Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AzvGYe8tUSg5gGeWnRgeCx1DtJtbiu8QoA9Fn8FRstFg/1/3137392e3132372e3134342e302f32322d3234203d3e20323632353330.roa
File:                     3137392e3132372e3134342e302f32322d3234203d3e20323632353330.roa (raw, json)
Hash identifier:          N/1Paq4f9Y6GpnCycbiSbmhfOQdua1SHO2L3aR19pBc=
Subject key identifier:   7B:28:5C:87:12:1E:50:1D:87:5D:63:EA:B5:09:56:42:71:48:76:92
Certificate issuer:       /CN=33EC4B2F4CD1775DDA4E4AA63183A6875ED6C6F7
Certificate serial:       281F0A837DD0E256820726348A1EFCD8A927C28D
Authority key identifier: 33:EC:4B:2F:4C:D1:77:5D:DA:4E:4A:A6:31:83:A6:87:5E:D6:C6:F7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/33EC4B2F4CD1775DDA4E4AA63183A6875ED6C6F7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AzvGYe8tUSg5gGeWnRgeCx1DtJtbiu8QoA9Fn8FRstFg/1/3137392e3132372e3134342e302f32322d3234203d3e20323632353330.roa
Signing time:             Thu 04 Apr 2024 11:45:23 +0000
ROA not before:           Thu 04 Apr 2024 11:40:23 +0000
ROA not after:            Thu 03 Apr 2025 11:45:23 +0000
asID:                     262530
IP address blocks:        179.127.144.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AzvGYe8tUSg5gGeWnRgeCx1DtJtbiu8QoA9Fn8FRstFg/1/33EC4B2F4CD1775DDA4E4AA63183A6875ED6C6F7.crl
                          rsync://rpki-repo.registro.br/repo/AzvGYe8tUSg5gGeWnRgeCx1DtJtbiu8QoA9Fn8FRstFg/1/33EC4B2F4CD1775DDA4E4AA63183A6875ED6C6F7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/33EC4B2F4CD1775DDA4E4AA63183A6875ED6C6F7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 16:19:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:1f:0a:83:7d:d0:e2:56:82:07:26:34:8a:1e:fc:d8:a9:27:c2:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33EC4B2F4CD1775DDA4E4AA63183A6875ED6C6F7
        Validity
            Not Before: Apr  4 11:40:23 2024 GMT
            Not After : Apr  3 11:45:23 2025 GMT
        Subject: CN=7B285C87121E501D875D63EAB509564271487692
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:34:5c:3c:6d:e8:6d:6e:e0:d3:29:b7:30:05:
                    84:2c:a2:91:f9:b6:89:6a:96:ed:73:4b:0e:f3:1b:
                    0d:e7:93:34:0e:d8:13:73:89:b9:4f:75:ff:e0:f3:
                    c4:91:96:92:cc:dc:6d:3f:9b:c3:9f:4f:97:d7:e2:
                    75:d3:a4:e8:93:3e:87:ac:ff:5c:f6:0c:11:8b:2c:
                    a1:ef:b0:62:90:c1:f4:32:f3:5a:43:51:40:f3:1a:
                    30:21:23:9f:89:fb:3e:0f:32:4a:59:28:e3:18:ed:
                    b3:37:43:9d:90:38:7b:30:55:bb:1f:33:ee:c5:f2:
                    84:3d:76:95:2c:59:23:a7:42:6d:fc:b0:72:ba:7c:
                    29:4c:40:02:8e:76:9f:9d:61:76:b9:8a:dd:b5:bb:
                    66:e7:03:89:4b:75:2d:33:b8:4b:a3:ed:d2:70:6d:
                    ee:ef:28:57:34:7a:a7:e0:a4:46:63:a0:79:eb:dc:
                    af:22:43:e9:77:e5:ee:92:d0:a0:1f:bd:d0:c9:2a:
                    00:95:42:c0:37:e0:3b:c0:5c:34:bc:55:03:f0:5e:
                    c9:95:94:c6:b8:bf:81:ad:8b:d2:bd:42:81:4e:d7:
                    b9:95:40:65:58:b8:1b:e4:b9:0e:b1:14:cb:5f:6e:
                    3a:d5:09:21:ad:75:52:51:7e:01:eb:a4:2d:41:ce:
                    c6:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:28:5C:87:12:1E:50:1D:87:5D:63:EA:B5:09:56:42:71:48:76:92
            X509v3 Authority Key Identifier:
                keyid:33:EC:4B:2F:4C:D1:77:5D:DA:4E:4A:A6:31:83:A6:87:5E:D6:C6:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AzvGYe8tUSg5gGeWnRgeCx1DtJtbiu8QoA9Fn8FRstFg/1/33EC4B2F4CD1775DDA4E4AA63183A6875ED6C6F7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/33EC4B2F4CD1775DDA4E4AA63183A6875ED6C6F7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AzvGYe8tUSg5gGeWnRgeCx1DtJtbiu8QoA9Fn8FRstFg/1/3137392e3132372e3134342e302f32322d3234203d3e20323632353330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.127.144.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2e:54:05:95:72:83:6f:4a:db:6e:f9:5f:e9:c3:98:4d:47:dd:
         1d:0f:70:99:bf:da:62:02:d4:73:14:87:12:36:db:7a:7e:26:
         58:a8:a9:d5:e6:71:c7:16:01:0b:b6:3f:51:75:8f:c5:54:69:
         54:51:b7:9c:07:4c:50:6d:44:2a:8a:e1:c2:2f:65:03:65:ae:
         5c:0b:76:07:b5:46:b5:f6:54:31:bc:b3:2c:76:39:9a:95:cc:
         a1:b1:7a:63:f4:fc:fe:2a:b8:f3:80:f1:c6:b9:58:58:db:aa:
         f0:e6:3f:a3:00:f0:f7:6f:44:ea:1c:2e:ce:ff:1c:99:65:c2:
         7b:0e:6a:f6:00:09:db:5b:de:21:51:dc:23:6a:a1:4d:14:39:
         02:1c:18:0d:f1:11:9c:b8:b7:bd:48:8b:6d:fc:47:62:a5:d3:
         ff:5c:40:b0:d3:88:ba:d2:38:b6:ba:63:73:28:b1:44:71:95:
         8c:8e:4b:1c:0e:eb:3e:44:7e:42:ce:8b:99:1e:f6:22:14:60:
         ee:2c:fc:0a:ba:f2:e3:19:75:05:2b:84:82:df:0d:78:bc:83:
         f9:2e:be:f7:bb:17:d1:32:0f:4c:a0:e0:60:28:50:51:be:0a:
         7d:af:7a:1b:88:64:2a:42:aa:c9:bf:88:9e:a4:a2:82:d8:1d:
         bd:c9:e0:1a
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUKB8Kg33Q4laCByY0ih782Kknwo0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzNFQzRCMkY0Q0QxNzc1RERBNEU0QUE2MzE4M0E2ODc1
RUQ2QzZGNzAeFw0yNDA0MDQxMTQwMjNaFw0yNTA0MDMxMTQ1MjNaMDMxMTAvBgNV
BAMTKDdCMjg1Qzg3MTIxRTUwMUQ4NzVENjNFQUI1MDk1NjQyNzE0ODc2OTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDzNFw8behtbuDTKbcwBYQsopH5
tolqlu1zSw7zGw3nkzQO2BNziblPdf/g88SRlpLM3G0/m8OfT5fX4nXTpOiTPoes
/1z2DBGLLKHvsGKQwfQy81pDUUDzGjAhI5+J+z4PMkpZKOMY7bM3Q52QOHswVbsf
M+7F8oQ9dpUsWSOnQm38sHK6fClMQAKOdp+dYXa5it21u2bnA4lLdS0zuEuj7dJw
be7vKFc0eqfgpEZjoHnr3K8iQ+l35e6S0KAfvdDJKgCVQsA34DvAXDS8VQPwXsmV
lMa4v4Gti9K9QoFO17mVQGVYuBvkuQ6xFMtfbjrVCSGtdVJRfgHrpC1BzsYfAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUeyhchxIeUB2HXWPqtQlWQnFIdpIwHwYDVR0j
BBgwFoAUM+xLL0zRd13aTkqmMYOmh17WxvcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQXp2R1llOHRVU2c1Z0dlV25SZ2VDeDFEdEp0Yml1OFFvQTlGbjhGUnN0
RmcvMS8zM0VDNEIyRjRDRDE3NzVEREE0RTRBQTYzMTgzQTY4NzVFRDZDNkY3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzMzRUM0QjJGNENEMTc3NURE
QTRFNEFBNjMxODNBNjg3NUVENkM2RjcuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0F6dkdZZTh0VVNnNWdHZVduUmdlQ3gxRHRKdGJpdThRb0E5Rm44RlJzdEZnLzEv
MzEzNzM5MmUzMTMyMzcyZTMxMzQzNDJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMy
MzYzMjM1MzMzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEArN/kDANBgkqhkiG9w0BAQsFAAOCAQEALlQF
lXKDb0rbbvlf6cOYTUfdHQ9wmb/aYgLUcxSHEjbben4mWKip1eZxxxYBC7Y/UXWP
xVRpVFG3nAdMUG1EKorhwi9lA2WuXAt2B7VGtfZUMbyzLHY5mpXMobF6Y/T8/iq4
84DxxrlYWNuq8OY/owDw929E6hwuzv8cmWXCew5q9gAJ21veIVHcI2qhTRQ5AhwY
DfERnLi3vUiLbfxHYqXT/1xAsNOIutI4trpjcyixRHGVjI5LHA7rPkR+Qs6LmR72
IhRg7iz8Crry4xl1BSuEgt8NeLyD+S6+97sX0TIPTKDgYChQUb4Kfa96G4hkKkKq
yb+InqSigtgdvcngGg==
-----END CERTIFICATE-----
Generated at Sat Nov 23 16:21:09 2024 by rpki-client on console-ams.rpki-client.org