Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/3/3137392e3138392e3232342e302f32302d3234203d3e203238363639.roa
File:                     3137392e3138392e3232342e302f32302d3234203d3e203238363639.roa (raw, json)
Hash identifier:          TkjOlQZ9BUFA6yoMUc3nf2fRESd8NfCwQ8OGzhNEBZQ=
Subject key identifier:   C2:86:F8:51:C6:0D:FC:B3:2D:11:CF:21:29:F2:B6:ED:0E:B8:1C:AB
Certificate issuer:       /CN=BA413927001E29F4D18A0C0FCE1C467924EA1B6B
Certificate serial:       7BE43E402911713689D1A716A1000C25A48A0486
Authority key identifier: BA:41:39:27:00:1E:29:F4:D1:8A:0C:0F:CE:1C:46:79:24:EA:1B:6B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA413927001E29F4D18A0C0FCE1C467924EA1B6B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/3/3137392e3138392e3232342e302f32302d3234203d3e203238363639.roa
Signing time:             Mon 25 Nov 2024 17:04:01 +0000
ROA not before:           Mon 25 Nov 2024 16:59:01 +0000
ROA not after:            Mon 24 Nov 2025 17:04:01 +0000
asID:                     28669
IP address blocks:        179.189.224.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/3/BA413927001E29F4D18A0C0FCE1C467924EA1B6B.crl
                          rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/3/BA413927001E29F4D18A0C0FCE1C467924EA1B6B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA413927001E29F4D18A0C0FCE1C467924EA1B6B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 13:35:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:e4:3e:40:29:11:71:36:89:d1:a7:16:a1:00:0c:25:a4:8a:04:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BA413927001E29F4D18A0C0FCE1C467924EA1B6B
        Validity
            Not Before: Nov 25 16:59:01 2024 GMT
            Not After : Nov 24 17:04:01 2025 GMT
        Subject: CN=C286F851C60DFCB32D11CF2129F2B6ED0EB81CAB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:72:f8:70:fd:52:ff:b0:8f:dc:8f:55:b0:5e:
                    3d:df:46:9c:30:54:15:05:e8:56:be:87:80:a5:4c:
                    9e:95:1a:4d:42:06:f0:f6:e5:dd:5a:38:30:c6:4e:
                    63:3e:ab:eb:0f:64:79:d9:8a:3d:06:67:5b:d4:fa:
                    14:7d:7c:44:08:ef:e6:79:5e:e3:94:76:28:db:10:
                    d6:40:d0:a7:f3:e2:64:9f:af:ea:18:72:51:e1:b8:
                    be:fe:4d:fc:2f:8c:75:9a:39:a2:86:28:39:b5:d6:
                    49:36:ca:0b:d0:6e:5a:d5:de:12:d2:4b:4a:82:a3:
                    6f:4a:b0:7b:57:bc:be:32:d0:79:fd:ee:de:63:72:
                    34:e7:6c:50:77:20:c2:c5:ce:f2:76:eb:bf:1c:43:
                    f6:7d:aa:06:fb:3e:d2:ef:c0:f4:02:b2:a4:63:42:
                    6a:7a:b3:d5:6c:bc:5e:f3:b5:5c:7b:8e:7b:72:e0:
                    da:a4:a6:f5:0d:f1:84:90:36:b6:70:28:af:6e:f2:
                    dc:ca:cd:f1:4a:8e:07:b8:83:b7:9a:aa:24:c5:73:
                    c8:25:22:6c:f3:cb:a0:87:8b:04:d2:ef:d6:2b:24:
                    68:c6:7a:7b:fc:65:4e:9d:f0:e0:3e:f5:60:ca:aa:
                    be:13:5c:6b:87:73:db:45:33:aa:1e:72:d9:de:73:
                    d0:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:86:F8:51:C6:0D:FC:B3:2D:11:CF:21:29:F2:B6:ED:0E:B8:1C:AB
            X509v3 Authority Key Identifier:
                keyid:BA:41:39:27:00:1E:29:F4:D1:8A:0C:0F:CE:1C:46:79:24:EA:1B:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/3/BA413927001E29F4D18A0C0FCE1C467924EA1B6B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA413927001E29F4D18A0C0FCE1C467924EA1B6B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/3/3137392e3138392e3232342e302f32302d3234203d3e203238363639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.189.224.0/20

    Signature Algorithm: sha256WithRSAEncryption
         62:da:b8:81:d5:6a:d0:6a:51:c7:da:0e:48:d3:03:ee:14:b9:
         36:24:9c:d9:2f:0d:55:a0:7b:6b:c8:05:c6:d1:f0:22:51:fd:
         68:ce:90:eb:f2:73:e9:57:b2:d7:0a:9a:0c:5b:cd:77:c4:56:
         3b:49:8d:59:0a:f1:10:57:dd:95:cd:55:6e:93:1d:c9:6c:f9:
         a3:4e:20:a2:61:54:05:f1:19:75:af:22:81:c7:9c:92:64:ab:
         10:f1:dc:8d:68:ef:ae:a5:3b:1d:aa:07:23:f9:23:16:6d:a8:
         eb:9b:42:7d:2d:03:06:63:60:61:49:6a:b5:af:dd:90:4e:34:
         fd:66:12:00:fc:65:1a:25:21:1b:4e:7a:f9:8c:23:ca:26:9a:
         66:c9:87:f2:71:b1:b2:ba:ae:c9:c4:ba:e0:69:2d:08:95:7f:
         86:b6:60:cf:ca:04:f6:74:e8:9b:ab:0b:9a:1e:2c:7f:72:a4:
         c7:ce:d9:e3:54:08:84:10:af:c7:88:95:4d:ad:a7:74:3b:36:
         bf:00:48:6a:61:6e:a8:80:54:98:0a:ec:68:f5:70:e8:78:f1:
         54:f5:8c:61:a8:95:d9:8a:8b:de:1b:01:92:47:c7:45:c2:65:
         e8:11:b1:a2:c3:42:1c:91:54:45:68:90:80:d5:c6:9b:40:28:
         82:61:be:fb
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUe+Q+QCkRcTaJ0acWoQAMJaSKBIYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkE0MTM5MjcwMDFFMjlGNEQxOEEwQzBGQ0UxQzQ2Nzky
NEVBMUI2QjAeFw0yNDExMjUxNjU5MDFaFw0yNTExMjQxNzA0MDFaMDMxMTAvBgNV
BAMTKEMyODZGODUxQzYwREZDQjMyRDExQ0YyMTI5RjJCNkVEMEVCODFDQUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFcvhw/VL/sI/cj1WwXj3fRpww
VBUF6Fa+h4ClTJ6VGk1CBvD25d1aODDGTmM+q+sPZHnZij0GZ1vU+hR9fEQI7+Z5
XuOUdijbENZA0Kfz4mSfr+oYclHhuL7+TfwvjHWaOaKGKDm11kk2ygvQblrV3hLS
S0qCo29KsHtXvL4y0Hn97t5jcjTnbFB3IMLFzvJ2678cQ/Z9qgb7PtLvwPQCsqRj
Qmp6s9VsvF7ztVx7jnty4NqkpvUN8YSQNrZwKK9u8tzKzfFKjge4g7eaqiTFc8gl
Imzzy6CHiwTS79YrJGjGenv8ZU6d8OA+9WDKqr4TXGuHc9tFM6oectnec9ChAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUwob4UcYN/LMtEc8hKfK27Q64HKswHwYDVR0j
BBgwFoAUukE5JwAeKfTRigwPzhxGeSTqG2swDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOHI5OHZaMU5BektKS1FtSEpNQWppcG9NbVlMNmdaYjVSM2doWEdEbWNG
R04vMy9CQTQxMzkyNzAwMUUyOUY0RDE4QTBDMEZDRTFDNDY3OTI0RUExQjZCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0JBNDEzOTI3MDAxRTI5RjRE
MThBMEMwRkNFMUM0Njc5MjRFQTFCNkIuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhyOTh2WjFOQXpLSktRbUhKTUFqaXBvTW1ZTDZnWmI1UjNnaFhHRG1jRkdOLzMv
MzEzNzM5MmUzMTM4MzkyZTMyMzIzNDJlMzAyZjMyMzAyZDMyMzQyMDNkM2UyMDMy
MzgzNjM2Mzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBASzveAwDQYJKoZIhvcNAQELBQADggEBAGLauIHV
atBqUcfaDkjTA+4UuTYknNkvDVWge2vIBcbR8CJR/WjOkOvyc+lXstcKmgxbzXfE
VjtJjVkK8RBX3ZXNVW6THcls+aNOIKJhVAXxGXWvIoHHnJJkqxDx3I1o766lOx2q
ByP5IxZtqOubQn0tAwZjYGFJarWv3ZBONP1mEgD8ZRolIRtOevmMI8ommmbJh/Jx
sbK6rsnEuuBpLQiVf4a2YM/KBPZ06JurC5oeLH9ypMfO2eNUCIQQr8eIlU2tp3Q7
Nr8ASGphbqiAVJgK7Gj1cOh48VT1jGGoldmKi94bAZJHx0XCZegRsaLDQhyRVEVo
kIDVxptAKIJhvvs=
-----END CERTIFICATE-----
Generated at Tue Nov 26 11:47:34 2024 by rpki-client on console-ams.rpki-client.org