Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3mrdiLsQBkLJi1SCnYv5QQs41PSiDfRiPMSUBiXYowmN/0/3137392e39372e33322e302f32302d3230203d3e20323632373430.roa
File:                     3137392e39372e33322e302f32302d3230203d3e20323632373430.roa (raw, json)
Hash identifier:          C/OoE37p058VctDWza9vhi7GbV1qLd+8JXlF2TzNsm0=
Subject key identifier:   FE:7C:14:32:0B:47:77:A0:F9:25:C9:76:2B:40:45:4E:5F:89:FA:E8
Certificate issuer:       /CN=C8AD5989C9692CE29DB9C3FE40448A47622C42CB
Certificate serial:       13E0EEBAE0D33147517055425CD9E67058FA6F2E
Authority key identifier: C8:AD:59:89:C9:69:2C:E2:9D:B9:C3:FE:40:44:8A:47:62:2C:42:CB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C8AD5989C9692CE29DB9C3FE40448A47622C42CB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3mrdiLsQBkLJi1SCnYv5QQs41PSiDfRiPMSUBiXYowmN/0/3137392e39372e33322e302f32302d3230203d3e20323632373430.roa
Signing time:             Mon 23 Sep 2024 20:55:06 +0000
ROA not before:           Mon 23 Sep 2024 20:50:06 +0000
ROA not after:            Mon 22 Sep 2025 20:55:06 +0000
asID:                     262740
IP address blocks:        179.97.32.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3mrdiLsQBkLJi1SCnYv5QQs41PSiDfRiPMSUBiXYowmN/0/C8AD5989C9692CE29DB9C3FE40448A47622C42CB.crl
                          rsync://rpki-repo.registro.br/repo/3mrdiLsQBkLJi1SCnYv5QQs41PSiDfRiPMSUBiXYowmN/0/C8AD5989C9692CE29DB9C3FE40448A47622C42CB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C8AD5989C9692CE29DB9C3FE40448A47622C42CB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:e0:ee:ba:e0:d3:31:47:51:70:55:42:5c:d9:e6:70:58:fa:6f:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C8AD5989C9692CE29DB9C3FE40448A47622C42CB
        Validity
            Not Before: Sep 23 20:50:06 2024 GMT
            Not After : Sep 22 20:55:06 2025 GMT
        Subject: CN=FE7C14320B4777A0F925C9762B40454E5F89FAE8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:76:61:f7:b4:c8:3d:0a:bc:61:3e:7b:07:af:
                    5e:e1:bb:f9:af:12:2b:5e:8c:a1:53:8e:9c:ce:70:
                    7f:7b:ed:17:06:7b:35:f9:e2:08:81:89:99:04:14:
                    e4:c4:a6:d6:d9:a1:64:ec:a2:53:35:81:30:33:1a:
                    1e:13:da:ef:ea:84:2a:c1:f5:7f:06:79:72:f3:0a:
                    26:fb:85:46:c7:c6:15:4f:ed:3f:e5:dd:d3:ee:5a:
                    ee:e2:f3:95:6b:1f:62:12:32:7c:25:bd:82:09:82:
                    b7:bb:0d:33:68:44:3c:47:77:46:b5:d7:63:f2:41:
                    4e:d2:bb:98:4e:59:3d:a7:93:8d:6d:ad:85:f3:cc:
                    ef:d3:fe:99:e0:13:68:62:4c:c4:41:fd:43:58:66:
                    c0:d7:17:fc:98:f3:b7:8c:1f:87:f3:55:09:84:86:
                    39:01:29:a8:c5:c0:17:b8:3e:bd:88:1d:b4:0a:10:
                    18:a5:42:09:75:c7:d0:aa:df:30:51:7c:ae:94:0c:
                    0e:67:7b:d4:b4:66:42:f9:53:16:41:7e:f6:81:8b:
                    c7:c5:9e:9f:df:46:99:7c:06:9f:6f:e1:10:b8:74:
                    12:8d:9f:b7:33:19:72:e8:5c:1b:98:19:8e:6b:8f:
                    68:d5:83:38:c2:14:f2:14:47:48:13:79:3b:1d:51:
                    39:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:7C:14:32:0B:47:77:A0:F9:25:C9:76:2B:40:45:4E:5F:89:FA:E8
            X509v3 Authority Key Identifier:
                keyid:C8:AD:59:89:C9:69:2C:E2:9D:B9:C3:FE:40:44:8A:47:62:2C:42:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3mrdiLsQBkLJi1SCnYv5QQs41PSiDfRiPMSUBiXYowmN/0/C8AD5989C9692CE29DB9C3FE40448A47622C42CB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C8AD5989C9692CE29DB9C3FE40448A47622C42CB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3mrdiLsQBkLJi1SCnYv5QQs41PSiDfRiPMSUBiXYowmN/0/3137392e39372e33322e302f32302d3230203d3e20323632373430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.97.32.0/20

    Signature Algorithm: sha256WithRSAEncryption
         98:cb:56:c6:8d:4d:36:99:d8:19:30:96:f1:61:45:16:81:e4:
         64:c8:b0:71:2a:94:13:fe:b0:81:d5:51:c3:88:b8:13:cd:ba:
         f0:da:81:1a:20:73:d1:4b:cf:26:1b:35:90:02:33:5e:39:5e:
         1d:d9:2b:20:8f:35:3c:7b:5e:4d:77:6d:de:f0:13:4f:bd:bc:
         1a:a4:95:d6:0e:40:cb:b3:b5:54:d0:bc:55:8a:c3:48:e8:42:
         64:5e:1a:a0:9b:c8:cc:e5:39:0f:01:2e:f6:f1:fd:47:4c:82:
         f4:66:de:3f:cc:d3:ce:48:1e:c1:ee:17:12:e5:d6:2b:db:b3:
         f2:8e:c3:2b:63:89:73:57:be:6d:56:f4:dc:c8:e2:b8:54:fb:
         ff:72:d4:b6:39:38:11:26:38:8c:a8:3c:48:90:62:94:c5:9f:
         bb:a6:24:7a:ee:0b:6c:e3:41:9d:b3:54:2b:ed:6b:38:8b:ce:
         56:2a:45:bd:32:79:cd:3f:4b:7b:9d:5f:62:40:0f:c6:ac:53:
         6d:f1:13:ad:1d:05:8b:43:c6:73:8b:3f:cd:69:27:c7:81:a7:
         64:6b:a5:4f:cf:73:f1:4f:7e:83:97:49:48:e3:7c:0d:12:1f:
         af:2a:0b:84:93:ce:de:a4:0c:3c:2d:c9:27:1b:b4:8c:28:0f:
         ff:30:e8:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:32:39 2024 by rpki-client on console-ams.rpki-client.org