Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7YgUCFjENbiLg4FLBzokWDgjo7UHN8LKjWJDzhoSx1ZH/1/3137392e35312e3135302e302f32342d3234203d3e20323731313739.roa
File:                     3137392e35312e3135302e302f32342d3234203d3e20323731313739.roa (raw, json)
Hash identifier:          1QEZzpsaxxv9A+Rg3jWZ7EIE38lbLfCG9xY81Yewm3Q=
Subject key identifier:   CC:85:92:76:6A:25:8D:F6:12:33:96:9C:2B:AE:37:42:B3:C6:09:DB
Certificate issuer:       /CN=B9EFF2DCC8D3B6928E516E6A2DF086E08CB891E4
Certificate serial:       18089C8BD4754C243EE695A0B6BA6554E5414473
Authority key identifier: B9:EF:F2:DC:C8:D3:B6:92:8E:51:6E:6A:2D:F0:86:E0:8C:B8:91:E4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9EFF2DCC8D3B6928E516E6A2DF086E08CB891E4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7YgUCFjENbiLg4FLBzokWDgjo7UHN8LKjWJDzhoSx1ZH/1/3137392e35312e3135302e302f32342d3234203d3e20323731313739.roa
Signing time:             Fri 28 Jun 2024 17:14:04 +0000
ROA not before:           Fri 28 Jun 2024 17:09:04 +0000
ROA not after:            Fri 27 Jun 2025 17:14:04 +0000
asID:                     271179
IP address blocks:        179.51.150.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7YgUCFjENbiLg4FLBzokWDgjo7UHN8LKjWJDzhoSx1ZH/1/B9EFF2DCC8D3B6928E516E6A2DF086E08CB891E4.crl
                          rsync://rpki-repo.registro.br/repo/7YgUCFjENbiLg4FLBzokWDgjo7UHN8LKjWJDzhoSx1ZH/1/B9EFF2DCC8D3B6928E516E6A2DF086E08CB891E4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9EFF2DCC8D3B6928E516E6A2DF086E08CB891E4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 03 Jul 2024 14:43:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:08:9c:8b:d4:75:4c:24:3e:e6:95:a0:b6:ba:65:54:e5:41:44:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B9EFF2DCC8D3B6928E516E6A2DF086E08CB891E4
        Validity
            Not Before: Jun 28 17:09:04 2024 GMT
            Not After : Jun 27 17:14:04 2025 GMT
        Subject: CN=CC8592766A258DF61233969C2BAE3742B3C609DB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:16:fd:71:9d:4c:37:ca:8f:b7:c3:f7:f9:57:
                    87:04:1f:11:94:d3:d6:d5:3f:18:8f:44:dd:d6:c7:
                    51:23:bf:17:2b:4d:d5:37:e7:52:94:31:32:16:b6:
                    c6:e9:d0:25:c1:00:a1:d7:62:ea:d2:a9:a6:40:a5:
                    2f:af:a1:62:35:ad:1a:0f:5a:ad:f6:a9:92:f2:a4:
                    db:59:bb:b0:4b:00:e5:06:cb:bc:b6:1d:07:e9:86:
                    e4:11:68:09:2d:45:2c:ba:72:86:a2:18:cb:74:fb:
                    1c:9b:9c:ee:d7:ff:bd:01:e2:0a:ad:79:7c:5e:62:
                    d5:5c:dc:3f:f4:6d:ce:ad:5a:5a:2e:54:fc:49:36:
                    87:97:b8:f2:1c:b1:a9:68:2b:a3:6b:8a:a1:5f:93:
                    ce:24:aa:f8:c0:6f:d0:90:58:1e:dc:7a:d1:0e:00:
                    73:1c:31:08:56:cd:32:69:75:22:0c:0d:18:de:65:
                    a0:0b:87:f1:74:a4:c1:f0:1a:24:54:df:5d:20:10:
                    1d:18:7d:68:dc:ae:10:66:27:71:24:42:47:51:dc:
                    0f:d4:a9:9f:f4:b3:6f:be:ca:cb:0c:11:da:3d:be:
                    e8:64:61:ca:78:ef:09:c9:e1:76:58:67:10:e9:12:
                    98:b2:17:82:7d:21:23:bc:0b:cd:29:20:db:65:37:
                    97:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:85:92:76:6A:25:8D:F6:12:33:96:9C:2B:AE:37:42:B3:C6:09:DB
            X509v3 Authority Key Identifier:
                keyid:B9:EF:F2:DC:C8:D3:B6:92:8E:51:6E:6A:2D:F0:86:E0:8C:B8:91:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7YgUCFjENbiLg4FLBzokWDgjo7UHN8LKjWJDzhoSx1ZH/1/B9EFF2DCC8D3B6928E516E6A2DF086E08CB891E4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9EFF2DCC8D3B6928E516E6A2DF086E08CB891E4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7YgUCFjENbiLg4FLBzokWDgjo7UHN8LKjWJDzhoSx1ZH/1/3137392e35312e3135302e302f32342d3234203d3e20323731313739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.51.150.0/24

    Signature Algorithm: sha256WithRSAEncryption
         24:ef:8a:5d:22:f3:28:cd:8f:39:9c:6a:f2:37:8a:92:c5:62:
         7b:b4:1d:e7:fa:47:ee:05:c3:2c:7a:5c:a3:3f:2f:a7:fd:95:
         46:27:bf:e6:37:e0:bb:9e:1c:b6:b8:e1:65:b0:76:e0:9e:2d:
         1e:58:27:ab:0e:1c:46:aa:56:cf:9d:14:a7:27:34:93:15:68:
         df:a7:3c:4b:db:f2:e2:9e:8a:1d:68:d4:0c:5b:8f:a2:c3:bd:
         be:ba:12:67:39:31:4d:dd:fd:2a:10:ef:4f:be:b9:1e:05:66:
         24:3e:4b:8d:89:2f:06:ba:c4:0b:70:63:eb:5f:cf:b4:a9:b9:
         91:51:83:ef:4d:fe:e2:41:77:28:cd:85:96:a4:78:5f:c9:de:
         65:42:ef:88:3d:85:54:53:a4:d1:4c:18:01:ae:bc:0b:5c:c8:
         a4:1e:c4:29:b8:fd:82:d5:bc:ea:16:da:27:98:d8:e2:56:4f:
         f6:16:23:ca:4f:bb:45:19:3f:88:96:92:73:2e:32:af:e6:5d:
         28:ef:46:43:60:94:94:3d:e2:4f:41:d5:39:44:b4:a0:ad:76:
         32:26:b6:a6:34:d8:04:99:7e:a8:ab:70:e1:78:cc:bc:7d:bc:
         87:ee:10:86:cb:a7:95:fb:92:65:7d:ea:df:34:91:28:4a:70:
         d8:5b:d4:9a
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUGAici9R1TCQ+5pWgtrplVOVBRHMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjlFRkYyRENDOEQzQjY5MjhFNTE2RTZBMkRGMDg2RTA4
Q0I4OTFFNDAeFw0yNDA2MjgxNzA5MDRaFw0yNTA2MjcxNzE0MDRaMDMxMTAvBgNV
BAMTKENDODU5Mjc2NkEyNThERjYxMjMzOTY5QzJCQUUzNzQyQjNDNjA5REIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQFv1xnUw3yo+3w/f5V4cEHxGU
09bVPxiPRN3Wx1EjvxcrTdU351KUMTIWtsbp0CXBAKHXYurSqaZApS+voWI1rRoP
Wq32qZLypNtZu7BLAOUGy7y2HQfphuQRaAktRSy6coaiGMt0+xybnO7X/70B4gqt
eXxeYtVc3D/0bc6tWlouVPxJNoeXuPIcsaloK6NriqFfk84kqvjAb9CQWB7cetEO
AHMcMQhWzTJpdSIMDRjeZaALh/F0pMHwGiRU310gEB0YfWjcrhBmJ3EkQkdR3A/U
qZ/0s2++yssMEdo9vuhkYcp47wnJ4XZYZxDpEpiyF4J9ISO8C80pINtlN5dtAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUzIWSdmoljfYSM5acK643QrPGCdswHwYDVR0j
BBgwFoAUue/y3MjTtpKOUW5qLfCG4Iy4keQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN1lnVUNGakVOYmlMZzRGTEJ6b2tXRGdqbzdVSE44TEtqV0pEemhvU3gx
WkgvMS9COUVGRjJEQ0M4RDNCNjkyOEU1MTZFNkEyREYwODZFMDhDQjg5MUU0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0I5RUZGMkRDQzhEM0I2OTI4
RTUxNkU2QTJERjA4NkUwOENCODkxRTQuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzdZZ1VDRmpFTmJpTGc0RkxCem9rV0Rnam83VUhOOExLaldKRHpob1N4MVpILzEv
MzEzNzM5MmUzNTMxMmUzMTM1MzAyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM3
MzEzMTM3Mzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBACzM5YwDQYJKoZIhvcNAQELBQADggEBACTvil0i
8yjNjzmcavI3ipLFYnu0Hef6R+4Fwyx6XKM/L6f9lUYnv+Y34LueHLa44WWwduCe
LR5YJ6sOHEaqVs+dFKcnNJMVaN+nPEvb8uKeih1o1Axbj6LDvb66Emc5MU3d/SoQ
70++uR4FZiQ+S42JLwa6xAtwY+tfz7SpuZFRg+9N/uJBdyjNhZakeF/J3mVC74g9
hVRTpNFMGAGuvAtcyKQexCm4/YLVvOoW2ieY2OJWT/YWI8pPu0UZP4iWknMuMq/m
XSjvRkNglJQ94k9B1TlEtKCtdjImtqY02ASZfqircOF4zLx9vIfuEIbLp5X7kmV9
6t80kShKcNhb1Jo=
-----END CERTIFICATE-----
Generated at Tue Jul 2 14:01:05 2024 by rpki-client on console-fra.rpki-client.org