Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FREdJF4yi4hsAuQzKaMr9dzAcATExnskfh3Zq4a1aASR/0/3137392e302e3131382e302f32342d3234203d3e20323731333235.roa
File:                     3137392e302e3131382e302f32342d3234203d3e20323731333235.roa (raw, json)
Hash identifier:          D1mRR3Mfb1ewWQ+WVjOp/qWF6W37unGB09bpuzTRuGU=
Subject key identifier:   36:43:BB:92:AA:99:C7:20:BC:03:90:B4:DF:88:5F:BE:01:95:2C:9A
Certificate issuer:       /CN=09251826C5FE59A1110BFFDB5B8AA13FB9F3AC57
Certificate serial:       0A06E5CF5255FFC3C27F6360AE86539743BEF0BE
Authority key identifier: 09:25:18:26:C5:FE:59:A1:11:0B:FF:DB:5B:8A:A1:3F:B9:F3:AC:57
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/09251826C5FE59A1110BFFDB5B8AA13FB9F3AC57.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FREdJF4yi4hsAuQzKaMr9dzAcATExnskfh3Zq4a1aASR/0/3137392e302e3131382e302f32342d3234203d3e20323731333235.roa
Signing time:             Fri 16 Aug 2024 01:57:22 +0000
ROA not before:           Fri 16 Aug 2024 01:52:22 +0000
ROA not after:            Fri 15 Aug 2025 01:57:22 +0000
asID:                     271325
IP address blocks:        179.0.118.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FREdJF4yi4hsAuQzKaMr9dzAcATExnskfh3Zq4a1aASR/0/09251826C5FE59A1110BFFDB5B8AA13FB9F3AC57.crl
                          rsync://rpki-repo.registro.br/repo/FREdJF4yi4hsAuQzKaMr9dzAcATExnskfh3Zq4a1aASR/0/09251826C5FE59A1110BFFDB5B8AA13FB9F3AC57.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/09251826C5FE59A1110BFFDB5B8AA13FB9F3AC57.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:06:e5:cf:52:55:ff:c3:c2:7f:63:60:ae:86:53:97:43:be:f0:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09251826C5FE59A1110BFFDB5B8AA13FB9F3AC57
        Validity
            Not Before: Aug 16 01:52:22 2024 GMT
            Not After : Aug 15 01:57:22 2025 GMT
        Subject: CN=3643BB92AA99C720BC0390B4DF885FBE01952C9A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:4b:76:6f:57:f3:45:2e:23:ec:88:94:ee:2d:
                    80:51:6e:37:60:34:57:99:e9:f6:71:7f:21:06:cb:
                    3a:ad:30:38:e5:03:3f:24:bf:99:40:fa:08:74:48:
                    77:36:19:aa:9f:7f:62:58:32:00:56:69:a6:3c:c1:
                    f2:c6:fe:3a:16:58:55:45:df:35:a7:e1:7b:92:13:
                    47:87:c9:17:f6:5b:89:1f:84:58:b6:09:a1:3a:29:
                    08:e6:29:2f:4b:42:5d:50:a3:b0:f1:38:f8:1c:af:
                    a9:91:28:2e:f6:a9:d7:61:b6:a8:a1:29:82:1b:31:
                    ec:36:82:3b:c2:c4:66:99:4a:40:2a:e9:54:de:9c:
                    4f:53:2a:b8:10:1e:96:cc:04:d6:75:24:24:f6:fa:
                    bf:9b:7e:40:7b:e2:b9:12:ca:17:2f:af:e7:f0:35:
                    61:44:23:37:0d:12:83:79:64:ea:9a:d6:95:2c:78:
                    ef:19:e0:dc:4d:3a:a1:4b:62:b6:7c:6a:a9:2d:15:
                    b0:b0:66:16:47:0f:41:fa:0d:51:b3:60:d0:59:40:
                    57:46:db:55:cd:36:a2:f5:8b:1e:07:f9:3f:fb:4a:
                    14:30:47:7b:59:fb:bd:58:33:0f:4d:d2:95:14:3e:
                    ea:cf:23:2e:63:1c:41:ae:53:3a:6c:62:31:2d:6a:
                    9a:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:43:BB:92:AA:99:C7:20:BC:03:90:B4:DF:88:5F:BE:01:95:2C:9A
            X509v3 Authority Key Identifier:
                keyid:09:25:18:26:C5:FE:59:A1:11:0B:FF:DB:5B:8A:A1:3F:B9:F3:AC:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FREdJF4yi4hsAuQzKaMr9dzAcATExnskfh3Zq4a1aASR/0/09251826C5FE59A1110BFFDB5B8AA13FB9F3AC57.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/09251826C5FE59A1110BFFDB5B8AA13FB9F3AC57.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FREdJF4yi4hsAuQzKaMr9dzAcATExnskfh3Zq4a1aASR/0/3137392e302e3131382e302f32342d3234203d3e20323731333235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.0.118.0/24

    Signature Algorithm: sha256WithRSAEncryption
         66:fb:73:18:20:e9:1b:ff:8e:8c:3e:85:30:2f:fe:dd:a5:fe:
         77:ca:42:61:ef:88:3b:9c:46:e1:1b:b3:42:85:f4:a2:93:ea:
         05:15:fd:a3:db:e9:12:08:bd:0a:75:bd:b5:43:78:81:da:58:
         d9:60:8d:ff:7a:d3:e1:6d:75:59:d3:85:06:57:85:63:c9:8a:
         57:35:97:be:fa:e5:1f:85:3f:9e:90:f8:82:3d:8a:10:84:e1:
         72:68:c7:4f:48:41:ce:03:79:ba:3e:29:38:9b:5a:8a:20:6a:
         a8:1c:83:d7:38:c3:9d:07:de:35:9c:ba:89:08:88:c5:30:63:
         f4:38:7e:51:aa:8e:78:b4:48:a2:91:02:7b:dd:ca:b6:e5:cb:
         03:39:09:f7:93:95:f5:3c:c1:58:17:1e:39:89:84:39:aa:7e:
         2d:5a:67:64:97:74:4c:ea:d4:24:3a:25:9a:e4:bf:3a:ee:02:
         0a:e7:4b:64:07:d0:8b:1b:0f:ed:79:22:b4:96:b9:7c:cc:5b:
         53:35:45:03:13:d8:fe:67:6f:a7:d7:d3:8d:e5:f9:5d:db:79:
         4c:f6:6e:d1:3f:50:14:85:b7:29:ea:a3:29:30:85:60:5c:a8:
         33:a1:d7:6b:3d:61:c7:a3:c9:54:48:b0:51:b6:5d:54:e5:8a:
         6d:22:de:e2
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUCgblz1JV/8PCf2NgroZTl0O+8L4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDkyNTE4MjZDNUZFNTlBMTExMEJGRkRCNUI4QUExM0ZC
OUYzQUM1NzAeFw0yNDA4MTYwMTUyMjJaFw0yNTA4MTUwMTU3MjJaMDMxMTAvBgNV
BAMTKDM2NDNCQjkyQUE5OUM3MjBCQzAzOTBCNERGODg1RkJFMDE5NTJDOUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFS3ZvV/NFLiPsiJTuLYBRbjdg
NFeZ6fZxfyEGyzqtMDjlAz8kv5lA+gh0SHc2Gaqff2JYMgBWaaY8wfLG/joWWFVF
3zWn4XuSE0eHyRf2W4kfhFi2CaE6KQjmKS9LQl1Qo7DxOPgcr6mRKC72qddhtqih
KYIbMew2gjvCxGaZSkAq6VTenE9TKrgQHpbMBNZ1JCT2+r+bfkB74rkSyhcvr+fw
NWFEIzcNEoN5ZOqa1pUseO8Z4NxNOqFLYrZ8aqktFbCwZhZHD0H6DVGzYNBZQFdG
21XNNqL1ix4H+T/7ShQwR3tZ+71YMw9N0pUUPurPIy5jHEGuUzpsYjEtappfAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUNkO7kqqZxyC8A5C034hfvgGVLJowHwYDVR0j
BBgwFoAUCSUYJsX+WaERC//bW4qhP7nzrFcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRlJFZEpGNHlpNGhzQXVRekthTXI5ZHpBY0FURXhuc2tmaDNacTRhMWFB
U1IvMC8wOTI1MTgyNkM1RkU1OUExMTEwQkZGREI1QjhBQTEzRkI5RjNBQzU3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzA5MjUxODI2QzVGRTU5QTEx
MTBCRkZEQjVCOEFBMTNGQjlGM0FDNTcuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0ZSRWRKRjR5aTRoc0F1UXpLYU1yOWR6QWNBVEV4bnNrZmgzWnE0YTFhQVNSLzAv
MzEzNzM5MmUzMDJlMzEzMTM4MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNzMx
MzMzMjM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAswB2MA0GCSqGSIb3DQEBCwUAA4IBAQBm+3MYIOkb
/46MPoUwL/7dpf53ykJh74g7nEbhG7NChfSik+oFFf2j2+kSCL0Kdb21Q3iB2ljZ
YI3/etPhbXVZ04UGV4VjyYpXNZe++uUfhT+ekPiCPYoQhOFyaMdPSEHOA3m6Pik4
m1qKIGqoHIPXOMOdB941nLqJCIjFMGP0OH5Rqo54tEiikQJ73cq25csDOQn3k5X1
PMFYFx45iYQ5qn4tWmdkl3RM6tQkOiWa5L867gIK50tkB9CLGw/teSK0lrl8zFtT
NUUDE9j+Z2+n19ON5fld23lM9m7RP1AUhbcp6qMpMIVgXKgzoddrPWHHo8lUSLBR
tl1U5YptIt7i
-----END CERTIFICATE-----
Generated at Sat Nov 23 14:22:39 2024 by rpki-client on console-fra.rpki-client.org