Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BvGzH6Pqd79p339G3eD22s9RTKUygLoNXNEhvNZqzv93/0/3138372e31372e34302e302f32312d3231203d3e20323639303733.roa
File:                     3138372e31372e34302e302f32312d3231203d3e20323639303733.roa (raw, json)
Hash identifier:          /EyH94PAybxRPXj2Pet6J3sVrIOkYvcpuaS08SwOl3I=
Subject key identifier:   FD:6C:10:5A:1E:B7:35:27:B5:35:08:96:11:2B:9D:CB:B9:11:53:B4
Certificate issuer:       /CN=3FF96820195E6A66E38F9102B4B56F0E4EB31831
Certificate serial:       7D5CD591B00FED1B62AC313075549454D7DADCFA
Authority key identifier: 3F:F9:68:20:19:5E:6A:66:E3:8F:91:02:B4:B5:6F:0E:4E:B3:18:31
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3FF96820195E6A66E38F9102B4B56F0E4EB31831.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BvGzH6Pqd79p339G3eD22s9RTKUygLoNXNEhvNZqzv93/0/3138372e31372e34302e302f32312d3231203d3e20323639303733.roa
Signing time:             Tue 22 Oct 2024 14:21:49 +0000
ROA not before:           Tue 22 Oct 2024 14:16:49 +0000
ROA not after:            Tue 21 Oct 2025 14:21:49 +0000
asID:                     269073
IP address blocks:        187.17.40.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BvGzH6Pqd79p339G3eD22s9RTKUygLoNXNEhvNZqzv93/0/3FF96820195E6A66E38F9102B4B56F0E4EB31831.crl
                          rsync://rpki-repo.registro.br/repo/BvGzH6Pqd79p339G3eD22s9RTKUygLoNXNEhvNZqzv93/0/3FF96820195E6A66E38F9102B4B56F0E4EB31831.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3FF96820195E6A66E38F9102B4B56F0E4EB31831.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 17 Feb 2025 16:36:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:5c:d5:91:b0:0f:ed:1b:62:ac:31:30:75:54:94:54:d7:da:dc:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3FF96820195E6A66E38F9102B4B56F0E4EB31831
        Validity
            Not Before: Oct 22 14:16:49 2024 GMT
            Not After : Oct 21 14:21:49 2025 GMT
        Subject: CN=FD6C105A1EB73527B5350896112B9DCBB91153B4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:61:33:9d:7a:41:3b:9e:2f:09:6a:b5:ff:96:
                    5b:52:66:52:f8:0a:b1:94:1f:78:3b:9e:26:32:e9:
                    ff:5a:d9:a3:01:fc:67:91:ec:16:5b:7d:17:ec:64:
                    49:fa:da:36:ee:34:1e:83:87:18:4d:91:7e:c0:a1:
                    a7:d1:49:64:38:5e:52:80:f9:90:58:d1:70:fc:2d:
                    7b:0e:dd:20:d9:46:49:6a:ee:1a:95:3f:66:9f:6c:
                    43:c6:d5:49:9c:2a:f1:47:19:d6:db:95:3b:29:98:
                    c4:83:b3:3c:43:0b:90:d1:49:9c:18:5d:a6:fb:22:
                    f8:bb:4e:63:cc:93:c9:4b:4e:2e:85:07:07:25:a2:
                    6b:85:02:20:4b:b4:23:32:7b:7e:af:d4:6f:d3:86:
                    44:ec:e2:46:15:45:26:cb:19:bd:98:50:3f:b9:ac:
                    3f:c3:dc:cc:e7:ec:4f:1e:e8:f1:62:7a:6a:f8:b7:
                    60:cc:e0:02:62:6d:28:36:0a:a0:2d:04:b2:47:25:
                    f7:1a:5f:2e:20:2d:cd:89:a4:e4:e3:fc:8b:5e:5a:
                    ab:2d:92:77:1e:b2:01:0f:9e:57:df:34:4d:49:2c:
                    85:4c:41:6c:0c:89:79:c2:bc:11:4a:9a:8f:3c:32:
                    74:c7:86:8b:ff:15:7e:5d:a4:40:df:ca:06:89:eb:
                    24:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:6C:10:5A:1E:B7:35:27:B5:35:08:96:11:2B:9D:CB:B9:11:53:B4
            X509v3 Authority Key Identifier:
                keyid:3F:F9:68:20:19:5E:6A:66:E3:8F:91:02:B4:B5:6F:0E:4E:B3:18:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BvGzH6Pqd79p339G3eD22s9RTKUygLoNXNEhvNZqzv93/0/3FF96820195E6A66E38F9102B4B56F0E4EB31831.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3FF96820195E6A66E38F9102B4B56F0E4EB31831.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BvGzH6Pqd79p339G3eD22s9RTKUygLoNXNEhvNZqzv93/0/3138372e31372e34302e302f32312d3231203d3e20323639303733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.17.40.0/21

    Signature Algorithm: sha256WithRSAEncryption
         a6:e8:5c:b4:e9:e1:0d:f5:6d:66:1f:74:86:9e:ab:29:25:67:
         f0:60:34:d1:42:63:bd:1f:3a:5e:27:22:31:29:a8:29:89:34:
         9d:c4:b2:95:00:c4:09:a3:89:17:45:d0:ca:8f:31:94:55:04:
         3d:55:4f:40:e6:4a:66:94:d5:e6:a9:f3:34:ac:9b:d2:c6:bb:
         bc:be:bf:f1:e9:99:23:1f:be:ca:47:d1:71:16:ef:3c:fe:36:
         30:08:63:ae:74:e1:c8:84:85:6e:ac:9b:0e:ad:1c:18:7e:0b:
         eb:5d:00:ef:ac:52:12:de:c3:d7:01:e4:95:66:80:a7:1b:e5:
         4c:ce:ae:58:2c:b9:66:a7:19:2f:79:f8:48:b1:94:8b:db:f7:
         02:a2:6a:e3:c4:7f:58:ad:a5:62:4e:52:6b:d4:a9:8b:42:05:
         7c:c9:35:29:51:ba:2f:51:8f:52:4b:88:da:9d:68:a5:05:f3:
         3b:12:7e:1d:51:28:75:7f:26:df:28:cf:97:14:0f:ca:3a:3d:
         58:f7:ba:95:c0:a9:00:b9:dd:bf:e1:59:df:30:28:4c:4c:2f:
         b0:62:32:b2:dd:ef:74:3e:38:40:e6:7c:5d:bc:6e:ea:89:c6:
         a5:75:01:6c:db:0d:52:ec:4c:d3:6a:b5:70:5b:a3:5b:28:a4:
         19:de:bb:06
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUfVzVkbAP7RtirDEwdVSUVNfa3PowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0ZGOTY4MjAxOTVFNkE2NkUzOEY5MTAyQjRCNTZGMEU0
RUIzMTgzMTAeFw0yNDEwMjIxNDE2NDlaFw0yNTEwMjExNDIxNDlaMDMxMTAvBgNV
BAMTKEZENkMxMDVBMUVCNzM1MjdCNTM1MDg5NjExMkI5RENCQjkxMTUzQjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDYTOdekE7ni8JarX/lltSZlL4
CrGUH3g7niYy6f9a2aMB/GeR7BZbfRfsZEn62jbuNB6DhxhNkX7AoafRSWQ4XlKA
+ZBY0XD8LXsO3SDZRklq7hqVP2afbEPG1UmcKvFHGdbblTspmMSDszxDC5DRSZwY
Xab7Ivi7TmPMk8lLTi6FBwclomuFAiBLtCMye36v1G/ThkTs4kYVRSbLGb2YUD+5
rD/D3Mzn7E8e6PFiemr4t2DM4AJibSg2CqAtBLJHJfcaXy4gLc2JpOTj/IteWqst
kncesgEPnlffNE1JLIVMQWwMiXnCvBFKmo88MnTHhov/FX5dpEDfygaJ6yRLAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQU/WwQWh63NSe1NQiWESudy7kRU7QwHwYDVR0j
BBgwFoAUP/loIBleambjj5ECtLVvDk6zGDEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQnZHekg2UHFkNzlwMzM5RzNlRDIyczlSVEtVeWdMb05YTkVodk5acXp2
OTMvMC8zRkY5NjgyMDE5NUU2QTY2RTM4RjkxMDJCNEI1NkYwRTRFQjMxODMxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzNGRjk2ODIwMTk1RTZBNjZF
MzhGOTEwMkI0QjU2RjBFNEVCMzE4MzEuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0J2R3pINlBxZDc5cDMzOUczZUQyMnM5UlRLVXlnTG9OWE5FaHZOWnF6djkzLzAv
MzEzODM3MmUzMTM3MmUzNDMwMmUzMDJmMzIzMTJkMzIzMTIwM2QzZTIwMzIzNjM5
MzAzNzMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQDuxEoMA0GCSqGSIb3DQEBCwUAA4IBAQCm6Fy06eEN
9W1mH3SGnqspJWfwYDTRQmO9HzpeJyIxKagpiTSdxLKVAMQJo4kXRdDKjzGUVQQ9
VU9A5kpmlNXmqfM0rJvSxru8vr/x6ZkjH77KR9FxFu88/jYwCGOudOHIhIVurJsO
rRwYfgvrXQDvrFIS3sPXAeSVZoCnG+VMzq5YLLlmpxkvefhIsZSL2/cComrjxH9Y
raViTlJr1KmLQgV8yTUpUbovUY9SS4janWilBfM7En4dUSh1fybfKM+XFA/KOj1Y
97qVwKkAud2/4VnfMChMTC+wYjKy3e90PjhA5nxdvG7qicaldQFs2w1S7EzTarVw
W6NbKKQZ3rsG
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:15:13 2025 by rpki-client