Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FvPPg2KDY3De4mDA7Eiyc6fF6wKh3aRSyQ5faJQZ8mfD/1/3139322e3134342e37322e302f32342d3234203d3e20323637333232.roa
File:                     3139322e3134342e37322e302f32342d3234203d3e20323637333232.roa (raw, json)
Hash identifier:          fbBKti46B+3ZAA/U3HigFHkn43c2/tuIH5tfhMeusSc=
Subject key identifier:   ED:C8:FE:03:C1:BD:70:A6:8F:EA:D2:42:AC:49:9F:84:33:91:A2:B3
Certificate issuer:       /CN=C1C7F834309205DF0944BA5C05FE62D65607F6C0
Certificate serial:       2918B2972739C9E3FC301595FE6B15C65BC337B5
Authority key identifier: C1:C7:F8:34:30:92:05:DF:09:44:BA:5C:05:FE:62:D6:56:07:F6:C0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C1C7F834309205DF0944BA5C05FE62D65607F6C0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FvPPg2KDY3De4mDA7Eiyc6fF6wKh3aRSyQ5faJQZ8mfD/1/3139322e3134342e37322e302f32342d3234203d3e20323637333232.roa
Signing time:             Wed 03 Apr 2024 18:31:53 +0000
ROA not before:           Wed 03 Apr 2024 18:26:53 +0000
ROA not after:            Wed 02 Apr 2025 18:31:53 +0000
asID:                     267322
IP address blocks:        192.144.72.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FvPPg2KDY3De4mDA7Eiyc6fF6wKh3aRSyQ5faJQZ8mfD/1/C1C7F834309205DF0944BA5C05FE62D65607F6C0.crl
                          rsync://rpki-repo.registro.br/repo/FvPPg2KDY3De4mDA7Eiyc6fF6wKh3aRSyQ5faJQZ8mfD/1/C1C7F834309205DF0944BA5C05FE62D65607F6C0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C1C7F834309205DF0944BA5C05FE62D65607F6C0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:18:b2:97:27:39:c9:e3:fc:30:15:95:fe:6b:15:c6:5b:c3:37:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C1C7F834309205DF0944BA5C05FE62D65607F6C0
        Validity
            Not Before: Apr  3 18:26:53 2024 GMT
            Not After : Apr  2 18:31:53 2025 GMT
        Subject: CN=EDC8FE03C1BD70A68FEAD242AC499F843391A2B3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:d9:36:31:b3:b8:0c:f5:8d:4f:bc:e6:c4:67:
                    d1:a2:2f:ae:db:d1:2b:ba:0e:b2:d5:23:f4:81:b1:
                    d6:8e:c5:9a:3c:85:aa:d6:94:91:10:9d:0a:eb:d1:
                    35:d9:78:0d:f2:a6:f4:7c:b9:04:aa:23:e3:f1:86:
                    b0:5b:6f:39:ea:a6:0a:a7:70:0b:b2:aa:55:43:23:
                    b7:fe:ba:37:80:9a:c9:a2:57:44:ca:28:f0:9f:b4:
                    38:46:93:60:64:10:10:1e:80:b9:d8:43:1d:9c:f1:
                    d2:10:e4:61:18:1d:3f:5f:2f:40:14:ec:e7:c7:68:
                    87:b1:b7:89:d0:ab:81:bb:0e:c5:04:4b:04:1c:23:
                    8f:b9:44:56:79:92:1f:06:3f:9e:88:cf:51:51:a6:
                    27:51:44:b2:0f:93:3f:67:79:a9:59:c0:97:c9:2f:
                    dd:b9:9e:d3:05:bf:aa:67:3b:77:53:3c:6a:53:b8:
                    ba:b7:ab:f3:ed:d5:b0:7d:54:51:85:0a:9a:8f:d7:
                    9d:2c:19:a7:6e:c4:59:0c:6d:c3:2b:12:90:48:60:
                    95:2d:6b:66:46:b4:7e:ee:fb:ca:97:d7:49:ff:c4:
                    b7:1a:d3:08:1b:3b:53:8e:e5:ad:6f:c1:ff:1d:43:
                    8b:a0:d4:0d:2a:d7:22:5a:2a:2e:eb:78:3a:13:55:
                    39:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:C8:FE:03:C1:BD:70:A6:8F:EA:D2:42:AC:49:9F:84:33:91:A2:B3
            X509v3 Authority Key Identifier:
                keyid:C1:C7:F8:34:30:92:05:DF:09:44:BA:5C:05:FE:62:D6:56:07:F6:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FvPPg2KDY3De4mDA7Eiyc6fF6wKh3aRSyQ5faJQZ8mfD/1/C1C7F834309205DF0944BA5C05FE62D65607F6C0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C1C7F834309205DF0944BA5C05FE62D65607F6C0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FvPPg2KDY3De4mDA7Eiyc6fF6wKh3aRSyQ5faJQZ8mfD/1/3139322e3134342e37322e302f32342d3234203d3e20323637333232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.144.72.0/24

    Signature Algorithm: sha256WithRSAEncryption
         04:48:64:f1:51:61:40:d7:67:aa:a7:a6:c4:94:13:74:ce:f9:
         30:be:22:36:89:e7:f4:d2:1d:75:f5:cf:38:c9:d1:65:60:df:
         6a:26:66:31:5b:62:27:de:3a:7c:a4:8f:b8:2b:91:1b:10:f0:
         20:b7:3f:0f:dc:df:8f:94:43:34:30:6e:b6:b1:7a:3f:cb:be:
         91:a7:3c:9b:a7:29:67:ab:2c:fc:b1:bb:15:05:fa:e9:20:37:
         27:c9:38:6a:ef:c5:cb:3d:72:1d:6c:5d:d4:a7:07:0e:4b:f0:
         4a:bb:0f:c8:6b:15:63:1e:34:7f:3e:5d:32:fb:4d:18:88:62:
         4d:8a:12:34:01:94:50:35:7d:f3:ec:4a:4d:03:e8:0b:f6:cb:
         b4:4c:1c:c4:c4:a8:18:61:85:72:41:6c:25:07:a8:39:46:8b:
         5c:01:cb:4a:c6:26:e8:7b:eb:5a:80:67:59:bb:a7:f3:2f:21:
         4c:ce:89:7d:95:2a:13:0e:fe:6f:db:63:f7:be:b3:b7:f2:b8:
         4b:8a:ff:68:ad:24:a5:1b:87:b8:77:64:10:2e:a8:39:7d:96:
         88:dd:bc:d1:c8:50:0e:3f:f9:17:91:07:b3:32:4b:72:8f:8b:
         b1:14:87:43:03:1a:fc:54:ae:b9:0d:6f:bb:67:54:bc:f4:a3:
         0e:8c:6d:41
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUKRiylyc5yeP8MBWV/msVxlvDN7UwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzFDN0Y4MzQzMDkyMDVERjA5NDRCQTVDMDVGRTYyRDY1
NjA3RjZDMDAeFw0yNDA0MDMxODI2NTNaFw0yNTA0MDIxODMxNTNaMDMxMTAvBgNV
BAMTKEVEQzhGRTAzQzFCRDcwQTY4RkVBRDI0MkFDNDk5Rjg0MzM5MUEyQjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC12TYxs7gM9Y1PvObEZ9GiL67b
0Su6DrLVI/SBsdaOxZo8harWlJEQnQrr0TXZeA3ypvR8uQSqI+PxhrBbbznqpgqn
cAuyqlVDI7f+ujeAmsmiV0TKKPCftDhGk2BkEBAegLnYQx2c8dIQ5GEYHT9fL0AU
7OfHaIext4nQq4G7DsUESwQcI4+5RFZ5kh8GP56Iz1FRpidRRLIPkz9nealZwJfJ
L925ntMFv6pnO3dTPGpTuLq3q/Pt1bB9VFGFCpqP150sGaduxFkMbcMrEpBIYJUt
a2ZGtH7u+8qX10n/xLca0wgbO1OO5a1vwf8dQ4ug1A0q1yJaKi7reDoTVTkjAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU7cj+A8G9cKaP6tJCrEmfhDORorMwHwYDVR0j
BBgwFoAUwcf4NDCSBd8JRLpcBf5i1lYH9sAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRnZQUGcyS0RZM0RlNG1EQTdFaXljNmZGNndLaDNhUlN5UTVmYUpRWjht
ZkQvMS9DMUM3RjgzNDMwOTIwNURGMDk0NEJBNUMwNUZFNjJENjU2MDdGNkMwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0MxQzdGODM0MzA5MjA1REYw
OTQ0QkE1QzA1RkU2MkQ2NTYwN0Y2QzAuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0Z2UFBnMktEWTNEZTRtREE3RWl5YzZmRjZ3S2gzYVJTeVE1ZmFKUVo4bWZELzEv
MzEzOTMyMmUzMTM0MzQyZTM3MzIyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzczMzMyMzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBADAkEgwDQYJKoZIhvcNAQELBQADggEBAARIZPFR
YUDXZ6qnpsSUE3TO+TC+IjaJ5/TSHXX1zzjJ0WVg32omZjFbYifeOnykj7grkRsQ
8CC3Pw/c34+UQzQwbraxej/LvpGnPJunKWerLPyxuxUF+ukgNyfJOGrvxcs9ch1s
XdSnBw5L8Eq7D8hrFWMeNH8+XTL7TRiIYk2KEjQBlFA1ffPsSk0D6Av2y7RMHMTE
qBhhhXJBbCUHqDlGi1wBy0rGJuh761qAZ1m7p/MvIUzOiX2VKhMO/m/bY/e+s7fy
uEuK/2itJKUbh7h3ZBAuqDl9lojdvNHIUA4/+ReRB7MyS3KPi7EUh0MDGvxUrrkN
b7tnVLz0ow6MbUE=
-----END CERTIFICATE-----
Generated at Sat Nov 23 02:30:12 2024 by rpki-client on console-fra.rpki-client.org