Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3mrdiLsQBkLJi1SCnYv5QQs41PSiDfRiPMSUBiXYowmN/0/3137392e39372e33322e302f32332d3233203d3e20323632373430.roa
File:                     3137392e39372e33322e302f32332d3233203d3e20323632373430.roa (raw, json)
Hash identifier:          O/cLEeQkAPuLqQUU+BCc2KrVk7pnrJMoHCiG+ETigNs=
Subject key identifier:   16:F6:72:3B:30:78:5A:34:37:9A:EB:AC:95:DF:EB:0D:24:BA:66:9A
Certificate issuer:       /CN=C8AD5989C9692CE29DB9C3FE40448A47622C42CB
Certificate serial:       61068465AE06B8059C7FF0D494B4F8CEE5F70E49
Authority key identifier: C8:AD:59:89:C9:69:2C:E2:9D:B9:C3:FE:40:44:8A:47:62:2C:42:CB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C8AD5989C9692CE29DB9C3FE40448A47622C42CB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3mrdiLsQBkLJi1SCnYv5QQs41PSiDfRiPMSUBiXYowmN/0/3137392e39372e33322e302f32332d3233203d3e20323632373430.roa
Signing time:             Mon 23 Sep 2024 20:55:10 +0000
ROA not before:           Mon 23 Sep 2024 20:50:10 +0000
ROA not after:            Mon 22 Sep 2025 20:55:10 +0000
asID:                     262740
IP address blocks:        179.97.32.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3mrdiLsQBkLJi1SCnYv5QQs41PSiDfRiPMSUBiXYowmN/0/C8AD5989C9692CE29DB9C3FE40448A47622C42CB.crl
                          rsync://rpki-repo.registro.br/repo/3mrdiLsQBkLJi1SCnYv5QQs41PSiDfRiPMSUBiXYowmN/0/C8AD5989C9692CE29DB9C3FE40448A47622C42CB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C8AD5989C9692CE29DB9C3FE40448A47622C42CB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:06:84:65:ae:06:b8:05:9c:7f:f0:d4:94:b4:f8:ce:e5:f7:0e:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C8AD5989C9692CE29DB9C3FE40448A47622C42CB
        Validity
            Not Before: Sep 23 20:50:10 2024 GMT
            Not After : Sep 22 20:55:10 2025 GMT
        Subject: CN=16F6723B30785A34379AEBAC95DFEB0D24BA669A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:6a:cd:be:6f:34:09:08:e5:06:5c:76:b3:ee:
                    02:dc:1a:a5:db:a4:93:86:df:91:ff:ee:80:ae:d5:
                    8c:dc:77:f9:77:88:0a:61:cc:44:9e:57:ed:30:b7:
                    b7:6c:e2:f5:92:42:70:c7:6a:01:05:3f:81:5f:28:
                    48:23:15:5f:90:0b:d3:07:7e:b8:13:e2:e2:b0:24:
                    55:32:30:6e:aa:a0:44:5e:d8:6a:b6:8b:f0:4f:dd:
                    1c:f1:3c:d6:aa:9c:78:ef:6a:b9:36:fa:6e:f3:71:
                    67:22:e7:0e:1f:69:bc:fe:fd:01:d7:b3:77:f2:29:
                    1e:3c:84:6e:16:43:82:89:63:cd:ef:2f:22:c0:77:
                    c9:18:c3:1b:5c:ed:84:89:63:9a:fa:25:c7:ea:5f:
                    03:3d:a5:fe:37:6c:4a:a5:8d:a1:15:e3:e3:b8:5b:
                    55:cf:52:4a:9e:e1:5c:88:ac:e8:c8:1c:2b:3c:01:
                    49:f1:ef:3c:32:49:24:18:cb:ac:92:a7:2e:1d:3d:
                    23:7c:cf:f0:33:6a:fb:29:2a:d1:c0:5c:bb:10:25:
                    3d:51:9c:35:a3:e3:88:f1:91:0c:b9:67:2f:46:70:
                    41:ba:8d:eb:a6:49:e7:7c:bb:de:eb:b3:9a:ef:7b:
                    53:b4:fe:b9:af:e5:5e:63:5a:f7:1c:47:29:90:3c:
                    65:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:F6:72:3B:30:78:5A:34:37:9A:EB:AC:95:DF:EB:0D:24:BA:66:9A
            X509v3 Authority Key Identifier:
                keyid:C8:AD:59:89:C9:69:2C:E2:9D:B9:C3:FE:40:44:8A:47:62:2C:42:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3mrdiLsQBkLJi1SCnYv5QQs41PSiDfRiPMSUBiXYowmN/0/C8AD5989C9692CE29DB9C3FE40448A47622C42CB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C8AD5989C9692CE29DB9C3FE40448A47622C42CB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3mrdiLsQBkLJi1SCnYv5QQs41PSiDfRiPMSUBiXYowmN/0/3137392e39372e33322e302f32332d3233203d3e20323632373430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.97.32.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0d:f7:df:2b:2a:23:a4:b4:7f:55:30:0b:d3:c7:cc:83:c9:7b:
         7a:f1:66:33:b8:ed:0f:04:ff:ca:f3:b5:cb:05:53:b5:73:2a:
         77:0d:c5:da:82:78:74:fc:a7:47:e1:41:f5:fc:e3:b9:91:bb:
         91:48:4e:69:85:e3:3c:25:71:92:cb:39:db:1c:a4:eb:a6:67:
         29:ca:79:11:25:ba:80:dc:d6:c0:89:21:7c:cb:d1:25:45:e0:
         ad:29:74:a3:29:3f:f5:3c:a0:63:c7:f7:9f:3b:d1:d8:01:ba:
         75:64:ff:f4:30:a4:e0:5c:55:1b:68:66:12:38:9c:de:a5:c0:
         a6:e4:e5:03:a8:8b:38:05:8d:a3:9b:1c:cc:9a:93:28:0a:e9:
         12:06:ea:d6:49:b0:16:6a:9e:8b:fc:4b:a9:32:4b:61:0e:0a:
         e4:90:2a:76:c3:ac:96:af:5e:22:47:c4:d9:1c:05:44:fe:dd:
         71:e1:cf:9b:f4:1a:b1:66:58:85:73:bc:f9:7f:c7:65:c8:1c:
         05:a9:1b:16:cf:1c:dc:37:e6:b3:0f:f2:9c:d6:37:33:af:08:
         b5:39:d0:26:93:1e:ef:4d:1c:1f:a3:5b:cd:b0:06:95:00:36:
         38:4e:09:d6:51:a3:c1:a9:6d:df:aa:73:e1:a5:37:52:8e:c6:
         a2:a5:2a:6e
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUYQaEZa4GuAWcf/DUlLT4zuX3DkkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzhBRDU5ODlDOTY5MkNFMjlEQjlDM0ZFNDA0NDhBNDc2
MjJDNDJDQjAeFw0yNDA5MjMyMDUwMTBaFw0yNTA5MjIyMDU1MTBaMDMxMTAvBgNV
BAMTKDE2RjY3MjNCMzA3ODVBMzQzNzlBRUJBQzk1REZFQjBEMjRCQTY2OUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvas2+bzQJCOUGXHaz7gLcGqXb
pJOG35H/7oCu1Yzcd/l3iAphzESeV+0wt7ds4vWSQnDHagEFP4FfKEgjFV+QC9MH
frgT4uKwJFUyMG6qoERe2Gq2i/BP3RzxPNaqnHjvark2+m7zcWci5w4fabz+/QHX
s3fyKR48hG4WQ4KJY83vLyLAd8kYwxtc7YSJY5r6JcfqXwM9pf43bEqljaEV4+O4
W1XPUkqe4VyIrOjIHCs8AUnx7zwySSQYy6ySpy4dPSN8z/AzavspKtHAXLsQJT1R
nDWj44jxkQy5Zy9GcEG6jeumSed8u97rs5rve1O0/rmv5V5jWvccRymQPGVDAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUFvZyOzB4WjQ3muusld/rDSS6ZpowHwYDVR0j
BBgwFoAUyK1ZiclpLOKducP+QESKR2IsQsswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM21yZGlMc1FCa0xKaTFTQ25ZdjVRUXM0MVBTaURmUmlQTVNVQmlYWW93
bU4vMC9DOEFENTk4OUM5NjkyQ0UyOURCOUMzRkU0MDQ0OEE0NzYyMkM0MkNCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0M4QUQ1OTg5Qzk2OTJDRTI5
REI5QzNGRTQwNDQ4QTQ3NjIyQzQyQ0IuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNtcmRpTHNRQmtMSmkxU0NuWXY1UVFzNDFQU2lEZlJpUE1TVUJpWFlvd21OLzAv
MzEzNzM5MmUzOTM3MmUzMzMyMmUzMDJmMzIzMzJkMzIzMzIwM2QzZTIwMzIzNjMy
MzczNDMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQBs2EgMA0GCSqGSIb3DQEBCwUAA4IBAQAN998rKiOk
tH9VMAvTx8yDyXt68WYzuO0PBP/K87XLBVO1cyp3DcXagnh0/KdH4UH1/OO5kbuR
SE5pheM8JXGSyznbHKTrpmcpynkRJbqA3NbAiSF8y9ElReCtKXSjKT/1PKBjx/ef
O9HYAbp1ZP/0MKTgXFUbaGYSOJzepcCm5OUDqIs4BY2jmxzMmpMoCukSBurWSbAW
ap6L/EupMkthDgrkkCp2w6yWr14iR8TZHAVE/t1x4c+b9BqxZliFc7z5f8dlyBwF
qRsWzxzcN+azD/Kc1jczrwi1OdAmkx7vTRwfo1vNsAaVADY4TgnWUaPBqW3fqnPh
pTdSjsaipSpu
-----END CERTIFICATE-----
Generated at Sat Nov 23 09:50:01 2024 by rpki-client on console-fra.rpki-client.org