Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3137392e3139312e3134342e302f32302d3230203d3e203238323730.roa
File:                     3137392e3139312e3134342e302f32302d3230203d3e203238323730.roa (raw, json)
Hash identifier:          iyDHempU//wUPd0KgHYn35DVKBrrNJgo3yRSh+qHjAY=
Subject key identifier:   22:A3:20:DE:56:F9:4F:43:90:14:15:76:60:EB:FE:CB:AD:1B:63:92
Certificate issuer:       /CN=001C1582B42E32880AA66677B51A015B52D2C781
Certificate serial:       268874DAA5D58EF57CB02E878C06785A17B84C11
Authority key identifier: 00:1C:15:82:B4:2E:32:88:0A:A6:66:77:B5:1A:01:5B:52:D2:C7:81
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/001C1582B42E32880AA66677B51A015B52D2C781.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3137392e3139312e3134342e302f32302d3230203d3e203238323730.roa
Signing time:             Mon 09 Sep 2024 15:00:20 +0000
ROA not before:           Mon 09 Sep 2024 14:55:20 +0000
ROA not after:            Mon 08 Sep 2025 15:00:20 +0000
asID:                     28270
IP address blocks:        179.191.144.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/001C1582B42E32880AA66677B51A015B52D2C781.crl
                          rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/001C1582B42E32880AA66677B51A015B52D2C781.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/001C1582B42E32880AA66677B51A015B52D2C781.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 21 Sep 2024 19:13:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:88:74:da:a5:d5:8e:f5:7c:b0:2e:87:8c:06:78:5a:17:b8:4c:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=001C1582B42E32880AA66677B51A015B52D2C781
        Validity
            Not Before: Sep  9 14:55:20 2024 GMT
            Not After : Sep  8 15:00:20 2025 GMT
        Subject: CN=22A320DE56F94F439014157660EBFECBAD1B6392
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:28:5f:5b:2e:8d:fe:7c:c3:c6:ce:ba:e6:e9:
                    e5:33:36:c4:46:8a:30:ae:f1:66:9d:6c:9b:70:92:
                    0d:2c:b4:ec:ca:d5:3e:22:8a:10:e5:ca:5f:27:8c:
                    46:9e:da:46:33:53:44:00:f2:b6:49:71:4b:ee:b7:
                    7c:1a:b6:f1:7e:fd:12:fa:8e:33:86:06:58:84:58:
                    30:b4:80:76:03:81:d8:bc:98:91:34:e6:a8:85:be:
                    7b:83:29:6a:3d:40:93:7c:44:4a:08:b7:3a:2a:18:
                    d8:49:10:63:4e:bf:ed:39:c2:14:b0:90:69:6f:09:
                    2c:41:77:e1:ee:b8:23:29:fa:ad:b1:57:4f:ad:a3:
                    e0:27:75:b1:2f:c2:9e:87:e6:49:4c:16:bc:01:d3:
                    6d:28:50:67:ee:f2:eb:05:f5:13:2f:6a:33:9e:38:
                    56:7a:b2:46:58:f0:76:77:b9:64:b1:48:d5:2a:b0:
                    c7:f4:d0:34:a6:d9:45:46:dc:82:70:f0:07:7e:52:
                    d6:31:3a:7e:e8:73:c2:af:3d:6b:18:9a:8a:f6:50:
                    0b:9d:99:de:6c:62:86:27:08:23:f1:a5:ad:64:0a:
                    2a:23:6d:66:d1:00:98:87:41:58:68:02:0f:eb:db:
                    9b:70:df:57:b1:43:b6:f9:87:47:b3:1e:52:af:a9:
                    fb:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:A3:20:DE:56:F9:4F:43:90:14:15:76:60:EB:FE:CB:AD:1B:63:92
            X509v3 Authority Key Identifier:
                keyid:00:1C:15:82:B4:2E:32:88:0A:A6:66:77:B5:1A:01:5B:52:D2:C7:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/001C1582B42E32880AA66677B51A015B52D2C781.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/001C1582B42E32880AA66677B51A015B52D2C781.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3137392e3139312e3134342e302f32302d3230203d3e203238323730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.191.144.0/20

    Signature Algorithm: sha256WithRSAEncryption
         2d:c6:94:6e:c1:bd:8a:b8:52:f9:35:db:a6:86:da:ec:f1:d2:
         73:02:1a:4f:30:3e:1e:31:73:92:fb:06:b5:08:ce:62:b5:68:
         b8:d8:79:2d:2f:55:a6:6c:e5:f1:6f:a3:dc:b6:b5:3c:03:b9:
         e0:33:c0:b5:84:ae:c9:18:0b:c7:5b:98:09:98:b9:e1:51:6e:
         60:f0:aa:39:f3:c4:69:9f:1b:69:a1:89:ef:b9:6c:a4:eb:5f:
         ab:59:fa:8b:2f:5b:d8:ea:24:ba:99:98:f3:3c:a6:58:60:cd:
         c4:a0:83:fc:9c:5d:ff:08:e6:9f:e3:e7:4c:c8:28:9c:0d:32:
         d2:64:61:0e:f5:7d:54:aa:87:eb:ef:ba:21:68:79:33:81:32:
         c2:2f:c1:7d:73:2f:17:87:1e:28:3a:97:81:12:2f:0a:21:c0:
         44:8c:5a:6a:9c:9a:7f:d0:e7:9f:cf:63:b2:75:7d:fa:12:7c:
         5b:b9:ce:3c:62:b9:3a:db:4a:68:77:be:07:f6:48:68:a8:3a:
         b6:10:ca:21:2b:4b:2f:ac:bd:41:ee:bb:fc:a9:a7:fd:d9:3a:
         8b:2a:a4:f0:09:1d:ac:e5:f7:9e:1f:17:5b:91:72:fc:f0:9c:
         d6:61:92:03:cd:cc:d0:25:09:c9:12:1c:03:18:b5:3a:c7:d9:
         41:d5:b2:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 20 18:51:54 2024 by rpki-client on console-fra.rpki-client.org