Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9zSNjeGwHxYZ17zj6dTwywjgHVMJyJbxH4DsXfTyMeyy/0/3137392e39372e3232342e302f31392d3234203d3e203238333030.roa
File:                     3137392e39372e3232342e302f31392d3234203d3e203238333030.roa (raw, json)
Hash identifier:          mdnAK6H+GK/rUraA4QR6/AI32thQVXoob9Jcqy76Q3c=
Subject key identifier:   4C:24:A8:5B:7B:F8:15:11:D8:B0:CC:31:D5:4B:DD:03:50:FA:09:80
Certificate issuer:       /CN=0B47F19EDA3877EE438A7AC26BB3850860C342BB
Certificate serial:       0506D7050B6DA5C6E4FDD878326FD57408636BD4
Authority key identifier: 0B:47:F1:9E:DA:38:77:EE:43:8A:7A:C2:6B:B3:85:08:60:C3:42:BB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0B47F19EDA3877EE438A7AC26BB3850860C342BB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9zSNjeGwHxYZ17zj6dTwywjgHVMJyJbxH4DsXfTyMeyy/0/3137392e39372e3232342e302f31392d3234203d3e203238333030.roa
Signing time:             Mon 27 May 2024 12:49:41 +0000
ROA not before:           Mon 27 May 2024 12:44:41 +0000
ROA not after:            Mon 26 May 2025 12:49:41 +0000
asID:                     28300
IP address blocks:        179.97.224.0/19 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9zSNjeGwHxYZ17zj6dTwywjgHVMJyJbxH4DsXfTyMeyy/0/0B47F19EDA3877EE438A7AC26BB3850860C342BB.crl
                          rsync://rpki-repo.registro.br/repo/9zSNjeGwHxYZ17zj6dTwywjgHVMJyJbxH4DsXfTyMeyy/0/0B47F19EDA3877EE438A7AC26BB3850860C342BB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0B47F19EDA3877EE438A7AC26BB3850860C342BB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 16 Jun 2024 19:20:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:06:d7:05:0b:6d:a5:c6:e4:fd:d8:78:32:6f:d5:74:08:63:6b:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0B47F19EDA3877EE438A7AC26BB3850860C342BB
        Validity
            Not Before: May 27 12:44:41 2024 GMT
            Not After : May 26 12:49:41 2025 GMT
        Subject: CN=4C24A85B7BF81511D8B0CC31D54BDD0350FA0980
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:50:29:e8:c3:b5:f0:cf:2a:df:a8:c5:3e:3d:
                    f5:9e:c0:4a:85:39:30:35:df:fc:8d:5d:b4:b6:89:
                    30:31:8d:4f:a6:ed:6f:8d:8d:a5:61:59:99:1e:da:
                    2a:6f:98:17:ac:bb:89:2f:e9:45:44:20:89:e4:26:
                    84:17:40:f7:88:e7:5b:91:ea:a0:f5:a3:d0:52:31:
                    0a:0b:dd:df:a2:57:02:bd:d7:fe:1b:54:c6:58:d4:
                    9c:da:8f:a4:5b:0a:28:8f:62:a6:80:d0:d8:84:2e:
                    34:c4:ec:17:18:b9:09:ad:01:8a:d6:1e:36:7a:5e:
                    5b:22:9a:b9:b6:7c:83:40:5b:14:d8:2f:ef:63:b9:
                    d6:e1:40:23:4b:72:73:e3:f3:e6:98:7b:23:81:5d:
                    68:bd:4c:5d:8e:3f:04:b7:c2:87:ce:5c:7c:7b:4e:
                    f2:f6:00:15:78:5b:5e:eb:5c:e4:ad:16:fc:2d:a3:
                    16:8c:dd:cb:54:4e:7a:c4:82:35:24:74:f2:66:2b:
                    37:0d:47:86:ff:94:2a:2b:fe:82:16:a9:6c:54:5c:
                    27:f0:68:a9:19:6e:4d:24:ff:52:76:db:70:34:ce:
                    66:9f:7e:59:3f:c5:a4:be:83:89:94:5c:0f:00:b3:
                    f6:3c:66:3f:b4:b0:c0:db:13:f4:1e:a1:3d:9a:d6:
                    63:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:24:A8:5B:7B:F8:15:11:D8:B0:CC:31:D5:4B:DD:03:50:FA:09:80
            X509v3 Authority Key Identifier:
                keyid:0B:47:F1:9E:DA:38:77:EE:43:8A:7A:C2:6B:B3:85:08:60:C3:42:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9zSNjeGwHxYZ17zj6dTwywjgHVMJyJbxH4DsXfTyMeyy/0/0B47F19EDA3877EE438A7AC26BB3850860C342BB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0B47F19EDA3877EE438A7AC26BB3850860C342BB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9zSNjeGwHxYZ17zj6dTwywjgHVMJyJbxH4DsXfTyMeyy/0/3137392e39372e3232342e302f31392d3234203d3e203238333030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.97.224.0/19

    Signature Algorithm: sha256WithRSAEncryption
         c0:62:bd:86:68:fe:2a:83:c4:15:d6:70:ac:b9:fe:71:21:f5:
         4b:56:7c:4f:1f:f7:0f:9f:9e:ea:c6:02:79:a1:7d:9b:57:0c:
         fe:1c:03:3f:e9:96:56:e9:77:8d:54:e0:dc:0b:e8:5d:9c:82:
         e6:62:68:90:ca:26:df:43:00:19:c3:26:67:47:0c:65:95:d6:
         06:5d:d9:9d:fd:94:12:ce:fa:3d:63:aa:e3:ca:ec:6b:5c:3e:
         bd:ac:59:1a:94:af:18:74:61:fb:ef:a6:d2:2a:2c:fe:fc:58:
         76:54:7d:7a:56:b6:39:6e:4d:95:fb:a3:0f:c7:fd:09:66:90:
         3e:eb:71:78:be:d9:96:2d:28:63:ef:a9:fa:55:cf:4b:ca:3c:
         a4:87:d6:2e:67:6b:b3:9f:91:40:27:15:45:d9:16:df:42:f7:
         03:f2:1b:59:ba:1c:d8:ce:a2:60:12:04:8c:c8:34:73:f8:fb:
         f3:29:08:e6:e1:51:c9:84:4b:56:cd:11:55:c2:bf:1f:03:0e:
         2f:7b:2d:14:05:e8:72:1e:3b:71:f9:87:ff:43:2c:92:34:92:
         e3:a4:5c:fe:74:74:40:5f:c7:c3:4e:96:88:e2:31:b3:84:b6:
         82:31:50:72:98:a6:26:dc:f7:5b:b6:b8:b2:1d:c0:e8:3e:b8:
         1f:90:d1:60
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUBQbXBQttpcbk/dh4Mm/VdAhja9QwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEI0N0YxOUVEQTM4NzdFRTQzOEE3QUMyNkJCMzg1MDg2
MEMzNDJCQjAeFw0yNDA1MjcxMjQ0NDFaFw0yNTA1MjYxMjQ5NDFaMDMxMTAvBgNV
BAMTKDRDMjRBODVCN0JGODE1MTFEOEIwQ0MzMUQ1NEJERDAzNTBGQTA5ODAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyUCnow7XwzyrfqMU+PfWewEqF
OTA13/yNXbS2iTAxjU+m7W+NjaVhWZke2ipvmBesu4kv6UVEIInkJoQXQPeI51uR
6qD1o9BSMQoL3d+iVwK91/4bVMZY1Jzaj6RbCiiPYqaA0NiELjTE7BcYuQmtAYrW
HjZ6Xlsimrm2fINAWxTYL+9judbhQCNLcnPj8+aYeyOBXWi9TF2OPwS3wofOXHx7
TvL2ABV4W17rXOStFvwtoxaM3ctUTnrEgjUkdPJmKzcNR4b/lCor/oIWqWxUXCfw
aKkZbk0k/1J223A0zmafflk/xaS+g4mUXA8As/Y8Zj+0sMDbE/QeoT2a1mNfAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUTCSoW3v4FRHYsMwx1UvdA1D6CYAwHwYDVR0j
BBgwFoAUC0fxnto4d+5DinrCa7OFCGDDQrswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOXpTTmplR3dIeFlaMTd6ajZkVHd5d2pnSFZNSnlKYnhINERzWGZUeU1l
eXkvMC8wQjQ3RjE5RURBMzg3N0VFNDM4QTdBQzI2QkIzODUwODYwQzM0MkJCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzBCNDdGMTlFREEzODc3RUU0
MzhBN0FDMjZCQjM4NTA4NjBDMzQyQkIuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
Lzl6U05qZUd3SHhZWjE3emo2ZFR3eXdqZ0hWTUp5SmJ4SDREc1hmVHlNZXl5LzAv
MzEzNzM5MmUzOTM3MmUzMjMyMzQyZTMwMmYzMTM5MmQzMjM0MjAzZDNlMjAzMjM4
MzMzMDMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQFs2HgMA0GCSqGSIb3DQEBCwUAA4IBAQDAYr2GaP4q
g8QV1nCsuf5xIfVLVnxPH/cPn57qxgJ5oX2bVwz+HAM/6ZZW6XeNVODcC+hdnILm
YmiQyibfQwAZwyZnRwxlldYGXdmd/ZQSzvo9Y6rjyuxrXD69rFkalK8YdGH776bS
Kiz+/Fh2VH16VrY5bk2V+6MPx/0JZpA+63F4vtmWLShj76n6Vc9Lyjykh9YuZ2uz
n5FAJxVF2RbfQvcD8htZuhzYzqJgEgSMyDRz+PvzKQjm4VHJhEtWzRFVwr8fAw4v
ey0UBehyHjtx+Yf/QyySNJLjpFz+dHRAX8fDTpaI4jGzhLaCMVBymKYm3Pdbtriy
HcDoPrgfkNFg
-----END CERTIFICATE-----
Generated at Sun Jun 16 02:45:00 2024 by rpki-client on console-fra.rpki-client.org