Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7WQuHKj3iTpNtjkd519p56qSHzFXLwbU3N2aTsFUNvm5/0/3138372e3132302e31392e302f32342d3234203d3e20323636313831.roa
File:                     3138372e3132302e31392e302f32342d3234203d3e20323636313831.roa (raw, json)
Hash identifier:          6kh87ZikKXRQ9J3FYKEQ3HTzwsR7tlK/p/v58lf8stA=
Subject key identifier:   D1:F9:76:4E:0A:65:D0:7E:92:4B:CC:58:FB:D2:6F:DA:1C:B3:E1:9D
Certificate issuer:       /CN=FFC4303836B932A4DA8D15E4873FC94402312A8C
Certificate serial:       436F8967DCFC497DCDA0F7505AE7F3DC282E2472
Authority key identifier: FF:C4:30:38:36:B9:32:A4:DA:8D:15:E4:87:3F:C9:44:02:31:2A:8C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FFC4303836B932A4DA8D15E4873FC94402312A8C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7WQuHKj3iTpNtjkd519p56qSHzFXLwbU3N2aTsFUNvm5/0/3138372e3132302e31392e302f32342d3234203d3e20323636313831.roa
Signing time:             Fri 19 Jul 2024 16:59:33 +0000
ROA not before:           Fri 19 Jul 2024 16:54:33 +0000
ROA not after:            Fri 18 Jul 2025 16:59:33 +0000
asID:                     266181
IP address blocks:        187.120.19.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7WQuHKj3iTpNtjkd519p56qSHzFXLwbU3N2aTsFUNvm5/0/FFC4303836B932A4DA8D15E4873FC94402312A8C.crl
                          rsync://rpki-repo.registro.br/repo/7WQuHKj3iTpNtjkd519p56qSHzFXLwbU3N2aTsFUNvm5/0/FFC4303836B932A4DA8D15E4873FC94402312A8C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FFC4303836B932A4DA8D15E4873FC94402312A8C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 18:09:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:6f:89:67:dc:fc:49:7d:cd:a0:f7:50:5a:e7:f3:dc:28:2e:24:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FFC4303836B932A4DA8D15E4873FC94402312A8C
        Validity
            Not Before: Jul 19 16:54:33 2024 GMT
            Not After : Jul 18 16:59:33 2025 GMT
        Subject: CN=D1F9764E0A65D07E924BCC58FBD26FDA1CB3E19D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:98:63:95:69:2f:53:b4:4f:e4:df:b2:23:c5:
                    c0:78:fb:98:48:83:ae:4d:c6:62:fa:87:f3:1c:bd:
                    b1:99:d5:1e:9d:fe:82:63:1b:6a:5b:fb:8b:40:e0:
                    4d:e1:12:2e:fe:8a:d7:59:0d:66:15:fa:0f:0c:b4:
                    3c:ed:f9:99:14:69:f0:3f:d4:d7:50:da:6f:5a:10:
                    bd:be:69:05:50:e7:b5:27:77:70:f0:18:a5:00:fa:
                    93:d2:69:1d:ce:64:1e:c9:ef:94:00:3b:6c:8e:62:
                    e5:32:d2:87:eb:de:75:51:ce:65:75:c5:8d:d4:7a:
                    86:e2:47:b3:1c:d7:00:91:76:91:d1:87:af:58:c6:
                    52:9b:51:b5:68:8a:c3:0d:4a:c1:b3:34:30:d5:fd:
                    aa:29:19:56:69:b6:79:7c:81:4a:5f:8f:b6:fa:4a:
                    6b:5b:08:d3:4a:00:1c:ab:56:6b:91:91:b0:92:75:
                    59:2d:f9:28:79:49:e7:62:e6:b3:d7:33:c5:32:53:
                    81:de:73:fa:7e:5c:e4:9a:84:97:80:05:d8:0b:1d:
                    05:3d:49:7c:c8:2d:0d:32:77:ff:38:5c:21:5c:92:
                    04:62:87:e5:32:b4:fd:f7:27:4c:1a:d1:6e:53:53:
                    7e:b9:53:85:f6:3c:de:e7:c5:3a:04:18:97:c3:7c:
                    44:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:F9:76:4E:0A:65:D0:7E:92:4B:CC:58:FB:D2:6F:DA:1C:B3:E1:9D
            X509v3 Authority Key Identifier:
                keyid:FF:C4:30:38:36:B9:32:A4:DA:8D:15:E4:87:3F:C9:44:02:31:2A:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7WQuHKj3iTpNtjkd519p56qSHzFXLwbU3N2aTsFUNvm5/0/FFC4303836B932A4DA8D15E4873FC94402312A8C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FFC4303836B932A4DA8D15E4873FC94402312A8C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7WQuHKj3iTpNtjkd519p56qSHzFXLwbU3N2aTsFUNvm5/0/3138372e3132302e31392e302f32342d3234203d3e20323636313831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.120.19.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8b:fd:f8:65:49:1e:12:12:74:10:74:d7:00:7a:37:64:31:7b:
         e4:7c:5d:cc:fa:32:e1:44:ec:88:55:8b:21:35:7b:8f:ee:19:
         4e:7d:24:9f:ba:55:18:9a:52:b0:c2:8d:57:63:99:9e:ac:b1:
         48:e2:10:83:0d:2d:c8:51:00:ec:18:4e:f1:c6:13:0c:31:25:
         2b:55:fa:09:62:c6:66:27:db:08:b2:92:e3:f6:6f:9d:a1:ab:
         31:88:d2:bf:10:14:2d:30:3b:d8:fe:fd:d0:dc:b1:49:52:e5:
         83:cd:e4:ce:32:a0:21:27:c8:77:a7:81:dd:79:20:9f:a1:02:
         8d:b3:89:b4:20:b2:69:1f:ab:5e:4c:cd:d1:90:ad:5b:99:01:
         2f:d3:f6:f5:41:d9:78:89:a3:be:5b:19:e3:cd:7f:90:b1:b0:
         34:e0:5f:dc:b9:76:55:99:38:24:f4:94:50:45:51:69:1e:41:
         e2:00:39:a9:38:b8:21:b8:fc:49:e4:5c:14:87:c4:51:8e:5b:
         d7:a9:36:db:56:69:f0:85:2f:25:ba:7d:6c:3e:5a:fb:90:07:
         e7:86:ea:e2:54:bb:dc:46:3e:10:10:42:78:de:5a:b9:d7:5e:
         f6:bf:56:0d:4c:bb:3b:95:8f:36:03:6f:01:80:3b:c3:43:1b:
         47:ab:3f:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 15:35:20 2024 by rpki-client on console-fra.rpki-client.org