Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3mrdiLsQBkLJi1SCnYv5QQs41PSiDfRiPMSUBiXYowmN/0/3137392e39372e33362e302f32322d3232203d3e20323632373430.roa
File:                     3137392e39372e33362e302f32322d3232203d3e20323632373430.roa (raw, json)
Hash identifier:          79PlSklkqmt8Mi4gExK2Mbku2De7i3/kKu+u730oJuE=
Subject key identifier:   A6:0B:70:AA:54:DE:93:2E:5D:92:4C:DF:BE:FA:AA:1E:7D:43:A3:E4
Certificate issuer:       /CN=C8AD5989C9692CE29DB9C3FE40448A47622C42CB
Certificate serial:       50B4448DDE6D7EC0A21623B22D0BD8C969E3FCAB
Authority key identifier: C8:AD:59:89:C9:69:2C:E2:9D:B9:C3:FE:40:44:8A:47:62:2C:42:CB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C8AD5989C9692CE29DB9C3FE40448A47622C42CB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3mrdiLsQBkLJi1SCnYv5QQs41PSiDfRiPMSUBiXYowmN/0/3137392e39372e33362e302f32322d3232203d3e20323632373430.roa
Signing time:             Mon 23 Sep 2024 20:54:35 +0000
ROA not before:           Mon 23 Sep 2024 20:49:35 +0000
ROA not after:            Mon 22 Sep 2025 20:54:35 +0000
asID:                     262740
IP address blocks:        179.97.36.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3mrdiLsQBkLJi1SCnYv5QQs41PSiDfRiPMSUBiXYowmN/0/C8AD5989C9692CE29DB9C3FE40448A47622C42CB.crl
                          rsync://rpki-repo.registro.br/repo/3mrdiLsQBkLJi1SCnYv5QQs41PSiDfRiPMSUBiXYowmN/0/C8AD5989C9692CE29DB9C3FE40448A47622C42CB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C8AD5989C9692CE29DB9C3FE40448A47622C42CB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:b4:44:8d:de:6d:7e:c0:a2:16:23:b2:2d:0b:d8:c9:69:e3:fc:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C8AD5989C9692CE29DB9C3FE40448A47622C42CB
        Validity
            Not Before: Sep 23 20:49:35 2024 GMT
            Not After : Sep 22 20:54:35 2025 GMT
        Subject: CN=A60B70AA54DE932E5D924CDFBEFAAA1E7D43A3E4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:cc:0c:40:a3:22:bd:6f:f6:f3:27:ca:c4:3b:
                    18:1b:de:eb:45:0a:cb:6a:30:55:a4:cc:0d:c9:9c:
                    2c:d7:43:e8:7d:b3:ee:9d:ee:b4:7d:b4:a8:97:78:
                    75:b8:ea:e1:f9:5a:07:28:d9:1f:21:02:90:92:08:
                    4e:51:9f:22:71:90:7e:c6:32:6e:15:6c:99:33:b7:
                    75:8a:88:02:48:30:d0:03:bc:9a:a4:30:c6:e2:34:
                    48:8e:ce:a9:d6:5a:c7:4c:87:ae:33:84:40:da:7f:
                    05:b0:d6:94:74:75:41:b4:f5:36:4d:0c:12:2c:87:
                    11:8a:db:d5:ae:40:8c:29:52:29:8d:ba:fc:1d:ba:
                    f8:5c:9d:44:bb:68:5e:65:43:0a:e2:56:aa:82:8a:
                    db:8b:35:c5:e4:96:24:bd:2c:2f:45:11:1c:43:e8:
                    ef:5c:de:d0:1e:f7:90:02:03:08:4e:65:a2:f7:f8:
                    39:6f:f2:69:8c:45:bc:d0:b0:d8:39:5b:71:26:78:
                    2e:b3:3b:b8:67:1b:b0:a3:39:16:28:a3:3a:20:26:
                    ab:0d:da:4c:f6:26:fa:cf:91:75:59:01:ee:e2:f6:
                    b3:89:53:b5:10:29:a1:3b:48:d9:56:c9:33:cd:16:
                    07:8a:ba:57:b2:ee:0c:ca:c0:72:66:e8:43:fc:10:
                    71:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:0B:70:AA:54:DE:93:2E:5D:92:4C:DF:BE:FA:AA:1E:7D:43:A3:E4
            X509v3 Authority Key Identifier:
                keyid:C8:AD:59:89:C9:69:2C:E2:9D:B9:C3:FE:40:44:8A:47:62:2C:42:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3mrdiLsQBkLJi1SCnYv5QQs41PSiDfRiPMSUBiXYowmN/0/C8AD5989C9692CE29DB9C3FE40448A47622C42CB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C8AD5989C9692CE29DB9C3FE40448A47622C42CB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3mrdiLsQBkLJi1SCnYv5QQs41PSiDfRiPMSUBiXYowmN/0/3137392e39372e33362e302f32322d3232203d3e20323632373430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.97.36.0/22

    Signature Algorithm: sha256WithRSAEncryption
         91:d0:88:76:3d:90:bd:d5:c0:82:83:f8:9e:58:c7:cc:e2:9e:
         37:ca:a1:0c:99:75:fb:7b:3e:a3:5f:5e:31:a0:1d:1a:d9:d9:
         8a:74:41:61:c6:38:e8:36:4e:63:67:7c:e3:a6:20:61:63:d1:
         0a:37:95:4f:11:ed:e5:38:47:81:83:9a:58:35:60:18:df:cc:
         e4:9f:0a:2f:61:60:75:9d:ff:36:37:66:2e:62:90:26:f8:69:
         47:a2:2a:a2:58:83:15:75:9e:cc:bd:8c:0f:00:2e:57:a5:6a:
         b5:fe:3b:99:15:86:ed:95:b1:78:96:cf:79:89:09:78:ab:d8:
         28:c3:0e:1c:b2:48:c0:28:37:71:7e:53:a4:5c:5a:1e:97:5b:
         e7:25:85:1d:b1:c6:bd:ad:88:1b:6f:37:e6:62:e6:99:6e:4f:
         a3:6a:ce:e9:96:4c:b7:b8:5c:e3:68:78:d7:cd:df:32:f3:89:
         32:45:70:34:3a:db:c7:fc:c7:8b:fd:fb:f2:51:17:8d:18:e6:
         15:cf:07:05:58:92:52:97:a6:88:df:3d:01:3a:2f:71:05:17:
         b7:f4:ea:ae:63:57:92:8a:21:b5:02:26:3a:65:37:53:95:5a:
         89:11:4c:00:4c:bc:71:83:a7:17:3d:36:e0:17:7a:22:47:84:
         7d:83:5f:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:32:39 2024 by rpki-client on console-ams.rpki-client.org