Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7WQuHKj3iTpNtjkd519p56qSHzFXLwbU3N2aTsFUNvm5/0/3138372e3132302e32322e302f32342d3234203d3e20323636313831.roa
File:                     3138372e3132302e32322e302f32342d3234203d3e20323636313831.roa (raw, json)
Hash identifier:          vDj0M3rW5nH5JUKuUVPIC03X7lUwJA3/QV93ZLdiaOM=
Subject key identifier:   CF:CE:DE:1A:BE:EC:DA:42:62:48:A8:A2:D1:87:66:21:94:86:A6:33
Certificate issuer:       /CN=FFC4303836B932A4DA8D15E4873FC94402312A8C
Certificate serial:       4226CB5FE41DD9E37DA74E86B9A20AB5DEADE455
Authority key identifier: FF:C4:30:38:36:B9:32:A4:DA:8D:15:E4:87:3F:C9:44:02:31:2A:8C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FFC4303836B932A4DA8D15E4873FC94402312A8C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7WQuHKj3iTpNtjkd519p56qSHzFXLwbU3N2aTsFUNvm5/0/3138372e3132302e32322e302f32342d3234203d3e20323636313831.roa
Signing time:             Fri 19 Jul 2024 16:59:27 +0000
ROA not before:           Fri 19 Jul 2024 16:54:27 +0000
ROA not after:            Fri 18 Jul 2025 16:59:27 +0000
asID:                     266181
IP address blocks:        187.120.22.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7WQuHKj3iTpNtjkd519p56qSHzFXLwbU3N2aTsFUNvm5/0/FFC4303836B932A4DA8D15E4873FC94402312A8C.crl
                          rsync://rpki-repo.registro.br/repo/7WQuHKj3iTpNtjkd519p56qSHzFXLwbU3N2aTsFUNvm5/0/FFC4303836B932A4DA8D15E4873FC94402312A8C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FFC4303836B932A4DA8D15E4873FC94402312A8C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 18:09:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:26:cb:5f:e4:1d:d9:e3:7d:a7:4e:86:b9:a2:0a:b5:de:ad:e4:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FFC4303836B932A4DA8D15E4873FC94402312A8C
        Validity
            Not Before: Jul 19 16:54:27 2024 GMT
            Not After : Jul 18 16:59:27 2025 GMT
        Subject: CN=CFCEDE1ABEECDA426248A8A2D18766219486A633
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:bb:8a:1c:0a:7f:25:fb:09:aa:15:10:86:51:
                    bd:3a:eb:0e:6e:80:56:7d:c3:0f:55:38:fc:f7:80:
                    35:e4:22:be:29:66:b8:47:24:3f:bc:ce:2d:6e:c5:
                    66:98:38:a1:97:14:94:2f:e5:f0:c4:f9:16:f9:9a:
                    c9:6f:83:7b:5c:aa:4a:42:9c:09:3e:15:44:49:34:
                    24:65:5a:db:73:9c:6a:a2:9a:74:91:4f:e3:a6:e6:
                    07:c8:ec:9c:62:54:05:b1:1c:3d:e3:0f:9d:3d:09:
                    dc:61:bc:ad:ce:2c:91:18:83:6c:bf:03:08:75:22:
                    fa:47:0c:51:9d:68:a7:1a:88:0f:2c:7b:5c:75:08:
                    5c:60:9f:ae:88:88:bc:32:1c:a5:c0:2d:ef:96:56:
                    44:87:b0:44:19:09:54:ff:fb:b7:30:26:4d:10:dc:
                    77:08:45:79:bd:b9:d0:bb:9a:5b:63:63:e0:ba:08:
                    fc:d4:ab:59:6b:15:2c:24:b4:bc:94:ca:af:e5:5f:
                    10:16:6d:12:83:8b:88:aa:12:b5:14:c0:e0:23:8a:
                    03:b4:be:ef:c8:b3:21:3a:54:6f:db:1c:1a:8b:16:
                    04:ba:fe:e5:ef:03:80:5e:61:9c:a2:2f:15:1d:b3:
                    a3:d9:15:7f:11:fc:25:a8:d3:d4:55:7c:a5:e4:23:
                    97:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:CE:DE:1A:BE:EC:DA:42:62:48:A8:A2:D1:87:66:21:94:86:A6:33
            X509v3 Authority Key Identifier:
                keyid:FF:C4:30:38:36:B9:32:A4:DA:8D:15:E4:87:3F:C9:44:02:31:2A:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7WQuHKj3iTpNtjkd519p56qSHzFXLwbU3N2aTsFUNvm5/0/FFC4303836B932A4DA8D15E4873FC94402312A8C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FFC4303836B932A4DA8D15E4873FC94402312A8C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7WQuHKj3iTpNtjkd519p56qSHzFXLwbU3N2aTsFUNvm5/0/3138372e3132302e32322e302f32342d3234203d3e20323636313831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.120.22.0/24

    Signature Algorithm: sha256WithRSAEncryption
         64:36:3a:49:b4:b9:04:c0:3d:bc:9a:06:df:a2:d4:82:16:73:
         34:74:64:f3:ae:8f:7c:26:45:55:62:dc:70:20:87:e8:8b:a2:
         09:0e:bf:df:8d:6a:d6:03:a4:7a:41:c6:0d:ed:9d:3b:5f:6d:
         51:92:6a:45:fc:05:66:71:36:ce:ca:5e:72:c1:1e:04:56:83:
         94:b1:2f:90:bd:59:2e:5d:1e:15:10:3a:f7:9d:80:b3:b9:8a:
         5b:d2:c5:f0:96:a8:78:7f:31:bb:6f:68:41:a5:57:6e:33:eb:
         53:ac:b5:ef:c4:e2:e5:36:66:7c:a7:f2:16:4d:c7:4f:4a:f5:
         06:58:2a:fa:9e:1a:51:77:1e:e6:ef:a1:d2:b9:1f:39:fc:d1:
         85:c0:9d:33:e0:aa:5c:1e:32:ee:85:3a:e1:3d:6a:fc:4f:0a:
         6f:d8:94:23:81:ab:97:a4:67:8e:6a:fb:2a:e7:24:3f:5f:61:
         93:4c:7f:fa:62:9b:c4:7a:5f:0d:6c:6d:7d:43:1e:69:b4:1e:
         95:fc:d0:f1:e2:66:a4:cc:79:57:ff:1e:c7:ef:a4:96:81:fd:
         1e:72:b7:3b:a8:37:52:b2:65:b6:81:0a:54:90:99:6c:52:46:
         2e:46:a9:ea:38:37:ae:0c:a8:f7:51:b6:a7:71:5b:2b:6f:48:
         78:19:d0:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 15:35:20 2024 by rpki-client on console-fra.rpki-client.org