Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3mrdiLsQBkLJi1SCnYv5QQs41PSiDfRiPMSUBiXYowmN/0/3137392e39372e33352e302f32342d3234203d3e20323632373430.roa
File:                     3137392e39372e33352e302f32342d3234203d3e20323632373430.roa (raw, json)
Hash identifier:          scw69YvDf/t5zPrGPMxf69IKqSRU4ucJvqOrafVTxlE=
Subject key identifier:   43:4E:A9:3A:72:97:C2:3F:9A:90:1F:DD:18:15:1E:8B:B2:6E:1E:F0
Certificate issuer:       /CN=C8AD5989C9692CE29DB9C3FE40448A47622C42CB
Certificate serial:       5ECAFEF4CD10BC2EAA77516AB2CE49CCFE3A8D15
Authority key identifier: C8:AD:59:89:C9:69:2C:E2:9D:B9:C3:FE:40:44:8A:47:62:2C:42:CB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C8AD5989C9692CE29DB9C3FE40448A47622C42CB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3mrdiLsQBkLJi1SCnYv5QQs41PSiDfRiPMSUBiXYowmN/0/3137392e39372e33352e302f32342d3234203d3e20323632373430.roa
Signing time:             Mon 23 Sep 2024 20:54:36 +0000
ROA not before:           Mon 23 Sep 2024 20:49:36 +0000
ROA not after:            Mon 22 Sep 2025 20:54:36 +0000
asID:                     262740
IP address blocks:        179.97.35.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3mrdiLsQBkLJi1SCnYv5QQs41PSiDfRiPMSUBiXYowmN/0/C8AD5989C9692CE29DB9C3FE40448A47622C42CB.crl
                          rsync://rpki-repo.registro.br/repo/3mrdiLsQBkLJi1SCnYv5QQs41PSiDfRiPMSUBiXYowmN/0/C8AD5989C9692CE29DB9C3FE40448A47622C42CB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C8AD5989C9692CE29DB9C3FE40448A47622C42CB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:ca:fe:f4:cd:10:bc:2e:aa:77:51:6a:b2:ce:49:cc:fe:3a:8d:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C8AD5989C9692CE29DB9C3FE40448A47622C42CB
        Validity
            Not Before: Sep 23 20:49:36 2024 GMT
            Not After : Sep 22 20:54:36 2025 GMT
        Subject: CN=434EA93A7297C23F9A901FDD18151E8BB26E1EF0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:e6:6e:5d:68:b3:68:b8:50:4c:82:5f:67:a0:
                    5a:36:4a:b5:9b:0c:01:e8:ac:f0:a6:97:54:8d:0f:
                    9a:a6:12:0f:2a:36:57:e1:a4:eb:85:bd:dc:b7:99:
                    d2:d4:80:ef:7e:ad:a7:65:b2:0a:0a:54:53:7a:a3:
                    d4:70:54:91:46:d1:3d:47:f6:4c:bd:df:83:66:4f:
                    08:f8:27:73:80:c1:3d:e2:14:62:90:90:a1:35:e1:
                    d9:23:6e:ea:30:a2:88:c6:2b:25:95:69:d3:a1:80:
                    a5:ad:f4:bf:8f:c3:b2:4c:f0:75:1d:00:13:11:d2:
                    e8:70:4d:e1:55:20:7b:71:ed:14:e2:16:24:30:4e:
                    13:00:d9:ff:12:80:38:65:4d:0b:1c:70:66:2e:4e:
                    cd:d3:d5:b0:c9:06:eb:af:49:2b:3f:b6:49:25:03:
                    dd:be:c9:6c:7e:f8:16:84:c6:c4:c0:0c:bc:64:47:
                    f1:d0:63:74:ea:6e:74:37:ff:0a:d2:5f:aa:14:70:
                    ff:df:83:3e:72:0d:21:96:0e:65:4a:40:29:b5:ac:
                    ff:4b:9f:23:99:92:29:7f:0f:90:54:5a:3f:4b:c5:
                    2b:57:06:21:02:ad:90:84:0d:c6:db:2d:47:6b:8c:
                    47:84:49:f3:8b:f7:64:e8:e9:68:c3:fc:bc:11:d8:
                    55:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:4E:A9:3A:72:97:C2:3F:9A:90:1F:DD:18:15:1E:8B:B2:6E:1E:F0
            X509v3 Authority Key Identifier:
                keyid:C8:AD:59:89:C9:69:2C:E2:9D:B9:C3:FE:40:44:8A:47:62:2C:42:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3mrdiLsQBkLJi1SCnYv5QQs41PSiDfRiPMSUBiXYowmN/0/C8AD5989C9692CE29DB9C3FE40448A47622C42CB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C8AD5989C9692CE29DB9C3FE40448A47622C42CB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3mrdiLsQBkLJi1SCnYv5QQs41PSiDfRiPMSUBiXYowmN/0/3137392e39372e33352e302f32342d3234203d3e20323632373430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.97.35.0/24

    Signature Algorithm: sha256WithRSAEncryption
         64:12:e8:0f:78:97:2e:9a:db:72:d8:4f:9d:44:e0:2e:44:3b:
         60:ad:fb:f6:11:b6:a8:8c:b3:4a:d4:05:99:57:b8:c3:f6:ca:
         36:91:66:fc:e3:fd:4f:12:b4:ad:81:51:de:f9:fe:c9:a1:1a:
         f3:08:2a:d4:ec:4a:bf:7c:c8:87:01:04:3d:3c:14:f2:94:32:
         00:55:e9:af:13:06:b7:69:6c:db:37:b5:ce:4b:89:c1:70:06:
         c6:77:b0:8b:fe:8b:57:fa:4a:b8:f8:3c:49:e5:eb:a7:88:d2:
         6a:cb:1d:f1:e9:ae:67:5d:eb:df:ce:ca:51:f4:08:29:3e:1d:
         b8:43:99:4f:45:47:7b:80:e1:4a:ef:ea:a7:0c:71:ba:66:fa:
         c8:0f:a5:b2:e1:11:23:cd:e3:df:0c:27:b1:7f:17:a3:ed:4c:
         c0:6c:d3:61:8e:be:7b:59:56:c0:8e:5a:8b:86:6b:5b:7e:aa:
         32:f0:59:95:99:98:cd:86:01:e5:c9:40:54:01:d9:ea:f8:e5:
         db:a9:2e:5f:a2:09:9a:89:3a:c2:ed:79:04:1d:e6:cd:59:b5:
         5b:d6:a7:d5:d0:b3:6d:e0:df:85:1d:3e:d8:74:49:a8:9e:2f:
         b0:6b:01:5e:30:31:2e:0b:6f:54:8e:b1:67:6b:7f:29:94:dd:
         49:87:e8:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 09:50:01 2024 by rpki-client on console-fra.rpki-client.org