Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3mrdiLsQBkLJi1SCnYv5QQs41PSiDfRiPMSUBiXYowmN/0/3137392e39372e34302e302f32342d3234203d3e20323632373430.roa
File:                     3137392e39372e34302e302f32342d3234203d3e20323632373430.roa (raw, json)
Hash identifier:          JtmkysW5C1mPt7BM6VJR/tPJnh2aEUmQJSRdJqCRR5Q=
Subject key identifier:   C6:BA:5F:59:8E:A3:D4:F5:6B:0A:64:A4:CE:D5:14:E2:E9:6C:45:37
Certificate issuer:       /CN=C8AD5989C9692CE29DB9C3FE40448A47622C42CB
Certificate serial:       2843ABD328C0BC993518B4465D6286B69D33472D
Authority key identifier: C8:AD:59:89:C9:69:2C:E2:9D:B9:C3:FE:40:44:8A:47:62:2C:42:CB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C8AD5989C9692CE29DB9C3FE40448A47622C42CB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3mrdiLsQBkLJi1SCnYv5QQs41PSiDfRiPMSUBiXYowmN/0/3137392e39372e34302e302f32342d3234203d3e20323632373430.roa
Signing time:             Mon 23 Sep 2024 20:54:59 +0000
ROA not before:           Mon 23 Sep 2024 20:49:59 +0000
ROA not after:            Mon 22 Sep 2025 20:54:59 +0000
asID:                     262740
IP address blocks:        179.97.40.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3mrdiLsQBkLJi1SCnYv5QQs41PSiDfRiPMSUBiXYowmN/0/C8AD5989C9692CE29DB9C3FE40448A47622C42CB.crl
                          rsync://rpki-repo.registro.br/repo/3mrdiLsQBkLJi1SCnYv5QQs41PSiDfRiPMSUBiXYowmN/0/C8AD5989C9692CE29DB9C3FE40448A47622C42CB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C8AD5989C9692CE29DB9C3FE40448A47622C42CB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:43:ab:d3:28:c0:bc:99:35:18:b4:46:5d:62:86:b6:9d:33:47:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C8AD5989C9692CE29DB9C3FE40448A47622C42CB
        Validity
            Not Before: Sep 23 20:49:59 2024 GMT
            Not After : Sep 22 20:54:59 2025 GMT
        Subject: CN=C6BA5F598EA3D4F56B0A64A4CED514E2E96C4537
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:f7:27:92:2e:ec:60:7d:3e:22:74:a0:5f:be:
                    ba:ca:ce:33:61:33:1a:73:40:a7:b2:4d:7f:9b:c3:
                    5a:df:d8:11:c6:d8:29:bd:d1:73:f0:70:c3:12:2a:
                    69:bf:c4:2a:87:c8:54:dc:29:02:47:0d:1c:56:9a:
                    72:ec:fe:b7:b0:7c:c6:6a:9b:f5:8a:6c:89:b1:ef:
                    b8:85:3f:2e:f4:88:ae:8a:71:2a:1e:f1:e4:80:29:
                    89:37:64:1d:30:d8:43:0c:60:ca:6e:93:0b:46:66:
                    13:8c:a1:9e:56:e7:10:cd:2a:24:d6:9a:3c:79:db:
                    8e:1b:da:8f:ed:3b:96:1a:f6:4e:0a:35:a1:4c:83:
                    64:da:ed:29:6b:d3:e6:f5:28:0c:33:22:06:de:2a:
                    1b:b7:8d:d5:b6:21:40:cb:fa:14:c4:63:a4:66:bc:
                    d8:60:28:ca:d0:4b:2c:7b:47:27:33:a6:71:6e:e6:
                    2f:55:b9:93:b3:46:bb:31:7d:d2:ee:01:31:33:b0:
                    08:21:dd:45:91:95:bc:c0:1b:28:9f:bb:cd:b9:e1:
                    b1:06:fc:76:74:9a:17:69:89:fd:ad:7e:7d:24:7d:
                    38:b9:a5:e7:f5:f6:30:ba:a2:44:2e:af:da:75:bd:
                    dc:b2:09:6f:dd:c5:20:5e:9c:d7:3e:6a:92:88:6c:
                    bd:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:BA:5F:59:8E:A3:D4:F5:6B:0A:64:A4:CE:D5:14:E2:E9:6C:45:37
            X509v3 Authority Key Identifier:
                keyid:C8:AD:59:89:C9:69:2C:E2:9D:B9:C3:FE:40:44:8A:47:62:2C:42:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3mrdiLsQBkLJi1SCnYv5QQs41PSiDfRiPMSUBiXYowmN/0/C8AD5989C9692CE29DB9C3FE40448A47622C42CB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C8AD5989C9692CE29DB9C3FE40448A47622C42CB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3mrdiLsQBkLJi1SCnYv5QQs41PSiDfRiPMSUBiXYowmN/0/3137392e39372e34302e302f32342d3234203d3e20323632373430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.97.40.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4f:b4:e3:aa:9b:63:5c:bc:79:67:90:39:82:dd:7d:ec:a3:58:
         a4:d9:e5:0e:5c:1c:cc:44:a4:3b:ea:72:8f:bd:e6:c9:e7:85:
         78:f0:44:f0:b4:e5:22:93:02:6f:26:56:8a:90:0b:f3:c4:f2:
         f5:05:e4:32:ee:35:15:b2:f4:a2:a7:a9:4e:fe:6d:b9:82:ac:
         2b:27:2c:46:16:ad:48:b6:bf:8d:de:5a:a2:8f:90:cd:b6:ff:
         6d:d9:c9:4e:b8:70:fa:8f:a5:c3:66:58:61:a0:51:3b:46:19:
         83:dc:fd:81:c4:9f:56:9c:b1:e3:ea:c4:db:7f:b8:66:1e:7b:
         00:43:aa:45:09:3b:c8:4e:ef:ab:42:9c:ba:3d:60:18:43:0d:
         5f:46:8f:a0:0c:ad:df:06:18:d4:e3:82:61:9d:f3:8a:2c:dc:
         a7:16:5f:ad:f2:fc:f5:32:0b:bd:c6:05:5d:86:e6:86:24:bc:
         37:bd:e7:9a:9b:51:1f:2f:e9:f8:54:d9:65:95:59:d5:f1:47:
         b1:65:ef:37:56:04:35:01:34:0b:42:a6:74:21:29:e1:b5:43:
         d5:61:ea:d7:ff:f3:ae:aa:ea:3a:64:6a:60:cd:26:14:9d:af:
         02:48:fb:d7:88:99:0c:ba:f9:eb:6c:8b:ce:f2:3c:76:77:67:
         72:04:1f:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 09:50:01 2024 by rpki-client on console-fra.rpki-client.org