Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9SF3ELzzbBNW2b1uf6GK8c5oSGQAtxHXCQoNZnvBarQE/1/3137392e39372e39322e302f32322d3232203d3e20323633343133.roa
File:                     3137392e39372e39322e302f32322d3232203d3e20323633343133.roa (raw, json)
Hash identifier:          BnNMjnQqSqjBoWTX9rsXpakwaSKATqZ25q4uUTMQ73E=
Subject key identifier:   FE:45:A0:6E:B4:EC:1B:3C:AD:46:EF:02:C0:19:45:9F:89:61:2B:DF
Certificate issuer:       /CN=E1989BB07C22369442D0A08B2212D584A657A415
Certificate serial:       40C497C286047240CCDD36C1B721663780B534D0
Authority key identifier: E1:98:9B:B0:7C:22:36:94:42:D0:A0:8B:22:12:D5:84:A6:57:A4:15
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E1989BB07C22369442D0A08B2212D584A657A415.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9SF3ELzzbBNW2b1uf6GK8c5oSGQAtxHXCQoNZnvBarQE/1/3137392e39372e39322e302f32322d3232203d3e20323633343133.roa
Signing time:             Thu 04 Apr 2024 10:21:41 +0000
ROA not before:           Thu 04 Apr 2024 10:16:41 +0000
ROA not after:            Thu 03 Apr 2025 10:21:41 +0000
asID:                     263413
IP address blocks:        179.97.92.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9SF3ELzzbBNW2b1uf6GK8c5oSGQAtxHXCQoNZnvBarQE/1/E1989BB07C22369442D0A08B2212D584A657A415.crl
                          rsync://rpki-repo.registro.br/repo/9SF3ELzzbBNW2b1uf6GK8c5oSGQAtxHXCQoNZnvBarQE/1/E1989BB07C22369442D0A08B2212D584A657A415.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E1989BB07C22369442D0A08B2212D584A657A415.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 28 Sep 2024 09:23:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:c4:97:c2:86:04:72:40:cc:dd:36:c1:b7:21:66:37:80:b5:34:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E1989BB07C22369442D0A08B2212D584A657A415
        Validity
            Not Before: Apr  4 10:16:41 2024 GMT
            Not After : Apr  3 10:21:41 2025 GMT
        Subject: CN=FE45A06EB4EC1B3CAD46EF02C019459F89612BDF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:38:4e:2f:f0:80:19:b7:c3:2d:d3:c3:1c:2c:
                    ce:f4:d2:cb:37:25:0c:80:be:32:12:8c:f9:d3:7b:
                    95:64:4c:04:51:50:4c:4c:89:20:ad:28:8e:9e:9a:
                    64:ae:64:80:20:00:38:b0:5c:a2:36:1e:34:a5:b0:
                    fe:9b:6e:02:13:f0:ee:80:61:6f:ed:4a:21:b6:d7:
                    14:d5:2b:23:16:39:7d:11:5d:ab:81:f8:fa:4d:95:
                    e0:82:5c:bf:9d:06:84:aa:6e:2a:4f:33:b5:5b:58:
                    4f:4b:d2:65:40:9a:9e:73:65:bf:18:88:34:25:bf:
                    98:e6:e5:4d:c2:a0:d5:5a:45:f6:1c:79:e3:95:b4:
                    76:10:60:dd:09:ae:93:75:bd:4d:71:84:7e:25:e5:
                    6a:8e:eb:07:1e:82:02:42:c5:00:79:0f:fe:7e:57:
                    73:35:29:ca:f4:9d:bb:8c:29:d6:16:8b:61:8d:41:
                    dd:aa:1a:e5:3c:80:55:4e:7e:4b:a7:04:01:01:ca:
                    7f:d3:ea:57:be:08:60:52:09:57:3b:0b:55:db:1c:
                    58:a1:89:fb:2b:9c:70:fb:6d:6d:9a:a7:8e:c1:00:
                    98:a6:37:4d:28:a4:ab:0f:58:09:73:74:36:7e:e4:
                    53:b9:0a:7c:2e:c4:ec:2c:e8:74:df:a0:f5:6d:54:
                    63:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:45:A0:6E:B4:EC:1B:3C:AD:46:EF:02:C0:19:45:9F:89:61:2B:DF
            X509v3 Authority Key Identifier:
                keyid:E1:98:9B:B0:7C:22:36:94:42:D0:A0:8B:22:12:D5:84:A6:57:A4:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9SF3ELzzbBNW2b1uf6GK8c5oSGQAtxHXCQoNZnvBarQE/1/E1989BB07C22369442D0A08B2212D584A657A415.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E1989BB07C22369442D0A08B2212D584A657A415.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9SF3ELzzbBNW2b1uf6GK8c5oSGQAtxHXCQoNZnvBarQE/1/3137392e39372e39322e302f32322d3232203d3e20323633343133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.97.92.0/22

    Signature Algorithm: sha256WithRSAEncryption
         96:3b:d6:78:7a:b6:39:bf:4e:cf:1c:79:d1:b6:51:d2:b0:cb:
         1a:b5:40:14:4d:c8:58:d1:d0:05:eb:ac:0b:d4:32:2c:13:ab:
         0c:46:c0:bd:83:25:4e:e4:6c:47:23:71:3d:e9:0f:ab:7e:05:
         0b:94:4d:49:31:27:01:4b:9e:38:79:b0:0c:eb:7a:f9:0c:41:
         bc:dd:ba:d3:1b:ee:33:7e:33:3b:10:94:f2:52:42:b0:8d:34:
         29:8a:4a:50:cf:36:38:dd:5b:d9:42:a2:43:9d:bc:31:1e:35:
         00:c2:a3:b6:59:e6:80:32:6d:e0:36:6a:d1:1c:48:4a:42:e5:
         e3:33:c2:a1:a2:ae:b6:92:ed:81:5c:1e:16:88:13:4c:e7:65:
         f0:ae:0a:e9:c5:f1:ee:ad:2b:da:30:83:be:c4:24:c2:cd:35:
         9c:88:83:89:f8:f2:92:3f:4b:04:c4:91:e6:19:11:21:0b:91:
         3e:9b:21:e2:d6:ca:a3:63:ce:06:dd:62:64:5b:0a:55:b4:eb:
         3a:b2:9f:82:01:66:7a:ef:fd:77:91:76:4c:e7:4a:98:1e:0f:
         69:4f:e3:44:87:9c:c5:f5:00:c6:c3:1b:54:75:45:bf:69:7b:
         7a:a4:c2:3b:b1:91:c6:0a:54:3a:b7:3f:4a:ad:66:3d:6e:cf:
         bc:8d:d1:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 27 09:15:44 2024 by rpki-client on console-fra.rpki-client.org