Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9SF3ELzzbBNW2b1uf6GK8c5oSGQAtxHXCQoNZnvBarQE/1/3137392e39372e39322e302f32342d3234203d3e20323633343133.roa
File:                     3137392e39372e39322e302f32342d3234203d3e20323633343133.roa (raw, json)
Hash identifier:          gN7BiGr71zaKYcXIpFgA/8TKPekpbJH5Mh1E8W/auVc=
Subject key identifier:   32:25:06:1F:F2:FB:9F:08:C5:43:6D:16:86:24:61:67:94:91:C1:FA
Certificate issuer:       /CN=E1989BB07C22369442D0A08B2212D584A657A415
Certificate serial:       582CB98E82D9A9CD3FD42BD662C2345128916A63
Authority key identifier: E1:98:9B:B0:7C:22:36:94:42:D0:A0:8B:22:12:D5:84:A6:57:A4:15
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E1989BB07C22369442D0A08B2212D584A657A415.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9SF3ELzzbBNW2b1uf6GK8c5oSGQAtxHXCQoNZnvBarQE/1/3137392e39372e39322e302f32342d3234203d3e20323633343133.roa
Signing time:             Tue 02 Jul 2024 11:00:11 +0000
ROA not before:           Tue 02 Jul 2024 10:55:11 +0000
ROA not after:            Tue 01 Jul 2025 11:00:11 +0000
asID:                     263413
IP address blocks:        179.97.92.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9SF3ELzzbBNW2b1uf6GK8c5oSGQAtxHXCQoNZnvBarQE/1/E1989BB07C22369442D0A08B2212D584A657A415.crl
                          rsync://rpki-repo.registro.br/repo/9SF3ELzzbBNW2b1uf6GK8c5oSGQAtxHXCQoNZnvBarQE/1/E1989BB07C22369442D0A08B2212D584A657A415.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E1989BB07C22369442D0A08B2212D584A657A415.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 28 Sep 2024 09:23:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:2c:b9:8e:82:d9:a9:cd:3f:d4:2b:d6:62:c2:34:51:28:91:6a:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E1989BB07C22369442D0A08B2212D584A657A415
        Validity
            Not Before: Jul  2 10:55:11 2024 GMT
            Not After : Jul  1 11:00:11 2025 GMT
        Subject: CN=3225061FF2FB9F08C5436D16862461679491C1FA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:f4:a3:09:ce:50:71:ab:c5:72:8d:ac:f3:cc:
                    2b:0a:d8:37:49:48:a1:d2:3e:7a:3e:e8:c8:ed:e0:
                    25:45:04:7b:dc:01:31:8d:87:e7:4c:f5:77:5a:fb:
                    32:f7:5a:82:68:0f:ab:fd:f8:14:05:09:8f:d2:db:
                    2d:e9:d4:ae:fb:02:93:1e:f8:62:c0:c3:49:fb:bd:
                    f2:60:e9:a5:5a:84:a6:fc:0e:1f:9e:71:f5:3a:00:
                    2c:e6:a3:1e:41:49:6c:5d:38:f2:2e:96:ea:e2:58:
                    e4:cf:07:62:86:d5:d1:ea:6b:ef:29:59:c7:9c:89:
                    0a:8d:31:a7:f6:0d:42:a7:36:4d:8a:42:5a:ce:57:
                    06:8c:9c:c4:cb:25:eb:9e:f8:06:1d:5f:3b:d6:7e:
                    94:68:82:73:04:12:5d:04:2f:38:b0:a4:35:f6:bf:
                    c5:d1:3c:a4:73:e2:9c:e7:29:e2:39:60:2a:af:80:
                    9d:c1:fb:ff:f1:82:89:74:ad:ad:73:61:e9:b4:71:
                    e6:d5:84:27:07:b5:20:95:ac:c7:94:54:1e:2f:ab:
                    b2:15:b0:1d:ec:b9:97:77:60:04:50:d8:a1:74:10:
                    30:f7:61:2f:a4:ad:e6:ad:d1:5c:8c:d6:04:22:f0:
                    d1:2e:c7:55:67:ad:ef:97:35:af:cc:45:ba:cb:93:
                    6b:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:25:06:1F:F2:FB:9F:08:C5:43:6D:16:86:24:61:67:94:91:C1:FA
            X509v3 Authority Key Identifier:
                keyid:E1:98:9B:B0:7C:22:36:94:42:D0:A0:8B:22:12:D5:84:A6:57:A4:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9SF3ELzzbBNW2b1uf6GK8c5oSGQAtxHXCQoNZnvBarQE/1/E1989BB07C22369442D0A08B2212D584A657A415.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E1989BB07C22369442D0A08B2212D584A657A415.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9SF3ELzzbBNW2b1uf6GK8c5oSGQAtxHXCQoNZnvBarQE/1/3137392e39372e39322e302f32342d3234203d3e20323633343133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.97.92.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0f:57:e1:b9:15:e9:38:7d:96:ff:82:24:4a:89:11:44:b5:25:
         f3:f5:7e:14:a1:a2:da:c2:5c:ab:ac:63:38:0f:fe:31:27:34:
         11:b0:1e:91:f9:36:96:69:36:cf:c0:22:3f:9c:bf:d8:7e:e1:
         dc:07:fc:3a:25:dd:60:a9:d1:e7:4e:ca:89:d9:2e:d9:8b:f0:
         70:ce:96:b9:f4:04:cc:7d:e8:73:86:50:e6:82:b1:80:46:14:
         97:2e:b8:eb:29:db:7a:2d:a2:df:f5:76:c6:82:9a:67:1d:9f:
         fc:57:34:1c:13:08:d1:a2:3c:b5:cb:5b:bb:23:9e:45:9a:8c:
         08:6c:77:53:58:8f:79:45:b2:f7:49:61:8f:9a:69:20:b3:e7:
         94:ba:09:e4:3c:27:ea:cd:e6:9a:15:74:24:41:50:e3:d1:f0:
         4a:4f:22:f5:6c:76:26:c4:40:5f:2d:cc:76:b2:1a:1e:e6:01:
         0f:06:2b:e4:56:e8:28:a0:49:7b:48:3d:d8:01:06:22:12:2e:
         0c:12:b5:57:5c:a8:90:96:d0:70:9c:cc:76:90:14:d4:2f:78:
         d9:86:07:d0:dd:67:6a:e7:15:6b:44:97:67:4a:c7:4d:33:f6:
         67:f0:b8:f8:90:34:21:ef:a1:fb:29:7f:36:61:82:31:39:24:
         67:2e:58:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 27 09:15:44 2024 by rpki-client on console-fra.rpki-client.org