Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8m3LcL6b4YVrEFHsFNwDkZtMS2pcjbhQ35fFbDVECEfA/0/3137392e3130362e3137362e302f32322d3232203d3e203532353339.roa
File:                     3137392e3130362e3137362e302f32322d3232203d3e203532353339.roa (raw, json)
Hash identifier:          GJ9tOWmmpPwZzwwF+iWgD9skgBYoXeDqq1TJ0a9Ki0c=
Subject key identifier:   20:FF:94:E0:66:62:21:75:DB:AE:CC:D9:F5:D7:55:13:BE:C1:F6:74
Certificate issuer:       /CN=EDAC2B7F8EA03E6BEEB3716358CCDB98B47D9FE4
Certificate serial:       230A2AFEF797F9AE8156AF02043558833B6D227F
Authority key identifier: ED:AC:2B:7F:8E:A0:3E:6B:EE:B3:71:63:58:CC:DB:98:B4:7D:9F:E4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EDAC2B7F8EA03E6BEEB3716358CCDB98B47D9FE4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8m3LcL6b4YVrEFHsFNwDkZtMS2pcjbhQ35fFbDVECEfA/0/3137392e3130362e3137362e302f32322d3232203d3e203532353339.roa
Signing time:             Tue 27 Aug 2024 16:36:31 +0000
ROA not before:           Tue 27 Aug 2024 16:31:31 +0000
ROA not after:            Tue 26 Aug 2025 16:36:31 +0000
asID:                     52539
IP address blocks:        179.106.176.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8m3LcL6b4YVrEFHsFNwDkZtMS2pcjbhQ35fFbDVECEfA/0/EDAC2B7F8EA03E6BEEB3716358CCDB98B47D9FE4.crl
                          rsync://rpki-repo.registro.br/repo/8m3LcL6b4YVrEFHsFNwDkZtMS2pcjbhQ35fFbDVECEfA/0/EDAC2B7F8EA03E6BEEB3716358CCDB98B47D9FE4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EDAC2B7F8EA03E6BEEB3716358CCDB98B47D9FE4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 11:25:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:0a:2a:fe:f7:97:f9:ae:81:56:af:02:04:35:58:83:3b:6d:22:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EDAC2B7F8EA03E6BEEB3716358CCDB98B47D9FE4
        Validity
            Not Before: Aug 27 16:31:31 2024 GMT
            Not After : Aug 26 16:36:31 2025 GMT
        Subject: CN=20FF94E066622175DBAECCD9F5D75513BEC1F674
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:2e:b3:2c:49:4e:87:e3:87:54:78:de:74:e4:
                    1e:4b:51:d6:71:22:f1:8f:9f:02:ae:48:86:ac:bd:
                    eb:09:e8:1f:83:3d:d6:52:fe:05:d2:f7:b2:67:f1:
                    fb:1f:ab:48:93:29:c8:25:eb:e3:1e:0f:0a:66:77:
                    90:49:5d:2d:4a:b7:e0:80:52:5b:f2:7b:ea:8f:00:
                    66:55:fd:90:66:41:f6:1a:f3:4a:20:fe:ec:09:b5:
                    6f:ac:9f:5d:a8:f0:c9:fd:3e:35:fa:29:3c:34:64:
                    59:c9:4c:71:7f:3f:1d:6a:bd:a8:12:eb:87:3c:2c:
                    aa:8e:c9:d1:2c:b8:12:b3:9e:b9:61:30:e6:d4:8b:
                    9e:ed:7a:c1:f7:e7:24:f4:b0:7c:56:21:36:3d:ec:
                    08:c7:e2:a8:33:2d:0f:04:5c:9e:d5:81:b2:c0:c7:
                    69:bd:b4:cf:68:34:45:45:00:a6:c6:1d:52:99:93:
                    c7:03:69:07:e7:f1:e1:7f:97:f7:67:01:7e:35:68:
                    92:52:de:aa:31:56:21:4d:3e:52:ae:5a:51:52:45:
                    f1:1c:5f:a1:ed:00:12:22:28:c8:08:b8:13:8f:7b:
                    71:40:44:a6:9b:bd:79:f6:fd:15:dc:b3:11:8f:19:
                    5d:be:08:78:e2:00:52:2d:df:54:e9:13:48:90:2d:
                    27:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:FF:94:E0:66:62:21:75:DB:AE:CC:D9:F5:D7:55:13:BE:C1:F6:74
            X509v3 Authority Key Identifier:
                keyid:ED:AC:2B:7F:8E:A0:3E:6B:EE:B3:71:63:58:CC:DB:98:B4:7D:9F:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8m3LcL6b4YVrEFHsFNwDkZtMS2pcjbhQ35fFbDVECEfA/0/EDAC2B7F8EA03E6BEEB3716358CCDB98B47D9FE4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EDAC2B7F8EA03E6BEEB3716358CCDB98B47D9FE4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8m3LcL6b4YVrEFHsFNwDkZtMS2pcjbhQ35fFbDVECEfA/0/3137392e3130362e3137362e302f32322d3232203d3e203532353339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.106.176.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0b:d0:7c:24:bf:25:25:97:65:e4:d6:30:26:1b:c8:63:d6:4b:
         0f:46:2e:be:cf:57:d5:34:ef:7e:60:fc:9c:29:2a:4d:c4:93:
         32:21:2e:ef:5c:d0:6a:6b:8e:10:f5:e0:43:53:35:d8:b2:6f:
         cc:c7:06:87:24:c9:bb:bb:50:d8:8b:c6:24:2b:f9:f6:63:f5:
         5f:09:05:75:89:af:68:c6:51:09:f6:10:ca:d3:18:b7:3f:2d:
         59:79:d0:f3:f4:11:23:e2:b7:45:91:88:6d:23:49:8d:07:35:
         d0:47:78:05:00:e7:5e:1a:44:70:1e:c2:a6:f5:5a:3c:63:08:
         2c:81:b8:c3:c5:15:a3:84:72:a8:1f:32:34:30:a4:ce:bb:59:
         33:1d:cc:5c:5b:35:f8:5f:e3:b6:db:b9:2c:03:d1:4b:c6:74:
         c3:3e:8a:87:5f:04:e2:82:fc:5e:43:2c:11:c3:ba:6e:09:9d:
         65:1e:9e:8f:23:0a:62:65:c0:4d:a8:80:ae:18:30:c9:6f:47:
         86:fe:f7:dc:fe:8b:e3:1a:47:c0:dc:e4:45:40:66:35:c1:3d:
         ac:9e:5d:86:27:1f:7c:7c:27:aa:97:d0:e9:c2:87:6a:3b:54:
         d2:65:7a:2e:b6:ae:ba:e8:93:92:39:94:c7:d5:55:9d:fd:2c:
         80:ed:2a:77
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUIwoq/veX+a6BVq8CBDVYgzttIn8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRURBQzJCN0Y4RUEwM0U2QkVFQjM3MTYzNThDQ0RCOThC
NDdEOUZFNDAeFw0yNDA4MjcxNjMxMzFaFw0yNTA4MjYxNjM2MzFaMDMxMTAvBgNV
BAMTKDIwRkY5NEUwNjY2MjIxNzVEQkFFQ0NEOUY1RDc1NTEzQkVDMUY2NzQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9LrMsSU6H44dUeN505B5LUdZx
IvGPnwKuSIasvesJ6B+DPdZS/gXS97Jn8fsfq0iTKcgl6+MeDwpmd5BJXS1Kt+CA
Ulvye+qPAGZV/ZBmQfYa80og/uwJtW+sn12o8Mn9PjX6KTw0ZFnJTHF/Px1qvagS
64c8LKqOydEsuBKznrlhMObUi57tesH35yT0sHxWITY97AjH4qgzLQ8EXJ7VgbLA
x2m9tM9oNEVFAKbGHVKZk8cDaQfn8eF/l/dnAX41aJJS3qoxViFNPlKuWlFSRfEc
X6HtABIiKMgIuBOPe3FARKabvXn2/RXcsxGPGV2+CHjiAFIt31TpE0iQLSfrAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUIP+U4GZiIXXbrszZ9ddVE77B9nQwHwYDVR0j
BBgwFoAU7awrf46gPmvus3FjWMzbmLR9n+QwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOG0zTGNMNmI0WVZyRUZIc0ZOd0RrWnRNUzJwY2piaFEzNWZGYkRWRUNF
ZkEvMC9FREFDMkI3RjhFQTAzRTZCRUVCMzcxNjM1OENDREI5OEI0N0Q5RkU0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0VEQUMyQjdGOEVBMDNFNkJF
RUIzNzE2MzU4Q0NEQjk4QjQ3RDlGRTQuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhtM0xjTDZiNFlWckVGSHNGTndEa1p0TVMycGNqYmhRMzVmRmJEVkVDRWZBLzAv
MzEzNzM5MmUzMTMwMzYyZTMxMzczNjJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDM1
MzIzNTMzMzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAKzarAwDQYJKoZIhvcNAQELBQADggEBAAvQfCS/
JSWXZeTWMCYbyGPWSw9GLr7PV9U0735g/JwpKk3EkzIhLu9c0GprjhD14ENTNdiy
b8zHBockybu7UNiLxiQr+fZj9V8JBXWJr2jGUQn2EMrTGLc/LVl50PP0ESPit0WR
iG0jSY0HNdBHeAUA514aRHAewqb1WjxjCCyBuMPFFaOEcqgfMjQwpM67WTMdzFxb
Nfhf47bbuSwD0UvGdMM+iodfBOKC/F5DLBHDum4JnWUeno8jCmJlwE2ogK4YMMlv
R4b+99z+i+MaR8Dc5EVAZjXBPayeXYYnH3x8J6qX0OnCh2o7VNJlei62rrrok5I5
lMfVVZ39LIDtKnc=
-----END CERTIFICATE-----
Generated at Fri Nov 22 11:14:47 2024 by rpki-client on console-fra.rpki-client.org