Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3mrdiLsQBkLJi1SCnYv5QQs41PSiDfRiPMSUBiXYowmN/0/3137392e39372e33322e302f32342d3234203d3e20323632373430.roa
File:                     3137392e39372e33322e302f32342d3234203d3e20323632373430.roa (raw, json)
Hash identifier:          Yaq7YfH1nrKdWFou2qHvgTeU/4afEIRuOITfQWJeqVA=
Subject key identifier:   8F:FD:CD:38:2F:19:22:09:C9:86:F4:F0:BA:FB:53:04:5D:F2:E0:57
Certificate issuer:       /CN=C8AD5989C9692CE29DB9C3FE40448A47622C42CB
Certificate serial:       02A6B8562FAADDC0EE306EC54350A6CC3BC8B711
Authority key identifier: C8:AD:59:89:C9:69:2C:E2:9D:B9:C3:FE:40:44:8A:47:62:2C:42:CB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C8AD5989C9692CE29DB9C3FE40448A47622C42CB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3mrdiLsQBkLJi1SCnYv5QQs41PSiDfRiPMSUBiXYowmN/0/3137392e39372e33322e302f32342d3234203d3e20323632373430.roa
Signing time:             Mon 23 Sep 2024 20:54:37 +0000
ROA not before:           Mon 23 Sep 2024 20:49:37 +0000
ROA not after:            Mon 22 Sep 2025 20:54:37 +0000
asID:                     262740
IP address blocks:        179.97.32.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3mrdiLsQBkLJi1SCnYv5QQs41PSiDfRiPMSUBiXYowmN/0/C8AD5989C9692CE29DB9C3FE40448A47622C42CB.crl
                          rsync://rpki-repo.registro.br/repo/3mrdiLsQBkLJi1SCnYv5QQs41PSiDfRiPMSUBiXYowmN/0/C8AD5989C9692CE29DB9C3FE40448A47622C42CB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C8AD5989C9692CE29DB9C3FE40448A47622C42CB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:a6:b8:56:2f:aa:dd:c0:ee:30:6e:c5:43:50:a6:cc:3b:c8:b7:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C8AD5989C9692CE29DB9C3FE40448A47622C42CB
        Validity
            Not Before: Sep 23 20:49:37 2024 GMT
            Not After : Sep 22 20:54:37 2025 GMT
        Subject: CN=8FFDCD382F192209C986F4F0BAFB53045DF2E057
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:35:48:7d:18:ab:4a:2b:0b:b7:4f:01:1e:2c:
                    c4:8d:1b:db:32:47:e7:75:7b:b6:aa:00:f8:98:8f:
                    6c:ba:d1:aa:10:a7:6e:ec:ce:56:19:33:9e:06:04:
                    0c:d5:dd:3f:1d:e6:4e:7f:80:40:63:5a:f5:c0:68:
                    5d:61:9b:01:15:06:47:7c:99:e3:bd:09:73:4f:0f:
                    10:07:7f:b5:e6:60:5f:68:3c:6b:f1:a5:f8:04:36:
                    0c:36:a7:0a:06:e8:fe:ee:af:d5:56:c9:bd:3e:a0:
                    d0:6d:98:57:60:26:99:de:79:12:88:77:4e:34:9a:
                    6e:b6:d1:89:18:38:e5:82:40:1a:5f:92:f8:87:48:
                    b7:e8:35:11:13:01:f8:7d:e3:26:9a:9c:d3:0e:66:
                    eb:cf:d6:57:c8:e5:ae:50:be:8a:51:f6:42:5b:f6:
                    b0:b3:4b:5e:a5:ec:91:c9:b3:4f:f2:7a:40:c9:2b:
                    a6:06:c7:00:a3:fd:d0:97:80:89:ec:57:9e:91:17:
                    0d:ff:c8:3e:0b:eb:46:04:76:7f:74:1c:5f:82:94:
                    7d:d4:a5:7e:b7:9d:5d:43:c8:5f:a2:c3:1e:4c:a1:
                    29:73:86:94:dc:8a:2a:85:80:9f:50:e2:55:b1:9d:
                    d6:6c:c8:c9:2c:65:bd:db:0e:c9:fe:36:75:0e:95:
                    18:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:FD:CD:38:2F:19:22:09:C9:86:F4:F0:BA:FB:53:04:5D:F2:E0:57
            X509v3 Authority Key Identifier:
                keyid:C8:AD:59:89:C9:69:2C:E2:9D:B9:C3:FE:40:44:8A:47:62:2C:42:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3mrdiLsQBkLJi1SCnYv5QQs41PSiDfRiPMSUBiXYowmN/0/C8AD5989C9692CE29DB9C3FE40448A47622C42CB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C8AD5989C9692CE29DB9C3FE40448A47622C42CB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3mrdiLsQBkLJi1SCnYv5QQs41PSiDfRiPMSUBiXYowmN/0/3137392e39372e33322e302f32342d3234203d3e20323632373430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.97.32.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9d:ef:ec:0b:34:51:d8:68:4d:d1:2a:93:28:5f:ad:a8:55:5a:
         57:a7:36:6e:8f:ff:39:ce:be:cd:38:5b:58:4c:45:ae:e1:a3:
         90:10:dd:27:fe:33:6a:e1:aa:7f:99:da:a8:68:f2:b9:b5:f7:
         dd:24:ac:6a:e7:3b:f7:b1:23:0b:b5:8d:0b:84:02:a1:99:35:
         58:7a:f6:51:18:5c:83:81:10:17:61:c6:f6:a7:0e:32:10:a0:
         7f:55:87:fe:6f:11:fa:78:5f:b3:79:b7:a9:51:49:7f:6e:20:
         c1:b9:38:23:6b:5d:ef:49:a2:a7:d5:c6:35:89:02:97:c9:19:
         20:c2:32:44:bf:ee:cf:7e:65:93:4f:3d:92:9e:7d:14:38:27:
         3a:20:74:23:d9:74:19:d0:37:28:9f:59:71:e4:27:b4:3e:2b:
         5a:52:bd:bf:6d:86:b9:af:5b:4b:f8:6d:3c:51:f7:33:34:2a:
         52:85:bc:56:00:ff:22:0d:dc:fb:7b:23:5f:8d:90:c3:a5:22:
         50:2e:62:9d:36:70:05:e9:11:38:79:cf:2b:e2:f4:13:f1:ef:
         e3:12:75:fb:e6:60:aa:f4:78:01:d3:8f:b6:94:59:19:db:68:
         cf:57:63:d6:29:d0:3e:4e:1a:25:f4:53:e0:17:27:96:7b:77:
         b7:bd:d5:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:32:39 2024 by rpki-client on console-ams.rpki-client.org