Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FjFWCFPQw4b1jQS9rEA2ztaaLL9Q54rnMzXNneSNHddT/0/3137392e34322e302e302f32322d3234203d3e20323731313033.roa
File:                     3137392e34322e302e302f32322d3234203d3e20323731313033.roa (raw, json)
Hash identifier:          UzXaWcCjIvmGJbDj8tZ6rAI1CGE9kCG+huipBEzsZC4=
Subject key identifier:   A3:54:18:A5:89:E8:38:19:79:F7:71:60:D4:DD:8F:70:02:B5:A5:9E
Certificate issuer:       /CN=3EF633923A51B56E1376665FA9A269A157B419AF
Certificate serial:       7DEF2C7D1548AC1219288BA1B9C09996AEC97A5F
Authority key identifier: 3E:F6:33:92:3A:51:B5:6E:13:76:66:5F:A9:A2:69:A1:57:B4:19:AF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3EF633923A51B56E1376665FA9A269A157B419AF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FjFWCFPQw4b1jQS9rEA2ztaaLL9Q54rnMzXNneSNHddT/0/3137392e34322e302e302f32322d3234203d3e20323731313033.roa
Signing time:             Thu 26 Sep 2024 00:52:11 +0000
ROA not before:           Thu 26 Sep 2024 00:47:11 +0000
ROA not after:            Thu 25 Sep 2025 00:52:11 +0000
asID:                     271103
IP address blocks:        179.42.0.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FjFWCFPQw4b1jQS9rEA2ztaaLL9Q54rnMzXNneSNHddT/0/3EF633923A51B56E1376665FA9A269A157B419AF.crl
                          rsync://rpki-repo.registro.br/repo/FjFWCFPQw4b1jQS9rEA2ztaaLL9Q54rnMzXNneSNHddT/0/3EF633923A51B56E1376665FA9A269A157B419AF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3EF633923A51B56E1376665FA9A269A157B419AF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 22:33:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:ef:2c:7d:15:48:ac:12:19:28:8b:a1:b9:c0:99:96:ae:c9:7a:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3EF633923A51B56E1376665FA9A269A157B419AF
        Validity
            Not Before: Sep 26 00:47:11 2024 GMT
            Not After : Sep 25 00:52:11 2025 GMT
        Subject: CN=A35418A589E8381979F77160D4DD8F7002B5A59E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:0a:39:3d:60:28:8e:29:75:cc:f4:aa:3a:4b:
                    da:96:5f:80:f3:32:c2:e3:cc:cf:99:c8:b2:d6:4a:
                    0e:7a:e0:5c:ab:b8:80:89:42:d6:74:dc:ac:93:b8:
                    b8:22:61:53:5a:02:7a:f3:14:56:1c:42:f1:a2:6d:
                    f1:1a:a9:d2:09:a1:d8:07:7b:38:eb:75:c7:00:7e:
                    71:59:7a:40:5e:36:31:47:a9:04:75:a2:fc:35:f1:
                    f5:86:55:26:75:27:a5:0b:52:ea:fb:bd:3e:2b:ee:
                    c4:ba:23:a7:ac:7a:dc:cf:08:c7:a3:d6:67:fb:07:
                    e3:c3:07:ab:37:60:b7:12:ea:e5:97:4b:85:90:36:
                    d6:50:8b:33:d5:fd:17:6e:05:fa:32:23:f4:f1:18:
                    b4:d1:f8:b4:fe:e4:1f:1c:1f:2e:eb:ba:7d:ee:09:
                    8e:9a:91:99:b8:0e:62:3d:a9:53:7c:a1:e3:ce:1f:
                    dc:83:3e:85:e1:6d:5f:7b:7a:13:47:ef:d5:80:be:
                    8e:3e:97:97:81:6a:e3:19:e3:f3:d2:6b:58:21:49:
                    65:3e:ff:4d:87:25:c5:8e:d2:e7:4a:36:3e:03:80:
                    15:a7:97:b5:99:3d:42:94:f5:15:bd:0d:54:0c:dd:
                    e8:7c:63:ae:87:5f:38:8b:fa:4f:84:21:d9:c4:32:
                    13:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:54:18:A5:89:E8:38:19:79:F7:71:60:D4:DD:8F:70:02:B5:A5:9E
            X509v3 Authority Key Identifier:
                keyid:3E:F6:33:92:3A:51:B5:6E:13:76:66:5F:A9:A2:69:A1:57:B4:19:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FjFWCFPQw4b1jQS9rEA2ztaaLL9Q54rnMzXNneSNHddT/0/3EF633923A51B56E1376665FA9A269A157B419AF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3EF633923A51B56E1376665FA9A269A157B419AF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FjFWCFPQw4b1jQS9rEA2ztaaLL9Q54rnMzXNneSNHddT/0/3137392e34322e302e302f32322d3234203d3e20323731313033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.42.0.0/22

    Signature Algorithm: sha256WithRSAEncryption
         06:14:40:93:1c:84:ac:a9:dd:01:de:39:8f:85:82:b7:a2:33:
         70:c6:9b:af:0b:9b:2b:b5:ef:e3:e5:d9:e9:92:2b:aa:72:4c:
         4e:e9:ac:e9:9a:24:47:fb:46:e5:d4:3d:59:7a:de:07:af:43:
         3c:b1:d4:da:a5:98:53:95:1b:d9:9f:e9:81:d8:f6:31:62:aa:
         8e:03:b2:24:91:ca:18:9f:c9:7f:fd:41:6c:1f:a0:fa:1e:8f:
         67:78:e7:db:6f:11:9a:38:ec:08:2a:34:5b:f5:96:f0:25:b8:
         72:62:b3:7a:b4:fe:4f:2f:4e:3d:5e:a5:a1:40:8d:8e:14:96:
         e2:25:74:dd:fc:f2:59:ad:0f:47:22:9f:ad:06:cc:c5:9a:b9:
         24:8a:67:b3:5c:4b:94:16:d3:94:76:04:ec:f1:69:fe:3e:d3:
         d4:d0:56:65:56:82:71:a9:02:58:f1:ae:2d:d1:79:7c:28:24:
         cf:a6:6e:92:1d:68:67:53:7c:2e:e2:d4:83:21:2b:b9:bf:58:
         67:04:f0:ee:05:9a:fa:5e:e9:1a:a8:cd:63:6a:27:14:57:66:
         25:7a:8a:0a:f7:ca:0d:cf:9c:4c:43:34:0b:eb:3d:87:63:c5:
         18:22:53:c7:13:b6:e5:ba:9b:48:cd:89:32:8b:ea:e5:03:99:
         6a:79:a4:30
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUfe8sfRVIrBIZKIuhucCZlq7Jel8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0VGNjMzOTIzQTUxQjU2RTEzNzY2NjVGQTlBMjY5QTE1
N0I0MTlBRjAeFw0yNDA5MjYwMDQ3MTFaFw0yNTA5MjUwMDUyMTFaMDMxMTAvBgNV
BAMTKEEzNTQxOEE1ODlFODM4MTk3OUY3NzE2MEQ0REQ4RjcwMDJCNUE1OUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFCjk9YCiOKXXM9Ko6S9qWX4Dz
MsLjzM+ZyLLWSg564FyruICJQtZ03KyTuLgiYVNaAnrzFFYcQvGibfEaqdIJodgH
ezjrdccAfnFZekBeNjFHqQR1ovw18fWGVSZ1J6ULUur7vT4r7sS6I6esetzPCMej
1mf7B+PDB6s3YLcS6uWXS4WQNtZQizPV/RduBfoyI/TxGLTR+LT+5B8cHy7run3u
CY6akZm4DmI9qVN8oePOH9yDPoXhbV97ehNH79WAvo4+l5eBauMZ4/PSa1ghSWU+
/02HJcWO0udKNj4DgBWnl7WZPUKU9RW9DVQM3eh8Y66HXziL+k+EIdnEMhNNAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUo1QYpYnoOBl593Fg1N2PcAK1pZ4wHwYDVR0j
BBgwFoAUPvYzkjpRtW4TdmZfqaJpoVe0Ga8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRmpGV0NGUFF3NGIxalFTOXJFQTJ6dGFhTEw5UTU0cm5NelhObmVTTkhk
ZFQvMC8zRUY2MzM5MjNBNTFCNTZFMTM3NjY2NUZBOUEyNjlBMTU3QjQxOUFGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzNFRjYzMzkyM0E1MUI1NkUx
Mzc2NjY1RkE5QTI2OUExNTdCNDE5QUYuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0ZqRldDRlBRdzRiMWpRUzlyRUEyenRhYUxMOVE1NHJuTXpYTm5lU05IZGRULzAv
MzEzNzM5MmUzNDMyMmUzMDJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMyMzczMTMx
MzAzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEArMqADANBgkqhkiG9w0BAQsFAAOCAQEABhRAkxyErKnd
Ad45j4WCt6IzcMabrwubK7Xv4+XZ6ZIrqnJMTums6ZokR/tG5dQ9WXreB69DPLHU
2qWYU5Ub2Z/pgdj2MWKqjgOyJJHKGJ/Jf/1BbB+g+h6PZ3jn228RmjjsCCo0W/WW
8CW4cmKzerT+Ty9OPV6loUCNjhSW4iV03fzyWa0PRyKfrQbMxZq5JIpns1xLlBbT
lHYE7PFp/j7T1NBWZVaCcakCWPGuLdF5fCgkz6Zukh1oZ1N8LuLUgyErub9YZwTw
7gWa+l7pGqjNY2onFFdmJXqKCvfKDc+cTEM0C+s9h2PFGCJTxxO25bqbSM2JMovq
5QOZanmkMA==
-----END CERTIFICATE-----
Generated at Mon Nov 25 23:53:15 2024 by rpki-client on console-ams.rpki-client.org