01:e6:3d:e8:73:f2:e8:80:49:37:ac:a7:a2:20:5a:
                    15:13:39:d2:8e:57:bd:19:79:3f:74:59:ac:85:e6:
                    92:f5:25:93:ee:29:75:5e:74:1a:62:7d:41:7e:6f:
                    2a:39:92:fb:21:3d:24:c3:25:15:11:3f:9f:3c:14:
                    68:a7:97:63:f8:f9:eb:2f:75:00:1c:ff:d6:9a:11:
                    91:ac:1f:89:9b:d1:36:49:49:7d:23:1a:da:ad:8c:
                    eb:05:a6:c4:86:13:24:63:7a:a2:ad:ae:25:8a:cf:
                    10:37:61:0c:fa:34:3b:f0:3d:63:d1:f3:14:e2:6a:
                    d6:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:1B:DA:0B:9A:54:E1:4A:B1:22:25:06:86:89:3D:A6:3B:7E:D1:BA
            X509v3 Authority Key Identifier:
                keyid:97:54:4B:E1:E0:37:DE:C6:84:70:E5:CF:05:CB:29:66:85:5E:71:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/97544BE1E037DEC68470E5CF05CB2966855E710F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/97544BE1E037DEC68470E5CF05CB2966855E710F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3137392e3139312e3134342e302f32302d3230203d3e20323731373234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.191.144.0/20

    Signature Algorithm: sha256WithRSAEncryption
         5f:5c:0e:69:6d:bd:46:e7:73:5d:45:7f:cc:4d:73:68:a6:f0:
         f8:f2:8e:6c:cd:36:70:12:3a:69:a9:9d:0e:f7:71:83:eb:fb:
         57:b5:56:8e:70:c8:34:54:15:25:76:34:3f:9e:b1:67:00:17:
         fc:dd:b8:af:d6:4f:23:9f:14:d0:78:3d:c8:65:24:ed:05:18:
         ec:9f:e5:0e:2f:a2:43:81:44:43:cc:42:e9:7d:5d:cb:d1:8b:
         7e:6e:8e:05:2a:25:c8:33:b4:78:cf:e8:2a:6c:f0:79:34:da:
         44:e5:ec:74:8a:9e:b8:b6:08:57:b3:b8:2a:bc:b5:3a:1b:2f:
         e9:c3:d8:18:d3:04:49:08:66:b4:38:ba:a0:a8:27:cd:8d:15:
         f3:d5:0a:bf:bd:b9:b3:33:5e:3a:c1:85:d6:82:5b:df:31:9e:
         7b:8e:92:26:1d:c1:c8:d4:92:68:1e:77:b5:1d:ed:95:6a:3d:
         15:e7:95:8f:f3:e7:c7:11:8e:39:69:a3:3f:ef:61:c0:c4:ca:
         7d:f8:76:61:43:5f:34:85:5e:af:0a:33:63:21:f9:d1:86:48:
         ce:97:74:2a:d8:f1:69:2d:23:03:48:e7:f2:c8:ba:01:4e:4f:
         b8:eb:64:14:2f:f0:00:6f:bd:5d:fd:87:57:97:62:96:92:dd:
         a7:52:80:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 17:08:14 2024 by rpki-client on console-ams.rpki-client.org