Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7WQuHKj3iTpNtjkd519p56qSHzFXLwbU3N2aTsFUNvm5/0/3138372e3132302e32352e302f32342d3234203d3e20323636313831.roa
File:                     3138372e3132302e32352e302f32342d3234203d3e20323636313831.roa (raw, json)
Hash identifier:          864FoW/Vm8sqWGxcWQv956yWCbBQJBmR00Ow88N8/3c=
Subject key identifier:   75:4E:1C:EA:C1:5F:55:B1:99:98:32:7D:12:2B:67:FE:54:B1:AB:DE
Certificate issuer:       /CN=FFC4303836B932A4DA8D15E4873FC94402312A8C
Certificate serial:       533B45F60282CA8469A2D72A051E903495457FA2
Authority key identifier: FF:C4:30:38:36:B9:32:A4:DA:8D:15:E4:87:3F:C9:44:02:31:2A:8C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FFC4303836B932A4DA8D15E4873FC94402312A8C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7WQuHKj3iTpNtjkd519p56qSHzFXLwbU3N2aTsFUNvm5/0/3138372e3132302e32352e302f32342d3234203d3e20323636313831.roa
Signing time:             Fri 19 Jul 2024 16:59:33 +0000
ROA not before:           Fri 19 Jul 2024 16:54:33 +0000
ROA not after:            Fri 18 Jul 2025 16:59:33 +0000
asID:                     266181
IP address blocks:        187.120.25.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7WQuHKj3iTpNtjkd519p56qSHzFXLwbU3N2aTsFUNvm5/0/FFC4303836B932A4DA8D15E4873FC94402312A8C.crl
                          rsync://rpki-repo.registro.br/repo/7WQuHKj3iTpNtjkd519p56qSHzFXLwbU3N2aTsFUNvm5/0/FFC4303836B932A4DA8D15E4873FC94402312A8C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FFC4303836B932A4DA8D15E4873FC94402312A8C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 18:09:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:3b:45:f6:02:82:ca:84:69:a2:d7:2a:05:1e:90:34:95:45:7f:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FFC4303836B932A4DA8D15E4873FC94402312A8C
        Validity
            Not Before: Jul 19 16:54:33 2024 GMT
            Not After : Jul 18 16:59:33 2025 GMT
        Subject: CN=754E1CEAC15F55B19998327D122B67FE54B1ABDE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:55:f5:cf:2b:8b:b0:79:01:44:82:cd:94:2d:
                    dc:20:2b:45:35:f8:98:cf:d1:ef:e6:69:c2:0c:9e:
                    2d:20:1c:a0:d9:60:a6:da:6a:8b:b1:f6:6b:5f:22:
                    5f:5a:da:82:1e:99:1e:2a:cd:1e:79:0b:41:f5:80:
                    e6:e3:45:4b:8b:8f:e9:54:dc:8e:55:3d:e0:17:49:
                    84:0c:b8:2d:46:34:8c:0a:10:1c:3a:53:57:cd:ee:
                    fc:22:27:0a:0e:0c:ed:54:1c:5a:23:7e:37:43:d6:
                    cf:1b:2c:68:2e:48:97:5a:5d:87:38:3b:81:aa:dc:
                    ef:e5:56:78:90:ac:bc:96:29:c8:f2:0f:f5:9e:6f:
                    14:18:43:16:64:d8:c3:57:55:02:79:ab:f1:ce:2f:
                    e1:36:25:35:cf:a0:8b:7b:92:99:89:8d:b5:87:5a:
                    be:8d:32:88:e5:74:9f:52:4b:cf:2f:2a:2a:8e:e1:
                    83:d3:9e:4e:16:25:a7:4e:e6:2b:c7:9e:53:9d:44:
                    3c:0b:ea:bd:dd:0b:db:e7:57:83:ed:3f:3c:16:6b:
                    b3:0a:f3:cd:06:8b:91:e2:ca:51:c6:c4:71:d9:69:
                    ce:89:de:1f:b4:a3:1e:a9:f4:43:ff:44:66:0f:18:
                    77:be:19:ae:ba:79:9c:a5:f8:5b:15:7d:90:6f:22:
                    64:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:4E:1C:EA:C1:5F:55:B1:99:98:32:7D:12:2B:67:FE:54:B1:AB:DE
            X509v3 Authority Key Identifier:
                keyid:FF:C4:30:38:36:B9:32:A4:DA:8D:15:E4:87:3F:C9:44:02:31:2A:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7WQuHKj3iTpNtjkd519p56qSHzFXLwbU3N2aTsFUNvm5/0/FFC4303836B932A4DA8D15E4873FC94402312A8C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FFC4303836B932A4DA8D15E4873FC94402312A8C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7WQuHKj3iTpNtjkd519p56qSHzFXLwbU3N2aTsFUNvm5/0/3138372e3132302e32352e302f32342d3234203d3e20323636313831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.120.25.0/24

    Signature Algorithm: sha256WithRSAEncryption
         41:ee:38:4d:fe:16:34:ba:8c:02:44:5d:d8:b1:9e:4e:62:b4:
         37:e8:0c:c7:13:1c:36:b7:99:16:f2:ed:86:98:35:70:45:65:
         f5:54:3d:19:7a:a9:15:37:0c:e5:1f:ab:83:72:d5:5e:9c:a0:
         34:8e:51:4d:09:27:c8:b3:7d:a1:12:db:0d:08:1d:16:50:e0:
         4e:5e:c9:c0:38:88:d0:d2:32:12:1f:c2:e0:4a:4a:3b:35:14:
         36:bd:54:59:79:cf:81:59:de:d8:5b:84:ed:0b:06:0f:55:49:
         ae:1d:b8:e5:22:91:b9:2c:f3:2a:ef:10:86:a9:2c:ff:62:21:
         c9:ea:1c:f9:d7:96:ed:54:28:12:95:c5:52:83:0c:e7:6c:db:
         82:ae:c2:2b:bb:89:8b:39:ec:95:98:b5:78:ec:d5:a9:65:cd:
         f1:bf:05:81:3d:0b:0c:59:48:5b:63:9b:6b:c7:44:b2:2d:a6:
         70:31:92:2c:87:3d:77:73:ae:21:b5:e8:0f:60:fc:a5:59:1d:
         6a:75:58:86:3c:92:63:b9:8e:70:73:60:a3:e6:a8:1a:75:83:
         7b:2e:6e:ac:a2:9e:13:35:08:62:91:f3:0c:26:1b:2c:a9:42:
         7e:a6:d7:30:1f:49:1d:80:79:fa:ad:43:c2:dc:73:4f:2a:fe:
         cb:09:70:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 15:35:20 2024 by rpki-client on console-fra.rpki-client.org