Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7WQuHKj3iTpNtjkd519p56qSHzFXLwbU3N2aTsFUNvm5/0/3138372e3132302e32332e302f32342d3234203d3e20323636313831.roa
File:                     3138372e3132302e32332e302f32342d3234203d3e20323636313831.roa (raw, json)
Hash identifier:          BfWZVRz4pCYGLplz0wdYA39eXAMRmLzuty3tXbF3U4k=
Subject key identifier:   13:85:72:96:12:EF:12:7B:46:D5:33:34:D7:7D:98:5E:83:45:DF:57
Certificate issuer:       /CN=FFC4303836B932A4DA8D15E4873FC94402312A8C
Certificate serial:       24D2EA40D5E32B79C4F62962CB9F8EFC4C821927
Authority key identifier: FF:C4:30:38:36:B9:32:A4:DA:8D:15:E4:87:3F:C9:44:02:31:2A:8C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FFC4303836B932A4DA8D15E4873FC94402312A8C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7WQuHKj3iTpNtjkd519p56qSHzFXLwbU3N2aTsFUNvm5/0/3138372e3132302e32332e302f32342d3234203d3e20323636313831.roa
Signing time:             Fri 19 Jul 2024 16:59:25 +0000
ROA not before:           Fri 19 Jul 2024 16:54:25 +0000
ROA not after:            Fri 18 Jul 2025 16:59:25 +0000
asID:                     266181
IP address blocks:        187.120.23.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7WQuHKj3iTpNtjkd519p56qSHzFXLwbU3N2aTsFUNvm5/0/FFC4303836B932A4DA8D15E4873FC94402312A8C.crl
                          rsync://rpki-repo.registro.br/repo/7WQuHKj3iTpNtjkd519p56qSHzFXLwbU3N2aTsFUNvm5/0/FFC4303836B932A4DA8D15E4873FC94402312A8C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FFC4303836B932A4DA8D15E4873FC94402312A8C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 18:09:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:d2:ea:40:d5:e3:2b:79:c4:f6:29:62:cb:9f:8e:fc:4c:82:19:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FFC4303836B932A4DA8D15E4873FC94402312A8C
        Validity
            Not Before: Jul 19 16:54:25 2024 GMT
            Not After : Jul 18 16:59:25 2025 GMT
        Subject: CN=1385729612EF127B46D53334D77D985E8345DF57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:b3:1a:97:d2:1a:c6:58:1b:15:f4:ae:8b:b5:
                    2b:68:50:25:d8:8d:b1:86:07:31:d1:8f:0c:bd:58:
                    a2:98:b5:59:20:14:77:9f:cd:ea:e6:2c:0c:1e:6e:
                    03:d8:5a:bc:4b:23:88:86:6a:1b:19:61:7b:3f:65:
                    ad:b3:f3:a7:3e:a5:9b:c1:b7:b1:02:73:a8:0b:13:
                    90:19:77:63:47:e1:63:9f:a4:73:5f:9c:4d:fb:10:
                    29:6a:b2:86:52:3f:bb:79:07:e3:a3:25:64:f3:48:
                    aa:7d:1c:ac:bd:bf:67:d9:26:1b:ff:be:0c:7b:16:
                    a5:2e:3d:58:1f:79:e7:e2:6f:7f:31:f9:50:0c:77:
                    c4:20:51:79:05:0f:19:e2:b2:34:f4:8c:22:47:fb:
                    85:1c:64:f8:4b:b9:64:23:7d:72:14:14:46:c3:67:
                    dc:5e:03:17:5a:c9:90:f7:86:fb:e4:c7:ad:9f:ed:
                    ec:01:2c:88:68:06:32:b2:16:97:85:3e:ba:a4:d8:
                    d7:eb:55:14:bc:69:a8:55:b2:86:fb:32:f3:6f:65:
                    28:87:f7:f6:5a:50:4e:d6:c3:a2:a2:01:06:d3:9d:
                    5f:9a:0f:fd:08:f1:a9:de:e3:1e:90:b2:eb:4f:82:
                    eb:1d:21:84:b3:9f:05:b3:97:f3:77:15:27:85:3d:
                    9d:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:85:72:96:12:EF:12:7B:46:D5:33:34:D7:7D:98:5E:83:45:DF:57
            X509v3 Authority Key Identifier:
                keyid:FF:C4:30:38:36:B9:32:A4:DA:8D:15:E4:87:3F:C9:44:02:31:2A:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7WQuHKj3iTpNtjkd519p56qSHzFXLwbU3N2aTsFUNvm5/0/FFC4303836B932A4DA8D15E4873FC94402312A8C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FFC4303836B932A4DA8D15E4873FC94402312A8C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7WQuHKj3iTpNtjkd519p56qSHzFXLwbU3N2aTsFUNvm5/0/3138372e3132302e32332e302f32342d3234203d3e20323636313831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.120.23.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0a:4d:7d:87:f4:22:3f:73:e1:2d:15:28:53:bc:90:63:6a:35:
         3d:db:26:60:b4:e7:33:b9:b1:60:f4:2e:a0:ca:b4:b0:89:b3:
         c4:a2:8c:b2:a9:c2:49:c6:97:ce:45:d2:ac:5f:2b:c7:79:3c:
         c7:d7:be:7d:ed:8a:31:5f:51:e6:1c:17:53:54:9f:03:4c:0b:
         ce:76:09:13:18:82:c3:53:cf:2a:be:7e:12:e9:f0:75:17:12:
         1b:eb:00:94:b1:c0:57:45:11:01:21:29:10:c9:f9:7d:a8:86:
         ea:e0:18:49:4d:02:ea:86:d9:56:ae:df:0b:05:72:78:77:96:
         a1:72:6f:f1:8c:f9:ef:fe:cc:5e:dd:95:f7:f7:8c:85:55:11:
         4a:a0:65:49:26:9e:f3:bb:ce:94:6a:96:24:a7:50:a6:4e:23:
         c6:95:e0:95:d6:e2:a4:5e:0f:b9:17:22:c3:44:c4:a7:6b:8d:
         6e:b2:d4:d7:84:5a:85:02:31:cc:e0:4f:a5:61:14:a9:d2:fe:
         12:04:b3:60:ca:25:a7:c9:7c:4c:3a:ac:b4:10:82:eb:e7:0e:
         fd:87:53:3b:7d:ba:15:1f:37:b2:63:02:1c:5b:43:12:cb:72:
         97:6f:6f:71:62:6b:5d:97:c5:25:cc:99:7f:83:47:14:e9:d6:
         ff:b5:10:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 15:35:20 2024 by rpki-client on console-fra.rpki-client.org