Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3mrdiLsQBkLJi1SCnYv5QQs41PSiDfRiPMSUBiXYowmN/0/3137392e39372e34372e302f32342d3234203d3e20323632373430.roa
File:                     3137392e39372e34372e302f32342d3234203d3e20323632373430.roa (raw, json)
Hash identifier:          GrW693+CzTA8IsCXQw4UmqJw/IIWwbdPnZob3TfC1rk=
Subject key identifier:   25:16:43:E9:64:5C:B5:D0:B3:95:B6:61:B3:6E:76:E8:8E:9B:B2:AC
Certificate issuer:       /CN=C8AD5989C9692CE29DB9C3FE40448A47622C42CB
Certificate serial:       7606DE2291E1AA8D67A5A51F3D82774FB99A2080
Authority key identifier: C8:AD:59:89:C9:69:2C:E2:9D:B9:C3:FE:40:44:8A:47:62:2C:42:CB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C8AD5989C9692CE29DB9C3FE40448A47622C42CB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3mrdiLsQBkLJi1SCnYv5QQs41PSiDfRiPMSUBiXYowmN/0/3137392e39372e34372e302f32342d3234203d3e20323632373430.roa
Signing time:             Mon 23 Sep 2024 20:54:34 +0000
ROA not before:           Mon 23 Sep 2024 20:49:34 +0000
ROA not after:            Mon 22 Sep 2025 20:54:34 +0000
asID:                     262740
IP address blocks:        179.97.47.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3mrdiLsQBkLJi1SCnYv5QQs41PSiDfRiPMSUBiXYowmN/0/C8AD5989C9692CE29DB9C3FE40448A47622C42CB.crl
                          rsync://rpki-repo.registro.br/repo/3mrdiLsQBkLJi1SCnYv5QQs41PSiDfRiPMSUBiXYowmN/0/C8AD5989C9692CE29DB9C3FE40448A47622C42CB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C8AD5989C9692CE29DB9C3FE40448A47622C42CB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:06:de:22:91:e1:aa:8d:67:a5:a5:1f:3d:82:77:4f:b9:9a:20:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C8AD5989C9692CE29DB9C3FE40448A47622C42CB
        Validity
            Not Before: Sep 23 20:49:34 2024 GMT
            Not After : Sep 22 20:54:34 2025 GMT
        Subject: CN=251643E9645CB5D0B395B661B36E76E88E9BB2AC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:e2:14:cc:c1:7a:76:d9:98:c7:e0:62:1b:01:
                    d1:79:a3:69:67:23:81:77:5a:60:09:92:b1:8e:29:
                    96:dc:34:2f:4c:65:c1:bf:19:16:6a:87:39:42:8f:
                    3c:3b:d1:b7:3e:8b:59:65:4a:82:55:ea:57:d4:9a:
                    cc:e9:13:88:cd:ed:dd:46:06:7b:56:80:cc:39:45:
                    e2:79:cf:18:08:5d:e5:ee:17:d4:74:ec:5f:bc:ea:
                    2e:e5:a8:21:d1:7a:d2:e6:a3:20:0e:52:70:ce:72:
                    36:c2:b6:02:f4:c3:84:e3:29:81:42:04:57:eb:e5:
                    41:12:d7:4b:c8:90:da:91:c2:d5:61:f2:b2:77:34:
                    ec:10:eb:de:a2:14:67:e2:57:8f:75:f2:bc:6e:77:
                    68:ae:7d:7e:04:81:13:61:45:ef:37:8b:9d:5d:03:
                    ba:7a:a2:52:10:2f:6a:d2:40:78:ac:15:8d:10:88:
                    3e:88:f6:25:37:0d:d0:cb:f2:d6:02:af:dc:2c:22:
                    ab:e7:73:f6:9a:c6:04:e0:f4:30:47:22:18:1e:17:
                    e8:04:82:35:44:ce:4c:7d:04:23:44:c1:76:dd:aa:
                    31:e2:1e:64:40:ef:69:f7:54:19:3a:39:1e:09:52:
                    6f:2a:9e:21:9f:c6:6c:53:ae:5c:f2:a9:a8:cf:7c:
                    e5:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:16:43:E9:64:5C:B5:D0:B3:95:B6:61:B3:6E:76:E8:8E:9B:B2:AC
            X509v3 Authority Key Identifier:
                keyid:C8:AD:59:89:C9:69:2C:E2:9D:B9:C3:FE:40:44:8A:47:62:2C:42:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3mrdiLsQBkLJi1SCnYv5QQs41PSiDfRiPMSUBiXYowmN/0/C8AD5989C9692CE29DB9C3FE40448A47622C42CB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C8AD5989C9692CE29DB9C3FE40448A47622C42CB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3mrdiLsQBkLJi1SCnYv5QQs41PSiDfRiPMSUBiXYowmN/0/3137392e39372e34372e302f32342d3234203d3e20323632373430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.97.47.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b1:85:a7:e3:0d:0a:c4:16:be:96:9a:0d:eb:a2:72:db:d8:e3:
         fe:cf:b6:23:c4:dd:6f:bd:7c:03:03:8a:48:51:8f:4f:5f:cc:
         1f:ec:53:06:24:5b:32:30:d6:27:79:99:a8:9c:31:ed:1d:81:
         61:84:62:63:02:ca:db:cd:b6:11:a2:f3:39:04:d3:79:54:2f:
         11:6e:45:ea:4a:cd:04:6a:31:0e:10:be:5a:6f:cc:1b:dc:28:
         09:24:0a:c7:a4:35:c5:55:0a:b4:a7:f2:10:af:ca:45:3a:2b:
         c4:76:b0:a0:e0:b5:bb:60:cd:73:a0:6b:f9:3d:02:e9:f9:17:
         73:79:8f:56:d6:6d:e7:fd:34:3c:5f:05:da:eb:7a:6f:e9:62:
         13:89:b4:6b:3b:53:6b:76:17:2b:6a:61:27:61:18:69:f9:2b:
         de:93:57:8e:c2:a5:e7:6e:62:db:fc:bd:cf:3a:ad:fe:ec:16:
         4a:4a:60:8f:4b:74:32:33:52:d4:2b:ab:75:bc:bf:eb:27:c3:
         f6:16:cf:d8:5e:cb:b4:d3:67:57:a4:0f:08:f6:e5:c8:e2:d2:
         93:25:7b:c5:01:0c:4e:d8:d8:05:4a:b5:e0:bd:33:bf:59:38:
         09:84:d1:1e:ae:ec:d3:a3:2d:d5:70:17:f9:cd:21:cd:0f:f9:
         3a:92:56:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 09:50:01 2024 by rpki-client on console-fra.rpki-client.org