Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4AMiAtfKmdKpxMnhXNK4crr87Y1SdU8nrYLY2XLXXw2v/1/3137392e302e37392e302f32342d3234203d3e20323731333631.roa
File:                     3137392e302e37392e302f32342d3234203d3e20323731333631.roa (raw, json)
Hash identifier:          NhnVmpy8jHx3UUDP/i3S/6K/dcDYT/hA7sOcquuaYV0=
Subject key identifier:   9C:CE:C6:24:A3:64:16:67:A7:C5:94:92:6B:4C:F8:FC:07:05:77:44
Certificate issuer:       /CN=EC7379390EBBA183B7D419BEA48ADC613666D0A3
Certificate serial:       295FA4614C60B37EA591272AE3C964D26B95D7EB
Authority key identifier: EC:73:79:39:0E:BB:A1:83:B7:D4:19:BE:A4:8A:DC:61:36:66:D0:A3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EC7379390EBBA183B7D419BEA48ADC613666D0A3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4AMiAtfKmdKpxMnhXNK4crr87Y1SdU8nrYLY2XLXXw2v/1/3137392e302e37392e302f32342d3234203d3e20323731333631.roa
Signing time:             Wed 03 Apr 2024 18:31:11 +0000
ROA not before:           Wed 03 Apr 2024 18:26:11 +0000
ROA not after:            Wed 02 Apr 2025 18:31:11 +0000
asID:                     271361
IP address blocks:        179.0.79.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4AMiAtfKmdKpxMnhXNK4crr87Y1SdU8nrYLY2XLXXw2v/1/EC7379390EBBA183B7D419BEA48ADC613666D0A3.crl
                          rsync://rpki-repo.registro.br/repo/4AMiAtfKmdKpxMnhXNK4crr87Y1SdU8nrYLY2XLXXw2v/1/EC7379390EBBA183B7D419BEA48ADC613666D0A3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EC7379390EBBA183B7D419BEA48ADC613666D0A3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:5f:a4:61:4c:60:b3:7e:a5:91:27:2a:e3:c9:64:d2:6b:95:d7:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EC7379390EBBA183B7D419BEA48ADC613666D0A3
        Validity
            Not Before: Apr  3 18:26:11 2024 GMT
            Not After : Apr  2 18:31:11 2025 GMT
        Subject: CN=9CCEC624A3641667A7C594926B4CF8FC07057744
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:e2:3f:de:15:cb:37:62:b0:d3:51:01:df:68:
                    84:41:17:4e:42:14:b0:c8:b5:3f:f2:9e:26:6f:f2:
                    46:4a:ee:e4:e0:80:75:28:c0:5b:90:99:3d:6b:a2:
                    af:27:bc:ce:d9:1e:cc:25:ca:2f:b8:e2:68:ea:cc:
                    08:e4:4f:71:9b:c4:cc:0a:34:f1:e5:57:2f:13:30:
                    6d:e9:b1:6c:a4:0b:d6:3c:f6:d0:e2:51:c3:fc:ae:
                    9c:ec:53:a3:f2:66:ef:c3:90:67:45:51:7e:25:f2:
                    65:87:6a:98:b9:5a:25:22:4d:08:3a:77:94:d9:69:
                    02:25:39:a6:35:9a:88:46:ca:d6:c5:c1:58:a8:bd:
                    43:16:9b:da:f5:15:c7:5b:8f:73:1c:a3:45:a7:a9:
                    73:78:d2:ef:d2:91:d7:89:66:1c:c0:55:f5:44:46:
                    73:27:52:50:74:36:4e:3f:8a:27:74:43:f5:6a:66:
                    13:f6:df:0b:90:54:10:c8:da:24:8b:b8:9b:5c:4b:
                    c4:8a:65:d2:72:0e:31:17:ca:5e:94:22:d5:41:45:
                    3f:c7:40:23:68:fa:2f:fd:11:e7:e2:fe:41:60:a3:
                    f9:3c:0f:3e:91:8c:8a:4c:87:8f:ac:c7:8e:8e:cd:
                    a1:8f:78:33:35:78:b5:82:a2:b3:f1:bb:16:63:ea:
                    61:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:CE:C6:24:A3:64:16:67:A7:C5:94:92:6B:4C:F8:FC:07:05:77:44
            X509v3 Authority Key Identifier:
                keyid:EC:73:79:39:0E:BB:A1:83:B7:D4:19:BE:A4:8A:DC:61:36:66:D0:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4AMiAtfKmdKpxMnhXNK4crr87Y1SdU8nrYLY2XLXXw2v/1/EC7379390EBBA183B7D419BEA48ADC613666D0A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EC7379390EBBA183B7D419BEA48ADC613666D0A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4AMiAtfKmdKpxMnhXNK4crr87Y1SdU8nrYLY2XLXXw2v/1/3137392e302e37392e302f32342d3234203d3e20323731333631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.0.79.0/24

    Signature Algorithm: sha256WithRSAEncryption
         46:ff:7c:17:e0:59:b5:ca:8a:6f:ff:1b:83:02:b1:8a:6c:f4:
         5d:e1:b8:41:ff:18:71:d7:66:0e:b1:7f:c5:9a:8f:57:a8:fd:
         41:53:a2:8c:1c:44:9b:2f:c8:a5:7c:51:6b:f9:a4:43:b8:e7:
         7a:63:0d:7c:4b:19:c9:7d:96:80:7d:a4:67:57:56:ed:25:d3:
         c5:7e:1d:fa:94:e0:1e:1c:87:69:f3:dd:82:80:6e:4e:9d:69:
         ef:cf:86:00:a9:f9:e1:98:1e:e9:8b:73:14:ec:31:2a:56:eb:
         bd:50:12:80:d1:9f:cf:76:1a:c5:f0:44:e4:fd:6b:6c:e4:55:
         e7:92:04:99:8d:db:6f:99:ec:d7:45:15:8c:e3:3e:c1:be:76:
         2f:6c:7f:3a:86:64:df:92:d7:ca:fb:30:15:53:67:f4:26:25:
         51:8c:2f:d8:1d:13:b0:aa:9a:9c:d6:3e:1b:42:50:1f:c1:26:
         57:38:a7:50:1c:3b:24:39:b4:18:11:55:32:35:13:3c:83:ba:
         ae:3a:37:b7:69:df:99:09:40:0d:ef:0c:b3:45:9f:3b:9b:08:
         9d:03:1c:56:1c:93:02:07:35:d3:a6:50:69:a0:2d:75:71:d7:
         4a:e0:c6:53:b5:b8:7a:fb:70:a3:10:5b:a9:83:bf:cc:a0:e1:
         fc:86:a5:42
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUKV+kYUxgs36lkScq48lk0muV1+swDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUM3Mzc5MzkwRUJCQTE4M0I3RDQxOUJFQTQ4QURDNjEz
NjY2RDBBMzAeFw0yNDA0MDMxODI2MTFaFw0yNTA0MDIxODMxMTFaMDMxMTAvBgNV
BAMTKDlDQ0VDNjI0QTM2NDE2NjdBN0M1OTQ5MjZCNENGOEZDMDcwNTc3NDQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDm4j/eFcs3YrDTUQHfaIRBF05C
FLDItT/yniZv8kZK7uTggHUowFuQmT1roq8nvM7ZHswlyi+44mjqzAjkT3GbxMwK
NPHlVy8TMG3psWykC9Y89tDiUcP8rpzsU6PyZu/DkGdFUX4l8mWHapi5WiUiTQg6
d5TZaQIlOaY1mohGytbFwViovUMWm9r1Fcdbj3Mco0WnqXN40u/SkdeJZhzAVfVE
RnMnUlB0Nk4/iid0Q/VqZhP23wuQVBDI2iSLuJtcS8SKZdJyDjEXyl6UItVBRT/H
QCNo+i/9Eefi/kFgo/k8Dz6RjIpMh4+sx46OzaGPeDM1eLWCorPxuxZj6mEpAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUnM7GJKNkFmenxZSSa0z4/AcFd0QwHwYDVR0j
BBgwFoAU7HN5OQ67oYO31Bm+pIrcYTZm0KMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNEFNaUF0ZkttZEtweE1uaFhOSzRjcnI4N1kxU2RVOG5yWUxZMlhMWFh3
MnYvMS9FQzczNzkzOTBFQkJBMTgzQjdENDE5QkVBNDhBREM2MTM2NjZEMEEzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0VDNzM3OTM5MEVCQkExODNC
N0Q0MTlCRUE0OEFEQzYxMzY2NkQwQTMuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRBTWlBdGZLbWRLcHhNbmhYTks0Y3JyODdZMVNkVThucllMWTJYTFhYdzJ2LzEv
MzEzNzM5MmUzMDJlMzczOTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzczMTMz
MzYzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEALMATzANBgkqhkiG9w0BAQsFAAOCAQEARv98F+BZtcqK
b/8bgwKximz0XeG4Qf8YcddmDrF/xZqPV6j9QVOijBxEmy/IpXxRa/mkQ7jnemMN
fEsZyX2WgH2kZ1dW7SXTxX4d+pTgHhyHafPdgoBuTp1p78+GAKn54Zge6YtzFOwx
KlbrvVASgNGfz3YaxfBE5P1rbORV55IEmY3bb5ns10UVjOM+wb52L2x/OoZk35LX
yvswFVNn9CYlUYwv2B0TsKqanNY+G0JQH8EmVzinUBw7JDm0GBFVMjUTPIO6rjo3
t2nfmQlADe8Ms0WfO5sInQMcVhyTAgc106ZQaaAtdXHXSuDGU7W4evtwoxBbqYO/
zKDh/IalQg==
-----END CERTIFICATE-----
Generated at Sat Nov 23 00:05:35 2024 by rpki-client on console-ams.rpki-client.org