Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7WQuHKj3iTpNtjkd519p56qSHzFXLwbU3N2aTsFUNvm5/0/3138372e3132302e31362e302f32342d3234203d3e20323636313831.roa
File:                     3138372e3132302e31362e302f32342d3234203d3e20323636313831.roa (raw, json)
Hash identifier:          sIoo7e270qgaZghV6O7HTWcT3hBYx1edogZOq5xc/q0=
Subject key identifier:   BF:3E:5D:71:45:11:0B:59:56:D7:24:C8:2B:65:03:2A:B3:75:86:AA
Certificate issuer:       /CN=FFC4303836B932A4DA8D15E4873FC94402312A8C
Certificate serial:       664A777FE6ACA20B99D6122DF3B98FA702D10D14
Authority key identifier: FF:C4:30:38:36:B9:32:A4:DA:8D:15:E4:87:3F:C9:44:02:31:2A:8C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FFC4303836B932A4DA8D15E4873FC94402312A8C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7WQuHKj3iTpNtjkd519p56qSHzFXLwbU3N2aTsFUNvm5/0/3138372e3132302e31362e302f32342d3234203d3e20323636313831.roa
Signing time:             Fri 19 Jul 2024 16:59:33 +0000
ROA not before:           Fri 19 Jul 2024 16:54:33 +0000
ROA not after:            Fri 18 Jul 2025 16:59:33 +0000
asID:                     266181
IP address blocks:        187.120.16.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7WQuHKj3iTpNtjkd519p56qSHzFXLwbU3N2aTsFUNvm5/0/FFC4303836B932A4DA8D15E4873FC94402312A8C.crl
                          rsync://rpki-repo.registro.br/repo/7WQuHKj3iTpNtjkd519p56qSHzFXLwbU3N2aTsFUNvm5/0/FFC4303836B932A4DA8D15E4873FC94402312A8C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FFC4303836B932A4DA8D15E4873FC94402312A8C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 18:09:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:4a:77:7f:e6:ac:a2:0b:99:d6:12:2d:f3:b9:8f:a7:02:d1:0d:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FFC4303836B932A4DA8D15E4873FC94402312A8C
        Validity
            Not Before: Jul 19 16:54:33 2024 GMT
            Not After : Jul 18 16:59:33 2025 GMT
        Subject: CN=BF3E5D7145110B5956D724C82B65032AB37586AA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:dd:ab:d4:d4:cd:75:bf:d5:db:0f:c8:19:bf:
                    70:af:56:b5:3d:14:8a:14:b0:b3:87:41:20:c5:2d:
                    87:b3:3f:16:43:82:6f:62:d3:1f:a8:23:dd:1f:73:
                    96:3d:66:07:cf:84:16:b4:1d:36:48:36:6e:c7:87:
                    cd:51:5e:db:bb:d2:fb:2a:af:6a:ba:df:40:72:93:
                    07:21:fc:87:d1:87:6c:00:a1:9d:bb:d1:73:98:23:
                    78:81:c6:d5:56:9e:79:a7:b3:2c:b9:23:1c:7c:0f:
                    e7:1c:75:b7:75:94:f0:03:6d:0f:c9:7d:b6:77:fb:
                    11:14:eb:09:19:eb:3e:18:e8:a0:96:e0:00:1e:b1:
                    23:02:e2:9c:89:fd:fd:0c:18:1d:da:bf:37:56:ae:
                    01:98:44:1e:19:58:8c:8c:1e:85:e6:36:54:87:02:
                    58:2d:55:c9:67:00:d7:54:6f:18:12:58:b4:5b:8b:
                    92:9c:8c:f4:a4:fa:a7:16:05:7b:5e:b1:5c:28:c1:
                    75:b8:9f:4f:18:2d:25:a2:64:30:c6:f6:b4:8f:c1:
                    be:77:10:3b:ce:08:67:e9:21:bc:3a:3d:0b:e0:17:
                    af:47:d0:83:69:ad:82:66:7f:77:f0:91:27:97:af:
                    af:bd:c9:bd:d0:9a:92:33:f4:65:ff:48:91:dd:4e:
                    8e:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:3E:5D:71:45:11:0B:59:56:D7:24:C8:2B:65:03:2A:B3:75:86:AA
            X509v3 Authority Key Identifier:
                keyid:FF:C4:30:38:36:B9:32:A4:DA:8D:15:E4:87:3F:C9:44:02:31:2A:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7WQuHKj3iTpNtjkd519p56qSHzFXLwbU3N2aTsFUNvm5/0/FFC4303836B932A4DA8D15E4873FC94402312A8C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FFC4303836B932A4DA8D15E4873FC94402312A8C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7WQuHKj3iTpNtjkd519p56qSHzFXLwbU3N2aTsFUNvm5/0/3138372e3132302e31362e302f32342d3234203d3e20323636313831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.120.16.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2a:bf:90:bd:84:a2:c8:76:4d:b1:52:7e:0a:e7:3a:8b:cd:f9:
         1e:7b:fb:02:9f:61:52:33:e0:09:b4:8b:fa:32:f2:33:df:0e:
         ec:f7:7a:17:97:03:f1:22:f2:85:8c:60:75:ef:25:b2:63:1d:
         52:fd:17:ed:58:1b:db:fd:e6:f8:e2:41:a3:b8:ce:6c:e2:73:
         fe:05:65:84:05:6a:24:f5:94:ef:9e:04:ab:c7:59:77:6a:1e:
         9f:87:86:0f:4d:77:c3:df:6b:ef:fc:cd:a7:72:1a:09:b0:ad:
         a7:b7:90:11:2f:a7:65:a8:f8:d0:c4:21:b1:9a:e2:44:94:33:
         1b:58:10:08:f1:ce:65:5f:9d:d5:9c:02:e5:8b:e0:32:73:ff:
         9f:f1:80:6c:7c:80:26:aa:60:7c:fc:ce:94:2f:7f:b2:83:93:
         f6:0f:31:56:c4:34:99:ba:1e:05:67:bc:cd:4a:bf:44:5d:fd:
         5a:cb:b4:a3:ce:60:9f:22:be:41:33:a3:5c:2b:e5:ef:10:07:
         52:86:3a:7d:5b:08:c9:4e:d6:4b:86:f6:35:3b:8a:90:80:78:
         70:d2:d3:6e:a2:8b:54:d8:9e:e5:a5:a0:02:18:1c:76:bb:56:
         f1:36:9e:ec:4f:df:e0:ab:3a:4a:8b:a6:82:80:5d:75:9a:83:
         e0:56:8b:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 16:21:07 2024 by rpki-client on console-ams.rpki-client.org