Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/34LKUVp6i31q4FRGhAxf7jac9c1dr8HmdGWNewJYUn8n/1/3139322e3134312e37322e302f32322d3234203d3e20323637343730.roa
File:                     3139322e3134312e37322e302f32322d3234203d3e20323637343730.roa (raw, json)
Hash identifier:          OMcbuwv/e+BNPe7AZKiZCuB14pGyFGVfr3XCI6Ti5h8=
Subject key identifier:   2E:81:03:97:51:16:5A:E4:FA:94:8D:16:74:63:0B:5B:24:94:29:F8
Certificate issuer:       /CN=BFD56512C8580D0E6D2FD05F5D13C3714B45AAEA
Certificate serial:       3DA9011900C5C6A5B07C8BCD14146BC1B6D65263
Authority key identifier: BF:D5:65:12:C8:58:0D:0E:6D:2F:D0:5F:5D:13:C3:71:4B:45:AA:EA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BFD56512C8580D0E6D2FD05F5D13C3714B45AAEA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/34LKUVp6i31q4FRGhAxf7jac9c1dr8HmdGWNewJYUn8n/1/3139322e3134312e37322e302f32322d3234203d3e20323637343730.roa
Signing time:             Wed 03 Apr 2024 18:38:35 +0000
ROA not before:           Wed 03 Apr 2024 18:33:35 +0000
ROA not after:            Wed 02 Apr 2025 18:38:35 +0000
asID:                     267470
IP address blocks:        192.141.72.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/34LKUVp6i31q4FRGhAxf7jac9c1dr8HmdGWNewJYUn8n/1/BFD56512C8580D0E6D2FD05F5D13C3714B45AAEA.crl
                          rsync://rpki-repo.registro.br/repo/34LKUVp6i31q4FRGhAxf7jac9c1dr8HmdGWNewJYUn8n/1/BFD56512C8580D0E6D2FD05F5D13C3714B45AAEA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BFD56512C8580D0E6D2FD05F5D13C3714B45AAEA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 21:20:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:a9:01:19:00:c5:c6:a5:b0:7c:8b:cd:14:14:6b:c1:b6:d6:52:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BFD56512C8580D0E6D2FD05F5D13C3714B45AAEA
        Validity
            Not Before: Apr  3 18:33:35 2024 GMT
            Not After : Apr  2 18:38:35 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:56:b0:8b:6c:3f:9f:6c:d2:8d:f2:5e:b9:43:
                    a6:e3:c9:c1:97:26:b5:46:91:0e:d8:a8:d1:4d:db:
                    c7:31:27:33:31:16:4b:a9:bd:e5:72:22:b9:1e:f9:
                    96:b2:ca:af:eb:01:3b:4c:18:95:df:6f:52:c5:b1:
                    96:3d:23:ba:39:cb:3e:df:68:7c:87:be:79:1d:57:
                    02:99:d5:87:56:65:d3:13:4e:6d:f2:a7:63:e0:a5:
                    0c:1f:43:d3:c9:0d:45:fc:01:f2:b7:cd:e6:18:44:
                    77:d0:f7:8d:b3:cc:ff:2f:e6:06:d4:ff:75:e8:32:
                    65:eb:fa:6a:c1:d6:49:47:c7:64:a9:19:a5:9f:0a:
                    39:24:88:9c:df:eb:00:b6:6b:b1:87:2a:66:cb:8d:
                    4b:cb:c2:50:66:9c:b2:63:b3:13:42:dd:bd:6b:43:
                    af:0c:42:26:2a:f6:66:4c:c4:67:75:d6:ed:2c:ce:
                    6b:de:6a:ce:e5:ac:63:03:93:51:db:8a:9e:dc:f9:
                    62:78:97:10:8b:9e:e7:4f:b9:39:d4:72:57:91:20:
                    6b:94:7a:53:6d:64:dc:3e:8f:03:0a:42:d3:d0:3b:
                    8a:8f:cf:85:fb:ac:cf:03:e0:09:d5:06:de:44:b1:
                    fd:71:41:9c:96:58:dd:ed:be:2a:d1:a7:ad:c5:2c:
                    45:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:81:03:97:51:16:5A:E4:FA:94:8D:16:74:63:0B:5B:24:94:29:F8
            X509v3 Authority Key Identifier:
                keyid:BF:D5:65:12:C8:58:0D:0E:6D:2F:D0:5F:5D:13:C3:71:4B:45:AA:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/34LKUVp6i31q4FRGhAxf7jac9c1dr8HmdGWNewJYUn8n/1/BFD56512C8580D0E6D2FD05F5D13C3714B45AAEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BFD56512C8580D0E6D2FD05F5D13C3714B45AAEA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/34LKUVp6i31q4FRGhAxf7jac9c1dr8HmdGWNewJYUn8n/1/3139322e3134312e37322e302f32322d3234203d3e20323637343730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.141.72.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8c:f4:35:0a:f1:d4:31:87:72:91:a1:39:7b:55:45:3e:c8:7c:
         93:26:ee:68:1f:3e:d3:73:bc:18:dd:e1:71:17:1a:3a:e3:df:
         14:8c:0f:7f:aa:84:e9:f8:93:5f:86:dc:30:27:9f:5b:37:e3:
         22:28:a1:d6:8f:99:ed:66:b9:b9:9f:b5:28:77:42:bb:08:17:
         7b:8a:87:98:6e:3c:7c:47:e9:c4:64:81:58:ec:47:4d:16:4f:
         61:cb:95:17:02:8a:5d:7a:12:c9:fb:70:e2:b7:5e:5b:5c:88:
         64:b3:54:ba:d3:57:a6:e8:be:87:f0:3c:07:bb:7d:a5:67:4e:
         10:a1:65:f4:89:ca:50:60:95:74:ff:5a:e6:63:59:61:a4:63:
         43:cb:96:26:1a:94:fa:16:44:7e:0e:79:01:93:46:49:2d:47:
         d5:45:4e:16:4e:c0:80:a0:61:6a:c4:e5:28:fa:78:ce:53:e4:
         a3:8a:a2:f1:de:de:29:10:cf:ec:82:ae:49:4b:d3:f4:76:00:
         7f:fa:40:ae:a0:d6:3a:33:3d:b7:e2:c3:d6:5b:19:15:1e:a3:
         de:ad:4e:b2:45:77:27:49:4e:e0:25:0e:31:28:93:ec:28:c4:
         ef:c7:46:27:86:56:8e:fa:30:da:2e:8c:8c:ca:a8:fa:f9:99:
         b4:c3:25:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:21:05 2024 by rpki-client on console-fra.rpki-client.org