Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8QbSjtMBe2EHEd5D65hVL9FhfjitifNcPfaxPfA8kmH2/0/3137392e34382e3138302e302f32322d3234203d3e20323731303934.roa
File:                     3137392e34382e3138302e302f32322d3234203d3e20323731303934.roa (raw, json)
Hash identifier:          ZRSpBFl+k21DEySB0scpmAxJHM+MmuF+I5ZStSsRihg=
Subject key identifier:   69:F4:FD:42:0D:09:89:AD:2D:45:59:99:AC:9E:99:07:13:71:3E:24
Certificate issuer:       /CN=FEFB6417C2C38F6B002334D5A317B320F0C140D9
Certificate serial:       20DA43C6AEF1CE52AA13095287EAC535AC5F5F33
Authority key identifier: FE:FB:64:17:C2:C3:8F:6B:00:23:34:D5:A3:17:B3:20:F0:C1:40:D9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FEFB6417C2C38F6B002334D5A317B320F0C140D9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8QbSjtMBe2EHEd5D65hVL9FhfjitifNcPfaxPfA8kmH2/0/3137392e34382e3138302e302f32322d3234203d3e20323731303934.roa
Signing time:             Fri 21 Jun 2024 13:44:21 +0000
ROA not before:           Fri 21 Jun 2024 13:39:21 +0000
ROA not after:            Fri 20 Jun 2025 13:44:21 +0000
asID:                     271094
IP address blocks:        179.48.180.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8QbSjtMBe2EHEd5D65hVL9FhfjitifNcPfaxPfA8kmH2/0/FEFB6417C2C38F6B002334D5A317B320F0C140D9.crl
                          rsync://rpki-repo.registro.br/repo/8QbSjtMBe2EHEd5D65hVL9FhfjitifNcPfaxPfA8kmH2/0/FEFB6417C2C38F6B002334D5A317B320F0C140D9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FEFB6417C2C38F6B002334D5A317B320F0C140D9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 06:14:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:da:43:c6:ae:f1:ce:52:aa:13:09:52:87:ea:c5:35:ac:5f:5f:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FEFB6417C2C38F6B002334D5A317B320F0C140D9
        Validity
            Not Before: Jun 21 13:39:21 2024 GMT
            Not After : Jun 20 13:44:21 2025 GMT
        Subject: CN=69F4FD420D0989AD2D455999AC9E990713713E24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:c3:99:18:5b:db:05:8a:fb:96:a5:13:1e:4b:
                    1a:fa:a4:ac:64:62:10:f5:d0:0f:a3:79:5b:b0:26:
                    21:0a:c0:01:77:06:8e:3c:e5:d2:b6:0c:98:ef:31:
                    dc:fe:16:bc:3b:21:1c:7f:aa:d6:5c:6c:dc:72:46:
                    c5:97:e4:04:3b:62:9c:23:36:f2:db:4e:77:a8:6c:
                    ab:7d:d7:39:e7:0e:4e:30:fb:30:72:94:e4:aa:e1:
                    18:73:9a:ed:9a:98:ab:3c:4f:48:9f:3f:38:50:1c:
                    27:3e:87:9d:9d:6f:28:83:6a:0e:8c:15:70:e8:6c:
                    7d:20:71:ad:9f:27:0b:52:71:a8:53:6f:2c:11:49:
                    01:73:a3:b8:04:9b:c4:e1:0c:05:39:11:4b:0f:63:
                    c2:e7:b2:70:44:55:fb:1c:b0:f2:10:15:27:73:49:
                    24:80:23:b7:ca:62:fb:3c:54:cf:98:36:27:4f:f6:
                    f9:03:b6:81:b6:bb:8a:42:c7:1f:31:96:aa:e8:dc:
                    04:5f:e4:23:80:a9:74:d9:c2:7c:f8:7b:5d:5e:40:
                    9f:08:7a:e8:1b:47:66:fb:c8:7f:56:5b:6d:79:38:
                    2c:ed:45:5a:ca:ab:de:13:7a:e9:bd:2b:57:8b:c7:
                    d1:22:c8:31:c1:f7:df:3a:d0:9a:52:5d:71:34:6f:
                    ff:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:F4:FD:42:0D:09:89:AD:2D:45:59:99:AC:9E:99:07:13:71:3E:24
            X509v3 Authority Key Identifier:
                keyid:FE:FB:64:17:C2:C3:8F:6B:00:23:34:D5:A3:17:B3:20:F0:C1:40:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8QbSjtMBe2EHEd5D65hVL9FhfjitifNcPfaxPfA8kmH2/0/FEFB6417C2C38F6B002334D5A317B320F0C140D9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FEFB6417C2C38F6B002334D5A317B320F0C140D9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8QbSjtMBe2EHEd5D65hVL9FhfjitifNcPfaxPfA8kmH2/0/3137392e34382e3138302e302f32322d3234203d3e20323731303934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.48.180.0/22

    Signature Algorithm: sha256WithRSAEncryption
         c8:2f:b4:d3:6e:1b:30:c3:06:6c:ca:a2:0c:71:89:6e:75:26:
         04:af:22:ff:e6:33:c8:29:6b:54:6d:c3:ee:db:10:63:b7:35:
         c7:08:50:b4:10:87:16:6c:7f:59:7e:1a:d1:f2:9b:6e:25:04:
         89:08:bf:8b:db:2f:4d:29:b1:36:55:9f:5c:5e:49:cd:e8:c6:
         74:6a:f0:26:c7:53:01:44:85:aa:3e:fe:76:86:82:e6:8a:a2:
         d3:cd:22:37:c6:bc:30:5e:29:67:eb:dc:c3:52:70:58:8e:8e:
         8f:b9:cd:96:a6:d5:be:a9:59:ac:43:b1:10:1c:14:7d:84:65:
         0d:d7:3b:35:0b:da:d7:a2:dc:55:20:f5:ab:a8:17:7d:f0:d7:
         2c:7b:15:19:5c:06:1e:97:10:8a:a6:c3:ef:75:d0:a1:4d:26:
         20:e0:fa:64:ce:f6:e4:df:1d:ed:d9:92:2c:6c:db:3b:5f:bd:
         6e:34:a3:1c:c9:2a:c7:71:40:47:84:e5:9b:e8:7e:27:cb:dc:
         8f:cd:09:3d:90:a4:17:ad:8a:f7:7c:c1:90:f2:8b:ef:0c:43:
         37:fc:25:4c:aa:62:e7:be:24:b0:e0:fd:a9:40:00:06:99:60:
         10:88:b7:b5:6e:b0:c5:e9:21:70:c5:2e:3c:d7:fe:47:6e:b2:
         50:db:0d:f6
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUINpDxq7xzlKqEwlSh+rFNaxfXzMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkVGQjY0MTdDMkMzOEY2QjAwMjMzNEQ1QTMxN0IzMjBG
MEMxNDBEOTAeFw0yNDA2MjExMzM5MjFaFw0yNTA2MjAxMzQ0MjFaMDMxMTAvBgNV
BAMTKDY5RjRGRDQyMEQwOTg5QUQyRDQ1NTk5OUFDOUU5OTA3MTM3MTNFMjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQw5kYW9sFivuWpRMeSxr6pKxk
YhD10A+jeVuwJiEKwAF3Bo485dK2DJjvMdz+Frw7IRx/qtZcbNxyRsWX5AQ7Ypwj
NvLbTneobKt91znnDk4w+zBylOSq4Rhzmu2amKs8T0ifPzhQHCc+h52dbyiDag6M
FXDobH0gca2fJwtScahTbywRSQFzo7gEm8ThDAU5EUsPY8LnsnBEVfscsPIQFSdz
SSSAI7fKYvs8VM+YNidP9vkDtoG2u4pCxx8xlqro3ARf5COAqXTZwnz4e11eQJ8I
eugbR2b7yH9WW215OCztRVrKq94Teum9K1eLx9EiyDHB99860JpSXXE0b/9JAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUafT9Qg0Jia0tRVmZrJ6ZBxNxPiQwHwYDVR0j
BBgwFoAU/vtkF8LDj2sAIzTVoxezIPDBQNkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOFFiU2p0TUJlMkVIRWQ1RDY1aFZMOUZoZmppdGlmTmNQZmF4UGZBOGtt
SDIvMC9GRUZCNjQxN0MyQzM4RjZCMDAyMzM0RDVBMzE3QjMyMEYwQzE0MEQ5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0ZFRkI2NDE3QzJDMzhGNkIw
MDIzMzRENUEzMTdCMzIwRjBDMTQwRDkuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhRYlNqdE1CZTJFSEVkNUQ2NWhWTDlGaGZqaXRpZk5jUGZheFBmQThrbUgyLzAv
MzEzNzM5MmUzNDM4MmUzMTM4MzAyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM3
MzEzMDM5MzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAKzMLQwDQYJKoZIhvcNAQELBQADggEBAMgvtNNu
GzDDBmzKogxxiW51JgSvIv/mM8gpa1Rtw+7bEGO3NccIULQQhxZsf1l+GtHym24l
BIkIv4vbL00psTZVn1xeSc3oxnRq8CbHUwFEhao+/naGguaKotPNIjfGvDBeKWfr
3MNScFiOjo+5zZam1b6pWaxDsRAcFH2EZQ3XOzUL2tei3FUg9auoF33w1yx7FRlc
Bh6XEIqmw+910KFNJiDg+mTO9uTfHe3Zkixs2ztfvW40oxzJKsdxQEeE5ZvofifL
3I/NCT2QpBetivd8wZDyi+8MQzf8JUyqYue+JLDg/alAAAaZYBCIt7VusMXpIXDF
LjzX/kduslDbDfY=
-----END CERTIFICATE-----
Generated at Sat Nov 23 05:00:57 2024 by rpki-client on console-fra.rpki-client.org