Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5fcVfwabTkgyohSNK6r5N9VXxvwMAKG6VXrCVRxkXPad/1/3137372e32302e3138342e302f32312d3231203d3e20323632383931.roa
File:                     3137372e32302e3138342e302f32312d3231203d3e20323632383931.roa (raw, json)
Hash identifier:          7H0UmvVG8D7lIx/gV1zuJK2BXTtz/Ybqa7V8IYpMLhk=
Subject key identifier:   99:A8:9B:7B:5A:0D:EC:E6:58:2D:8D:5C:82:36:CB:E8:B8:07:13:BB
Certificate issuer:       /CN=FA1585E42E738EE596DB2F2B970CC3CB743BD8FC
Certificate serial:       6FFD0C73517EEEF3B01A17E56B00899353DA81F7
Authority key identifier: FA:15:85:E4:2E:73:8E:E5:96:DB:2F:2B:97:0C:C3:CB:74:3B:D8:FC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FA1585E42E738EE596DB2F2B970CC3CB743BD8FC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5fcVfwabTkgyohSNK6r5N9VXxvwMAKG6VXrCVRxkXPad/1/3137372e32302e3138342e302f32312d3231203d3e20323632383931.roa
Signing time:             Wed 03 Apr 2024 18:33:08 +0000
ROA not before:           Wed 03 Apr 2024 18:28:08 +0000
ROA not after:            Wed 02 Apr 2025 18:33:08 +0000
asID:                     262891
IP address blocks:        177.20.184.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5fcVfwabTkgyohSNK6r5N9VXxvwMAKG6VXrCVRxkXPad/1/FA1585E42E738EE596DB2F2B970CC3CB743BD8FC.crl
                          rsync://rpki-repo.registro.br/repo/5fcVfwabTkgyohSNK6r5N9VXxvwMAKG6VXrCVRxkXPad/1/FA1585E42E738EE596DB2F2B970CC3CB743BD8FC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FA1585E42E738EE596DB2F2B970CC3CB743BD8FC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:fd:0c:73:51:7e:ee:f3:b0:1a:17:e5:6b:00:89:93:53:da:81:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FA1585E42E738EE596DB2F2B970CC3CB743BD8FC
        Validity
            Not Before: Apr  3 18:28:08 2024 GMT
            Not After : Apr  2 18:33:08 2025 GMT
        Subject: CN=99A89B7B5A0DECE6582D8D5C8236CBE8B80713BB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:17:82:3b:7a:68:b9:68:7a:b3:2c:63:bf:b4:
                    28:02:ef:22:8e:25:8c:d4:12:0f:23:f7:00:ca:99:
                    65:39:d1:7d:65:80:2c:85:0c:c3:be:aa:a7:b2:e3:
                    18:fb:89:07:03:2f:01:27:c6:13:13:65:c4:af:5d:
                    5b:c5:57:a1:0a:c7:73:3f:09:4b:4b:aa:81:4a:42:
                    60:5f:56:81:59:94:4f:51:ba:0b:2f:92:91:bc:40:
                    a9:b3:03:b7:fb:b3:fc:78:75:28:0e:7f:ec:23:cf:
                    cd:d2:07:9a:53:5b:e6:8a:7e:b8:6a:44:aa:ac:e9:
                    4e:aa:2a:31:20:4d:d1:8b:83:b8:f3:45:72:ff:af:
                    d5:89:4a:8a:28:77:76:f9:50:fd:e2:a8:0c:d6:1d:
                    87:fa:a7:e9:da:47:0b:83:5a:28:06:5e:94:c7:66:
                    13:dd:4b:df:30:50:2f:72:19:47:d3:a7:ba:50:74:
                    aa:4a:07:ca:73:4c:24:8e:a6:fc:af:06:e4:5f:5c:
                    d6:67:06:cf:9d:be:f1:74:5f:06:82:4c:89:f1:4f:
                    7a:25:57:ce:e6:2b:8d:f5:9a:d2:1a:db:c2:90:1a:
                    77:b6:49:26:f9:35:ed:74:c7:65:56:08:c2:de:de:
                    eb:cc:3e:dd:88:0a:d0:88:93:98:05:71:66:91:38:
                    bc:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:A8:9B:7B:5A:0D:EC:E6:58:2D:8D:5C:82:36:CB:E8:B8:07:13:BB
            X509v3 Authority Key Identifier:
                keyid:FA:15:85:E4:2E:73:8E:E5:96:DB:2F:2B:97:0C:C3:CB:74:3B:D8:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5fcVfwabTkgyohSNK6r5N9VXxvwMAKG6VXrCVRxkXPad/1/FA1585E42E738EE596DB2F2B970CC3CB743BD8FC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FA1585E42E738EE596DB2F2B970CC3CB743BD8FC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5fcVfwabTkgyohSNK6r5N9VXxvwMAKG6VXrCVRxkXPad/1/3137372e32302e3138342e302f32312d3231203d3e20323632383931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.20.184.0/21

    Signature Algorithm: sha256WithRSAEncryption
         59:a7:3c:e6:6c:ca:ed:0e:75:48:14:03:e7:3a:64:c9:d8:7c:
         58:4b:f6:ae:ac:63:b8:fd:c7:71:f9:08:3e:0c:7a:b3:b5:13:
         10:55:cc:49:a8:d8:1f:78:d1:9b:93:87:be:fd:a6:db:b3:78:
         b2:64:79:73:27:d8:e6:cb:da:3d:9c:31:ee:84:66:9b:de:9b:
         f4:92:61:94:06:7e:b5:7b:94:21:4d:89:79:e0:de:67:ff:46:
         2c:10:32:37:b2:b9:5a:fa:46:13:0a:f2:1f:09:54:62:78:6a:
         de:d1:70:b0:16:c2:4a:a6:42:ad:e5:88:10:6e:03:86:23:1a:
         83:43:85:fe:8d:cb:3d:20:92:fe:8b:59:48:78:3a:a3:f1:54:
         ea:76:b8:e1:1b:04:8e:ac:81:88:4b:33:15:b3:d5:4a:3a:e6:
         4c:32:f4:06:4b:47:8b:45:20:e3:0f:c2:89:af:6b:e2:ee:28:
         8d:6c:c8:6b:be:2a:dd:04:be:55:cd:66:8c:18:d6:d0:46:8e:
         91:4e:54:ae:cd:91:66:f2:6e:23:c2:4e:8d:36:f8:17:52:75:
         83:ea:c6:14:da:06:c3:7a:7f:06:7e:6e:dd:fd:6c:be:e3:be:
         5d:f0:0e:da:67:b6:30:77:0d:69:fe:6a:14:0b:8d:27:ec:68:
         64:0d:18:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 14:19:35 2024 by rpki-client on console-ams.rpki-client.org