Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DqwfjFuBX4kQ4gMUzRx1D8fvK4KYFfXZoNFZ6Ja6ArGr/1/3137392e3132342e34392e302f32342d3234203d3e20323633313034.roa
File:                     3137392e3132342e34392e302f32342d3234203d3e20323633313034.roa (raw, json)
Hash identifier:          PE/kVE2cMwMCfdBbo4/6vL71TQQVQNGOv/YWaHTEqA0=
Subject key identifier:   3D:A5:B5:DB:70:8F:C4:92:AB:FD:73:C2:D0:21:02:8F:80:26:98:BD
Certificate issuer:       /CN=87B1C7EAED276157BEE841B04303FA76647D005D
Certificate serial:       0BEAAF01EC39C9C9E5C95B0E1B37D1CB54592234
Authority key identifier: 87:B1:C7:EA:ED:27:61:57:BE:E8:41:B0:43:03:FA:76:64:7D:00:5D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/87B1C7EAED276157BEE841B04303FA76647D005D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DqwfjFuBX4kQ4gMUzRx1D8fvK4KYFfXZoNFZ6Ja6ArGr/1/3137392e3132342e34392e302f32342d3234203d3e20323633313034.roa
Signing time:             Thu 04 Apr 2024 20:35:14 +0000
ROA not before:           Thu 04 Apr 2024 20:30:14 +0000
ROA not after:            Thu 03 Apr 2025 20:35:14 +0000
asID:                     263104
IP address blocks:        179.124.49.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DqwfjFuBX4kQ4gMUzRx1D8fvK4KYFfXZoNFZ6Ja6ArGr/1/87B1C7EAED276157BEE841B04303FA76647D005D.crl
                          rsync://rpki-repo.registro.br/repo/DqwfjFuBX4kQ4gMUzRx1D8fvK4KYFfXZoNFZ6Ja6ArGr/1/87B1C7EAED276157BEE841B04303FA76647D005D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/87B1C7EAED276157BEE841B04303FA76647D005D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 06:14:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:ea:af:01:ec:39:c9:c9:e5:c9:5b:0e:1b:37:d1:cb:54:59:22:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=87B1C7EAED276157BEE841B04303FA76647D005D
        Validity
            Not Before: Apr  4 20:30:14 2024 GMT
            Not After : Apr  3 20:35:14 2025 GMT
        Subject: CN=3DA5B5DB708FC492ABFD73C2D021028F802698BD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:44:0d:b7:44:fa:0e:65:d7:10:aa:2c:b8:71:
                    fe:42:51:d1:21:f6:83:79:b2:05:aa:48:a4:08:08:
                    67:d4:05:f0:6e:81:20:29:cc:e9:91:88:72:ca:32:
                    bb:70:c9:c9:ab:5a:3e:02:bd:c3:3e:0f:45:0e:f9:
                    7a:3e:fa:c3:38:64:08:9f:88:59:40:4d:80:c8:09:
                    be:90:7c:5d:95:37:a2:1a:01:37:a8:2e:72:11:ea:
                    d9:7a:dc:a1:b6:3f:dd:b7:aa:42:ff:9f:38:38:68:
                    a5:4a:55:e8:29:4e:34:cf:1f:42:2b:a9:aa:47:c3:
                    36:ef:f3:71:cf:7d:56:5e:c9:16:df:d5:1e:9a:95:
                    e2:46:42:40:f8:7c:03:a0:b8:c5:9a:00:8c:11:67:
                    8b:b7:7e:8d:5e:80:d4:5b:72:f0:c2:a7:6a:cd:87:
                    df:17:c8:24:42:16:bf:20:38:60:06:9b:5f:7d:0c:
                    20:46:a0:94:bb:da:2b:46:f4:a4:12:3b:76:ae:dd:
                    9d:db:f7:31:25:43:a6:ad:21:05:7d:5e:a7:89:25:
                    38:4d:ab:67:f4:08:89:f3:d3:c3:35:72:20:ec:ca:
                    38:27:9f:09:73:4d:ad:a9:51:74:cf:cf:6e:43:ef:
                    03:8b:b0:33:0d:b7:a0:b9:b5:99:e1:17:a2:bb:0c:
                    95:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:A5:B5:DB:70:8F:C4:92:AB:FD:73:C2:D0:21:02:8F:80:26:98:BD
            X509v3 Authority Key Identifier:
                keyid:87:B1:C7:EA:ED:27:61:57:BE:E8:41:B0:43:03:FA:76:64:7D:00:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DqwfjFuBX4kQ4gMUzRx1D8fvK4KYFfXZoNFZ6Ja6ArGr/1/87B1C7EAED276157BEE841B04303FA76647D005D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/87B1C7EAED276157BEE841B04303FA76647D005D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DqwfjFuBX4kQ4gMUzRx1D8fvK4KYFfXZoNFZ6Ja6ArGr/1/3137392e3132342e34392e302f32342d3234203d3e20323633313034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.124.49.0/24

    Signature Algorithm: sha256WithRSAEncryption
         83:d4:c5:47:98:a5:5d:5b:40:80:a4:c8:0d:9b:c3:44:6b:6b:
         05:a2:e8:e7:e8:89:f1:a4:ce:78:7d:3d:41:70:fe:ee:10:85:
         d1:cd:63:d5:35:78:d6:94:cc:e5:57:b6:a0:19:3d:3a:4b:94:
         db:f0:02:1d:a9:59:a5:5d:33:28:ba:7c:bb:68:d1:aa:d0:b1:
         31:cd:9a:3d:46:5a:b8:bc:e0:da:96:7e:08:29:18:a7:01:23:
         9f:59:f5:66:3e:19:44:ae:76:dd:48:d6:78:55:48:fa:d9:fe:
         b1:86:d6:ee:13:23:56:6b:5c:00:17:86:22:b3:8d:c9:c0:a0:
         2e:35:84:f4:85:62:32:e7:05:7a:31:37:07:29:10:5e:22:7b:
         c7:7b:02:00:85:23:87:1a:e1:f7:c6:ac:80:61:b7:69:29:d6:
         4c:36:d8:33:0d:82:54:e9:c1:0d:32:9c:50:5d:1d:96:cb:67:
         89:c4:ef:13:91:a3:06:4d:10:e8:29:31:20:7d:9b:ae:3e:86:
         d4:30:c7:9c:d7:e2:b9:a3:75:1f:84:af:90:e3:be:86:7c:3e:
         1e:47:30:d4:92:12:56:0c:87:b1:c3:29:04:c2:f8:26:b3:a5:
         74:84:da:8c:00:3d:d1:8f:68:57:cd:40:d1:e2:96:95:e2:b9:
         79:77:ad:00
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUC+qvAew5ycnlyVsOGzfRy1RZIjQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODdCMUM3RUFFRDI3NjE1N0JFRTg0MUIwNDMwM0ZBNzY2
NDdEMDA1RDAeFw0yNDA0MDQyMDMwMTRaFw0yNTA0MDMyMDM1MTRaMDMxMTAvBgNV
BAMTKDNEQTVCNURCNzA4RkM0OTJBQkZENzNDMkQwMjEwMjhGODAyNjk4QkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFRA23RPoOZdcQqiy4cf5CUdEh
9oN5sgWqSKQICGfUBfBugSApzOmRiHLKMrtwycmrWj4CvcM+D0UO+Xo++sM4ZAif
iFlATYDICb6QfF2VN6IaATeoLnIR6tl63KG2P923qkL/nzg4aKVKVegpTjTPH0Ir
qapHwzbv83HPfVZeyRbf1R6aleJGQkD4fAOguMWaAIwRZ4u3fo1egNRbcvDCp2rN
h98XyCRCFr8gOGAGm199DCBGoJS72itG9KQSO3au3Z3b9zElQ6atIQV9XqeJJThN
q2f0CInz08M1ciDsyjgnnwlzTa2pUXTPz25D7wOLsDMNt6C5tZnhF6K7DJW9AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUPaW123CPxJKr/XPC0CECj4AmmL0wHwYDVR0j
BBgwFoAUh7HH6u0nYVe+6EGwQwP6dmR9AF0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRHF3ZmpGdUJYNGtRNGdNVXpSeDFEOGZ2SzRLWUZmWFpvTkZaNkphNkFy
R3IvMS84N0IxQzdFQUVEMjc2MTU3QkVFODQxQjA0MzAzRkE3NjY0N0QwMDVELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzg3QjFDN0VBRUQyNzYxNTdC
RUU4NDFCMDQzMDNGQTc2NjQ3RDAwNUQuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0Rxd2ZqRnVCWDRrUTRnTVV6UngxRDhmdks0S1lGZlhab05GWjZKYTZBckdyLzEv
MzEzNzM5MmUzMTMyMzQyZTM0MzkyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzMzMTMwMzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBACzfDEwDQYJKoZIhvcNAQELBQADggEBAIPUxUeY
pV1bQICkyA2bw0RrawWi6OfoifGkznh9PUFw/u4QhdHNY9U1eNaUzOVXtqAZPTpL
lNvwAh2pWaVdMyi6fLto0arQsTHNmj1GWri84NqWfggpGKcBI59Z9WY+GUSudt1I
1nhVSPrZ/rGG1u4TI1ZrXAAXhiKzjcnAoC41hPSFYjLnBXoxNwcpEF4ie8d7AgCF
I4ca4ffGrIBht2kp1kw22DMNglTpwQ0ynFBdHZbLZ4nE7xORowZNEOgpMSB9m64+
htQwx5zX4rmjdR+Er5DjvoZ8Ph5HMNSSElYMh7HDKQTC+CazpXSE2owAPdGPaFfN
QNHilpXiuXl3rQA=
-----END CERTIFICATE-----
Generated at Sat Nov 23 06:11:18 2024 by rpki-client on console-ams.rpki-client.org