Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EdwGNgQ4gXq8wBTNHfhNrG4QU2NzJZgCRvvz93QP8yXm/1/3137392e3132342e302e302f32312d3234203d3e203238323634.roa
File:                     3137392e3132342e302e302f32312d3234203d3e203238323634.roa (raw, json)
Hash identifier:          HFs6UUuiB3xOEDHJGU5kSLCOq+HTMt7CJOgDG2+sThE=
Subject key identifier:   D7:C9:97:1A:C6:DF:99:07:97:45:46:8E:D0:C5:5B:64:96:23:B8:16
Certificate issuer:       /CN=4D3D5BA9F9B5356D2A4244549680670908498017
Certificate serial:       7586F23B85251C98671BFEC26CAFDC8152D04961
Authority key identifier: 4D:3D:5B:A9:F9:B5:35:6D:2A:42:44:54:96:80:67:09:08:49:80:17
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4D3D5BA9F9B5356D2A4244549680670908498017.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EdwGNgQ4gXq8wBTNHfhNrG4QU2NzJZgCRvvz93QP8yXm/1/3137392e3132342e302e302f32312d3234203d3e203238323634.roa
Signing time:             Thu 04 Apr 2024 13:04:14 +0000
ROA not before:           Thu 04 Apr 2024 12:59:14 +0000
ROA not after:            Thu 03 Apr 2025 13:04:14 +0000
asID:                     28264
IP address blocks:        179.124.0.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EdwGNgQ4gXq8wBTNHfhNrG4QU2NzJZgCRvvz93QP8yXm/1/4D3D5BA9F9B5356D2A4244549680670908498017.crl
                          rsync://rpki-repo.registro.br/repo/EdwGNgQ4gXq8wBTNHfhNrG4QU2NzJZgCRvvz93QP8yXm/1/4D3D5BA9F9B5356D2A4244549680670908498017.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4D3D5BA9F9B5356D2A4244549680670908498017.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 13:06:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:86:f2:3b:85:25:1c:98:67:1b:fe:c2:6c:af:dc:81:52:d0:49:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4D3D5BA9F9B5356D2A4244549680670908498017
        Validity
            Not Before: Apr  4 12:59:14 2024 GMT
            Not After : Apr  3 13:04:14 2025 GMT
        Subject: CN=D7C9971AC6DF99079745468ED0C55B649623B816
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fb:b3:70:05:4b:18:5d:84:32:d2:78:3f:bf:a9:
                    d5:62:74:fa:a1:55:b1:c3:9b:6a:be:f4:73:21:94:
                    e0:1a:59:ab:a3:91:ff:66:cb:aa:0c:29:99:65:c0:
                    b2:6d:09:e5:e2:f9:27:69:98:48:f2:fd:a3:95:b6:
                    6d:a3:c2:48:35:61:db:b3:20:87:47:c2:f9:11:b3:
                    16:44:99:22:15:bd:53:34:45:75:c7:cf:dd:6e:5a:
                    f6:e7:12:15:dd:76:8f:4f:f0:1b:9c:6d:30:ed:78:
                    4a:45:3c:91:27:65:bf:d0:7d:5f:0c:67:c5:dd:5c:
                    1c:71:1b:9e:7a:2c:67:c6:99:86:8f:f7:00:51:bd:
                    8b:ac:f0:34:02:45:fb:5a:33:c2:7f:49:84:03:c3:
                    18:d3:92:9d:f2:0a:91:ff:dd:10:84:96:a5:3f:9c:
                    f8:19:46:24:bc:81:1f:0a:1f:11:de:dd:93:75:fd:
                    d3:4e:8b:2d:c3:15:c2:e6:71:5b:af:26:f9:99:9c:
                    02:ed:58:76:fb:53:40:00:e4:f1:00:44:d1:5c:40:
                    8e:83:e9:b1:48:bf:fc:f4:5e:6f:cd:29:26:9b:4f:
                    d5:8f:40:fc:5c:f3:67:a9:da:9f:51:64:42:6f:7f:
                    9e:d7:2c:bd:10:88:d5:24:31:dd:1d:af:86:59:d6:
                    90:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:C9:97:1A:C6:DF:99:07:97:45:46:8E:D0:C5:5B:64:96:23:B8:16
            X509v3 Authority Key Identifier:
                keyid:4D:3D:5B:A9:F9:B5:35:6D:2A:42:44:54:96:80:67:09:08:49:80:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EdwGNgQ4gXq8wBTNHfhNrG4QU2NzJZgCRvvz93QP8yXm/1/4D3D5BA9F9B5356D2A4244549680670908498017.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4D3D5BA9F9B5356D2A4244549680670908498017.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EdwGNgQ4gXq8wBTNHfhNrG4QU2NzJZgCRvvz93QP8yXm/1/3137392e3132342e302e302f32312d3234203d3e203238323634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.124.0.0/21

    Signature Algorithm: sha256WithRSAEncryption
         80:51:22:bd:1d:bc:d6:09:4d:4d:7f:bb:a0:5f:70:50:c2:02:
         fd:02:f8:79:4c:a3:1d:b3:d8:f9:9d:55:00:4a:ae:ea:a7:26:
         aa:94:27:e9:06:bd:53:2b:a6:f7:ed:6a:88:2a:2a:9c:3c:65:
         6d:38:de:58:d9:00:23:3f:55:57:4f:0c:07:a7:73:b6:2b:6c:
         26:49:58:f9:4b:00:86:e3:40:1b:5f:32:0b:79:25:dc:a3:73:
         cb:3c:c6:c6:b9:eb:a3:e3:e5:0b:4b:a4:ef:44:43:c4:80:26:
         23:b8:3e:cf:86:af:bb:25:d2:4d:82:b1:5d:87:0e:f0:35:a9:
         74:82:54:af:e7:63:b0:f0:b6:ef:8f:bf:c0:12:00:af:5b:9e:
         85:28:75:01:ba:5a:fc:a5:06:e1:6a:2b:f4:7d:71:a2:03:71:
         2f:ac:cd:32:52:19:3d:7f:7a:bb:bd:35:48:40:29:67:de:a4:
         31:2e:b3:06:27:c2:1f:00:12:42:7d:3e:fe:c5:06:1c:c0:8d:
         ce:02:1f:5e:0a:ce:7e:0c:a3:bb:9d:f9:7a:d1:39:cc:79:27:
         ed:30:79:ed:ed:8d:74:2a:7d:47:6f:f1:b2:e3:6c:08:61:fe:
         88:c9:5a:b4:28:de:5b:35:2d:5a:15:2a:2a:dd:b9:5d:33:c6:
         7e:56:44:9f
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUdYbyO4UlHJhnG/7CbK/cgVLQSWEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEQzRDVCQTlGOUI1MzU2RDJBNDI0NDU0OTY4MDY3MDkw
ODQ5ODAxNzAeFw0yNDA0MDQxMjU5MTRaFw0yNTA0MDMxMzA0MTRaMDMxMTAvBgNV
BAMTKEQ3Qzk5NzFBQzZERjk5MDc5NzQ1NDY4RUQwQzU1QjY0OTYyM0I4MTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD7s3AFSxhdhDLSeD+/qdVidPqh
VbHDm2q+9HMhlOAaWaujkf9my6oMKZllwLJtCeXi+SdpmEjy/aOVtm2jwkg1Yduz
IIdHwvkRsxZEmSIVvVM0RXXHz91uWvbnEhXddo9P8BucbTDteEpFPJEnZb/QfV8M
Z8XdXBxxG556LGfGmYaP9wBRvYus8DQCRftaM8J/SYQDwxjTkp3yCpH/3RCElqU/
nPgZRiS8gR8KHxHe3ZN1/dNOiy3DFcLmcVuvJvmZnALtWHb7U0AA5PEARNFcQI6D
6bFIv/z0Xm/NKSabT9WPQPxc82ep2p9RZEJvf57XLL0QiNUkMd0dr4ZZ1pBzAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQU18mXGsbfmQeXRUaO0MVbZJYjuBYwHwYDVR0j
BBgwFoAUTT1bqfm1NW0qQkRUloBnCQhJgBcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRWR3R05nUTRnWHE4d0JUTkhmaE5yRzRRVTJOekpaZ0NSdnZ6OTNRUDh5
WG0vMS80RDNENUJBOUY5QjUzNTZEMkE0MjQ0NTQ5NjgwNjcwOTA4NDk4MDE3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzREM0Q1QkE5RjlCNTM1NkQy
QTQyNDQ1NDk2ODA2NzA5MDg0OTgwMTcuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0Vkd0dOZ1E0Z1hxOHdCVE5IZmhOckc0UVUyTnpKWmdDUnZ2ejkzUVA4eVhtLzEv
MzEzNzM5MmUzMTMyMzQyZTMwMmUzMDJmMzIzMTJkMzIzNDIwM2QzZTIwMzIzODMy
MzYzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEA7N8ADANBgkqhkiG9w0BAQsFAAOCAQEAgFEivR281glN
TX+7oF9wUMIC/QL4eUyjHbPY+Z1VAEqu6qcmqpQn6Qa9Uyum9+1qiCoqnDxlbTje
WNkAIz9VV08MB6dztitsJklY+UsAhuNAG18yC3kl3KNzyzzGxrnro+PlC0uk70RD
xIAmI7g+z4avuyXSTYKxXYcO8DWpdIJUr+djsPC274+/wBIAr1uehSh1Abpa/KUG
4Wor9H1xogNxL6zNMlIZPX96u701SEApZ96kMS6zBifCHwASQn0+/sUGHMCNzgIf
XgrOfgyju535etE5zHkn7TB57e2NdCp9R2/xsuNsCGH+iMlatCjeWzUtWhUqKt25
XTPGflZEnw==
-----END CERTIFICATE-----
Generated at Fri Nov 22 11:44:17 2024 by rpki-client on console-ams.rpki-client.org