Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7WQuHKj3iTpNtjkd519p56qSHzFXLwbU3N2aTsFUNvm5/0/3138372e3132302e31362e302f32322d3232203d3e20323636313831.roa
File:                     3138372e3132302e31362e302f32322d3232203d3e20323636313831.roa (raw, json)
Hash identifier:          T4DZEM7uDS+IJK4zhGDUmIpeBbCVPcnYvU4s5twSphU=
Subject key identifier:   A2:CD:6D:14:E7:02:AB:64:62:7A:5F:75:19:2B:53:EE:7C:C8:EF:D2
Certificate issuer:       /CN=FFC4303836B932A4DA8D15E4873FC94402312A8C
Certificate serial:       510A9086342B908CEBC6EA257B3DF1CE14958366
Authority key identifier: FF:C4:30:38:36:B9:32:A4:DA:8D:15:E4:87:3F:C9:44:02:31:2A:8C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FFC4303836B932A4DA8D15E4873FC94402312A8C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7WQuHKj3iTpNtjkd519p56qSHzFXLwbU3N2aTsFUNvm5/0/3138372e3132302e31362e302f32322d3232203d3e20323636313831.roa
Signing time:             Fri 19 Jul 2024 16:59:26 +0000
ROA not before:           Fri 19 Jul 2024 16:54:26 +0000
ROA not after:            Fri 18 Jul 2025 16:59:26 +0000
asID:                     266181
IP address blocks:        187.120.16.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7WQuHKj3iTpNtjkd519p56qSHzFXLwbU3N2aTsFUNvm5/0/FFC4303836B932A4DA8D15E4873FC94402312A8C.crl
                          rsync://rpki-repo.registro.br/repo/7WQuHKj3iTpNtjkd519p56qSHzFXLwbU3N2aTsFUNvm5/0/FFC4303836B932A4DA8D15E4873FC94402312A8C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FFC4303836B932A4DA8D15E4873FC94402312A8C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 18:09:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:0a:90:86:34:2b:90:8c:eb:c6:ea:25:7b:3d:f1:ce:14:95:83:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FFC4303836B932A4DA8D15E4873FC94402312A8C
        Validity
            Not Before: Jul 19 16:54:26 2024 GMT
            Not After : Jul 18 16:59:26 2025 GMT
        Subject: CN=A2CD6D14E702AB64627A5F75192B53EE7CC8EFD2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:84:3b:0c:ae:1a:20:b1:2c:30:6b:a4:fe:bc:
                    ae:97:36:63:9a:17:5f:a3:d3:79:45:6a:e3:cc:0e:
                    86:53:f6:3e:f7:e5:1a:51:0e:6d:83:24:8f:89:db:
                    48:8c:16:d3:73:72:e9:33:c1:e7:0a:f5:94:86:d3:
                    2d:80:21:91:ed:bc:3f:93:f7:80:02:a5:ad:86:e1:
                    b9:5c:92:0e:9c:1c:64:96:7a:0c:8d:6e:6c:43:68:
                    fe:0e:c5:c9:2a:45:6b:b5:d5:4d:d5:28:43:b8:f1:
                    33:e6:71:09:f6:17:8f:13:8b:e7:58:e8:ae:12:13:
                    68:47:75:e4:3f:46:01:8a:9c:43:36:0e:f9:fb:c5:
                    4c:75:e1:88:8a:7a:29:cd:cc:77:83:70:2d:5e:f8:
                    24:b4:9f:37:ee:e2:b9:90:74:55:48:99:2a:17:be:
                    a3:cd:12:94:94:19:53:cc:b2:85:08:b3:2a:e6:f6:
                    3a:00:10:e2:28:f2:70:a3:a4:b8:89:6c:98:d7:b8:
                    6e:45:d4:0b:82:a0:1e:ea:e0:51:b4:2d:8a:0a:a9:
                    ba:3b:94:d9:d4:17:08:bd:14:de:b7:a8:2f:0c:a0:
                    c4:0a:da:8f:c6:6c:46:9b:2c:b2:c6:18:46:94:61:
                    ea:44:87:b7:4b:06:18:01:70:5d:68:64:eb:a9:43:
                    66:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:CD:6D:14:E7:02:AB:64:62:7A:5F:75:19:2B:53:EE:7C:C8:EF:D2
            X509v3 Authority Key Identifier:
                keyid:FF:C4:30:38:36:B9:32:A4:DA:8D:15:E4:87:3F:C9:44:02:31:2A:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7WQuHKj3iTpNtjkd519p56qSHzFXLwbU3N2aTsFUNvm5/0/FFC4303836B932A4DA8D15E4873FC94402312A8C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FFC4303836B932A4DA8D15E4873FC94402312A8C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7WQuHKj3iTpNtjkd519p56qSHzFXLwbU3N2aTsFUNvm5/0/3138372e3132302e31362e302f32322d3232203d3e20323636313831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.120.16.0/22

    Signature Algorithm: sha256WithRSAEncryption
         f2:94:fd:b1:35:c6:17:29:5f:93:5d:d6:9d:a8:fc:13:4e:68:
         e1:ad:84:16:8a:76:2a:81:f2:c0:e2:16:64:e1:34:77:4a:43:
         a7:2d:e0:9b:ac:b5:21:0c:6c:b8:d5:68:22:04:fe:82:18:70:
         47:5a:71:ee:ff:b0:f1:ef:3d:a4:05:cf:ba:46:92:f9:69:d1:
         9d:a7:a3:07:04:21:5c:f8:a9:51:e7:14:86:a6:9f:d1:7d:ef:
         4b:f4:cf:4d:40:5b:22:29:f6:0d:e3:ec:ee:17:b9:07:b4:57:
         30:7c:f0:b4:a3:b7:47:10:d0:35:41:f7:8c:5f:17:21:c0:b3:
         0a:ff:88:af:ab:2b:19:53:6a:59:44:35:bf:97:c8:09:44:a4:
         70:9f:b8:3d:2f:b2:10:0b:56:d6:84:a4:9c:3a:a3:0a:4b:14:
         e6:23:fd:27:f0:1f:60:24:b0:e9:c7:bf:b8:12:8e:f4:b4:d7:
         1a:2b:53:e8:96:9c:1b:40:3a:03:38:21:ce:91:36:0e:70:d3:
         49:c5:80:69:ba:99:ff:87:c7:1d:4b:d4:78:32:8a:7b:28:13:
         e3:82:bd:36:76:73:1e:4c:04:0b:a3:a5:62:9c:08:6f:8b:d6:
         71:81:fd:3a:5d:f8:0d:39:3c:08:ed:a0:45:a9:8a:5b:39:01:
         e8:77:fd:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 16:21:07 2024 by rpki-client on console-ams.rpki-client.org