Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9SF3ELzzbBNW2b1uf6GK8c5oSGQAtxHXCQoNZnvBarQE/1/3137392e39372e39342e302f32342d3234203d3e20323633343133.roa
File:                     3137392e39372e39342e302f32342d3234203d3e20323633343133.roa (raw, json)
Hash identifier:          QwcAGSizTubYlP1nwJu6fgm4Nc/DhodjBTTJQ+N2+qw=
Subject key identifier:   31:A4:EB:F6:3F:04:E5:58:CD:1B:38:AD:C9:A2:33:CC:5D:92:A6:29
Certificate issuer:       /CN=E1989BB07C22369442D0A08B2212D584A657A415
Certificate serial:       73695FBDB7ADDE78E44E6DC0434C7FA1970B0EF7
Authority key identifier: E1:98:9B:B0:7C:22:36:94:42:D0:A0:8B:22:12:D5:84:A6:57:A4:15
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E1989BB07C22369442D0A08B2212D584A657A415.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9SF3ELzzbBNW2b1uf6GK8c5oSGQAtxHXCQoNZnvBarQE/1/3137392e39372e39342e302f32342d3234203d3e20323633343133.roa
Signing time:             Tue 02 Jul 2024 11:00:11 +0000
ROA not before:           Tue 02 Jul 2024 10:55:11 +0000
ROA not after:            Tue 01 Jul 2025 11:00:11 +0000
asID:                     263413
IP address blocks:        179.97.94.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9SF3ELzzbBNW2b1uf6GK8c5oSGQAtxHXCQoNZnvBarQE/1/E1989BB07C22369442D0A08B2212D584A657A415.crl
                          rsync://rpki-repo.registro.br/repo/9SF3ELzzbBNW2b1uf6GK8c5oSGQAtxHXCQoNZnvBarQE/1/E1989BB07C22369442D0A08B2212D584A657A415.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E1989BB07C22369442D0A08B2212D584A657A415.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 28 Sep 2024 09:23:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:69:5f:bd:b7:ad:de:78:e4:4e:6d:c0:43:4c:7f:a1:97:0b:0e:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E1989BB07C22369442D0A08B2212D584A657A415
        Validity
            Not Before: Jul  2 10:55:11 2024 GMT
            Not After : Jul  1 11:00:11 2025 GMT
        Subject: CN=31A4EBF63F04E558CD1B38ADC9A233CC5D92A629
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:4e:ba:25:9b:45:87:17:1e:09:2e:79:a9:0b:
                    36:bf:c9:41:33:95:d0:f3:34:1b:eb:f9:7c:6e:5e:
                    96:c7:b9:90:35:ef:ca:c5:e7:b5:45:7d:2d:6a:a9:
                    d7:ab:d9:73:8e:e5:14:20:13:46:ec:46:52:cb:6b:
                    92:7a:44:2a:4d:47:be:7f:61:20:cd:7e:0f:d9:e1:
                    92:27:ff:9b:66:78:13:0d:47:6e:69:a4:b2:23:8d:
                    cb:06:12:bf:1e:ba:56:71:c8:a9:8e:ad:68:40:06:
                    ba:29:a9:ca:36:50:7c:78:83:99:7c:cd:7c:17:8b:
                    dd:8e:77:b3:08:ea:7f:e5:23:51:51:57:8f:a3:9e:
                    7d:31:e4:1e:03:a1:09:d5:ad:26:a4:95:b3:27:76:
                    f2:dd:13:58:36:41:db:15:48:05:6e:7e:9c:4c:71:
                    90:f8:d2:7f:bb:d9:4f:28:c6:45:91:f3:f0:cd:a5:
                    19:92:ea:e5:7a:0d:86:93:e0:10:0b:3f:4a:69:7f:
                    02:80:1a:dd:d4:31:88:74:d2:a0:2f:cd:9a:64:05:
                    f7:ff:41:38:d6:49:c2:c7:97:bb:66:be:1f:3d:a3:
                    88:22:cd:d7:80:c7:f8:98:65:d2:72:24:b9:f5:c0:
                    25:a0:7c:0e:29:28:76:69:71:75:14:ff:04:b4:f2:
                    fb:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:A4:EB:F6:3F:04:E5:58:CD:1B:38:AD:C9:A2:33:CC:5D:92:A6:29
            X509v3 Authority Key Identifier:
                keyid:E1:98:9B:B0:7C:22:36:94:42:D0:A0:8B:22:12:D5:84:A6:57:A4:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9SF3ELzzbBNW2b1uf6GK8c5oSGQAtxHXCQoNZnvBarQE/1/E1989BB07C22369442D0A08B2212D584A657A415.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E1989BB07C22369442D0A08B2212D584A657A415.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9SF3ELzzbBNW2b1uf6GK8c5oSGQAtxHXCQoNZnvBarQE/1/3137392e39372e39342e302f32342d3234203d3e20323633343133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.97.94.0/24

    Signature Algorithm: sha256WithRSAEncryption
         43:19:c3:d5:fd:7c:83:60:fa:38:95:75:bc:76:73:e4:de:3d:
         19:ff:87:14:c1:79:50:5b:51:11:81:c7:d5:7e:c1:97:45:90:
         bf:ab:61:f8:b7:52:bc:ea:eb:11:af:bb:84:30:13:bb:b9:84:
         45:08:fd:54:be:df:97:e3:6e:ba:77:4e:2f:2e:60:3f:a8:fa:
         a1:ad:cc:37:74:1a:67:35:01:98:80:99:66:6f:a8:88:7b:f3:
         9d:06:72:6e:67:95:88:4f:9c:5b:e5:52:6c:22:59:8d:3d:22:
         74:d3:d1:c7:d9:e1:64:64:60:7e:f1:d3:eb:fa:76:cf:7e:70:
         b3:45:9d:51:9c:7a:ce:cc:71:ab:b8:61:89:78:08:67:a9:9c:
         c3:24:de:6b:9f:07:37:54:d5:9e:f0:31:67:15:2a:ae:13:81:
         3e:78:fb:aa:6b:46:19:16:37:7d:2d:3e:2b:b4:c5:c3:38:fd:
         de:1e:a1:f7:b7:74:93:aa:e7:3e:29:9f:66:4c:c3:f0:06:b1:
         9e:02:53:7b:7f:cc:2c:ad:1b:0c:11:dd:df:55:6e:5e:f2:6b:
         2d:ca:76:19:35:82:af:61:ae:a0:dc:67:b2:ab:a2:f2:19:97:
         58:83:17:a1:54:61:4f:92:52:49:62:ee:2e:8e:37:b8:67:6c:
         89:e2:05:9a
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUc2lfvbet3njkTm3AQ0x/oZcLDvcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTE5ODlCQjA3QzIyMzY5NDQyRDBBMDhCMjIxMkQ1ODRB
NjU3QTQxNTAeFw0yNDA3MDIxMDU1MTFaFw0yNTA3MDExMTAwMTFaMDMxMTAvBgNV
BAMTKDMxQTRFQkY2M0YwNEU1NThDRDFCMzhBREM5QTIzM0NDNUQ5MkE2MjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTTrolm0WHFx4JLnmpCza/yUEz
ldDzNBvr+XxuXpbHuZA178rF57VFfS1qqder2XOO5RQgE0bsRlLLa5J6RCpNR75/
YSDNfg/Z4ZIn/5tmeBMNR25ppLIjjcsGEr8eulZxyKmOrWhABropqco2UHx4g5l8
zXwXi92Od7MI6n/lI1FRV4+jnn0x5B4DoQnVrSaklbMndvLdE1g2QdsVSAVufpxM
cZD40n+72U8oxkWR8/DNpRmS6uV6DYaT4BALP0ppfwKAGt3UMYh00qAvzZpkBff/
QTjWScLHl7tmvh89o4gizdeAx/iYZdJyJLn1wCWgfA4pKHZpcXUU/wS08vsDAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUMaTr9j8E5VjNGzityaIzzF2SpikwHwYDVR0j
BBgwFoAU4ZibsHwiNpRC0KCLIhLVhKZXpBUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOVNGM0VMenpiQk5XMmIxdWY2R0s4YzVvU0dRQXR4SFhDUW9OWm52QmFy
UUUvMS9FMTk4OUJCMDdDMjIzNjk0NDJEMEEwOEIyMjEyRDU4NEE2NTdBNDE1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0UxOTg5QkIwN0MyMjM2OTQ0
MkQwQTA4QjIyMTJENTg0QTY1N0E0MTUuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzlTRjNFTHp6YkJOVzJiMXVmNkdLOGM1b1NHUUF0eEhYQ1FvTlpudkJhclFFLzEv
MzEzNzM5MmUzOTM3MmUzOTM0MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjMz
MzQzMTMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAs2FeMA0GCSqGSIb3DQEBCwUAA4IBAQBDGcPV/XyD
YPo4lXW8dnPk3j0Z/4cUwXlQW1ERgcfVfsGXRZC/q2H4t1K86usRr7uEMBO7uYRF
CP1Uvt+X4266d04vLmA/qPqhrcw3dBpnNQGYgJlmb6iIe/OdBnJuZ5WIT5xb5VJs
IlmNPSJ009HH2eFkZGB+8dPr+nbPfnCzRZ1RnHrOzHGruGGJeAhnqZzDJN5rnwc3
VNWe8DFnFSquE4E+ePuqa0YZFjd9LT4rtMXDOP3eHqH3t3STquc+KZ9mTMPwBrGe
AlN7f8wsrRsMEd3fVW5e8mstynYZNYKvYa6g3Geyq6LyGZdYgxehVGFPklJJYu4u
jje4Z2yJ4gWa
-----END CERTIFICATE-----
Generated at Fri Sep 27 09:15:44 2024 by rpki-client on console-fra.rpki-client.org