Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7QXkuSgNxB7JALEjy4KVCsLRF9vJNT4nqBMqtcYN2jJ2/1/3230312e34362e3139322e302f31392d3332203d3e203238363135.roa
File:                     3230312e34362e3139322e302f31392d3332203d3e203238363135.roa (raw, json)
Hash identifier:          fKYkhxc0kCsk7kGREtrrgm1tW3cOl7n7kb0wp4052UI=
Subject key identifier:   A9:60:77:64:5B:04:54:B3:AF:AC:C6:CA:8F:73:8D:3C:60:B3:96:C4
Certificate issuer:       /CN=376466FC739A7E2E3F178C59A3A0C0CC08310BD8
Certificate serial:       57DD11528B3DF1DDDA0FAC19C35F86E021E577AF
Authority key identifier: 37:64:66:FC:73:9A:7E:2E:3F:17:8C:59:A3:A0:C0:CC:08:31:0B:D8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/376466FC739A7E2E3F178C59A3A0C0CC08310BD8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7QXkuSgNxB7JALEjy4KVCsLRF9vJNT4nqBMqtcYN2jJ2/1/3230312e34362e3139322e302f31392d3332203d3e203238363135.roa
Signing time:             Thu 04 Apr 2024 00:56:10 +0000
ROA not before:           Thu 04 Apr 2024 00:51:10 +0000
ROA not after:            Thu 03 Apr 2025 00:56:10 +0000
asID:                     28615
IP address blocks:        201.46.192.0/19 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7QXkuSgNxB7JALEjy4KVCsLRF9vJNT4nqBMqtcYN2jJ2/1/376466FC739A7E2E3F178C59A3A0C0CC08310BD8.crl
                          rsync://rpki-repo.registro.br/repo/7QXkuSgNxB7JALEjy4KVCsLRF9vJNT4nqBMqtcYN2jJ2/1/376466FC739A7E2E3F178C59A3A0C0CC08310BD8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/376466FC739A7E2E3F178C59A3A0C0CC08310BD8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 08:55:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:dd:11:52:8b:3d:f1:dd:da:0f:ac:19:c3:5f:86:e0:21:e5:77:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=376466FC739A7E2E3F178C59A3A0C0CC08310BD8
        Validity
            Not Before: Apr  4 00:51:10 2024 GMT
            Not After : Apr  3 00:56:10 2025 GMT
        Subject: CN=A96077645B0454B3AFACC6CA8F738D3C60B396C4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:c1:17:34:11:8a:83:ed:f2:3f:91:3e:f5:0d:
                    ff:f9:c5:bb:2e:e4:c6:d6:c2:1e:81:bd:50:a6:0a:
                    3f:df:d0:32:04:3b:7f:55:42:9e:c9:a8:de:79:2d:
                    66:55:78:1b:1e:65:af:86:6f:63:65:7f:ae:81:31:
                    69:b9:67:26:a6:4f:55:dc:59:4c:be:8e:b3:93:82:
                    e8:13:3a:c1:80:29:5a:a9:20:a9:2e:45:03:47:98:
                    5a:9d:76:00:95:11:0f:57:54:fa:82:3e:cf:c7:12:
                    d8:f1:5e:1f:f2:85:0c:1a:28:82:e6:da:14:9e:3f:
                    12:56:20:e4:22:e4:12:d3:63:d5:d3:5b:5f:b9:96:
                    a3:ad:ab:73:e7:cf:5e:bd:27:51:8b:07:f3:f4:5f:
                    4c:ea:c1:c8:2b:61:4f:36:a8:76:02:7a:24:54:e4:
                    d6:44:af:fb:23:35:6d:05:af:e5:16:83:2d:ba:25:
                    44:4c:04:0a:34:41:33:37:2c:9a:70:2a:32:48:85:
                    5a:01:a1:7c:bd:f3:06:34:7c:66:3c:49:8e:a9:d5:
                    d1:6d:07:d3:e1:7a:a8:55:4f:62:0f:61:d2:f8:fe:
                    1d:78:f8:72:24:a0:17:60:fe:f7:21:e3:1d:af:44:
                    e2:26:4e:d1:e6:68:e5:1a:d8:1a:4f:ce:29:84:9e:
                    19:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:60:77:64:5B:04:54:B3:AF:AC:C6:CA:8F:73:8D:3C:60:B3:96:C4
            X509v3 Authority Key Identifier:
                keyid:37:64:66:FC:73:9A:7E:2E:3F:17:8C:59:A3:A0:C0:CC:08:31:0B:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7QXkuSgNxB7JALEjy4KVCsLRF9vJNT4nqBMqtcYN2jJ2/1/376466FC739A7E2E3F178C59A3A0C0CC08310BD8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/376466FC739A7E2E3F178C59A3A0C0CC08310BD8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7QXkuSgNxB7JALEjy4KVCsLRF9vJNT4nqBMqtcYN2jJ2/1/3230312e34362e3139322e302f31392d3332203d3e203238363135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.46.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         af:b0:ff:99:ce:ee:7a:2b:06:48:3c:5f:5e:c5:f7:5d:46:1a:
         3d:62:64:16:2f:f1:94:5a:00:5e:5a:0e:bb:22:0c:5d:83:48:
         b3:66:14:84:20:31:ef:9a:83:4b:b7:a9:53:91:d0:f0:98:ff:
         cb:fc:ed:47:ad:c2:df:f3:f8:97:e3:98:57:dd:fa:9a:6f:3e:
         1e:96:b1:22:67:ce:94:4f:a6:66:13:18:46:4e:57:c6:0b:a9:
         f5:f2:06:65:1e:ae:5e:64:e8:c6:51:51:95:ca:36:f8:17:8a:
         ee:f6:4c:00:ff:ab:d0:ef:9e:3b:9b:d3:dd:20:ea:e5:d1:25:
         2a:8f:79:e1:47:54:75:ef:b8:bd:40:15:d3:ac:a5:bb:50:68:
         08:50:9d:55:db:2b:06:53:e9:85:23:e2:1d:4b:79:94:3c:76:
         1b:1e:06:e9:f0:3c:1b:95:61:d1:31:79:29:c4:12:9b:d9:2a:
         23:93:91:af:9d:19:0c:43:83:44:69:dd:9f:8b:ee:29:70:ac:
         62:99:8b:43:5c:dd:ff:4b:81:8c:2e:97:35:5c:33:ef:08:08:
         f2:62:46:db:2a:08:84:ac:ea:c3:54:79:36:a6:6e:f3:bb:5d:
         35:4a:7d:bc:43:21:84:38:99:78:17:db:85:13:26:81:68:96:
         c4:77:b0:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:39:20 2024 by rpki-client on console-ams.rpki-client.org