Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/afXFMkQypJjaSaUzt3EQQoJNcVuzhhmdBNu1W4XEo3i/1/3137392e3130382e34342e302f32322d3234203d3e20323634383836.roa
File:                     3137392e3130382e34342e302f32322d3234203d3e20323634383836.roa (raw, json)
Hash identifier:          laT4YEayLagKcoc07xRQjyTHpBjJyk4tHrVsgypfDOo=
Subject key identifier:   43:97:16:35:7C:D9:9D:60:70:1C:AE:1B:19:3C:FB:5C:13:6D:EA:98
Certificate issuer:       /CN=2C1CC943537E72AA599BC9B940FB180BA89C2D1A
Certificate serial:       3B6EA428D4A7D9ED13C48378FDC9F038DA0E5448
Authority key identifier: 2C:1C:C9:43:53:7E:72:AA:59:9B:C9:B9:40:FB:18:0B:A8:9C:2D:1A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2C1CC943537E72AA599BC9B940FB180BA89C2D1A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/afXFMkQypJjaSaUzt3EQQoJNcVuzhhmdBNu1W4XEo3i/1/3137392e3130382e34342e302f32322d3234203d3e20323634383836.roa
Signing time:             Thu 04 Apr 2024 04:53:05 +0000
ROA not before:           Thu 04 Apr 2024 04:48:05 +0000
ROA not after:            Thu 03 Apr 2025 04:53:05 +0000
asID:                     264886
IP address blocks:        179.108.44.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/afXFMkQypJjaSaUzt3EQQoJNcVuzhhmdBNu1W4XEo3i/1/2C1CC943537E72AA599BC9B940FB180BA89C2D1A.crl
                          rsync://rpki-repo.registro.br/repo/afXFMkQypJjaSaUzt3EQQoJNcVuzhhmdBNu1W4XEo3i/1/2C1CC943537E72AA599BC9B940FB180BA89C2D1A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2C1CC943537E72AA599BC9B940FB180BA89C2D1A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 18:43:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:6e:a4:28:d4:a7:d9:ed:13:c4:83:78:fd:c9:f0:38:da:0e:54:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2C1CC943537E72AA599BC9B940FB180BA89C2D1A
        Validity
            Not Before: Apr  4 04:48:05 2024 GMT
            Not After : Apr  3 04:53:05 2025 GMT
        Subject: CN=439716357CD99D60701CAE1B193CFB5C136DEA98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:82:5e:0a:42:61:da:0a:d6:70:05:1a:86:bb:
                    0e:94:6d:7c:f1:ec:9f:18:c2:cc:a5:7d:82:23:d4:
                    a1:06:8f:dd:39:c2:bb:62:fa:66:1f:c2:25:4e:a1:
                    4d:a1:53:76:a9:08:4e:c6:f8:f7:77:dc:d3:c5:88:
                    c4:cf:f9:ab:dd:c0:05:82:f0:2e:d4:68:59:41:6b:
                    05:0a:73:64:94:93:9e:8f:a4:d8:1a:57:83:4d:e8:
                    41:64:c7:1f:37:e7:7d:32:c0:9d:ce:73:35:c5:67:
                    ed:cc:09:50:fd:a8:f9:97:6b:9c:c2:3e:99:a0:8f:
                    2d:5d:c3:6e:9f:26:5a:6e:98:a5:24:cd:7b:49:63:
                    59:a9:a1:b9:10:28:e8:71:dd:b1:ab:ff:99:ff:26:
                    9a:70:30:7f:ca:a0:60:98:81:b0:fd:7c:7e:55:4a:
                    00:49:50:66:7c:10:f6:5f:03:bf:5b:26:66:f9:31:
                    35:8e:28:30:c7:59:21:55:df:1b:63:f6:e7:56:6d:
                    29:41:4e:79:e3:6d:07:d9:38:7e:da:18:bb:da:e0:
                    57:91:bf:65:ba:19:0b:7b:dd:af:cb:0e:c0:0f:1c:
                    8b:88:ab:aa:3c:f9:f5:9a:b4:50:14:a5:96:e3:36:
                    d1:df:6f:70:e2:b9:56:e6:b8:37:b7:d0:49:9b:06:
                    b8:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:97:16:35:7C:D9:9D:60:70:1C:AE:1B:19:3C:FB:5C:13:6D:EA:98
            X509v3 Authority Key Identifier:
                keyid:2C:1C:C9:43:53:7E:72:AA:59:9B:C9:B9:40:FB:18:0B:A8:9C:2D:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/afXFMkQypJjaSaUzt3EQQoJNcVuzhhmdBNu1W4XEo3i/1/2C1CC943537E72AA599BC9B940FB180BA89C2D1A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2C1CC943537E72AA599BC9B940FB180BA89C2D1A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/afXFMkQypJjaSaUzt3EQQoJNcVuzhhmdBNu1W4XEo3i/1/3137392e3130382e34342e302f32322d3234203d3e20323634383836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.108.44.0/22

    Signature Algorithm: sha256WithRSAEncryption
         84:e3:28:03:03:4e:9c:51:90:55:56:5d:c9:55:fc:9f:ed:9f:
         b8:58:de:a4:44:fe:6d:0e:6a:c6:5e:63:85:da:ca:cb:96:4d:
         b1:f8:7f:22:29:6b:16:a8:22:0a:58:6f:63:c2:e0:22:77:a2:
         51:db:9e:1a:41:50:f1:6f:0c:41:8d:94:47:5d:b5:7b:df:ae:
         7f:13:a6:96:c0:40:d2:33:e2:f0:c3:cf:2f:eb:d7:42:97:6e:
         90:0b:b2:d9:8e:1f:a9:8d:e8:c1:46:09:72:79:38:31:b1:6e:
         32:c8:c6:e9:97:b7:14:d7:5c:f7:fe:0f:8f:64:f6:69:ff:73:
         83:17:a3:02:0b:33:3c:13:5c:e5:52:19:a5:65:52:79:98:ab:
         11:98:f8:70:3e:e2:10:8e:e9:93:eb:6f:9d:f8:13:26:96:d0:
         19:11:99:37:8b:dc:be:ad:8d:d5:47:a3:2b:6d:ed:2d:53:7d:
         4c:d3:8b:7e:08:17:d2:58:99:4f:69:94:0c:55:da:77:d1:9f:
         4c:7e:59:1a:97:21:5f:35:e9:65:53:a8:24:aa:38:ee:90:09:
         1b:3f:a0:b3:ac:5e:b4:c8:e7:5a:6e:b1:f7:5c:76:25:ec:09:
         d4:93:46:4a:a0:ce:7e:2d:81:6b:76:96:1b:94:62:f1:99:ac:
         b6:0a:88:fa
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgIUO26kKNSn2e0TxIN4/cnwONoOVEgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkMxQ0M5NDM1MzdFNzJBQTU5OUJDOUI5NDBGQjE4MEJB
ODlDMkQxQTAeFw0yNDA0MDQwNDQ4MDVaFw0yNTA0MDMwNDUzMDVaMDMxMTAvBgNV
BAMTKDQzOTcxNjM1N0NEOTlENjA3MDFDQUUxQjE5M0NGQjVDMTM2REVBOTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfgl4KQmHaCtZwBRqGuw6UbXzx
7J8YwsylfYIj1KEGj905wrti+mYfwiVOoU2hU3apCE7G+Pd33NPFiMTP+avdwAWC
8C7UaFlBawUKc2SUk56PpNgaV4NN6EFkxx83530ywJ3OczXFZ+3MCVD9qPmXa5zC
Ppmgjy1dw26fJlpumKUkzXtJY1mpobkQKOhx3bGr/5n/JppwMH/KoGCYgbD9fH5V
SgBJUGZ8EPZfA79bJmb5MTWOKDDHWSFV3xtj9udWbSlBTnnjbQfZOH7aGLva4FeR
v2W6GQt73a/LDsAPHIuIq6o8+fWatFAUpZbjNtHfb3DiuVbmuDe30EmbBrg3AgMB
AAGjggJOMIICSjAdBgNVHQ4EFgQUQ5cWNXzZnWBwHK4bGTz7XBNt6pgwHwYDVR0j
BBgwFoAULBzJQ1N+cqpZm8m5QPsYC6icLRowDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9hZlhGTWtReXBKamFTYVV6dDNFUVFvSk5jVnV6aGhtZEJOdTFXNFhFbzNp
LzEvMkMxQ0M5NDM1MzdFNzJBQTU5OUJDOUI5NDBGQjE4MEJBODlDMkQxQS5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS8yQzFDQzk0MzUzN0U3MkFBNTk5
QkM5Qjk0MEZCMTgwQkE4OUMyRDFBLmNlcjCBrQYIKwYBBQUHAQsEgaAwgZ0wgZoG
CCsGAQUFBzALhoGNcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9h
ZlhGTWtReXBKamFTYVV6dDNFUVFvSk5jVnV6aGhtZEJOdTFXNFhFbzNpLzEvMzEz
NzM5MmUzMTMwMzgyZTM0MzQyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM2MzQz
ODM4MzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcB
Af8EEDAOMAwEAgABMAYDBAKzbCwwDQYJKoZIhvcNAQELBQADggEBAITjKAMDTpxR
kFVWXclV/J/tn7hY3qRE/m0OasZeY4XaysuWTbH4fyIpaxaoIgpYb2PC4CJ3olHb
nhpBUPFvDEGNlEddtXvfrn8TppbAQNIz4vDDzy/r10KXbpALstmOH6mN6MFGCXJ5
ODGxbjLIxumXtxTXXPf+D49k9mn/c4MXowILMzwTXOVSGaVlUnmYqxGY+HA+4hCO
6ZPrb534EyaW0BkRmTeL3L6tjdVHoytt7S1TfUzTi34IF9JYmU9plAxV2nfRn0x+
WRqXIV816WVTqCSqOO6QCRs/oLOsXrTI51pusfdcdiXsCdSTRkqgzn4tgWt2lhuU
YvGZrLYKiPo=
-----END CERTIFICATE-----
Generated at Fri Nov 22 19:44:32 2024 by rpki-client on console-ams.rpki-client.org