Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3mrdiLsQBkLJi1SCnYv5QQs41PSiDfRiPMSUBiXYowmN/0/3137392e39372e34342e302f32332d3233203d3e20323632373430.roa
File:                     3137392e39372e34342e302f32332d3233203d3e20323632373430.roa (raw, json)
Hash identifier:          ltQnQycmmeLGQw2I4RMolwoYUAtRE52no8ZtK4rTgBM=
Subject key identifier:   ED:63:49:35:CD:85:EB:93:27:CB:53:FD:B4:77:14:E1:EA:01:36:EE
Certificate issuer:       /CN=C8AD5989C9692CE29DB9C3FE40448A47622C42CB
Certificate serial:       435F504ABC94D290F5C52D0F2F2BB84436CE2B78
Authority key identifier: C8:AD:59:89:C9:69:2C:E2:9D:B9:C3:FE:40:44:8A:47:62:2C:42:CB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C8AD5989C9692CE29DB9C3FE40448A47622C42CB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3mrdiLsQBkLJi1SCnYv5QQs41PSiDfRiPMSUBiXYowmN/0/3137392e39372e34342e302f32332d3233203d3e20323632373430.roa
Signing time:             Mon 23 Sep 2024 20:54:48 +0000
ROA not before:           Mon 23 Sep 2024 20:49:48 +0000
ROA not after:            Mon 22 Sep 2025 20:54:48 +0000
asID:                     262740
IP address blocks:        179.97.44.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3mrdiLsQBkLJi1SCnYv5QQs41PSiDfRiPMSUBiXYowmN/0/C8AD5989C9692CE29DB9C3FE40448A47622C42CB.crl
                          rsync://rpki-repo.registro.br/repo/3mrdiLsQBkLJi1SCnYv5QQs41PSiDfRiPMSUBiXYowmN/0/C8AD5989C9692CE29DB9C3FE40448A47622C42CB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C8AD5989C9692CE29DB9C3FE40448A47622C42CB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:5f:50:4a:bc:94:d2:90:f5:c5:2d:0f:2f:2b:b8:44:36:ce:2b:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C8AD5989C9692CE29DB9C3FE40448A47622C42CB
        Validity
            Not Before: Sep 23 20:49:48 2024 GMT
            Not After : Sep 22 20:54:48 2025 GMT
        Subject: CN=ED634935CD85EB9327CB53FDB47714E1EA0136EE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:8d:59:eb:61:70:71:b0:05:64:ad:40:82:71:
                    f1:89:c9:18:9f:58:53:5a:be:cc:87:a2:ea:a2:3d:
                    5b:f3:a3:61:a1:fd:d8:e7:fe:bd:49:c0:f0:ee:00:
                    36:55:96:92:69:4d:ba:75:4f:d2:47:13:d1:4d:82:
                    d7:f6:86:56:89:e5:df:44:69:20:73:d6:dc:d8:7a:
                    e3:c6:c1:d7:68:8f:09:04:0a:6d:9f:a0:d4:9c:21:
                    d9:16:42:a1:5b:69:dc:75:df:7a:bf:7b:10:36:7c:
                    88:51:25:ed:7c:8e:bc:92:57:f0:7f:11:a4:02:c2:
                    cd:b8:06:a3:53:e8:91:dd:ce:b4:7a:d0:c6:fe:e4:
                    9c:8e:a8:13:aa:c7:6d:c3:ad:4b:21:d5:8d:51:d5:
                    97:7c:27:b5:15:c3:70:16:28:cf:d4:1f:ce:48:9a:
                    3c:67:dc:e1:87:e7:ba:b3:83:3a:40:e7:39:21:f0:
                    ef:0c:e9:53:cb:61:fd:61:da:da:b2:76:2d:ac:ab:
                    58:8b:84:3e:7c:e4:38:72:c4:b6:b0:d2:95:28:1e:
                    88:b4:5f:a2:fa:22:a1:3c:11:a8:7d:f0:9c:82:08:
                    3d:9a:84:20:84:e0:13:99:51:df:30:b9:05:47:f2:
                    e2:d5:d2:03:be:3e:48:49:41:0c:fc:68:01:e4:95:
                    97:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:63:49:35:CD:85:EB:93:27:CB:53:FD:B4:77:14:E1:EA:01:36:EE
            X509v3 Authority Key Identifier:
                keyid:C8:AD:59:89:C9:69:2C:E2:9D:B9:C3:FE:40:44:8A:47:62:2C:42:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3mrdiLsQBkLJi1SCnYv5QQs41PSiDfRiPMSUBiXYowmN/0/C8AD5989C9692CE29DB9C3FE40448A47622C42CB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C8AD5989C9692CE29DB9C3FE40448A47622C42CB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3mrdiLsQBkLJi1SCnYv5QQs41PSiDfRiPMSUBiXYowmN/0/3137392e39372e34342e302f32332d3233203d3e20323632373430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.97.44.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a1:88:da:d6:88:1f:8b:f7:f1:80:2f:e3:8f:a9:44:56:21:f2:
         30:31:98:e3:55:65:6a:37:ee:f5:5a:26:ee:d0:f7:00:83:6d:
         aa:28:d4:a7:98:4c:65:b5:c7:2e:72:98:93:0e:d6:f4:57:fb:
         16:ae:9a:4e:1e:f6:bd:bc:cb:88:fc:e9:02:5d:d6:fc:19:53:
         61:ad:1e:55:10:41:ba:b9:ac:89:e1:e4:44:64:4a:0a:6d:5c:
         26:22:14:7f:8a:6d:98:e2:cc:f0:16:fa:b7:1f:3c:39:ba:ea:
         95:86:78:ff:c7:5f:df:1a:91:a1:50:5d:7a:69:0b:ad:74:56:
         b4:42:a8:f6:f9:74:56:14:c7:dc:29:41:bc:43:d7:ca:79:f3:
         58:61:33:db:3a:71:3a:be:ae:2c:93:78:89:71:c9:b2:be:bb:
         d5:2e:da:f5:e1:54:48:83:9c:75:02:d7:18:b7:b6:bb:8d:b7:
         a9:a8:86:06:3c:46:2c:37:e2:8c:65:ac:09:15:f0:ca:fc:1a:
         8b:d2:e1:3c:c5:ba:cf:bf:0b:a7:3b:96:30:95:74:9e:17:4f:
         6f:39:27:32:1a:ca:83:6d:c2:40:01:be:4d:b9:fd:af:98:bd:
         4a:8f:0b:64:73:af:ec:cd:be:b4:e6:d4:44:a1:c2:bc:b3:13:
         85:cd:47:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:32:39 2024 by rpki-client on console-ams.rpki-client.org