Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BvGzH6Pqd79p339G3eD22s9RTKUygLoNXNEhvNZqzv93/0/3138372e31372e33322e302f32302d3230203d3e20323639303733.roa
File:                     3138372e31372e33322e302f32302d3230203d3e20323639303733.roa (raw, json)
Hash identifier:          X9JEX+7PIrEFO8G/psHQJO1sJQssKmyBFHfnKRGV088=
Subject key identifier:   08:78:0A:6D:B1:5C:96:47:CD:6C:99:58:3D:7F:5A:D7:01:23:65:5E
Certificate issuer:       /CN=3FF96820195E6A66E38F9102B4B56F0E4EB31831
Certificate serial:       5A034E9E5D2D4D4415EE1AEF19819426D0D01326
Authority key identifier: 3F:F9:68:20:19:5E:6A:66:E3:8F:91:02:B4:B5:6F:0E:4E:B3:18:31
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3FF96820195E6A66E38F9102B4B56F0E4EB31831.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BvGzH6Pqd79p339G3eD22s9RTKUygLoNXNEhvNZqzv93/0/3138372e31372e33322e302f32302d3230203d3e20323639303733.roa
Signing time:             Tue 22 Oct 2024 14:21:51 +0000
ROA not before:           Tue 22 Oct 2024 14:16:51 +0000
ROA not after:            Tue 21 Oct 2025 14:21:51 +0000
asID:                     269073
IP address blocks:        187.17.32.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BvGzH6Pqd79p339G3eD22s9RTKUygLoNXNEhvNZqzv93/0/3FF96820195E6A66E38F9102B4B56F0E4EB31831.crl
                          rsync://rpki-repo.registro.br/repo/BvGzH6Pqd79p339G3eD22s9RTKUygLoNXNEhvNZqzv93/0/3FF96820195E6A66E38F9102B4B56F0E4EB31831.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3FF96820195E6A66E38F9102B4B56F0E4EB31831.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Apr 2025 09:15:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:03:4e:9e:5d:2d:4d:44:15:ee:1a:ef:19:81:94:26:d0:d0:13:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3FF96820195E6A66E38F9102B4B56F0E4EB31831
        Validity
            Not Before: Oct 22 14:16:51 2024 GMT
            Not After : Oct 21 14:21:51 2025 GMT
        Subject: CN=08780A6DB15C9647CD6C99583D7F5AD70123655E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:dc:8d:2a:39:82:9f:9e:1d:e6:eb:9e:34:28:
                    14:7b:75:6f:e2:76:0d:d2:69:04:65:63:a0:92:38:
                    6d:60:11:cc:5f:7d:2f:eb:56:fd:71:f6:6d:9e:6b:
                    f3:e9:76:06:e0:b5:fa:72:d3:14:13:f2:94:be:f8:
                    a9:93:56:46:56:f5:ec:33:66:d4:d5:29:5b:34:0e:
                    c2:7f:16:df:6b:60:13:ac:08:86:b3:c0:f7:8f:40:
                    6e:d3:d9:e0:91:f9:c8:a1:da:98:b3:08:1e:fd:69:
                    4a:ff:ba:1d:50:a1:d2:c0:d8:93:f2:d1:2d:5f:18:
                    57:82:20:45:3a:0b:bd:65:20:86:18:9b:0e:f8:10:
                    b0:ab:70:1f:01:50:dd:41:f6:4e:07:fd:d6:44:d0:
                    fa:01:8b:1d:b1:38:a3:d1:0a:c6:e2:7e:45:6c:b7:
                    6b:b1:77:f2:2b:1a:1e:c4:89:48:7e:24:16:57:cb:
                    45:b3:93:04:4a:36:3a:35:2e:71:67:02:fb:7a:4c:
                    0d:8f:1d:f9:21:e8:66:7c:d9:97:0f:f4:bd:1a:09:
                    3b:61:c8:28:96:6f:3b:93:3e:70:c5:2e:c2:52:86:
                    05:1f:e4:2d:c4:6f:3b:ad:a5:05:fd:b8:f8:eb:70:
                    91:da:ad:ca:92:e6:83:4b:9a:5f:48:35:96:f6:c1:
                    3a:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:78:0A:6D:B1:5C:96:47:CD:6C:99:58:3D:7F:5A:D7:01:23:65:5E
            X509v3 Authority Key Identifier:
                keyid:3F:F9:68:20:19:5E:6A:66:E3:8F:91:02:B4:B5:6F:0E:4E:B3:18:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BvGzH6Pqd79p339G3eD22s9RTKUygLoNXNEhvNZqzv93/0/3FF96820195E6A66E38F9102B4B56F0E4EB31831.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3FF96820195E6A66E38F9102B4B56F0E4EB31831.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BvGzH6Pqd79p339G3eD22s9RTKUygLoNXNEhvNZqzv93/0/3138372e31372e33322e302f32302d3230203d3e20323639303733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.17.32.0/20

    Signature Algorithm: sha256WithRSAEncryption
         8e:31:95:73:5a:b0:d6:d0:6f:e4:96:39:c3:60:a6:fa:cf:e8:
         3c:ce:11:a8:a1:77:09:c6:6f:03:2a:2f:f6:d8:7d:0e:5e:9a:
         b7:2a:30:b1:8c:49:90:03:47:87:ef:44:2e:77:64:96:cb:14:
         43:6a:31:f1:6f:8a:bb:f5:16:2c:d2:71:5a:65:c1:1b:54:20:
         5f:ec:41:22:e3:94:ab:e3:3e:3a:d0:90:02:44:9c:53:cd:02:
         09:0d:cb:7c:e8:37:69:52:16:1f:0f:7c:1e:5d:d2:fd:fe:d3:
         46:30:62:28:3a:e7:16:ca:88:89:58:84:3f:b3:ae:aa:f6:23:
         c7:b5:32:b2:85:5f:79:fb:a9:cd:70:c9:23:a2:47:d9:87:91:
         f4:46:09:f3:07:a3:bc:74:92:a5:96:05:7c:ed:f6:4e:3e:1b:
         2b:3c:80:d6:fd:7c:c1:d2:e7:05:57:34:c1:a5:f0:75:60:6f:
         d9:43:97:1d:a3:19:74:02:d8:7a:28:a4:ca:86:dc:93:e1:2e:
         5a:63:b9:7f:69:61:d8:c3:8b:ff:77:96:d9:16:27:48:0e:37:
         42:3a:12:51:c9:13:85:11:87:fd:5d:39:1d:28:02:5c:f9:70:
         f5:07:cb:45:8b:c6:18:9a:e4:7f:ce:c3:d3:85:eb:5d:af:bf:
         6a:65:86:af
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUWgNOnl0tTUQV7hrvGYGUJtDQEyYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0ZGOTY4MjAxOTVFNkE2NkUzOEY5MTAyQjRCNTZGMEU0
RUIzMTgzMTAeFw0yNDEwMjIxNDE2NTFaFw0yNTEwMjExNDIxNTFaMDMxMTAvBgNV
BAMTKDA4NzgwQTZEQjE1Qzk2NDdDRDZDOTk1ODNEN0Y1QUQ3MDEyMzY1NUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDg3I0qOYKfnh3m6540KBR7dW/i
dg3SaQRlY6CSOG1gEcxffS/rVv1x9m2ea/Ppdgbgtfpy0xQT8pS++KmTVkZW9ewz
ZtTVKVs0DsJ/Ft9rYBOsCIazwPePQG7T2eCR+cih2pizCB79aUr/uh1QodLA2JPy
0S1fGFeCIEU6C71lIIYYmw74ELCrcB8BUN1B9k4H/dZE0PoBix2xOKPRCsbifkVs
t2uxd/IrGh7EiUh+JBZXy0WzkwRKNjo1LnFnAvt6TA2PHfkh6GZ82ZcP9L0aCTth
yCiWbzuTPnDFLsJShgUf5C3EbzutpQX9uPjrcJHarcqS5oNLml9INZb2wTqtAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUCHgKbbFclkfNbJlYPX9a1wEjZV4wHwYDVR0j
BBgwFoAUP/loIBleambjj5ECtLVvDk6zGDEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQnZHekg2UHFkNzlwMzM5RzNlRDIyczlSVEtVeWdMb05YTkVodk5acXp2
OTMvMC8zRkY5NjgyMDE5NUU2QTY2RTM4RjkxMDJCNEI1NkYwRTRFQjMxODMxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzNGRjk2ODIwMTk1RTZBNjZF
MzhGOTEwMkI0QjU2RjBFNEVCMzE4MzEuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0J2R3pINlBxZDc5cDMzOUczZUQyMnM5UlRLVXlnTG9OWE5FaHZOWnF6djkzLzAv
MzEzODM3MmUzMTM3MmUzMzMyMmUzMDJmMzIzMDJkMzIzMDIwM2QzZTIwMzIzNjM5
MzAzNzMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQEuxEgMA0GCSqGSIb3DQEBCwUAA4IBAQCOMZVzWrDW
0G/kljnDYKb6z+g8zhGooXcJxm8DKi/22H0OXpq3KjCxjEmQA0eH70Qud2SWyxRD
ajHxb4q79RYs0nFaZcEbVCBf7EEi45Sr4z460JACRJxTzQIJDct86DdpUhYfD3we
XdL9/tNGMGIoOucWyoiJWIQ/s66q9iPHtTKyhV95+6nNcMkjokfZh5H0RgnzB6O8
dJKllgV87fZOPhsrPIDW/XzB0ucFVzTBpfB1YG/ZQ5cdoxl0Ath6KKTKhtyT4S5a
Y7l/aWHYw4v/d5bZFidIDjdCOhJRyROFEYf9XTkdKAJc+XD1B8tFi8YYmuR/zsPT
hetdr79qZYav
-----END CERTIFICATE-----
Generated at Fri Apr 25 08:22:03 2025 by rpki-client on console.sobornost.net