Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5fcVfwabTkgyohSNK6r5N9VXxvwMAKG6VXrCVRxkXPad/1/3137372e32332e36342e302f32312d3231203d3e20323632383931.roa
File:                     3137372e32332e36342e302f32312d3231203d3e20323632383931.roa (raw, json)
Hash identifier:          rsJSTTFSKY9lIwGmazOb09kqK8z0fE7wxaVM8jnVlWI=
Subject key identifier:   A1:85:4C:08:AF:71:B4:9C:5D:AA:8B:37:58:32:C5:2E:CE:64:C5:27
Certificate issuer:       /CN=FA1585E42E738EE596DB2F2B970CC3CB743BD8FC
Certificate serial:       3312CD6DCBDB00293FE635D96C39B59185051435
Authority key identifier: FA:15:85:E4:2E:73:8E:E5:96:DB:2F:2B:97:0C:C3:CB:74:3B:D8:FC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FA1585E42E738EE596DB2F2B970CC3CB743BD8FC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5fcVfwabTkgyohSNK6r5N9VXxvwMAKG6VXrCVRxkXPad/1/3137372e32332e36342e302f32312d3231203d3e20323632383931.roa
Signing time:             Wed 03 Apr 2024 18:33:08 +0000
ROA not before:           Wed 03 Apr 2024 18:28:08 +0000
ROA not after:            Wed 02 Apr 2025 18:33:08 +0000
asID:                     262891
IP address blocks:        177.23.64.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5fcVfwabTkgyohSNK6r5N9VXxvwMAKG6VXrCVRxkXPad/1/FA1585E42E738EE596DB2F2B970CC3CB743BD8FC.crl
                          rsync://rpki-repo.registro.br/repo/5fcVfwabTkgyohSNK6r5N9VXxvwMAKG6VXrCVRxkXPad/1/FA1585E42E738EE596DB2F2B970CC3CB743BD8FC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FA1585E42E738EE596DB2F2B970CC3CB743BD8FC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 04:24:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:12:cd:6d:cb:db:00:29:3f:e6:35:d9:6c:39:b5:91:85:05:14:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FA1585E42E738EE596DB2F2B970CC3CB743BD8FC
        Validity
            Not Before: Apr  3 18:28:08 2024 GMT
            Not After : Apr  2 18:33:08 2025 GMT
        Subject: CN=A1854C08AF71B49C5DAA8B375832C52ECE64C527
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:94:7a:e6:84:f5:90:7f:d5:ab:3d:23:c4:4b:
                    d7:7f:a4:b8:56:44:66:6a:c1:d9:60:1f:67:cf:2d:
                    24:ac:e6:9d:59:cc:a7:cd:6a:1d:89:72:66:72:a5:
                    9f:74:b7:ca:5e:5a:0d:e7:bb:8f:85:2c:4c:7d:01:
                    1c:b1:7c:f8:9d:ec:2a:85:8f:be:3e:3a:2e:b0:1e:
                    05:00:53:bb:0f:13:2c:01:19:65:00:90:88:88:6e:
                    a6:80:d3:2b:ba:1f:50:67:26:93:e0:ff:45:24:d4:
                    ab:e4:3b:7e:e5:a4:26:c6:90:f9:9e:df:7c:68:25:
                    6c:79:18:a3:d4:6f:67:e2:af:0c:02:8e:bf:47:a9:
                    fe:95:ea:18:d2:ce:02:b0:79:c3:58:8b:5d:f5:37:
                    c0:f4:d3:d4:68:6e:7b:7a:e4:41:1e:2e:2f:1e:28:
                    a4:11:11:8d:b4:3d:f1:7c:1a:11:9d:8a:7e:89:8f:
                    bd:12:80:ee:db:5e:9a:db:2f:10:27:d5:f7:8d:54:
                    b8:94:bb:d4:ef:03:49:d5:50:4b:21:b9:21:db:24:
                    76:7b:8f:5e:3e:61:d3:43:7c:f6:e2:d4:80:bc:90:
                    d6:fb:de:1c:d2:d6:ab:3c:8b:e4:24:f9:98:73:de:
                    2d:59:70:08:1a:5a:14:82:9d:59:a2:96:e9:71:d0:
                    c2:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:85:4C:08:AF:71:B4:9C:5D:AA:8B:37:58:32:C5:2E:CE:64:C5:27
            X509v3 Authority Key Identifier:
                keyid:FA:15:85:E4:2E:73:8E:E5:96:DB:2F:2B:97:0C:C3:CB:74:3B:D8:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5fcVfwabTkgyohSNK6r5N9VXxvwMAKG6VXrCVRxkXPad/1/FA1585E42E738EE596DB2F2B970CC3CB743BD8FC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FA1585E42E738EE596DB2F2B970CC3CB743BD8FC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5fcVfwabTkgyohSNK6r5N9VXxvwMAKG6VXrCVRxkXPad/1/3137372e32332e36342e302f32312d3231203d3e20323632383931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.23.64.0/21

    Signature Algorithm: sha256WithRSAEncryption
         02:cd:59:5c:d1:5c:0c:ac:b7:09:c5:da:69:e8:dc:c1:98:9d:
         7f:93:e4:4a:f4:f5:02:31:2f:89:10:e4:25:31:e2:ff:e1:b8:
         39:34:45:4b:91:59:fb:cf:78:4d:3c:a0:00:38:02:d8:f0:0c:
         4c:94:fe:da:e2:80:fb:ed:a5:7f:bb:ff:7c:d7:d2:a2:8a:1e:
         85:85:61:43:76:97:60:80:82:13:66:dc:c4:df:4a:d4:1f:b8:
         8d:eb:e4:c3:60:90:8b:5a:6a:8a:a2:4a:22:93:b6:b5:d7:7f:
         18:93:76:29:29:7d:db:be:e2:1e:9a:77:c9:ab:3d:c6:9d:c0:
         db:c6:c2:2a:93:eb:49:11:1e:02:d2:d2:a2:3c:ed:d1:51:95:
         41:56:81:be:37:20:ef:56:e6:09:85:be:17:e9:a9:2a:5b:4e:
         33:d6:eb:87:45:e3:e4:8e:0f:8f:cf:ab:f2:cc:39:80:72:7a:
         7f:52:06:27:6c:89:2a:e1:a2:9a:30:ff:9a:7d:4c:96:50:4c:
         eb:ec:91:3e:3a:81:ce:d4:e3:09:7f:e0:e3:17:1d:12:98:1f:
         4b:94:60:f2:78:6e:12:5c:ad:6b:45:df:8a:6d:c7:b5:29:8f:
         bc:f2:0b:1d:71:e2:a6:65:7d:91:92:b1:b5:75:02:a9:60:a5:
         6d:dd:25:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 04:03:55 2024 by rpki-client on console-fra.rpki-client.org