Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3mrdiLsQBkLJi1SCnYv5QQs41PSiDfRiPMSUBiXYowmN/0/3137392e39372e33382e302f32342d3234203d3e20323632373430.roa
File:                     3137392e39372e33382e302f32342d3234203d3e20323632373430.roa (raw, json)
Hash identifier:          a29S6mDpCznwfWG5aCqOO5rd7aNHT3MAZBXvjn88410=
Subject key identifier:   CC:43:BF:C1:30:EB:CC:0B:A4:EA:71:8C:85:A7:F4:AD:06:0A:39:41
Certificate issuer:       /CN=C8AD5989C9692CE29DB9C3FE40448A47622C42CB
Certificate serial:       6C37B6C6D8479E7D59225B9F9386BB425955231B
Authority key identifier: C8:AD:59:89:C9:69:2C:E2:9D:B9:C3:FE:40:44:8A:47:62:2C:42:CB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C8AD5989C9692CE29DB9C3FE40448A47622C42CB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3mrdiLsQBkLJi1SCnYv5QQs41PSiDfRiPMSUBiXYowmN/0/3137392e39372e33382e302f32342d3234203d3e20323632373430.roa
Signing time:             Mon 23 Sep 2024 20:55:01 +0000
ROA not before:           Mon 23 Sep 2024 20:50:01 +0000
ROA not after:            Mon 22 Sep 2025 20:55:01 +0000
asID:                     262740
IP address blocks:        179.97.38.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3mrdiLsQBkLJi1SCnYv5QQs41PSiDfRiPMSUBiXYowmN/0/C8AD5989C9692CE29DB9C3FE40448A47622C42CB.crl
                          rsync://rpki-repo.registro.br/repo/3mrdiLsQBkLJi1SCnYv5QQs41PSiDfRiPMSUBiXYowmN/0/C8AD5989C9692CE29DB9C3FE40448A47622C42CB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C8AD5989C9692CE29DB9C3FE40448A47622C42CB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:37:b6:c6:d8:47:9e:7d:59:22:5b:9f:93:86:bb:42:59:55:23:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C8AD5989C9692CE29DB9C3FE40448A47622C42CB
        Validity
            Not Before: Sep 23 20:50:01 2024 GMT
            Not After : Sep 22 20:55:01 2025 GMT
        Subject: CN=CC43BFC130EBCC0BA4EA718C85A7F4AD060A3941
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:94:40:fc:b2:9e:7a:c5:ff:77:8f:6d:d4:f6:
                    38:2c:d3:e7:80:2f:21:a0:28:00:b0:e0:90:db:b6:
                    d5:21:9e:e7:d0:53:9b:33:1d:56:de:79:f7:ab:0f:
                    02:1f:52:a5:c3:a1:c5:c5:a1:36:21:49:38:e5:81:
                    d8:48:09:1a:cf:da:f3:a5:44:2b:71:ef:6f:b3:6a:
                    0c:a0:83:22:38:54:43:e9:8b:c3:a0:18:60:72:67:
                    ec:25:54:b0:7d:fe:fc:be:36:49:59:fc:ba:11:cb:
                    46:20:c7:61:71:06:3b:14:93:e9:fb:ab:e8:df:58:
                    d5:7b:cf:72:bb:d7:ae:64:ed:ca:92:13:25:50:03:
                    af:8b:5b:5a:e5:b4:09:e2:25:ca:79:8e:ea:d3:88:
                    c2:65:8d:0f:5e:2d:04:cc:b6:ab:87:0b:a5:78:fd:
                    eb:c6:1d:09:d4:1a:35:05:ef:f2:e7:76:6c:64:fb:
                    6c:64:d3:82:07:5c:3d:03:54:21:e5:cb:0e:ed:73:
                    6e:b0:17:f0:3d:2c:6f:e9:d3:17:b6:96:4e:51:7d:
                    87:54:aa:f2:97:74:d3:36:78:98:05:5b:81:6c:4d:
                    aa:3f:41:1d:f7:29:f9:c8:21:a9:4d:23:04:99:00:
                    50:2f:6f:7b:91:dc:40:0e:6e:fd:0e:f0:69:03:2b:
                    46:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:43:BF:C1:30:EB:CC:0B:A4:EA:71:8C:85:A7:F4:AD:06:0A:39:41
            X509v3 Authority Key Identifier:
                keyid:C8:AD:59:89:C9:69:2C:E2:9D:B9:C3:FE:40:44:8A:47:62:2C:42:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3mrdiLsQBkLJi1SCnYv5QQs41PSiDfRiPMSUBiXYowmN/0/C8AD5989C9692CE29DB9C3FE40448A47622C42CB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C8AD5989C9692CE29DB9C3FE40448A47622C42CB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3mrdiLsQBkLJi1SCnYv5QQs41PSiDfRiPMSUBiXYowmN/0/3137392e39372e33382e302f32342d3234203d3e20323632373430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.97.38.0/24

    Signature Algorithm: sha256WithRSAEncryption
         00:af:4e:c4:73:d3:d0:1b:a0:07:0c:1b:56:d6:56:cb:a2:66:
         f3:e4:eb:cc:8d:db:a5:9c:90:e6:8e:b5:5c:80:2e:52:cd:d4:
         8a:7e:7e:a9:35:fa:fd:3b:1a:98:eb:e1:88:71:fc:cc:6c:70:
         33:75:99:28:05:32:74:b1:af:c2:f3:bf:4a:52:58:38:95:40:
         bc:19:a7:b3:38:f5:8e:d4:37:e2:70:1d:c5:cc:5c:0e:7e:07:
         13:c1:08:ab:e3:6b:89:e3:75:29:2d:90:28:e2:40:82:c7:03:
         23:3c:25:5f:d0:2c:8c:ee:5b:19:45:77:2d:56:e4:ba:fa:46:
         94:e3:c3:3c:aa:cb:fd:97:c7:cf:40:19:cb:bf:9f:43:9c:6e:
         51:4e:45:18:73:9d:14:16:6f:f8:43:36:fd:f3:f9:f3:50:1c:
         10:1b:cb:99:9d:09:96:7c:82:17:d8:70:ea:31:b2:84:1e:3a:
         93:08:4d:b6:6b:9b:f1:d1:0d:fa:96:37:f3:f5:a8:d1:74:67:
         ad:4a:8d:eb:b4:0d:5d:93:52:ef:0e:b2:0c:b8:f0:89:ee:ab:
         5e:a7:3b:10:05:47:11:a3:ba:0f:a2:be:80:d9:1b:0a:09:54:
         ad:dc:7c:23:75:c0:60:e3:05:aa:f3:50:03:eb:93:37:eb:1f:
         3e:de:7d:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 09:50:01 2024 by rpki-client on console-fra.rpki-client.org