Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CxgHbXqvvSr8CAJecDt6a7G7tSjW4JbUfxFCix5jkpRU/1/3138362e3232342e38302e302f32312d3231203d3e20323632393938.roa
File:                     3138362e3232342e38302e302f32312d3231203d3e20323632393938.roa (raw, json)
Hash identifier:          +D7/dWkwGVgCJtwJh7sMSmeYyPK72znR8HeZsrEMUOQ=
Subject key identifier:   3E:F8:43:DA:43:10:D2:65:DB:82:6A:49:D3:92:2A:B5:3C:A7:29:8F
Certificate issuer:       /CN=FC1C6DAB0E396716D86B15F9BF079B81BFAF1578
Certificate serial:       6FF3469416649ECBAB107FB712FE1138815BF913
Authority key identifier: FC:1C:6D:AB:0E:39:67:16:D8:6B:15:F9:BF:07:9B:81:BF:AF:15:78
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FC1C6DAB0E396716D86B15F9BF079B81BFAF1578.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CxgHbXqvvSr8CAJecDt6a7G7tSjW4JbUfxFCix5jkpRU/1/3138362e3232342e38302e302f32312d3231203d3e20323632393938.roa
Signing time:             Thu 04 Apr 2024 18:42:28 +0000
ROA not before:           Thu 04 Apr 2024 18:37:28 +0000
ROA not after:            Thu 03 Apr 2025 18:42:28 +0000
asID:                     262998
IP address blocks:        186.224.80.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CxgHbXqvvSr8CAJecDt6a7G7tSjW4JbUfxFCix5jkpRU/1/FC1C6DAB0E396716D86B15F9BF079B81BFAF1578.crl
                          rsync://rpki-repo.registro.br/repo/CxgHbXqvvSr8CAJecDt6a7G7tSjW4JbUfxFCix5jkpRU/1/FC1C6DAB0E396716D86B15F9BF079B81BFAF1578.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FC1C6DAB0E396716D86B15F9BF079B81BFAF1578.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:f3:46:94:16:64:9e:cb:ab:10:7f:b7:12:fe:11:38:81:5b:f9:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FC1C6DAB0E396716D86B15F9BF079B81BFAF1578
        Validity
            Not Before: Apr  4 18:37:28 2024 GMT
            Not After : Apr  3 18:42:28 2025 GMT
        Subject: CN=3EF843DA4310D265DB826A49D3922AB53CA7298F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:cc:38:a8:4c:76:5d:45:eb:1c:35:e0:57:6b:
                    a6:f9:ed:d5:cf:8a:76:e2:db:83:2f:5e:26:2d:83:
                    5d:f4:59:28:b1:7c:88:3c:02:ce:e6:35:35:8c:51:
                    22:e3:e3:4b:67:c5:13:e4:08:0f:a1:cf:f2:c5:94:
                    63:38:2e:63:db:e8:39:ac:c3:13:a4:1d:11:2e:03:
                    56:82:b9:04:03:cc:d8:a5:97:3a:73:a0:3d:fd:a9:
                    72:78:90:0a:61:20:79:18:74:f5:04:74:c7:63:b7:
                    31:3d:2b:c8:f8:2f:8c:5b:b8:ba:e5:4c:54:54:87:
                    2a:ef:99:19:94:37:e9:93:0a:a2:53:ce:89:a5:c6:
                    fa:f5:c4:6d:19:d2:dc:1c:58:ab:c0:f6:a9:05:6c:
                    0c:1f:0c:b7:51:e9:d6:ab:d6:82:a4:77:ef:39:af:
                    73:0a:3f:63:e5:20:4a:92:ea:8f:7b:7d:5e:b4:9f:
                    5a:05:ca:2a:a3:91:8e:85:84:b3:d9:10:4d:67:61:
                    cd:b1:79:6f:46:7b:8b:e4:66:56:03:5e:a9:64:45:
                    cb:0a:d6:5a:6c:c7:08:1f:de:4d:0f:31:92:a7:7a:
                    02:58:17:f7:19:8e:46:ca:4d:bd:a5:2b:e4:7f:1c:
                    2b:57:63:db:01:1f:96:6f:02:1b:fa:ca:63:71:e4:
                    12:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:F8:43:DA:43:10:D2:65:DB:82:6A:49:D3:92:2A:B5:3C:A7:29:8F
            X509v3 Authority Key Identifier:
                keyid:FC:1C:6D:AB:0E:39:67:16:D8:6B:15:F9:BF:07:9B:81:BF:AF:15:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CxgHbXqvvSr8CAJecDt6a7G7tSjW4JbUfxFCix5jkpRU/1/FC1C6DAB0E396716D86B15F9BF079B81BFAF1578.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FC1C6DAB0E396716D86B15F9BF079B81BFAF1578.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CxgHbXqvvSr8CAJecDt6a7G7tSjW4JbUfxFCix5jkpRU/1/3138362e3232342e38302e302f32312d3231203d3e20323632393938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.224.80.0/21

    Signature Algorithm: sha256WithRSAEncryption
         52:5c:89:88:39:94:11:f6:a2:aa:46:ba:f6:03:d1:30:9d:17:
         bd:63:78:3c:cf:3e:04:92:28:45:9f:1a:cf:ba:e1:74:10:9d:
         d3:eb:ec:89:3e:08:cf:93:f3:5c:5a:2d:1e:aa:6d:55:5d:13:
         0e:a1:db:33:0a:bc:eb:87:19:53:55:ab:f6:65:1c:e5:7e:1c:
         e6:54:48:f2:41:ae:fb:fd:ce:ba:ee:c6:18:80:35:cc:38:49:
         30:5d:a6:b7:4d:01:56:71:a3:22:14:be:0d:b2:50:16:20:84:
         2d:3e:18:d5:d8:de:11:e9:18:2f:78:87:ce:a1:01:94:30:f1:
         6f:97:65:45:e2:c3:be:a5:24:9c:b4:36:45:b7:67:65:d2:a6:
         04:a7:2c:1f:a5:eb:36:2a:73:ae:27:6f:08:21:51:97:d5:23:
         d2:d8:2d:32:69:e8:ae:50:6f:a5:1c:b4:1a:20:87:7f:94:4e:
         0f:50:64:8d:b7:3f:4c:41:d6:e5:f4:46:ab:b6:a4:53:fb:e3:
         6a:c5:d6:91:69:91:5a:4e:af:12:d3:92:5b:25:0e:b8:fc:8c:
         8a:d4:a4:12:1f:ae:e8:9a:02:31:22:78:58:55:8f:0c:b8:c1:
         2e:b0:f1:2a:03:cb:04:c9:6c:44:63:62:5b:50:87:73:a9:01:
         df:b0:03:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 09:50:06 2024 by rpki-client on console-fra.rpki-client.org