Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EXZwJLeBDNAyQuGhnTvSckqSmq79QuXgB463RoNymcv1/0/3137302e302e3231392e302f32342d3234203d3e20323635313431.roa
File:                     3137302e302e3231392e302f32342d3234203d3e20323635313431.roa (raw, json)
Hash identifier:          K3Cwc0BA6g5oOgH3LKNkSbhC4YjrTwrmQfZQgDYFH4k=
Subject key identifier:   02:94:3D:45:EF:5D:9D:7C:1D:F3:67:21:47:0F:F8:26:5F:B6:7C:36
Certificate issuer:       /CN=3FE77B8855F61DF2AD68185DD0977BCB42C708F4
Certificate serial:       295944C8E88E0A2FB74A9A9147411497971C2846
Authority key identifier: 3F:E7:7B:88:55:F6:1D:F2:AD:68:18:5D:D0:97:7B:CB:42:C7:08:F4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3FE77B8855F61DF2AD68185DD0977BCB42C708F4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EXZwJLeBDNAyQuGhnTvSckqSmq79QuXgB463RoNymcv1/0/3137302e302e3231392e302f32342d3234203d3e20323635313431.roa
Signing time:             Mon 24 Jun 2024 17:44:58 +0000
ROA not before:           Mon 24 Jun 2024 17:39:58 +0000
ROA not after:            Mon 23 Jun 2025 17:44:58 +0000
asID:                     265141
IP address blocks:        170.0.219.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EXZwJLeBDNAyQuGhnTvSckqSmq79QuXgB463RoNymcv1/0/3FE77B8855F61DF2AD68185DD0977BCB42C708F4.crl
                          rsync://rpki-repo.registro.br/repo/EXZwJLeBDNAyQuGhnTvSckqSmq79QuXgB463RoNymcv1/0/3FE77B8855F61DF2AD68185DD0977BCB42C708F4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3FE77B8855F61DF2AD68185DD0977BCB42C708F4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 01:31:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:59:44:c8:e8:8e:0a:2f:b7:4a:9a:91:47:41:14:97:97:1c:28:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3FE77B8855F61DF2AD68185DD0977BCB42C708F4
        Validity
            Not Before: Jun 24 17:39:58 2024 GMT
            Not After : Jun 23 17:44:58 2025 GMT
        Subject: CN=02943D45EF5D9D7C1DF36721470FF8265FB67C36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:c2:20:84:09:bd:e2:4b:cb:90:2a:a6:43:31:
                    22:e6:55:6c:50:1e:26:88:00:2c:61:e1:c2:d1:69:
                    09:e9:c9:c4:11:eb:ca:c3:a5:d1:10:cd:46:6f:36:
                    36:ba:51:d7:5e:33:a9:d8:72:e0:a0:6a:41:de:3d:
                    61:8d:82:aa:44:80:2c:35:0e:47:0d:1d:ab:e5:2c:
                    82:65:bc:dd:11:e7:cb:30:0b:70:23:37:0c:dc:5c:
                    d1:a5:6b:9a:55:80:c8:47:1b:7e:2e:b4:d4:47:4d:
                    dd:8e:ee:9a:bf:a5:1d:79:0f:75:1e:af:b9:a7:65:
                    d5:f2:53:ce:76:9b:41:71:33:47:4a:c5:47:4e:d7:
                    76:2a:6e:0e:b2:2a:bc:35:4e:cb:7b:86:27:74:8e:
                    ae:bd:96:fb:86:a3:b9:3b:82:78:17:22:de:2f:6e:
                    59:4c:db:1d:9a:a3:a0:00:04:1c:a9:1a:ed:58:41:
                    e4:b0:b7:b8:97:14:ec:24:bd:81:4e:58:75:09:8b:
                    59:b7:19:79:2c:77:ba:3d:99:a5:d6:67:76:c9:e0:
                    6a:dc:dc:6a:39:5d:41:c2:61:e3:82:7e:ba:2c:1f:
                    e4:24:5d:c5:fc:18:cb:ab:31:b9:d4:53:71:0e:97:
                    02:40:bb:e5:5a:15:ea:5f:a9:d5:fc:ba:65:59:d8:
                    5f:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:94:3D:45:EF:5D:9D:7C:1D:F3:67:21:47:0F:F8:26:5F:B6:7C:36
            X509v3 Authority Key Identifier:
                keyid:3F:E7:7B:88:55:F6:1D:F2:AD:68:18:5D:D0:97:7B:CB:42:C7:08:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EXZwJLeBDNAyQuGhnTvSckqSmq79QuXgB463RoNymcv1/0/3FE77B8855F61DF2AD68185DD0977BCB42C708F4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3FE77B8855F61DF2AD68185DD0977BCB42C708F4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EXZwJLeBDNAyQuGhnTvSckqSmq79QuXgB463RoNymcv1/0/3137302e302e3231392e302f32342d3234203d3e20323635313431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.0.219.0/24

    Signature Algorithm: sha256WithRSAEncryption
         10:a6:0d:86:75:d1:63:a7:33:1f:ef:dc:e7:11:93:4f:23:20:
         94:00:bc:0d:f3:8e:2e:73:f6:ac:e2:09:09:3d:9e:a8:57:bc:
         ee:fe:e8:6f:3f:f9:2d:48:84:67:df:2d:05:f9:9e:3a:4f:75:
         9a:a8:8b:59:13:81:f8:b4:59:2e:71:cc:81:fc:c1:86:c2:af:
         61:c3:19:1c:a3:19:3b:9e:c1:d8:87:ec:c5:7f:d0:35:10:ee:
         29:47:e0:e5:94:86:8f:ff:cc:66:a2:45:93:35:e5:5e:c9:8b:
         9a:6d:80:92:9c:41:2b:7a:f5:f6:98:1a:4a:bc:26:d4:a1:dc:
         1d:96:4a:96:01:e0:cb:d0:7f:04:cc:06:61:92:73:c3:6c:cc:
         eb:26:9e:30:87:62:f0:a8:c1:46:5f:26:8e:47:04:61:53:e4:
         20:a7:d1:85:17:5f:da:b1:ca:c8:79:4e:c8:4f:fc:90:7c:ce:
         7a:c5:fb:fe:e3:40:70:43:d0:f2:11:7c:6f:e8:3c:5e:ff:48:
         97:35:5b:e2:6c:e1:c6:52:a4:ad:2c:da:4e:0a:1f:b7:72:68:
         bb:f2:7e:e7:fb:77:2a:ca:f7:4a:cc:31:f9:49:7a:be:62:f5:
         fb:06:0e:ef:50:bb:3c:a8:18:ed:f9:b6:f0:0d:47:81:cc:4a:
         8f:5e:88:28
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUKVlEyOiOCi+3SpqRR0EUl5ccKEYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0ZFNzdCODg1NUY2MURGMkFENjgxODVERDA5NzdCQ0I0
MkM3MDhGNDAeFw0yNDA2MjQxNzM5NThaFw0yNTA2MjMxNzQ0NThaMDMxMTAvBgNV
BAMTKDAyOTQzRDQ1RUY1RDlEN0MxREYzNjcyMTQ3MEZGODI2NUZCNjdDMzYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6wiCECb3iS8uQKqZDMSLmVWxQ
HiaIACxh4cLRaQnpycQR68rDpdEQzUZvNja6UddeM6nYcuCgakHePWGNgqpEgCw1
DkcNHavlLIJlvN0R58swC3AjNwzcXNGla5pVgMhHG34utNRHTd2O7pq/pR15D3Ue
r7mnZdXyU852m0FxM0dKxUdO13Yqbg6yKrw1Tst7hid0jq69lvuGo7k7gngXIt4v
bllM2x2ao6AABBypGu1YQeSwt7iXFOwkvYFOWHUJi1m3GXksd7o9maXWZ3bJ4Grc
3Go5XUHCYeOCfrosH+QkXcX8GMurMbnUU3EOlwJAu+VaFepfqdX8umVZ2F8jAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUApQ9Re9dnXwd82chRw/4Jl+2fDYwHwYDVR0j
BBgwFoAUP+d7iFX2HfKtaBhd0Jd7y0LHCPQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRVhad0pMZUJETkF5UXVHaG5UdlNja3FTbXE3OVF1WGdCNDYzUm9OeW1j
djEvMC8zRkU3N0I4ODU1RjYxREYyQUQ2ODE4NUREMDk3N0JDQjQyQzcwOEY0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzNGRTc3Qjg4NTVGNjFERjJB
RDY4MTg1REQwOTc3QkNCNDJDNzA4RjQuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0VYWndKTGVCRE5BeVF1R2huVHZTY2txU21xNzlRdVhnQjQ2M1JvTnltY3YxLzAv
MzEzNzMwMmUzMDJlMzIzMTM5MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM1
MzEzNDMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAqgDbMA0GCSqGSIb3DQEBCwUAA4IBAQAQpg2GddFj
pzMf79znEZNPIyCUALwN844uc/as4gkJPZ6oV7zu/uhvP/ktSIRn3y0F+Z46T3Wa
qItZE4H4tFkuccyB/MGGwq9hwxkcoxk7nsHYh+zFf9A1EO4pR+DllIaP/8xmokWT
NeVeyYuabYCSnEErevX2mBpKvCbUodwdlkqWAeDL0H8EzAZhknPDbMzrJp4wh2Lw
qMFGXyaORwRhU+Qgp9GFF1/ascrIeU7IT/yQfM56xfv+40BwQ9DyEXxv6Dxe/0iX
NVvibOHGUqStLNpOCh+3cmi78n7n+3cqyvdKzDH5SXq+YvX7Bg7vULs8qBjt+bbw
DUeBzEqPXogo
-----END CERTIFICATE-----
Generated at Fri Nov 22 00:21:59 2024 by rpki-client on console-fra.rpki-client.org