Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8DK8UgsPLj26AvVkyDBpNrj41e8eaZn2R5rF6yfv7QaD/0/3139302e38332e35332e302f32342d3332203d3e20323730333439.roa
File:                     3139302e38332e35332e302f32342d3332203d3e20323730333439.roa (raw, json)
Hash identifier:          r17iPBka0CsLCqpzgp/HHDZidnMpwMSROpLF9mRyGDA=
Subject key identifier:   6B:28:76:69:9C:F1:AA:88:96:AE:DD:78:F6:CF:71:34:A5:10:56:B8
Certificate issuer:       /CN=FCC3E46E608B1A0A6B832E4BE43C8F3AF6D98B51
Certificate serial:       1C7356EFB12D118DCD2F02067918C0E1AD9F811E
Authority key identifier: FC:C3:E4:6E:60:8B:1A:0A:6B:83:2E:4B:E4:3C:8F:3A:F6:D9:8B:51
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FCC3E46E608B1A0A6B832E4BE43C8F3AF6D98B51.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8DK8UgsPLj26AvVkyDBpNrj41e8eaZn2R5rF6yfv7QaD/0/3139302e38332e35332e302f32342d3332203d3e20323730333439.roa
Signing time:             Tue 05 Nov 2024 19:18:06 +0000
ROA not before:           Tue 05 Nov 2024 19:13:06 +0000
ROA not after:            Tue 04 Nov 2025 19:18:06 +0000
asID:                     270349
IP address blocks:        190.83.53.0/24 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8DK8UgsPLj26AvVkyDBpNrj41e8eaZn2R5rF6yfv7QaD/0/FCC3E46E608B1A0A6B832E4BE43C8F3AF6D98B51.crl
                          rsync://rpki-repo.registro.br/repo/8DK8UgsPLj26AvVkyDBpNrj41e8eaZn2R5rF6yfv7QaD/0/FCC3E46E608B1A0A6B832E4BE43C8F3AF6D98B51.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FCC3E46E608B1A0A6B832E4BE43C8F3AF6D98B51.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:73:56:ef:b1:2d:11:8d:cd:2f:02:06:79:18:c0:e1:ad:9f:81:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FCC3E46E608B1A0A6B832E4BE43C8F3AF6D98B51
        Validity
            Not Before: Nov  5 19:13:06 2024 GMT
            Not After : Nov  4 19:18:06 2025 GMT
        Subject: CN=6B2876699CF1AA8896AEDD78F6CF7134A51056B8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:98:e5:a0:5f:bc:91:95:6f:24:79:63:67:6c:
                    7a:67:f3:bb:69:2d:0c:5c:0f:0f:c7:39:81:fb:b3:
                    4a:ec:de:12:d1:7f:83:28:e1:65:26:2b:36:e6:c9:
                    9f:7d:28:b4:3d:59:55:c5:e0:ba:dc:d0:65:63:46:
                    c4:91:49:34:3b:ca:a0:97:e1:7f:70:0d:22:20:78:
                    2f:9e:de:f8:5b:94:f2:0d:2f:82:3b:9b:d5:d4:ae:
                    da:69:c1:db:5f:61:ae:11:0e:08:25:1b:a8:ad:16:
                    56:f6:9d:3a:7e:b2:9d:52:37:ce:83:ce:40:b6:d5:
                    a3:d7:35:72:0a:99:52:2d:65:40:94:cb:3d:32:1e:
                    ce:a5:ae:cb:32:86:2a:0c:e1:4b:9e:e6:4e:9c:32:
                    97:b7:0a:d6:7a:3f:98:08:6f:06:71:e4:75:0e:34:
                    83:35:83:ec:23:8b:fc:14:e5:a9:84:03:37:76:0b:
                    23:72:1a:31:2d:8f:1d:46:62:c0:9c:e2:1d:5c:a5:
                    fa:96:93:61:39:5f:9b:3c:56:d6:91:0d:53:11:1b:
                    ac:08:83:c5:3e:54:f7:46:ee:cb:9a:1b:39:75:06:
                    fe:05:d0:0e:f0:87:4c:64:e6:81:86:09:d9:4a:75:
                    55:cd:8f:f4:75:06:67:0d:b7:85:41:94:81:60:79:
                    c4:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:28:76:69:9C:F1:AA:88:96:AE:DD:78:F6:CF:71:34:A5:10:56:B8
            X509v3 Authority Key Identifier:
                keyid:FC:C3:E4:6E:60:8B:1A:0A:6B:83:2E:4B:E4:3C:8F:3A:F6:D9:8B:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8DK8UgsPLj26AvVkyDBpNrj41e8eaZn2R5rF6yfv7QaD/0/FCC3E46E608B1A0A6B832E4BE43C8F3AF6D98B51.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FCC3E46E608B1A0A6B832E4BE43C8F3AF6D98B51.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8DK8UgsPLj26AvVkyDBpNrj41e8eaZn2R5rF6yfv7QaD/0/3139302e38332e35332e302f32342d3332203d3e20323730333439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.83.53.0/24

    Signature Algorithm: sha256WithRSAEncryption
         51:79:b6:14:24:99:73:6c:0b:65:b2:9c:08:af:9f:dd:de:cd:
         a3:2a:b7:d7:c4:31:a3:1c:d1:37:cc:10:d5:d2:cb:72:0a:42:
         22:49:3b:5b:23:03:8c:dd:15:4e:7e:62:dc:eb:37:c8:06:f8:
         28:32:6a:fe:9b:64:cc:33:b5:93:f8:9a:c7:17:ee:b8:68:2d:
         fd:1e:5b:fa:04:e5:90:0a:a5:16:e5:69:bb:5d:fc:a4:40:2d:
         72:6c:29:dc:14:f9:6e:4c:c7:8f:fb:58:71:ef:82:8e:83:b7:
         8f:97:df:7b:0b:35:00:0d:f8:22:78:e4:4b:72:ba:d7:ee:31:
         4c:a9:79:b3:15:6c:c3:24:c5:f8:05:ec:a9:b8:df:f9:08:c2:
         fc:c5:37:3d:3e:a2:59:f0:2c:bb:4f:53:1f:bf:eb:da:97:aa:
         96:bf:2a:7f:cb:27:97:52:11:90:bf:ba:24:2d:9b:67:10:21:
         d9:16:ef:35:c6:76:d6:77:40:b7:4b:63:40:ec:7e:26:33:d2:
         9d:5a:e6:ab:93:82:35:36:0d:c4:bc:86:3b:f7:6b:97:ad:91:
         e9:6d:ed:f7:01:8c:da:3e:51:59:aa:f2:c5:84:2a:2a:38:ee:
         47:5c:6d:2e:a0:bb:04:3b:20:d5:bd:bc:88:de:4c:ba:69:8c:
         06:41:d7:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 01:25:33 2024 by rpki-client on console-ams.rpki-client.org