Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BvGzH6Pqd79p339G3eD22s9RTKUygLoNXNEhvNZqzv93/0/3138372e3131302e3134342e302f32322d3232203d3e20323639303733.roa
File:                     3138372e3131302e3134342e302f32322d3232203d3e20323639303733.roa (raw, json)
Hash identifier:          JzxI3J0xaCXN8vAhj/rqoe0ZedmuYtrRd03vkL7yW5I=
Subject key identifier:   D0:F8:61:DF:3F:E2:C5:10:25:BC:CF:2E:8F:BC:8B:15:3F:22:6A:66
Certificate issuer:       /CN=3FF96820195E6A66E38F9102B4B56F0E4EB31831
Certificate serial:       48DAF4000673ADA42D8CF7A409E148B22783D27B
Authority key identifier: 3F:F9:68:20:19:5E:6A:66:E3:8F:91:02:B4:B5:6F:0E:4E:B3:18:31
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3FF96820195E6A66E38F9102B4B56F0E4EB31831.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BvGzH6Pqd79p339G3eD22s9RTKUygLoNXNEhvNZqzv93/0/3138372e3131302e3134342e302f32322d3232203d3e20323639303733.roa
Signing time:             Tue 22 Oct 2024 14:21:50 +0000
ROA not before:           Tue 22 Oct 2024 14:16:50 +0000
ROA not after:            Tue 21 Oct 2025 14:21:50 +0000
asID:                     269073
IP address blocks:        187.110.144.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BvGzH6Pqd79p339G3eD22s9RTKUygLoNXNEhvNZqzv93/0/3FF96820195E6A66E38F9102B4B56F0E4EB31831.crl
                          rsync://rpki-repo.registro.br/repo/BvGzH6Pqd79p339G3eD22s9RTKUygLoNXNEhvNZqzv93/0/3FF96820195E6A66E38F9102B4B56F0E4EB31831.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3FF96820195E6A66E38F9102B4B56F0E4EB31831.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 17 Feb 2025 16:36:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:da:f4:00:06:73:ad:a4:2d:8c:f7:a4:09:e1:48:b2:27:83:d2:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3FF96820195E6A66E38F9102B4B56F0E4EB31831
        Validity
            Not Before: Oct 22 14:16:50 2024 GMT
            Not After : Oct 21 14:21:50 2025 GMT
        Subject: CN=D0F861DF3FE2C51025BCCF2E8FBC8B153F226A66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:55:46:7f:db:f8:07:0e:cb:7b:4f:05:a3:37:
                    2b:20:b1:3f:ac:0a:36:fe:1e:87:5c:73:40:0b:cf:
                    b0:95:bb:f2:d9:c5:31:2b:82:fd:60:ca:bd:da:e2:
                    35:00:c2:e9:b2:06:fb:20:60:3e:61:8a:c4:05:2d:
                    9b:df:00:32:0b:e1:a0:9f:c6:2d:27:1c:3e:2d:f8:
                    dd:46:0b:a2:3c:6c:57:f3:56:e2:3f:16:07:f8:05:
                    fd:ed:4e:b4:c3:52:38:a3:ca:e4:57:5c:50:97:32:
                    6f:94:41:cc:5b:66:cf:31:5e:c7:4d:e3:57:08:86:
                    48:13:6f:f8:a4:2c:5f:9a:01:96:69:6e:f0:fb:2a:
                    88:f2:18:8a:ee:5b:44:d5:e6:9c:17:5b:bc:73:35:
                    7a:fc:19:b7:0a:ec:e8:ee:87:4c:29:06:9b:6f:54:
                    14:82:87:65:17:5d:d3:3c:0c:ca:21:80:13:0c:f3:
                    55:28:01:bf:cb:91:fd:de:f7:d0:a3:db:1d:9b:0c:
                    fe:68:b5:d9:55:87:85:d9:bb:d7:25:5b:16:0b:ca:
                    e5:55:e1:7f:59:02:b5:b4:f7:42:4a:10:eb:37:71:
                    9e:4b:87:26:01:ad:fa:80:25:75:59:05:a1:b7:f0:
                    08:d0:03:f2:53:a9:45:b4:87:1a:58:d7:b3:83:cb:
                    29:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:F8:61:DF:3F:E2:C5:10:25:BC:CF:2E:8F:BC:8B:15:3F:22:6A:66
            X509v3 Authority Key Identifier:
                keyid:3F:F9:68:20:19:5E:6A:66:E3:8F:91:02:B4:B5:6F:0E:4E:B3:18:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BvGzH6Pqd79p339G3eD22s9RTKUygLoNXNEhvNZqzv93/0/3FF96820195E6A66E38F9102B4B56F0E4EB31831.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3FF96820195E6A66E38F9102B4B56F0E4EB31831.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BvGzH6Pqd79p339G3eD22s9RTKUygLoNXNEhvNZqzv93/0/3138372e3131302e3134342e302f32322d3232203d3e20323639303733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.110.144.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b7:1e:c6:23:31:d6:ff:01:b0:19:01:1e:cf:ef:0d:90:ee:11:
         29:a0:66:ae:c4:c4:4a:ef:62:89:fb:7b:09:46:b4:ba:31:dd:
         e4:96:65:95:cb:67:bc:8d:9a:7d:2e:1b:d2:b9:e9:18:f5:ef:
         b9:fc:bd:2f:8e:67:0a:97:d3:0c:fa:72:03:14:10:11:36:c1:
         12:ec:8b:ce:b0:37:f8:0f:60:0a:69:b1:b8:90:b4:92:01:71:
         fe:fa:ea:0c:69:7d:60:78:a3:4a:d5:ec:e0:8b:e7:10:59:eb:
         51:e9:a4:63:60:08:a8:24:35:14:f9:df:3f:71:f0:a8:78:2d:
         3e:bd:3f:7c:bf:75:31:22:6d:21:28:d5:1a:38:6d:fb:0f:a8:
         94:01:e8:48:59:43:13:ad:f1:6b:3f:84:83:b5:80:6a:01:41:
         7a:42:14:e7:92:48:0c:e1:26:b6:f4:a6:b2:d9:86:bc:4e:e0:
         22:3b:bc:a7:2c:73:f3:72:fe:8b:47:56:4b:4d:25:57:f4:ba:
         0c:57:52:17:da:d1:af:82:2e:88:b6:67:a3:9b:ef:06:af:d8:
         18:ce:d6:60:62:c4:38:b1:69:44:00:07:97:05:50:99:93:12:
         d2:80:67:c3:b7:83:b6:61:d8:18:86:13:44:9d:f8:03:75:d7:
         2e:58:66:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:14:58 2025 by rpki-client