Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4AMiAtfKmdKpxMnhXNK4crr87Y1SdU8nrYLY2XLXXw2v/1/3137392e302e37362e302f32322d3232203d3e20323731333631.roa
File:                     3137392e302e37362e302f32322d3232203d3e20323731333631.roa (raw, json)
Hash identifier:          4bdTvkPb9DUUx2QXjxQ8K3JfE0OJdDkjtLr0JiOTeDs=
Subject key identifier:   57:17:F6:4B:64:C1:D6:09:15:92:7C:D7:FF:13:49:DF:75:3E:9E:C6
Certificate issuer:       /CN=EC7379390EBBA183B7D419BEA48ADC613666D0A3
Certificate serial:       0E29DA19A3BFE04CA4D67D7C64F1F21047C713B2
Authority key identifier: EC:73:79:39:0E:BB:A1:83:B7:D4:19:BE:A4:8A:DC:61:36:66:D0:A3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EC7379390EBBA183B7D419BEA48ADC613666D0A3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4AMiAtfKmdKpxMnhXNK4crr87Y1SdU8nrYLY2XLXXw2v/1/3137392e302e37362e302f32322d3232203d3e20323731333631.roa
Signing time:             Wed 03 Apr 2024 18:31:10 +0000
ROA not before:           Wed 03 Apr 2024 18:26:10 +0000
ROA not after:            Wed 02 Apr 2025 18:31:10 +0000
asID:                     271361
IP address blocks:        179.0.76.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4AMiAtfKmdKpxMnhXNK4crr87Y1SdU8nrYLY2XLXXw2v/1/EC7379390EBBA183B7D419BEA48ADC613666D0A3.crl
                          rsync://rpki-repo.registro.br/repo/4AMiAtfKmdKpxMnhXNK4crr87Y1SdU8nrYLY2XLXXw2v/1/EC7379390EBBA183B7D419BEA48ADC613666D0A3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EC7379390EBBA183B7D419BEA48ADC613666D0A3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:29:da:19:a3:bf:e0:4c:a4:d6:7d:7c:64:f1:f2:10:47:c7:13:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EC7379390EBBA183B7D419BEA48ADC613666D0A3
        Validity
            Not Before: Apr  3 18:26:10 2024 GMT
            Not After : Apr  2 18:31:10 2025 GMT
        Subject: CN=5717F64B64C1D60915927CD7FF1349DF753E9EC6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:be:d9:3a:ad:4f:a5:eb:0a:e3:47:13:c6:99:
                    fe:6a:5b:07:c6:f2:75:d2:46:7c:83:00:f1:e3:3a:
                    31:1a:f3:bb:e2:00:c8:db:c2:f1:14:ab:44:c0:13:
                    dc:ec:a7:6f:2b:31:33:ad:c3:05:05:a1:9d:4d:ea:
                    64:94:75:56:2e:0a:d7:ac:41:c1:32:4f:b7:ca:24:
                    2d:a7:4d:0a:9e:e5:98:ff:42:ad:21:cd:88:f1:63:
                    9f:65:26:59:15:10:bc:ba:0f:65:8c:9b:c8:99:0f:
                    dc:d6:52:b3:2c:14:57:71:9d:3f:35:a4:c6:ef:ac:
                    25:a0:44:bc:8b:0f:07:15:2b:3b:f5:cb:6c:b3:a8:
                    bf:2d:5a:2c:b5:92:af:cf:ff:7f:ab:5d:eb:89:20:
                    54:32:13:25:1e:9a:7c:af:98:6f:5f:fe:97:ab:9f:
                    9f:ee:23:04:f3:61:b8:a4:ee:0a:db:32:a4:60:18:
                    3e:7b:70:37:13:dc:20:09:d1:46:c4:f4:5f:15:c2:
                    ed:22:13:b5:a3:eb:f9:21:a1:b7:d0:32:a9:51:ca:
                    2e:b6:ce:d0:de:5d:4d:88:9d:3a:21:62:ba:e7:ef:
                    ad:c7:fa:8c:ee:32:3e:c3:f6:df:6b:15:39:9a:03:
                    28:7c:51:41:9b:48:0b:7c:93:ee:32:3d:f1:e8:f7:
                    f2:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:17:F6:4B:64:C1:D6:09:15:92:7C:D7:FF:13:49:DF:75:3E:9E:C6
            X509v3 Authority Key Identifier:
                keyid:EC:73:79:39:0E:BB:A1:83:B7:D4:19:BE:A4:8A:DC:61:36:66:D0:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4AMiAtfKmdKpxMnhXNK4crr87Y1SdU8nrYLY2XLXXw2v/1/EC7379390EBBA183B7D419BEA48ADC613666D0A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EC7379390EBBA183B7D419BEA48ADC613666D0A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4AMiAtfKmdKpxMnhXNK4crr87Y1SdU8nrYLY2XLXXw2v/1/3137392e302e37362e302f32322d3232203d3e20323731333631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.0.76.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ad:68:1d:46:b4:63:59:fb:61:24:72:02:39:44:49:a3:15:f4:
         96:6c:f4:1c:12:ef:e7:62:9d:12:b4:d5:06:7b:39:1b:82:61:
         6d:19:97:f4:72:05:27:fd:43:81:0a:32:bd:c5:d4:13:f2:3c:
         94:ec:27:a6:ba:fd:2c:c8:b6:d3:f9:ff:4c:e8:20:5e:8b:ae:
         9a:d4:bb:7f:16:c7:86:f7:22:1d:65:07:ef:19:75:8a:ef:ba:
         3e:ee:31:60:e9:76:c0:fc:16:9e:e3:48:c8:13:49:7c:26:80:
         79:73:fb:b4:47:62:f5:28:8c:02:eb:90:c5:39:8f:48:af:b9:
         ab:22:66:fe:b8:36:3e:66:b1:54:a9:33:61:c4:d3:60:47:3f:
         5e:5c:c9:ae:2e:ca:5f:1b:89:91:21:1e:c2:51:22:27:22:6b:
         ce:02:2d:40:78:ac:51:6c:91:91:12:18:ef:f9:b5:f1:b6:3b:
         16:63:dd:55:4f:af:26:3f:96:66:26:3d:fc:7d:47:65:99:2e:
         66:b6:0c:61:16:8d:66:2d:13:95:7c:d3:f8:1b:af:4b:0e:c2:
         bf:32:2d:23:5e:44:7c:c6:19:21:8c:64:f2:a1:84:ef:99:d3:
         24:07:87:f1:1f:d9:b9:dc:0f:80:99:e2:82:c3:55:19:38:75:
         de:9a:41:60
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUDinaGaO/4Eyk1n18ZPHyEEfHE7IwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUM3Mzc5MzkwRUJCQTE4M0I3RDQxOUJFQTQ4QURDNjEz
NjY2RDBBMzAeFw0yNDA0MDMxODI2MTBaFw0yNTA0MDIxODMxMTBaMDMxMTAvBgNV
BAMTKDU3MTdGNjRCNjRDMUQ2MDkxNTkyN0NEN0ZGMTM0OURGNzUzRTlFQzYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6vtk6rU+l6wrjRxPGmf5qWwfG
8nXSRnyDAPHjOjEa87viAMjbwvEUq0TAE9zsp28rMTOtwwUFoZ1N6mSUdVYuCtes
QcEyT7fKJC2nTQqe5Zj/Qq0hzYjxY59lJlkVELy6D2WMm8iZD9zWUrMsFFdxnT81
pMbvrCWgRLyLDwcVKzv1y2yzqL8tWiy1kq/P/3+rXeuJIFQyEyUemnyvmG9f/per
n5/uIwTzYbik7grbMqRgGD57cDcT3CAJ0UbE9F8Vwu0iE7Wj6/khobfQMqlRyi62
ztDeXU2InTohYrrn763H+ozuMj7D9t9rFTmaAyh8UUGbSAt8k+4yPfHo9/K7AgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUVxf2S2TB1gkVknzX/xNJ33U+nsYwHwYDVR0j
BBgwFoAU7HN5OQ67oYO31Bm+pIrcYTZm0KMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNEFNaUF0ZkttZEtweE1uaFhOSzRjcnI4N1kxU2RVOG5yWUxZMlhMWFh3
MnYvMS9FQzczNzkzOTBFQkJBMTgzQjdENDE5QkVBNDhBREM2MTM2NjZEMEEzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0VDNzM3OTM5MEVCQkExODNC
N0Q0MTlCRUE0OEFEQzYxMzY2NkQwQTMuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRBTWlBdGZLbWRLcHhNbmhYTks0Y3JyODdZMVNkVThucllMWTJYTFhYdzJ2LzEv
MzEzNzM5MmUzMDJlMzczNjJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDMyMzczMTMz
MzYzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEArMATDANBgkqhkiG9w0BAQsFAAOCAQEArWgdRrRjWfth
JHICOURJoxX0lmz0HBLv52KdErTVBns5G4JhbRmX9HIFJ/1DgQoyvcXUE/I8lOwn
prr9LMi20/n/TOggXouumtS7fxbHhvciHWUH7xl1iu+6Pu4xYOl2wPwWnuNIyBNJ
fCaAeXP7tEdi9SiMAuuQxTmPSK+5qyJm/rg2PmaxVKkzYcTTYEc/XlzJri7KXxuJ
kSEewlEiJyJrzgItQHisUWyRkRIY7/m18bY7FmPdVU+vJj+WZiY9/H1HZZkuZrYM
YRaNZi0TlXzT+BuvSw7CvzItI15EfMYZIYxk8qGE75nTJAeH8R/ZudwPgJnigsNV
GTh13ppBYA==
-----END CERTIFICATE-----
Generated at Sat Nov 23 00:05:35 2024 by rpki-client on console-ams.rpki-client.org