Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3uHre7EwMxLg7NZUe7oHgysCawof2Wo8KsfBN1CU4AVw/1/3137392e3139302e36342e302f31392d3234203d3e20323632343431.roa
File:                     3137392e3139302e36342e302f31392d3234203d3e20323632343431.roa (raw, json)
Hash identifier:          0cu7dOVfuy2Kg27gEUSFoH/guQCOQ6FNqI6zgvLWaLw=
Subject key identifier:   11:9B:5D:B9:67:E8:4F:6D:9E:92:A6:0D:39:79:88:D5:CB:DE:B6:55
Certificate issuer:       /CN=BE068B06DE5C783A9921447A392452ED53F22837
Certificate serial:       5ACBA8C71E746DC8663B17DB4A7478BBAF3A9B1C
Authority key identifier: BE:06:8B:06:DE:5C:78:3A:99:21:44:7A:39:24:52:ED:53:F2:28:37
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BE068B06DE5C783A9921447A392452ED53F22837.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3uHre7EwMxLg7NZUe7oHgysCawof2Wo8KsfBN1CU4AVw/1/3137392e3139302e36342e302f31392d3234203d3e20323632343431.roa
Signing time:             Fri 05 Apr 2024 01:17:19 +0000
ROA not before:           Fri 05 Apr 2024 01:12:19 +0000
ROA not after:            Fri 04 Apr 2025 01:17:19 +0000
asID:                     262441
IP address blocks:        179.190.64.0/19 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3uHre7EwMxLg7NZUe7oHgysCawof2Wo8KsfBN1CU4AVw/1/BE068B06DE5C783A9921447A392452ED53F22837.crl
                          rsync://rpki-repo.registro.br/repo/3uHre7EwMxLg7NZUe7oHgysCawof2Wo8KsfBN1CU4AVw/1/BE068B06DE5C783A9921447A392452ED53F22837.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BE068B06DE5C783A9921447A392452ED53F22837.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 07:57:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:cb:a8:c7:1e:74:6d:c8:66:3b:17:db:4a:74:78:bb:af:3a:9b:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BE068B06DE5C783A9921447A392452ED53F22837
        Validity
            Not Before: Apr  5 01:12:19 2024 GMT
            Not After : Apr  4 01:17:19 2025 GMT
        Subject: CN=119B5DB967E84F6D9E92A60D397988D5CBDEB655
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:3a:31:f9:9f:b8:0e:63:0d:20:08:f6:ff:1d:
                    cf:6d:bd:06:6f:13:d3:59:4f:b7:fa:75:b7:01:8d:
                    d1:a0:b0:fe:d4:cc:72:27:25:ce:78:a4:c8:c2:69:
                    14:ef:fe:19:f6:44:08:14:7c:28:b7:46:21:24:ba:
                    44:b9:d1:3e:b6:1d:f9:98:7d:65:52:b5:d4:45:b9:
                    11:e4:ef:0c:67:f5:83:51:b5:01:42:32:d9:16:78:
                    c6:4e:76:d2:19:a0:e7:1b:a0:53:51:39:94:a8:a9:
                    e0:18:69:90:c8:77:41:9c:98:b0:ff:d3:ae:91:9e:
                    43:b8:fe:f2:53:00:93:7f:0c:3a:64:97:8f:29:da:
                    02:7a:02:fd:4f:3d:a9:52:f7:20:80:86:91:4a:70:
                    dc:14:cc:0a:91:fb:a8:2f:21:39:0e:7b:f6:70:88:
                    06:34:06:6d:19:71:f7:53:2c:2c:69:16:a9:eb:4c:
                    f3:c4:d1:1a:5f:a6:0e:42:c3:8b:e0:5b:3c:f9:72:
                    5e:2a:7e:b1:7d:11:78:b8:33:8e:e2:d3:25:dc:f9:
                    2d:cc:9c:b6:52:96:32:4c:1b:c9:b8:f8:f3:ce:4c:
                    c3:25:24:69:68:b8:9b:b8:01:3b:ad:3f:3c:74:b7:
                    d9:3b:27:31:b5:40:5b:ff:b9:8b:22:da:eb:0f:48:
                    33:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:9B:5D:B9:67:E8:4F:6D:9E:92:A6:0D:39:79:88:D5:CB:DE:B6:55
            X509v3 Authority Key Identifier:
                keyid:BE:06:8B:06:DE:5C:78:3A:99:21:44:7A:39:24:52:ED:53:F2:28:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3uHre7EwMxLg7NZUe7oHgysCawof2Wo8KsfBN1CU4AVw/1/BE068B06DE5C783A9921447A392452ED53F22837.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BE068B06DE5C783A9921447A392452ED53F22837.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3uHre7EwMxLg7NZUe7oHgysCawof2Wo8KsfBN1CU4AVw/1/3137392e3139302e36342e302f31392d3234203d3e20323632343431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.190.64.0/19

    Signature Algorithm: sha256WithRSAEncryption
         84:6a:c5:60:3d:5b:93:be:01:b7:a0:4c:fe:18:99:81:af:d2:
         ca:42:f3:37:e1:59:52:e7:23:6e:a2:d2:38:43:35:f9:7a:b4:
         6a:a2:0d:b8:d4:ce:8c:2b:22:69:de:10:22:c1:c1:ff:11:3e:
         e2:3b:66:1f:db:4a:aa:72:2c:b1:bd:e3:13:d3:3a:65:00:2f:
         90:a8:6b:29:77:3d:d5:6e:e6:68:d7:87:e8:2f:f8:86:db:a3:
         cb:78:be:34:29:d6:9c:10:50:03:c8:d0:e8:bb:ce:81:b7:fc:
         d4:0f:af:2e:a7:75:40:2f:dc:78:64:d6:4a:95:b3:7c:68:ff:
         88:39:74:fa:aa:f6:0c:6b:2f:73:05:98:16:98:6a:f9:47:de:
         25:7f:4c:e9:d6:8d:6f:42:ba:95:9f:28:f8:22:09:f2:d0:ae:
         ee:78:78:81:5d:33:58:97:a7:04:24:9a:cc:d0:cc:7e:82:1e:
         41:08:13:29:0a:58:c7:7c:ad:dc:9c:c9:f1:37:84:8c:95:c3:
         c4:af:0e:7a:53:fe:9c:c9:3b:75:85:fa:a7:26:b7:d8:d7:18:
         6e:ed:26:a2:fe:52:34:61:ca:b4:33:55:ec:65:34:2f:ab:5a:
         a6:b3:11:68:fd:99:0e:c1:20:c6:7d:59:1e:48:a0:17:12:5d:
         12:49:e7:76
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUWsuoxx50bchmOxfbSnR4u686mxwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkUwNjhCMDZERTVDNzgzQTk5MjE0NDdBMzkyNDUyRUQ1
M0YyMjgzNzAeFw0yNDA0MDUwMTEyMTlaFw0yNTA0MDQwMTE3MTlaMDMxMTAvBgNV
BAMTKDExOUI1REI5NjdFODRGNkQ5RTkyQTYwRDM5Nzk4OEQ1Q0JERUI2NTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDlOjH5n7gOYw0gCPb/Hc9tvQZv
E9NZT7f6dbcBjdGgsP7UzHInJc54pMjCaRTv/hn2RAgUfCi3RiEkukS50T62HfmY
fWVStdRFuRHk7wxn9YNRtQFCMtkWeMZOdtIZoOcboFNROZSoqeAYaZDId0GcmLD/
066RnkO4/vJTAJN/DDpkl48p2gJ6Av1PPalS9yCAhpFKcNwUzAqR+6gvITkOe/Zw
iAY0Bm0ZcfdTLCxpFqnrTPPE0Rpfpg5Cw4vgWzz5cl4qfrF9EXi4M47i0yXc+S3M
nLZSljJMG8m4+PPOTMMlJGlouJu4ATutPzx0t9k7JzG1QFv/uYsi2usPSDMpAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUEZtduWfoT22ekqYNOXmI1cvetlUwHwYDVR0j
BBgwFoAUvgaLBt5ceDqZIUR6OSRS7VPyKDcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM3VIcmU3RXdNeExnN05aVWU3b0hneXNDYXdvZjJXbzhLc2ZCTjFDVTRB
VncvMS9CRTA2OEIwNkRFNUM3ODNBOTkyMTQ0N0EzOTI0NTJFRDUzRjIyODM3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0JFMDY4QjA2REU1Qzc4M0E5
OTIxNDQ3QTM5MjQ1MkVENTNGMjI4MzcuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzN1SHJlN0V3TXhMZzdOWlVlN29IZ3lzQ2F3b2YyV284S3NmQk4xQ1U0QVZ3LzEv
MzEzNzM5MmUzMTM5MzAyZTM2MzQyZTMwMmYzMTM5MmQzMjM0MjAzZDNlMjAzMjM2
MzIzNDM0MzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAWzvkAwDQYJKoZIhvcNAQELBQADggEBAIRqxWA9
W5O+AbegTP4YmYGv0spC8zfhWVLnI26i0jhDNfl6tGqiDbjUzowrImneECLBwf8R
PuI7Zh/bSqpyLLG94xPTOmUAL5Coayl3PdVu5mjXh+gv+Ibbo8t4vjQp1pwQUAPI
0Oi7zoG3/NQPry6ndUAv3Hhk1kqVs3xo/4g5dPqq9gxrL3MFmBaYavlH3iV/TOnW
jW9CupWfKPgiCfLQru54eIFdM1iXpwQkmszQzH6CHkEIEykKWMd8rdycyfE3hIyV
w8SvDnpT/pzJO3WF+qcmt9jXGG7tJqL+UjRhyrQzVexlNC+rWqazEWj9mQ7BIMZ9
WR5IoBcSXRJJ53Y=
-----END CERTIFICATE-----
Generated at Tue Nov 26 06:32:01 2024 by rpki-client on console-fra.rpki-client.org