Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4vsZJk3w83JEjkXi9sDSiaf4RqosRAefiVGX4jUaokUE/0/3230312e3133392e3231362e302f32312d3332203d3e203631393431.roa
File:                     3230312e3133392e3231362e302f32312d3332203d3e203631393431.roa (raw, json)
Hash identifier:          HCi+ozGlqJMe2RL+xtVfmo+Hw9xdMOf7nagtA6lPQDY=
Subject key identifier:   17:E9:EE:71:25:85:08:4E:28:77:98:85:4B:1E:69:74:20:A0:25:5D
Certificate issuer:       /CN=0FA221552193846F5AD22D6A3DABDDD6D48FB676
Certificate serial:       48D5A3BF941F4A5215F1E2492B5A55CDCDBFBCB1
Authority key identifier: 0F:A2:21:55:21:93:84:6F:5A:D2:2D:6A:3D:AB:DD:D6:D4:8F:B6:76
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0FA221552193846F5AD22D6A3DABDDD6D48FB676.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4vsZJk3w83JEjkXi9sDSiaf4RqosRAefiVGX4jUaokUE/0/3230312e3133392e3231362e302f32312d3332203d3e203631393431.roa
Signing time:             Fri 12 Jul 2024 16:37:32 +0000
ROA not before:           Fri 12 Jul 2024 16:32:32 +0000
ROA not after:            Fri 11 Jul 2025 16:37:32 +0000
asID:                     61941
IP address blocks:        201.139.216.0/21 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4vsZJk3w83JEjkXi9sDSiaf4RqosRAefiVGX4jUaokUE/0/0FA221552193846F5AD22D6A3DABDDD6D48FB676.crl
                          rsync://rpki-repo.registro.br/repo/4vsZJk3w83JEjkXi9sDSiaf4RqosRAefiVGX4jUaokUE/0/0FA221552193846F5AD22D6A3DABDDD6D48FB676.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0FA221552193846F5AD22D6A3DABDDD6D48FB676.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 06:14:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:d5:a3:bf:94:1f:4a:52:15:f1:e2:49:2b:5a:55:cd:cd:bf:bc:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0FA221552193846F5AD22D6A3DABDDD6D48FB676
        Validity
            Not Before: Jul 12 16:32:32 2024 GMT
            Not After : Jul 11 16:37:32 2025 GMT
        Subject: CN=17E9EE712585084E287798854B1E697420A0255D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:2e:bb:c7:cb:cc:5f:1a:59:32:ef:eb:b3:22:
                    e8:88:7b:6f:1c:69:26:0e:a4:3f:c8:f8:86:a8:fc:
                    fa:9f:37:85:c1:72:4a:cf:4e:d8:2b:7c:ea:86:9d:
                    65:70:b2:6a:0d:5a:ec:23:e6:d3:35:6a:9d:31:65:
                    7c:23:c5:0b:2c:f5:66:9a:e1:2e:d9:db:10:b6:7b:
                    08:18:1c:0e:ab:a0:5a:f9:17:da:4f:9b:9b:3a:c3:
                    8d:ed:b5:cb:ef:96:44:7f:80:62:16:52:89:56:47:
                    39:aa:aa:85:6c:c6:74:36:76:ae:87:1e:fb:01:9d:
                    2a:62:61:45:76:fd:f1:75:28:a7:43:34:8b:72:15:
                    9c:dc:84:f7:a8:aa:96:c0:43:1e:67:f0:79:1b:9c:
                    e2:4b:53:42:c6:2a:c6:31:b2:d8:09:b2:7f:4b:1b:
                    3c:c9:7d:0e:ba:7c:0f:d6:e2:1f:f8:11:ac:33:9f:
                    c5:52:c1:78:3e:3a:97:f6:ab:a7:86:49:10:af:09:
                    bf:80:d4:ce:c6:e8:8d:54:91:10:a4:c4:47:cb:e6:
                    67:17:25:56:b0:dd:1d:09:ac:a1:0e:af:47:a4:5b:
                    ea:81:3b:ba:8b:fa:f3:dd:16:a3:04:1c:16:0b:75:
                    7d:5c:82:0b:ef:60:15:57:42:b2:f8:3e:c1:06:56:
                    cd:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:E9:EE:71:25:85:08:4E:28:77:98:85:4B:1E:69:74:20:A0:25:5D
            X509v3 Authority Key Identifier:
                keyid:0F:A2:21:55:21:93:84:6F:5A:D2:2D:6A:3D:AB:DD:D6:D4:8F:B6:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4vsZJk3w83JEjkXi9sDSiaf4RqosRAefiVGX4jUaokUE/0/0FA221552193846F5AD22D6A3DABDDD6D48FB676.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0FA221552193846F5AD22D6A3DABDDD6D48FB676.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4vsZJk3w83JEjkXi9sDSiaf4RqosRAefiVGX4jUaokUE/0/3230312e3133392e3231362e302f32312d3332203d3e203631393431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.139.216.0/21

    Signature Algorithm: sha256WithRSAEncryption
         27:4a:68:38:21:91:7f:c2:8e:c6:a0:cc:af:9d:41:e4:19:f3:
         4c:f3:45:bf:f1:7f:07:c1:24:92:d5:a6:7e:a3:ea:21:a3:2f:
         86:f4:de:ea:27:4c:be:26:5b:28:bd:c7:57:d0:80:63:b9:c1:
         1b:4d:e0:86:7c:27:3d:17:35:f8:a4:5d:84:0a:15:d3:d7:4f:
         7b:35:c0:80:c7:cd:80:e1:d8:2b:eb:1b:77:d1:ca:8e:b7:d7:
         cc:47:63:65:8c:c9:01:e3:b3:0a:9b:2d:43:e0:62:33:9d:15:
         9b:ba:55:d6:b9:51:4c:b0:c8:d4:7a:4b:da:17:92:e0:2b:e4:
         59:47:99:a9:40:b0:e6:6d:6e:41:2e:cc:4c:93:83:10:a2:08:
         ad:53:96:99:ae:21:c1:de:c5:6e:d4:a3:c8:a2:a7:a7:58:d2:
         1b:b4:41:c8:2d:5b:72:a9:70:5c:51:6c:45:bd:dc:36:27:64:
         a2:5d:25:9b:19:04:3c:d1:d5:98:b3:b3:11:44:2d:10:b4:9a:
         a5:7e:55:bb:56:a1:46:ce:d8:7c:90:3c:ca:06:4d:c1:a2:8b:
         25:d5:2b:d3:a7:ce:cb:0e:cb:d8:81:30:89:1f:e6:35:32:79:
         c5:f8:46:42:aa:e7:56:a5:72:80:96:b1:d1:f8:ec:2a:45:09:
         4e:65:12:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 07:01:32 2024 by rpki-client on console-ams.rpki-client.org