Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3mrdiLsQBkLJi1SCnYv5QQs41PSiDfRiPMSUBiXYowmN/0/3137392e39372e34302e302f32332d3233203d3e20323632373430.roa
File:                     3137392e39372e34302e302f32332d3233203d3e20323632373430.roa (raw, json)
Hash identifier:          518gVA6WO5rTmd0I3FBLYOah1J6AAd0bvdMeKgOiD/8=
Subject key identifier:   ED:48:4A:48:BF:99:BF:D1:A3:C9:6E:A7:10:75:80:85:75:57:56:88
Certificate issuer:       /CN=C8AD5989C9692CE29DB9C3FE40448A47622C42CB
Certificate serial:       67B7DD05C5B2B82CD23CFBC77F0AD28C3DC6F8E6
Authority key identifier: C8:AD:59:89:C9:69:2C:E2:9D:B9:C3:FE:40:44:8A:47:62:2C:42:CB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C8AD5989C9692CE29DB9C3FE40448A47622C42CB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3mrdiLsQBkLJi1SCnYv5QQs41PSiDfRiPMSUBiXYowmN/0/3137392e39372e34302e302f32332d3233203d3e20323632373430.roa
Signing time:             Mon 23 Sep 2024 20:54:36 +0000
ROA not before:           Mon 23 Sep 2024 20:49:36 +0000
ROA not after:            Mon 22 Sep 2025 20:54:36 +0000
asID:                     262740
IP address blocks:        179.97.40.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3mrdiLsQBkLJi1SCnYv5QQs41PSiDfRiPMSUBiXYowmN/0/C8AD5989C9692CE29DB9C3FE40448A47622C42CB.crl
                          rsync://rpki-repo.registro.br/repo/3mrdiLsQBkLJi1SCnYv5QQs41PSiDfRiPMSUBiXYowmN/0/C8AD5989C9692CE29DB9C3FE40448A47622C42CB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C8AD5989C9692CE29DB9C3FE40448A47622C42CB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:b7:dd:05:c5:b2:b8:2c:d2:3c:fb:c7:7f:0a:d2:8c:3d:c6:f8:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C8AD5989C9692CE29DB9C3FE40448A47622C42CB
        Validity
            Not Before: Sep 23 20:49:36 2024 GMT
            Not After : Sep 22 20:54:36 2025 GMT
        Subject: CN=ED484A48BF99BFD1A3C96EA71075808575575688
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:98:10:fe:24:b0:f9:3e:1f:30:53:6d:f7:ac:
                    f7:e7:dd:0c:ff:50:6d:ca:75:3a:4b:c2:ac:9e:a2:
                    36:69:53:e6:6c:81:00:ca:fe:06:78:38:8c:cc:75:
                    2d:dc:64:b9:60:76:37:b3:5f:5f:f9:d8:2e:f2:56:
                    da:b2:20:f8:28:57:81:eb:66:39:bf:ce:3a:72:bb:
                    18:87:67:5d:c1:23:af:7d:01:68:a5:35:89:7a:23:
                    ee:b2:21:8a:8e:59:c5:dd:16:91:ee:fa:0e:99:e9:
                    dd:c3:60:bb:b3:f9:5b:12:b9:19:d5:c6:84:d6:db:
                    04:cc:9c:f0:df:5c:9e:53:fd:13:10:6f:99:59:a2:
                    2d:e6:34:22:04:55:9c:7f:f0:74:eb:e7:27:32:54:
                    f4:a3:4d:8f:bc:00:45:35:a1:aa:81:ba:1a:b5:14:
                    65:87:f3:cd:4e:a1:8d:52:e6:02:3a:c5:80:45:8b:
                    8b:4c:98:b9:b4:05:44:4e:8f:99:af:c0:f5:6e:dd:
                    61:95:36:a9:d3:c3:76:60:ce:e7:14:80:6b:5f:37:
                    fa:5c:0c:39:bb:61:5c:11:61:01:e2:bc:f4:ee:45:
                    53:87:6c:41:5b:ff:0e:7f:3c:71:cd:4b:68:94:14:
                    b6:b7:7c:1d:51:90:b1:71:09:5d:84:a7:22:89:30:
                    80:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:48:4A:48:BF:99:BF:D1:A3:C9:6E:A7:10:75:80:85:75:57:56:88
            X509v3 Authority Key Identifier:
                keyid:C8:AD:59:89:C9:69:2C:E2:9D:B9:C3:FE:40:44:8A:47:62:2C:42:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3mrdiLsQBkLJi1SCnYv5QQs41PSiDfRiPMSUBiXYowmN/0/C8AD5989C9692CE29DB9C3FE40448A47622C42CB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C8AD5989C9692CE29DB9C3FE40448A47622C42CB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3mrdiLsQBkLJi1SCnYv5QQs41PSiDfRiPMSUBiXYowmN/0/3137392e39372e34302e302f32332d3233203d3e20323632373430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.97.40.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0f:8e:b3:ef:77:98:0d:13:06:a6:f1:f7:f9:c5:41:2d:40:a5:
         59:24:fe:fd:52:60:3d:d6:1d:86:93:ec:83:75:36:d9:4c:91:
         c8:49:09:2e:a5:35:d8:1d:b3:5a:7e:8a:cf:09:d8:db:53:a1:
         61:b8:6a:f4:df:43:d2:ec:8f:71:f6:5e:ca:f4:cc:d4:66:cd:
         91:8b:52:f0:81:08:8b:74:d1:d5:8d:cc:c9:5c:c6:e8:27:13:
         43:b8:1d:5d:3d:58:ec:d7:0a:cd:f5:eb:36:93:c8:cf:1f:64:
         d7:c8:e7:9b:ec:0b:cd:83:a9:59:97:f1:ad:fb:3e:89:64:93:
         cd:08:a2:d0:94:6d:54:85:75:c6:20:f9:59:bc:a7:78:6e:0d:
         2d:64:c1:f7:af:88:f0:bb:57:2d:1e:fb:2e:82:7a:c9:30:b2:
         03:f8:4b:1e:8d:b3:9c:3a:8c:45:a1:56:33:30:c5:8c:9a:9f:
         ea:54:7c:94:c7:be:d1:d7:3d:9b:4f:ee:0f:7e:dc:0b:55:51:
         8c:79:45:60:73:82:80:8a:3e:b4:f8:22:d7:ec:da:46:a4:d4:
         a6:95:7d:66:38:62:d1:36:b3:71:99:d4:9e:8f:19:ca:cb:3c:
         95:26:28:bb:df:89:f5:6e:a7:a4:77:0c:4d:f6:d0:e1:68:d6:
         99:f5:78:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 09:50:01 2024 by rpki-client on console-fra.rpki-client.org