Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AZJdQuFc5C35gxdFWDqs3zEdVLS5qeKJyQdpYADKFAig/0/3137392e3132342e3232332e302f32342d3234203d3e20323633363234.roa
File:                     3137392e3132342e3232332e302f32342d3234203d3e20323633363234.roa (raw, json)
Hash identifier:          mQSU00ptxwlmUzl4YhJQlW4cWVrVXRPohoxpOipNF58=
Subject key identifier:   33:74:C7:33:DD:5F:D5:46:5F:A0:40:26:A7:7A:3D:FD:78:5B:1E:C7
Certificate issuer:       /CN=642EA27EA1276FA1CA55EF3FD887CFC6DDA05C47
Certificate serial:       3D35ED0F866840EFC13CC267EF1412171187B9BD
Authority key identifier: 64:2E:A2:7E:A1:27:6F:A1:CA:55:EF:3F:D8:87:CF:C6:DD:A0:5C:47
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/642EA27EA1276FA1CA55EF3FD887CFC6DDA05C47.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AZJdQuFc5C35gxdFWDqs3zEdVLS5qeKJyQdpYADKFAig/0/3137392e3132342e3232332e302f32342d3234203d3e20323633363234.roa
Signing time:             Tue 26 Nov 2024 14:57:13 +0000
ROA not before:           Tue 26 Nov 2024 14:52:13 +0000
ROA not after:            Tue 25 Nov 2025 14:57:13 +0000
asID:                     263624
IP address blocks:        179.124.223.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AZJdQuFc5C35gxdFWDqs3zEdVLS5qeKJyQdpYADKFAig/0/642EA27EA1276FA1CA55EF3FD887CFC6DDA05C47.crl
                          rsync://rpki-repo.registro.br/repo/AZJdQuFc5C35gxdFWDqs3zEdVLS5qeKJyQdpYADKFAig/0/642EA27EA1276FA1CA55EF3FD887CFC6DDA05C47.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/642EA27EA1276FA1CA55EF3FD887CFC6DDA05C47.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 28 Nov 2024 06:15:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:35:ed:0f:86:68:40:ef:c1:3c:c2:67:ef:14:12:17:11:87:b9:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=642EA27EA1276FA1CA55EF3FD887CFC6DDA05C47
        Validity
            Not Before: Nov 26 14:52:13 2024 GMT
            Not After : Nov 25 14:57:13 2025 GMT
        Subject: CN=3374C733DD5FD5465FA04026A77A3DFD785B1EC7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:77:9d:ec:8a:8a:03:be:ea:14:37:01:c6:24:
                    c8:7c:48:7c:8b:ac:b2:bb:af:6a:80:5f:47:98:a8:
                    5c:e7:9c:b0:d5:3e:48:59:bd:ee:8d:e3:da:ed:01:
                    a6:12:da:e9:a3:cb:24:56:77:b9:7d:fb:2d:e8:b1:
                    81:07:1c:3a:61:dd:c2:85:bc:44:e9:e7:c1:76:24:
                    61:02:2a:3e:93:a8:47:d8:db:a6:d4:9f:90:00:cf:
                    06:d6:32:22:87:ab:bb:3e:7a:4d:48:40:20:b8:3a:
                    a6:fb:0d:38:be:98:ec:84:a4:1d:9e:d0:55:7d:8f:
                    4f:77:09:96:a0:98:f3:74:f0:3a:35:b9:5a:4f:22:
                    31:68:a8:a5:fc:c2:a4:c5:4f:19:d2:0c:3a:de:8b:
                    dc:fb:cb:bc:d2:11:7b:df:56:64:58:d6:ca:fa:47:
                    54:15:a4:62:f6:87:95:af:0e:15:26:33:a4:f0:d5:
                    f7:74:cb:71:81:07:58:c5:41:97:e2:b2:5e:bc:b5:
                    10:12:0f:8b:9e:7e:4f:c8:32:a8:cf:a5:46:1c:ab:
                    74:e5:2f:3c:2a:54:04:1c:3c:c3:46:6a:c5:03:fd:
                    33:ee:a8:8d:84:19:bb:63:8d:2e:74:fd:9c:dd:1e:
                    bc:59:3d:83:0c:c7:c0:ea:20:47:20:6f:07:23:0a:
                    43:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:74:C7:33:DD:5F:D5:46:5F:A0:40:26:A7:7A:3D:FD:78:5B:1E:C7
            X509v3 Authority Key Identifier:
                keyid:64:2E:A2:7E:A1:27:6F:A1:CA:55:EF:3F:D8:87:CF:C6:DD:A0:5C:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AZJdQuFc5C35gxdFWDqs3zEdVLS5qeKJyQdpYADKFAig/0/642EA27EA1276FA1CA55EF3FD887CFC6DDA05C47.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/642EA27EA1276FA1CA55EF3FD887CFC6DDA05C47.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AZJdQuFc5C35gxdFWDqs3zEdVLS5qeKJyQdpYADKFAig/0/3137392e3132342e3232332e302f32342d3234203d3e20323633363234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.124.223.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9f:ab:ee:c8:69:5b:d9:f2:9c:42:8f:e8:f6:d6:3c:d0:70:5c:
         c8:d2:2b:43:76:89:20:02:a6:82:02:e7:ce:8d:2f:26:f9:76:
         7d:5d:a4:c2:f3:31:e6:d5:bf:d7:ca:1e:44:fa:a1:85:52:35:
         1c:63:9a:d6:b2:33:10:32:17:74:8f:fd:c6:51:9d:a5:0d:91:
         73:d7:14:5b:cd:2d:42:52:3b:1a:a4:2a:07:27:67:e4:f1:16:
         4c:60:12:db:88:89:8d:43:37:5c:4c:5a:e7:ae:6e:ae:2b:cb:
         31:9e:f8:bf:88:df:69:cc:d5:c8:95:f7:0d:64:cc:de:33:10:
         f9:45:1a:85:40:e7:ce:42:41:c1:c2:76:f3:28:32:c6:80:7e:
         92:57:d4:51:e7:a5:3b:7d:08:40:7c:41:b6:4d:6e:16:f9:6b:
         3f:89:5b:d4:7f:c3:f9:42:c2:e3:9b:4e:b9:0c:77:59:dc:93:
         9e:28:cb:79:2f:9a:c7:2e:72:6d:88:aa:4f:53:84:91:9e:32:
         e9:3d:05:ac:22:4b:4a:9b:1c:65:99:ec:cd:71:f1:f8:db:bc:
         49:6c:ac:54:9a:f9:e0:5c:d8:bc:d0:35:7f:5e:69:13:a8:33:
         2f:78:bf:6f:b3:4f:06:00:d2:c4:c9:eb:b7:88:ca:32:79:00:
         4c:7e:b3:e6
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUPTXtD4ZoQO/BPMJn7xQSFxGHub0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjQyRUEyN0VBMTI3NkZBMUNBNTVFRjNGRDg4N0NGQzZE
REEwNUM0NzAeFw0yNDExMjYxNDUyMTNaFw0yNTExMjUxNDU3MTNaMDMxMTAvBgNV
BAMTKDMzNzRDNzMzREQ1RkQ1NDY1RkEwNDAyNkE3N0EzREZENzg1QjFFQzcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyd53siooDvuoUNwHGJMh8SHyL
rLK7r2qAX0eYqFznnLDVPkhZve6N49rtAaYS2umjyyRWd7l9+y3osYEHHDph3cKF
vETp58F2JGECKj6TqEfY26bUn5AAzwbWMiKHq7s+ek1IQCC4Oqb7DTi+mOyEpB2e
0FV9j093CZagmPN08Do1uVpPIjFoqKX8wqTFTxnSDDrei9z7y7zSEXvfVmRY1sr6
R1QVpGL2h5WvDhUmM6Tw1fd0y3GBB1jFQZfisl68tRASD4uefk/IMqjPpUYcq3Tl
LzwqVAQcPMNGasUD/TPuqI2EGbtjjS50/ZzdHrxZPYMMx8DqIEcgbwcjCkOxAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUM3THM91f1UZfoEAmp3o9/XhbHscwHwYDVR0j
BBgwFoAUZC6ifqEnb6HKVe8/2IfPxt2gXEcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQVpKZFF1RmM1QzM1Z3hkRldEcXMzekVkVkxTNXFlS0p5UWRwWUFES0ZB
aWcvMC82NDJFQTI3RUExMjc2RkExQ0E1NUVGM0ZEODg3Q0ZDNkREQTA1QzQ3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzY0MkVBMjdFQTEyNzZGQTFD
QTU1RUYzRkQ4ODdDRkM2RERBMDVDNDcuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0FaSmRRdUZjNUMzNWd4ZEZXRHFzM3pFZFZMUzVxZUtKeVFkcFlBREtGQWlnLzAv
MzEzNzM5MmUzMTMyMzQyZTMyMzIzMzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzYzMzM2MzIzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEALN83zANBgkqhkiG9w0BAQsFAAOCAQEAn6vu
yGlb2fKcQo/o9tY80HBcyNIrQ3aJIAKmggLnzo0vJvl2fV2kwvMx5tW/18oeRPqh
hVI1HGOa1rIzEDIXdI/9xlGdpQ2Rc9cUW80tQlI7GqQqBydn5PEWTGAS24iJjUM3
XExa565urivLMZ74v4jfaczVyJX3DWTM3jMQ+UUahUDnzkJBwcJ28ygyxoB+klfU
UeelO30IQHxBtk1uFvlrP4lb1H/D+ULC45tOuQx3WdyTnijLeS+axy5ybYiqT1OE
kZ4y6T0FrCJLSpscZZnszXHx+Nu8SWysVJr54FzYvNA1f15pE6gzL3i/b7NPBgDS
xMnrt4jKMnkATH6z5g==
-----END CERTIFICATE-----
Generated at Wed Nov 27 09:01:56 2024 by rpki-client on console-ams.rpki-client.org