Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5fcVfwabTkgyohSNK6r5N9VXxvwMAKG6VXrCVRxkXPad/1/3139312e3235332e37322e302f32312d3231203d3e20323632383931.roa
File:                     3139312e3235332e37322e302f32312d3231203d3e20323632383931.roa (raw, json)
Hash identifier:          rSeiprVXWCtJIyGID/Vg6RDgUiJIUQKXPHA8kCP0sjc=
Subject key identifier:   9F:7A:02:05:8E:5C:0B:7E:1E:C9:CC:DF:64:81:CC:13:49:C0:3C:90
Certificate issuer:       /CN=FA1585E42E738EE596DB2F2B970CC3CB743BD8FC
Certificate serial:       0FBFE3542B357BC06AE32A566D0C16406A6D6281
Authority key identifier: FA:15:85:E4:2E:73:8E:E5:96:DB:2F:2B:97:0C:C3:CB:74:3B:D8:FC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FA1585E42E738EE596DB2F2B970CC3CB743BD8FC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5fcVfwabTkgyohSNK6r5N9VXxvwMAKG6VXrCVRxkXPad/1/3139312e3235332e37322e302f32312d3231203d3e20323632383931.roa
Signing time:             Wed 03 Apr 2024 18:33:08 +0000
ROA not before:           Wed 03 Apr 2024 18:28:08 +0000
ROA not after:            Wed 02 Apr 2025 18:33:08 +0000
asID:                     262891
IP address blocks:        191.253.72.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5fcVfwabTkgyohSNK6r5N9VXxvwMAKG6VXrCVRxkXPad/1/FA1585E42E738EE596DB2F2B970CC3CB743BD8FC.crl
                          rsync://rpki-repo.registro.br/repo/5fcVfwabTkgyohSNK6r5N9VXxvwMAKG6VXrCVRxkXPad/1/FA1585E42E738EE596DB2F2B970CC3CB743BD8FC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FA1585E42E738EE596DB2F2B970CC3CB743BD8FC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:bf:e3:54:2b:35:7b:c0:6a:e3:2a:56:6d:0c:16:40:6a:6d:62:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FA1585E42E738EE596DB2F2B970CC3CB743BD8FC
        Validity
            Not Before: Apr  3 18:28:08 2024 GMT
            Not After : Apr  2 18:33:08 2025 GMT
        Subject: CN=9F7A02058E5C0B7E1EC9CCDF6481CC1349C03C90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:6b:18:cb:6e:36:7a:8a:65:38:f0:c1:cf:1f:
                    e3:49:a5:ce:60:d1:be:21:c0:b2:3e:cc:b2:a7:c4:
                    f5:7c:5a:c8:a4:d1:d9:d0:3e:b9:bc:a3:df:c8:fb:
                    f0:19:1c:5f:d7:72:2f:4d:cd:a5:e1:95:7e:9c:c5:
                    22:41:dc:0a:6c:7f:8a:eb:0d:79:30:4a:36:86:17:
                    a5:76:2c:84:fc:26:c8:5f:bf:ee:04:3d:78:be:a7:
                    4c:ba:5c:45:b6:d3:38:a3:3d:a0:64:43:a2:c1:c2:
                    23:1a:5c:c1:66:ae:ae:37:d8:8c:d2:25:88:21:71:
                    c3:73:45:f2:a0:c0:68:4f:8d:da:0b:90:a9:6d:77:
                    ba:0b:da:15:93:06:3b:5b:d5:b9:e2:ac:0c:be:c8:
                    42:eb:a9:a0:13:3d:0e:21:33:d6:38:f2:fe:de:06:
                    d2:bf:4d:97:98:06:a9:6e:ca:58:92:29:36:8e:83:
                    24:86:da:d0:42:71:2d:a8:c9:1b:20:a0:d0:3b:af:
                    e1:6c:64:3a:81:c0:87:7a:0a:39:09:47:00:f7:32:
                    98:d8:8e:bf:40:e9:bc:ca:12:96:c8:68:be:cf:d9:
                    9e:dd:db:60:90:12:6e:6c:36:18:db:11:6d:8a:b2:
                    4f:52:30:cb:c0:c3:de:e6:27:d4:07:f5:59:a8:70:
                    b5:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:7A:02:05:8E:5C:0B:7E:1E:C9:CC:DF:64:81:CC:13:49:C0:3C:90
            X509v3 Authority Key Identifier:
                keyid:FA:15:85:E4:2E:73:8E:E5:96:DB:2F:2B:97:0C:C3:CB:74:3B:D8:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5fcVfwabTkgyohSNK6r5N9VXxvwMAKG6VXrCVRxkXPad/1/FA1585E42E738EE596DB2F2B970CC3CB743BD8FC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FA1585E42E738EE596DB2F2B970CC3CB743BD8FC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5fcVfwabTkgyohSNK6r5N9VXxvwMAKG6VXrCVRxkXPad/1/3139312e3235332e37322e302f32312d3231203d3e20323632383931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.253.72.0/21

    Signature Algorithm: sha256WithRSAEncryption
         1b:1d:93:2e:54:49:ac:07:07:d9:53:f9:3d:72:e6:b6:53:7f:
         42:27:bd:00:9f:41:cd:c3:8f:44:68:e7:d0:bd:8b:8b:b5:29:
         45:90:9f:69:a1:7e:f8:49:f7:a9:f0:8c:07:c5:49:e1:b2:ad:
         7f:0e:a3:8b:90:17:f1:1f:95:e0:5e:a6:1b:a5:a4:45:4c:8e:
         a2:01:af:4c:c9:67:c8:36:a0:d6:a1:10:dd:96:b1:08:9d:56:
         fe:d2:e8:a9:89:e7:ce:8f:d5:be:7b:85:31:cd:f4:23:54:33:
         2c:1a:61:54:72:cb:b6:a3:ec:fa:d8:9d:98:e6:df:0b:76:22:
         fb:6e:bf:e1:fb:dd:ce:8c:46:92:d3:f7:04:a7:91:d3:8b:72:
         e9:97:2f:87:84:ac:1e:26:7e:84:3a:71:29:c9:f3:f1:e6:47:
         3a:25:fd:46:c9:82:c0:6f:e7:4c:df:8e:18:20:42:96:7d:89:
         b9:16:50:e5:21:6a:38:37:50:6d:39:f6:c8:87:0a:73:10:7f:
         60:e7:fb:5a:04:42:80:7f:34:0c:c0:4d:a9:99:12:14:e2:7e:
         67:64:a0:e0:dd:e7:05:27:1c:1e:a9:ab:a1:4e:0b:7b:03:2a:
         20:5c:40:73:ad:c3:8f:0d:c6:43:27:05:52:49:86:c4:a2:a0:
         27:40:51:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 14:19:35 2024 by rpki-client on console-ams.rpki-client.org