Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DPpzkozx7DVUkceNy3cM44q6ZsGAhPUN2K1TF2ScVWjR/1/3137392e302e36382e302f32342d3234203d3e20323635323037.roa
File:                     3137392e302e36382e302f32342d3234203d3e20323635323037.roa (raw, json)
Hash identifier:          P99EULhNbqyItCauJ7MDygErfm2+VvP4jsDK8vAkQ4s=
Subject key identifier:   43:80:19:8B:07:01:C3:6E:36:57:E3:CA:F0:D4:19:02:C0:43:47:A8
Certificate issuer:       /CN=F3C1884EB710220FE356655B73CBC129A38E910B
Certificate serial:       7663153AE7538F512E057EBCB7967399251815F9
Authority key identifier: F3:C1:88:4E:B7:10:22:0F:E3:56:65:5B:73:CB:C1:29:A3:8E:91:0B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F3C1884EB710220FE356655B73CBC129A38E910B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DPpzkozx7DVUkceNy3cM44q6ZsGAhPUN2K1TF2ScVWjR/1/3137392e302e36382e302f32342d3234203d3e20323635323037.roa
Signing time:             Thu 04 Apr 2024 07:06:47 +0000
ROA not before:           Thu 04 Apr 2024 07:01:47 +0000
ROA not after:            Thu 03 Apr 2025 07:06:47 +0000
asID:                     265207
IP address blocks:        179.0.68.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DPpzkozx7DVUkceNy3cM44q6ZsGAhPUN2K1TF2ScVWjR/1/F3C1884EB710220FE356655B73CBC129A38E910B.crl
                          rsync://rpki-repo.registro.br/repo/DPpzkozx7DVUkceNy3cM44q6ZsGAhPUN2K1TF2ScVWjR/1/F3C1884EB710220FE356655B73CBC129A38E910B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F3C1884EB710220FE356655B73CBC129A38E910B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 30 Jun 2024 00:31:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:63:15:3a:e7:53:8f:51:2e:05:7e:bc:b7:96:73:99:25:18:15:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3C1884EB710220FE356655B73CBC129A38E910B
        Validity
            Not Before: Apr  4 07:01:47 2024 GMT
            Not After : Apr  3 07:06:47 2025 GMT
        Subject: CN=4380198B0701C36E3657E3CAF0D41902C04347A8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:60:b5:3d:5e:ca:0f:19:f2:17:7c:59:3d:bc:
                    18:3e:8a:6f:3c:5b:a0:fd:87:01:45:fe:19:9f:1f:
                    99:44:4f:b8:13:54:9a:b5:e4:16:4d:84:3a:56:72:
                    fc:cd:d7:47:d4:e4:90:06:c7:93:c2:64:f6:21:41:
                    65:8b:5a:b2:5f:91:31:c4:16:db:45:cc:42:7e:f1:
                    31:ff:7f:92:ef:e3:ba:33:85:44:70:f6:45:2c:7e:
                    73:57:39:87:fc:09:ba:37:d8:6a:74:ac:e9:e1:b5:
                    2d:a0:9c:00:79:50:18:73:d8:31:ed:7e:b8:c6:56:
                    e7:a4:22:03:68:dd:15:4a:2d:79:48:85:ca:ba:8c:
                    f7:9a:be:c6:f0:2d:a6:eb:27:e2:c1:98:9b:e0:8f:
                    ec:19:22:2d:3c:66:69:60:60:ca:14:52:c5:3f:76:
                    22:ed:0d:64:37:5a:92:dd:14:8f:ad:e1:7d:a3:5d:
                    9d:59:e7:98:85:a0:05:bd:a8:8a:35:9c:14:42:48:
                    3f:d5:dc:6a:a6:30:60:22:d6:9d:be:5e:a9:de:68:
                    a0:4f:8e:96:09:fc:9a:d5:43:2a:00:e9:35:0e:71:
                    e1:83:d8:b1:69:7c:50:4d:83:89:8f:21:85:39:83:
                    bc:fc:2e:b8:3b:b5:58:c2:c0:da:0c:93:c4:b1:78:
                    4f:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:80:19:8B:07:01:C3:6E:36:57:E3:CA:F0:D4:19:02:C0:43:47:A8
            X509v3 Authority Key Identifier:
                keyid:F3:C1:88:4E:B7:10:22:0F:E3:56:65:5B:73:CB:C1:29:A3:8E:91:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DPpzkozx7DVUkceNy3cM44q6ZsGAhPUN2K1TF2ScVWjR/1/F3C1884EB710220FE356655B73CBC129A38E910B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F3C1884EB710220FE356655B73CBC129A38E910B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DPpzkozx7DVUkceNy3cM44q6ZsGAhPUN2K1TF2ScVWjR/1/3137392e302e36382e302f32342d3234203d3e20323635323037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.0.68.0/24

    Signature Algorithm: sha256WithRSAEncryption
         71:cb:2f:3b:34:cf:3d:be:9f:99:ae:66:89:ae:94:5d:c9:77:
         1f:f5:4a:1a:fb:1c:77:cc:ae:11:f1:15:e7:a4:40:3c:14:c3:
         38:bd:b1:fd:d7:e0:57:d1:4f:22:d1:f8:e5:e6:4b:5c:f8:49:
         8a:5d:81:d8:33:42:7a:b1:37:22:c2:2e:75:ca:2e:75:7a:a8:
         d9:0f:49:70:23:93:6e:34:f5:74:23:8d:12:8e:6c:02:81:13:
         62:17:81:d8:c1:31:63:c3:07:4b:8a:fb:73:45:b2:5e:c7:c4:
         2c:d5:d9:81:5f:f4:90:aa:aa:0d:d3:08:f5:68:f9:4b:f6:83:
         dd:c6:38:5a:27:45:fc:72:d6:fa:0a:24:d7:1d:12:06:19:6b:
         8a:72:25:75:b2:98:fb:d4:35:03:0a:54:a3:34:42:18:a3:c9:
         93:fb:61:7a:8b:a8:e0:5a:64:26:6d:f7:03:55:d8:f0:6b:23:
         35:b9:15:3f:65:69:76:d8:db:7c:cf:2a:a5:b5:ef:a7:8f:f1:
         a9:22:3f:5d:61:0b:10:96:53:81:d2:41:97:b6:38:ec:4c:21:
         c6:5e:7b:96:fb:e4:16:b0:47:43:1d:8d:de:1d:15:74:71:5d:
         50:05:93:98:14:86:2a:81:14:cf:a9:fa:3a:13:ca:33:7c:0e:
         ab:7f:f7:cf
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUdmMVOudTj1EuBX68t5ZzmSUYFfkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjNDMTg4NEVCNzEwMjIwRkUzNTY2NTVCNzNDQkMxMjlB
MzhFOTEwQjAeFw0yNDA0MDQwNzAxNDdaFw0yNTA0MDMwNzA2NDdaMDMxMTAvBgNV
BAMTKDQzODAxOThCMDcwMUMzNkUzNjU3RTNDQUYwRDQxOTAyQzA0MzQ3QTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7YLU9XsoPGfIXfFk9vBg+im88
W6D9hwFF/hmfH5lET7gTVJq15BZNhDpWcvzN10fU5JAGx5PCZPYhQWWLWrJfkTHE
FttFzEJ+8TH/f5Lv47ozhURw9kUsfnNXOYf8Cbo32Gp0rOnhtS2gnAB5UBhz2DHt
frjGVuekIgNo3RVKLXlIhcq6jPeavsbwLabrJ+LBmJvgj+wZIi08ZmlgYMoUUsU/
diLtDWQ3WpLdFI+t4X2jXZ1Z55iFoAW9qIo1nBRCSD/V3GqmMGAi1p2+XqneaKBP
jpYJ/JrVQyoA6TUOceGD2LFpfFBNg4mPIYU5g7z8Lrg7tVjCwNoMk8SxeE+RAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUQ4AZiwcBw242V+PK8NQZAsBDR6gwHwYDVR0j
BBgwFoAU88GITrcQIg/jVmVbc8vBKaOOkQswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRFBwemtveng3RFZVa2NlTnkzY000NHE2WnNHQWhQVU4ySzFURjJTY1ZX
alIvMS9GM0MxODg0RUI3MTAyMjBGRTM1NjY1NUI3M0NCQzEyOUEzOEU5MTBCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0YzQzE4ODRFQjcxMDIyMEZF
MzU2NjU1QjczQ0JDMTI5QTM4RTkxMEIuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RQcHprb3p4N0RWVWtjZU55M2NNNDRxNlpzR0FoUFVOMksxVEYyU2NWV2pSLzEv
MzEzNzM5MmUzMDJlMzYzODJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzYzNTMy
MzAzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEALMARDANBgkqhkiG9w0BAQsFAAOCAQEAccsvOzTPPb6f
ma5mia6UXcl3H/VKGvscd8yuEfEV56RAPBTDOL2x/dfgV9FPItH45eZLXPhJil2B
2DNCerE3IsIudcoudXqo2Q9JcCOTbjT1dCONEo5sAoETYheB2MExY8MHS4r7c0Wy
XsfELNXZgV/0kKqqDdMI9Wj5S/aD3cY4WidF/HLW+gok1x0SBhlrinIldbKY+9Q1
AwpUozRCGKPJk/theouo4FpkJm33A1XY8GsjNbkVP2VpdtjbfM8qpbXvp4/xqSI/
XWELEJZTgdJBl7Y47Ewhxl57lvvkFrBHQx2N3h0VdHFdUAWTmBSGKoEUz6n6OhPK
M3wOq3/3zw==
-----END CERTIFICATE-----
Generated at Sat Jun 29 00:11:02 2024 by rpki-client on console-fra.rpki-client.org