Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D9wAW9gmXSmo2se5bPkDTiL5VE3z7oXUAehaCK2gzWeZ/0/3136342e3136332e39362e302f32322d3232203d3e20323635393439.roa
File:                     3136342e3136332e39362e302f32322d3232203d3e20323635393439.roa (raw, json)
Hash identifier:          dQwUlYPxCfbkWlH0KDLc9Wu3bP6CLVHS4yDYHK4tGjw=
Subject key identifier:   1A:51:D4:AF:59:D1:BE:01:D2:72:5B:13:DA:F9:46:FB:63:D6:85:B0
Certificate issuer:       /CN=FF4ACB0828101FFD6F91BFBCFBF05EE98F2F9922
Certificate serial:       7D7ADD04C2C25B15AD83E0117962875019DD858C
Authority key identifier: FF:4A:CB:08:28:10:1F:FD:6F:91:BF:BC:FB:F0:5E:E9:8F:2F:99:22
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF4ACB0828101FFD6F91BFBCFBF05EE98F2F9922.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D9wAW9gmXSmo2se5bPkDTiL5VE3z7oXUAehaCK2gzWeZ/0/3136342e3136332e39362e302f32322d3232203d3e20323635393439.roa
Signing time:             Fri 22 Nov 2024 21:13:16 +0000
ROA not before:           Fri 22 Nov 2024 21:08:16 +0000
ROA not after:            Fri 21 Nov 2025 21:13:16 +0000
asID:                     265949
IP address blocks:        164.163.96.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/D9wAW9gmXSmo2se5bPkDTiL5VE3z7oXUAehaCK2gzWeZ/0/FF4ACB0828101FFD6F91BFBCFBF05EE98F2F9922.crl
                          rsync://rpki-repo.registro.br/repo/D9wAW9gmXSmo2se5bPkDTiL5VE3z7oXUAehaCK2gzWeZ/0/FF4ACB0828101FFD6F91BFBCFBF05EE98F2F9922.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF4ACB0828101FFD6F91BFBCFBF05EE98F2F9922.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 14:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:7a:dd:04:c2:c2:5b:15:ad:83:e0:11:79:62:87:50:19:dd:85:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF4ACB0828101FFD6F91BFBCFBF05EE98F2F9922
        Validity
            Not Before: Nov 22 21:08:16 2024 GMT
            Not After : Nov 21 21:13:16 2025 GMT
        Subject: CN=1A51D4AF59D1BE01D2725B13DAF946FB63D685B0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:ca:60:61:69:55:74:58:89:08:1f:72:dd:7f:
                    25:f8:a9:1a:3a:d6:69:42:7d:9e:70:d6:e7:31:36:
                    eb:36:28:9e:61:13:7f:48:32:67:34:ec:2e:c1:3f:
                    57:a8:21:93:44:3d:82:65:9f:fc:4c:58:cd:0e:86:
                    5b:86:d4:fc:eb:62:18:2d:26:a2:32:df:76:6a:8a:
                    8b:d4:df:a7:da:27:50:1e:00:a6:f5:c3:53:63:55:
                    91:63:06:b8:4a:06:83:48:83:a5:da:54:c6:fd:d7:
                    63:42:ca:7d:9a:bc:8e:35:f2:8c:3b:41:8d:3d:73:
                    c2:d4:10:bb:15:8a:2d:9c:aa:6f:81:e6:6c:98:06:
                    3a:c4:bd:37:79:b8:64:73:20:74:62:74:5c:2c:2d:
                    77:69:04:21:7a:5e:cc:d0:01:03:59:15:35:ad:68:
                    6d:62:34:f3:03:24:bb:2e:b3:ef:ab:9a:06:62:51:
                    39:da:49:28:8d:1e:6e:c4:6a:92:c4:9c:df:03:07:
                    a6:43:49:7a:0a:f8:bd:68:29:7a:f0:f9:17:16:41:
                    e5:f5:05:af:e0:71:77:d5:9a:cb:8a:82:27:cb:03:
                    97:69:95:14:2a:fb:cf:39:8a:2d:be:99:9b:2d:3b:
                    7f:90:8d:7e:e8:bb:22:84:be:d1:fd:da:a5:45:eb:
                    13:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:51:D4:AF:59:D1:BE:01:D2:72:5B:13:DA:F9:46:FB:63:D6:85:B0
            X509v3 Authority Key Identifier:
                keyid:FF:4A:CB:08:28:10:1F:FD:6F:91:BF:BC:FB:F0:5E:E9:8F:2F:99:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D9wAW9gmXSmo2se5bPkDTiL5VE3z7oXUAehaCK2gzWeZ/0/FF4ACB0828101FFD6F91BFBCFBF05EE98F2F9922.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF4ACB0828101FFD6F91BFBCFBF05EE98F2F9922.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D9wAW9gmXSmo2se5bPkDTiL5VE3z7oXUAehaCK2gzWeZ/0/3136342e3136332e39362e302f32322d3232203d3e20323635393439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.163.96.0/22

    Signature Algorithm: sha256WithRSAEncryption
         11:5b:58:fa:98:ea:c4:ea:55:2a:65:d5:56:51:b5:1d:bd:05:
         71:21:98:93:ed:1b:5d:8d:c6:21:b5:7d:02:26:3d:9b:7f:5f:
         87:99:70:fb:b0:8e:8a:ae:14:44:71:1d:a9:b1:91:85:93:08:
         2b:9d:47:b7:f8:b8:e6:a7:e7:43:c1:15:d2:9f:88:ea:a2:6a:
         66:4a:b3:e0:7d:51:8c:88:2c:39:85:d2:89:96:b1:13:1c:cf:
         dd:50:5d:b0:0b:7c:51:25:75:55:00:99:85:e5:31:b3:9b:73:
         0f:be:74:dd:e1:13:74:67:08:1e:1d:bb:f9:c7:d1:cc:fa:f0:
         06:1f:1a:cb:0d:22:ab:91:fe:a5:07:42:f1:69:39:d3:34:8d:
         2f:3a:13:93:a8:73:b5:b6:b9:6b:0b:44:c0:7d:ed:fa:64:43:
         4b:d4:43:f5:04:36:6d:80:ab:09:be:99:54:f2:42:1e:b5:77:
         cf:49:a9:61:03:29:d2:48:3e:de:d0:a9:23:d4:39:3a:25:17:
         bf:7f:8b:b0:b0:61:4b:0b:1f:21:d1:37:fd:af:8b:dc:a1:f9:
         80:75:d2:77:ca:5c:97:ed:9e:56:82:4e:9d:46:18:a4:80:b4:
         8a:b1:01:aa:19:b6:ce:34:31:3d:fa:3f:bf:64:1f:c9:32:6d:
         e5:18:91:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 17:13:51 2024 by rpki-client on console-fra.rpki-client.org