Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9SF3ELzzbBNW2b1uf6GK8c5oSGQAtxHXCQoNZnvBarQE/1/3137392e39372e38382e302f32332d3233203d3e20323633343133.roa
File:                     3137392e39372e38382e302f32332d3233203d3e20323633343133.roa (raw, json)
Hash identifier:          GZ2qB519c5aKhtOLrdPIzrIY5emAgIf44XrzTBPE4jE=
Subject key identifier:   5B:23:63:4F:4C:B4:23:51:CA:2F:D8:49:75:D7:59:70:65:52:2D:52
Certificate issuer:       /CN=E1989BB07C22369442D0A08B2212D584A657A415
Certificate serial:       0875D32AE920E9472AEF623C651759506CB939D2
Authority key identifier: E1:98:9B:B0:7C:22:36:94:42:D0:A0:8B:22:12:D5:84:A6:57:A4:15
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E1989BB07C22369442D0A08B2212D584A657A415.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9SF3ELzzbBNW2b1uf6GK8c5oSGQAtxHXCQoNZnvBarQE/1/3137392e39372e38382e302f32332d3233203d3e20323633343133.roa
Signing time:             Thu 04 Apr 2024 10:21:41 +0000
ROA not before:           Thu 04 Apr 2024 10:16:41 +0000
ROA not after:            Thu 03 Apr 2025 10:21:41 +0000
asID:                     263413
IP address blocks:        179.97.88.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9SF3ELzzbBNW2b1uf6GK8c5oSGQAtxHXCQoNZnvBarQE/1/E1989BB07C22369442D0A08B2212D584A657A415.crl
                          rsync://rpki-repo.registro.br/repo/9SF3ELzzbBNW2b1uf6GK8c5oSGQAtxHXCQoNZnvBarQE/1/E1989BB07C22369442D0A08B2212D584A657A415.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E1989BB07C22369442D0A08B2212D584A657A415.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 28 Sep 2024 10:35:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:75:d3:2a:e9:20:e9:47:2a:ef:62:3c:65:17:59:50:6c:b9:39:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E1989BB07C22369442D0A08B2212D584A657A415
        Validity
            Not Before: Apr  4 10:16:41 2024 GMT
            Not After : Apr  3 10:21:41 2025 GMT
        Subject: CN=5B23634F4CB42351CA2FD84975D7597065522D52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:66:4d:27:bf:50:52:b2:95:26:18:06:a2:dc:
                    52:07:0b:3e:60:37:b5:37:e8:80:3e:98:ea:dc:d9:
                    67:98:b5:21:ce:96:d4:69:5b:67:42:7f:6d:70:be:
                    49:2d:89:c4:80:0b:64:f9:7f:7e:c1:b9:51:63:f1:
                    05:92:22:db:7c:02:13:0d:69:a1:96:7b:76:11:a9:
                    74:99:4d:ff:c7:40:63:78:bb:4d:f0:27:50:cf:5c:
                    94:24:6c:48:5e:fa:28:29:99:5e:8f:a0:6e:cd:96:
                    ca:d5:5b:fa:bf:83:ea:a4:51:b5:91:fb:4b:64:9e:
                    b9:38:b0:75:78:3c:1d:f1:56:71:17:c0:f8:b4:78:
                    49:19:bf:71:56:97:48:ac:5e:d9:07:8b:25:3f:89:
                    48:d6:32:70:99:3a:5f:d7:54:63:34:01:ef:31:77:
                    14:67:0f:df:55:32:14:04:e8:40:3d:a4:9f:10:b9:
                    69:25:ab:bf:06:8d:7c:7f:b5:32:37:9c:ff:d1:ff:
                    74:84:e5:7a:76:ad:58:cf:59:37:e9:a4:32:60:54:
                    66:8b:5a:c3:85:b6:7a:fd:6d:04:a4:e3:7f:5b:f1:
                    e7:e8:e0:8e:37:16:50:0f:47:88:a9:9f:33:b5:8d:
                    bd:ac:5b:58:36:27:b2:5c:4f:78:2a:66:ae:6b:5c:
                    70:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:23:63:4F:4C:B4:23:51:CA:2F:D8:49:75:D7:59:70:65:52:2D:52
            X509v3 Authority Key Identifier:
                keyid:E1:98:9B:B0:7C:22:36:94:42:D0:A0:8B:22:12:D5:84:A6:57:A4:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9SF3ELzzbBNW2b1uf6GK8c5oSGQAtxHXCQoNZnvBarQE/1/E1989BB07C22369442D0A08B2212D584A657A415.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E1989BB07C22369442D0A08B2212D584A657A415.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9SF3ELzzbBNW2b1uf6GK8c5oSGQAtxHXCQoNZnvBarQE/1/3137392e39372e38382e302f32332d3233203d3e20323633343133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.97.88.0/23

    Signature Algorithm: sha256WithRSAEncryption
         24:d9:6b:0f:1e:90:17:68:bd:77:0c:86:87:59:f1:bf:ac:2a:
         a9:62:43:b4:bb:19:bc:30:fb:07:71:bb:1c:c6:6f:87:0f:c2:
         04:7f:61:fe:12:50:87:8d:2d:a1:06:56:18:dc:8b:4f:8e:82:
         43:67:9e:a9:76:16:b9:5e:ba:67:e9:45:01:ba:61:4d:60:13:
         23:4a:de:1b:cf:b2:57:39:f7:84:6f:ad:0a:f4:6a:75:ef:fa:
         dc:4e:62:78:b8:8a:69:76:9d:f2:13:a0:e9:35:e9:ec:c6:f8:
         fa:2c:55:44:7c:48:39:c1:3d:01:fb:f5:67:4a:7a:76:7e:65:
         95:67:1f:7c:90:39:3a:3b:ea:c6:f5:60:ec:ce:8b:75:f3:b9:
         d1:d6:14:49:97:2f:14:34:91:11:cd:49:6a:1b:e2:f4:94:75:
         95:a6:86:72:e8:67:18:ae:b6:c9:1f:e0:02:d5:5b:19:de:bb:
         80:c3:40:67:4e:4b:99:09:c0:a1:fb:08:b3:a5:d7:24:8f:69:
         90:a4:a9:d4:30:4f:91:3f:fe:f8:fb:ff:c6:c1:e3:7b:65:15:
         11:6d:d1:85:5e:6d:6c:9a:9a:88:61:2c:95:5c:5e:e6:15:7f:
         8d:f4:9e:a7:0f:f6:17:87:f2:a5:62:bc:14:92:da:a6:0c:70:
         62:3f:00:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 27 10:42:51 2024 by rpki-client on console-ams.rpki-client.org