Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/gEWT8a4Gecs2fY56qQd9i1UrKTnedyqLZsReYjuXw4e/0/3137392e3130382e38302e302f32312d3234203d3e203533313538.roa
File:                     3137392e3130382e38302e302f32312d3234203d3e203533313538.roa (raw, json)
Hash identifier:          u7q8Jef4c6xst2tPFiq5MPeOL2OA8gAJNW6xz5M5Dsc=
Subject key identifier:   10:7A:04:C5:84:44:CE:B1:45:3D:39:2A:B1:85:17:68:F1:0D:11:98
Certificate issuer:       /CN=BC82BE57E4F783F1814FC9D4B6B03E6937617A47
Certificate serial:       02C36592A01A99C537CB988633FD8891846D2E1B
Authority key identifier: BC:82:BE:57:E4:F7:83:F1:81:4F:C9:D4:B6:B0:3E:69:37:61:7A:47
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BC82BE57E4F783F1814FC9D4B6B03E6937617A47.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/gEWT8a4Gecs2fY56qQd9i1UrKTnedyqLZsReYjuXw4e/0/3137392e3130382e38302e302f32312d3234203d3e203533313538.roa
Signing time:             Mon 27 May 2024 14:40:36 +0000
ROA not before:           Mon 27 May 2024 14:35:36 +0000
ROA not after:            Mon 26 May 2025 14:40:36 +0000
asID:                     53158
IP address blocks:        179.108.80.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/gEWT8a4Gecs2fY56qQd9i1UrKTnedyqLZsReYjuXw4e/0/BC82BE57E4F783F1814FC9D4B6B03E6937617A47.crl
                          rsync://rpki-repo.registro.br/repo/gEWT8a4Gecs2fY56qQd9i1UrKTnedyqLZsReYjuXw4e/0/BC82BE57E4F783F1814FC9D4B6B03E6937617A47.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BC82BE57E4F783F1814FC9D4B6B03E6937617A47.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 30 Nov 2024 14:32:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:c3:65:92:a0:1a:99:c5:37:cb:98:86:33:fd:88:91:84:6d:2e:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BC82BE57E4F783F1814FC9D4B6B03E6937617A47
        Validity
            Not Before: May 27 14:35:36 2024 GMT
            Not After : May 26 14:40:36 2025 GMT
        Subject: CN=107A04C58444CEB1453D392AB1851768F10D1198
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:05:34:c7:ed:6e:8c:4e:be:96:99:0c:c0:de:
                    8c:a7:fc:3f:58:c1:dd:8f:a4:7d:a8:a4:a2:04:2d:
                    00:02:26:fa:88:19:a3:e3:d6:d1:25:5d:b9:e9:49:
                    30:80:e5:12:12:f0:06:aa:9a:54:e0:3b:4b:33:5d:
                    07:5b:32:79:07:8d:32:9e:63:39:6d:5c:bf:89:53:
                    b3:95:f7:16:91:82:e4:e8:a0:f5:15:75:6c:25:ef:
                    fa:a6:fc:7c:5b:d5:06:1f:f6:08:d7:a9:e1:a0:f5:
                    7a:ca:e9:81:e2:28:21:30:3d:4c:67:48:ab:88:00:
                    69:fe:ab:ec:57:8f:78:79:e2:ca:3d:91:ef:c2:af:
                    de:eb:28:f8:9d:5a:19:35:87:72:88:24:12:ed:6c:
                    a5:07:29:74:57:e5:a6:dc:d8:b0:a7:06:a2:54:40:
                    db:a3:62:3d:8f:02:b8:e1:e3:be:62:81:3f:99:cb:
                    11:a3:10:bb:7f:8a:c6:c3:23:01:d8:89:1a:55:bc:
                    9b:50:21:df:36:ce:c5:16:56:29:48:c8:10:2b:e4:
                    b0:1f:5e:a7:3d:91:ce:8f:58:b4:64:75:7d:c8:0f:
                    7d:8d:a0:c7:49:b8:15:30:03:6a:d3:bd:7f:2c:3a:
                    d7:a1:ea:90:57:a8:7e:16:96:37:19:2c:82:24:9b:
                    89:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:7A:04:C5:84:44:CE:B1:45:3D:39:2A:B1:85:17:68:F1:0D:11:98
            X509v3 Authority Key Identifier:
                keyid:BC:82:BE:57:E4:F7:83:F1:81:4F:C9:D4:B6:B0:3E:69:37:61:7A:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/gEWT8a4Gecs2fY56qQd9i1UrKTnedyqLZsReYjuXw4e/0/BC82BE57E4F783F1814FC9D4B6B03E6937617A47.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BC82BE57E4F783F1814FC9D4B6B03E6937617A47.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/gEWT8a4Gecs2fY56qQd9i1UrKTnedyqLZsReYjuXw4e/0/3137392e3130382e38302e302f32312d3234203d3e203533313538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.108.80.0/21

    Signature Algorithm: sha256WithRSAEncryption
         45:a8:91:e7:fe:0e:73:af:50:f5:2a:15:1f:7d:1d:aa:81:db:
         77:11:06:c5:83:66:ab:8e:e1:86:5a:d9:2b:2c:5f:40:6e:43:
         ae:36:45:80:1e:70:d4:3a:51:5c:ad:09:fa:f2:86:e0:7a:24:
         99:05:6d:85:b8:0e:7c:7e:2d:cf:22:76:e8:b4:f6:70:2e:e3:
         85:3c:39:87:db:3f:a3:51:b2:04:7f:0b:18:35:aa:8c:77:7e:
         a1:f5:c3:dd:33:b7:0d:40:67:6f:5e:2e:07:1d:bb:45:4c:d8:
         c1:7d:e6:95:c3:90:eb:de:d9:0c:cc:67:27:b8:b2:ee:d0:67:
         f8:e5:83:66:51:00:8d:2e:8b:1e:ef:25:c1:b9:96:25:1e:2e:
         7c:c8:a8:13:e4:83:49:8c:2d:93:70:ec:f2:79:b2:ff:88:ba:
         82:da:80:a6:11:73:08:0b:75:19:81:a6:cc:c4:69:b6:bd:59:
         3f:7c:bb:28:fc:91:28:15:52:16:1c:b2:d9:07:c3:7e:88:3e:
         e9:2e:16:02:91:fe:3a:c5:35:7a:8b:f3:5e:90:ca:dd:a6:09:
         74:55:0f:a3:cb:3d:93:29:57:67:de:0b:2e:5c:a1:3b:33:46:
         f5:01:ef:d9:ae:11:83:70:13:c9:15:35:19:6e:4a:03:6c:2d:
         0d:f2:84:ff
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgIUAsNlkqAamcU3y5iGM/2IkYRtLhswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkM4MkJFNTdFNEY3ODNGMTgxNEZDOUQ0QjZCMDNFNjkz
NzYxN0E0NzAeFw0yNDA1MjcxNDM1MzZaFw0yNTA1MjYxNDQwMzZaMDMxMTAvBgNV
BAMTKDEwN0EwNEM1ODQ0NENFQjE0NTNEMzkyQUIxODUxNzY4RjEwRDExOTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjBTTH7W6MTr6WmQzA3oyn/D9Y
wd2PpH2opKIELQACJvqIGaPj1tElXbnpSTCA5RIS8AaqmlTgO0szXQdbMnkHjTKe
YzltXL+JU7OV9xaRguTooPUVdWwl7/qm/Hxb1QYf9gjXqeGg9XrK6YHiKCEwPUxn
SKuIAGn+q+xXj3h54so9ke/Cr97rKPidWhk1h3KIJBLtbKUHKXRX5abc2LCnBqJU
QNujYj2PArjh475igT+ZyxGjELt/isbDIwHYiRpVvJtQId82zsUWVilIyBAr5LAf
Xqc9kc6PWLRkdX3ID32NoMdJuBUwA2rTvX8sOteh6pBXqH4WljcZLIIkm4mRAgMB
AAGjggJMMIICSDAdBgNVHQ4EFgQUEHoExYREzrFFPTkqsYUXaPENEZgwHwYDVR0j
BBgwFoAUvIK+V+T3g/GBT8nUtrA+aTdhekcwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9nRVdUOGE0R2VjczJmWTU2cVFkOWkxVXJLVG5lZHlxTFpzUmVZanVYdzRl
LzAvQkM4MkJFNTdFNEY3ODNGMTgxNEZDOUQ0QjZCMDNFNjkzNzYxN0E0Ny5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS9CQzgyQkU1N0U0Rjc4M0YxODE0
RkM5RDRCNkIwM0U2OTM3NjE3QTQ3LmNlcjCBqwYIKwYBBQUHAQsEgZ4wgZswgZgG
CCsGAQUFBzALhoGLcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9n
RVdUOGE0R2VjczJmWTU2cVFkOWkxVXJLVG5lZHlxTFpzUmVZanVYdzRlLzAvMzEz
NzM5MmUzMTMwMzgyZTM4MzAyZTMwMmYzMjMxMmQzMjM0MjAzZDNlMjAzNTMzMzEz
NTM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/
BBAwDjAMBAIAATAGAwQDs2xQMA0GCSqGSIb3DQEBCwUAA4IBAQBFqJHn/g5zr1D1
KhUffR2qgdt3EQbFg2arjuGGWtkrLF9AbkOuNkWAHnDUOlFcrQn68obgeiSZBW2F
uA58fi3PInbotPZwLuOFPDmH2z+jUbIEfwsYNaqMd36h9cPdM7cNQGdvXi4HHbtF
TNjBfeaVw5Dr3tkMzGcnuLLu0Gf45YNmUQCNLose7yXBuZYlHi58yKgT5INJjC2T
cOzyebL/iLqC2oCmEXMIC3UZgabMxGm2vVk/fLso/JEoFVIWHLLZB8N+iD7pLhYC
kf46xTV6i/NekMrdpgl0VQ+jyz2TKVdn3gsuXKE7M0b1Ae/ZrhGDcBPJFTUZbkoD
bC0N8oT/
-----END CERTIFICATE-----
Generated at Fri Nov 29 14:49:09 2024 by rpki-client on console-fra.rpki-client.org