Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GaLd6ApocDBCeWjwwPnuPuRnkyXPKRC2YTeDdGc4daE4/0/3137392e34322e3131312e302f32342d3234203d3e20323731313530.roa
File:                     3137392e34322e3131312e302f32342d3234203d3e20323731313530.roa (raw, json)
Hash identifier:          xNmxEWoHXQXtr4ggIFA/fbe+ExS6Tsu7/AlY7yUcI44=
Subject key identifier:   10:A1:72:31:5A:9C:20:F9:93:17:A9:42:DA:58:16:3E:EF:6A:D0:A9
Certificate issuer:       /CN=B576170C915419B17FE7F1127C766A8859F42C4E
Certificate serial:       0DA77262BD77CC222355768E95FBCE97163B628A
Authority key identifier: B5:76:17:0C:91:54:19:B1:7F:E7:F1:12:7C:76:6A:88:59:F4:2C:4E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B576170C915419B17FE7F1127C766A8859F42C4E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GaLd6ApocDBCeWjwwPnuPuRnkyXPKRC2YTeDdGc4daE4/0/3137392e34322e3131312e302f32342d3234203d3e20323731313530.roa
Signing time:             Sun 18 Aug 2024 14:41:04 +0000
ROA not before:           Sun 18 Aug 2024 14:36:04 +0000
ROA not after:            Sun 17 Aug 2025 14:41:04 +0000
asID:                     271150
IP address blocks:        179.42.111.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GaLd6ApocDBCeWjwwPnuPuRnkyXPKRC2YTeDdGc4daE4/0/B576170C915419B17FE7F1127C766A8859F42C4E.crl
                          rsync://rpki-repo.registro.br/repo/GaLd6ApocDBCeWjwwPnuPuRnkyXPKRC2YTeDdGc4daE4/0/B576170C915419B17FE7F1127C766A8859F42C4E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B576170C915419B17FE7F1127C766A8859F42C4E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 16:45:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:a7:72:62:bd:77:cc:22:23:55:76:8e:95:fb:ce:97:16:3b:62:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B576170C915419B17FE7F1127C766A8859F42C4E
        Validity
            Not Before: Aug 18 14:36:04 2024 GMT
            Not After : Aug 17 14:41:04 2025 GMT
        Subject: CN=10A172315A9C20F99317A942DA58163EEF6AD0A9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:8a:c1:05:2f:d5:28:66:20:6b:06:6e:19:d2:
                    cb:0b:d0:f7:c7:0a:9e:0a:64:02:a9:58:d9:e0:37:
                    02:a2:fb:2e:a1:47:26:7c:ce:80:28:cb:7e:bf:03:
                    97:f8:d2:16:a6:de:d5:53:6b:5e:64:ad:19:fc:fb:
                    97:9e:95:c6:36:21:f0:7c:ac:75:fd:52:ea:9e:7a:
                    34:ad:cc:ea:c3:f7:a6:93:c8:52:98:bd:c5:ca:f1:
                    8d:bf:45:9c:be:85:85:c5:f4:7f:34:7e:49:67:67:
                    35:4c:c8:a2:bd:79:97:61:cb:34:1a:f9:a7:8b:bf:
                    26:3d:6b:a4:12:dc:6f:36:4c:16:68:4c:a7:a6:01:
                    7d:11:c8:a6:e1:79:99:d6:5f:7e:98:d2:79:79:39:
                    0e:a0:ff:26:7a:51:b3:64:5c:a5:ff:1b:d5:d0:e4:
                    9c:23:e5:af:f7:b9:af:0d:4d:83:c4:79:b3:af:b7:
                    f9:da:14:89:2f:80:6f:40:8c:29:05:c5:ed:ec:93:
                    a1:80:8c:27:7f:f0:14:05:15:ff:fa:2e:32:95:3e:
                    e2:42:f6:2a:da:b1:3c:0d:69:c9:87:5f:7c:ce:b3:
                    58:6b:b0:53:79:3d:fa:0b:f6:e7:81:fb:67:4d:00:
                    c0:c8:36:9e:4d:03:74:a4:75:d5:10:78:c5:7a:e4:
                    c7:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:A1:72:31:5A:9C:20:F9:93:17:A9:42:DA:58:16:3E:EF:6A:D0:A9
            X509v3 Authority Key Identifier:
                keyid:B5:76:17:0C:91:54:19:B1:7F:E7:F1:12:7C:76:6A:88:59:F4:2C:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GaLd6ApocDBCeWjwwPnuPuRnkyXPKRC2YTeDdGc4daE4/0/B576170C915419B17FE7F1127C766A8859F42C4E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B576170C915419B17FE7F1127C766A8859F42C4E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GaLd6ApocDBCeWjwwPnuPuRnkyXPKRC2YTeDdGc4daE4/0/3137392e34322e3131312e302f32342d3234203d3e20323731313530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.42.111.0/24

    Signature Algorithm: sha256WithRSAEncryption
         25:44:08:0e:1d:9f:71:8a:50:5c:f5:36:de:69:93:26:bf:cd:
         73:15:bf:54:1c:94:07:b0:5c:02:48:aa:f5:98:eb:a0:ac:d2:
         0f:d2:a1:0c:bf:8b:8e:74:3a:e2:05:dc:fa:c7:66:ab:11:76:
         94:b6:68:79:61:c7:96:65:57:24:1e:44:d1:01:27:ef:84:a0:
         d7:cd:15:70:20:5a:0d:91:98:16:59:78:24:9f:41:7f:d6:7b:
         64:64:47:3b:fb:dc:44:67:63:04:bd:91:ce:6a:d8:d1:27:65:
         d2:8b:4a:92:31:9f:64:2a:47:89:23:5c:a8:23:bd:79:15:56:
         35:7d:4d:e8:f2:2e:c1:41:3d:c3:b1:ef:17:fc:c9:b3:50:9d:
         5d:a6:87:43:3e:7b:8f:d1:55:6c:49:47:f9:da:3e:a4:a4:7e:
         a6:5e:da:ae:8d:0f:12:d2:d6:cd:15:2c:4f:8c:fd:42:0b:83:
         30:37:a1:90:f2:c7:82:16:68:87:61:36:5b:74:97:80:e6:35:
         5e:e6:46:95:11:5f:7c:4e:0a:83:ec:75:2e:80:8c:da:9d:fd:
         39:f5:df:66:19:7a:dc:2a:19:eb:3d:26:45:57:f0:0a:64:bc:
         96:89:19:a9:9c:9a:b1:bd:e4:9d:26:ac:2c:a8:24:21:e3:81:
         8b:36:ab:a2
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUDadyYr13zCIjVXaOlfvOlxY7YoowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjU3NjE3MEM5MTU0MTlCMTdGRTdGMTEyN0M3NjZBODg1
OUY0MkM0RTAeFw0yNDA4MTgxNDM2MDRaFw0yNTA4MTcxNDQxMDRaMDMxMTAvBgNV
BAMTKDEwQTE3MjMxNUE5QzIwRjk5MzE3QTk0MkRBNTgxNjNFRUY2QUQwQTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCeisEFL9UoZiBrBm4Z0ssL0PfH
Cp4KZAKpWNngNwKi+y6hRyZ8zoAoy36/A5f40ham3tVTa15krRn8+5eelcY2IfB8
rHX9UuqeejStzOrD96aTyFKYvcXK8Y2/RZy+hYXF9H80fklnZzVMyKK9eZdhyzQa
+aeLvyY9a6QS3G82TBZoTKemAX0RyKbheZnWX36Y0nl5OQ6g/yZ6UbNkXKX/G9XQ
5Jwj5a/3ua8NTYPEebOvt/naFIkvgG9AjCkFxe3sk6GAjCd/8BQFFf/6LjKVPuJC
9irasTwNacmHX3zOs1hrsFN5PfoL9ueB+2dNAMDINp5NA3SkddUQeMV65MclAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUEKFyMVqcIPmTF6lC2lgWPu9q0KkwHwYDVR0j
BBgwFoAUtXYXDJFUGbF/5/ESfHZqiFn0LE4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR2FMZDZBcG9jREJDZVdqd3dQbnVQdVJua3lYUEtSQzJZVGVEZEdjNGRh
RTQvMC9CNTc2MTcwQzkxNTQxOUIxN0ZFN0YxMTI3Qzc2NkE4ODU5RjQyQzRFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0I1NzYxNzBDOTE1NDE5QjE3
RkU3RjExMjdDNzY2QTg4NTlGNDJDNEUuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0dhTGQ2QXBvY0RCQ2VXand3UG51UHVSbmt5WFBLUkMyWVRlRGRHYzRkYUU0LzAv
MzEzNzM5MmUzNDMyMmUzMTMxMzEyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM3
MzEzMTM1MzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBACzKm8wDQYJKoZIhvcNAQELBQADggEBACVECA4d
n3GKUFz1Nt5pkya/zXMVv1QclAewXAJIqvWY66Cs0g/SoQy/i450OuIF3PrHZqsR
dpS2aHlhx5ZlVyQeRNEBJ++EoNfNFXAgWg2RmBZZeCSfQX/We2RkRzv73ERnYwS9
kc5q2NEnZdKLSpIxn2QqR4kjXKgjvXkVVjV9TejyLsFBPcOx7xf8ybNQnV2mh0M+
e4/RVWxJR/naPqSkfqZe2q6NDxLS1s0VLE+M/UILgzA3oZDyx4IWaIdhNlt0l4Dm
NV7mRpURX3xOCoPsdS6AjNqd/Tn132YZetwqGes9JkVX8ApkvJaJGamcmrG95J0m
rCyoJCHjgYs2q6I=
-----END CERTIFICATE-----
Generated at Tue Nov 26 17:13:53 2024 by rpki-client on console-fra.rpki-client.org