Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D9wAW9gmXSmo2se5bPkDTiL5VE3z7oXUAehaCK2gzWeZ/0/3136342e3136332e39362e302f32332d3233203d3e20323635393439.roa
File:                     3136342e3136332e39362e302f32332d3233203d3e20323635393439.roa (raw, json)
Hash identifier:          MnCHzpeWEMkdoi6Y0TKsBFU0f156gofTBYvOfOW1gas=
Subject key identifier:   73:8A:9A:AA:F7:EF:B6:C6:1A:A6:42:39:5C:88:8A:6D:F6:E1:C7:1D
Certificate issuer:       /CN=FF4ACB0828101FFD6F91BFBCFBF05EE98F2F9922
Certificate serial:       0906EC7587A7F70711FF2480F76BC869257BC1D4
Authority key identifier: FF:4A:CB:08:28:10:1F:FD:6F:91:BF:BC:FB:F0:5E:E9:8F:2F:99:22
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF4ACB0828101FFD6F91BFBCFBF05EE98F2F9922.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D9wAW9gmXSmo2se5bPkDTiL5VE3z7oXUAehaCK2gzWeZ/0/3136342e3136332e39362e302f32332d3233203d3e20323635393439.roa
Signing time:             Fri 22 Nov 2024 21:13:17 +0000
ROA not before:           Fri 22 Nov 2024 21:08:17 +0000
ROA not after:            Fri 21 Nov 2025 21:13:17 +0000
asID:                     265949
IP address blocks:        164.163.96.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/D9wAW9gmXSmo2se5bPkDTiL5VE3z7oXUAehaCK2gzWeZ/0/FF4ACB0828101FFD6F91BFBCFBF05EE98F2F9922.crl
                          rsync://rpki-repo.registro.br/repo/D9wAW9gmXSmo2se5bPkDTiL5VE3z7oXUAehaCK2gzWeZ/0/FF4ACB0828101FFD6F91BFBCFBF05EE98F2F9922.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF4ACB0828101FFD6F91BFBCFBF05EE98F2F9922.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 14:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:06:ec:75:87:a7:f7:07:11:ff:24:80:f7:6b:c8:69:25:7b:c1:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF4ACB0828101FFD6F91BFBCFBF05EE98F2F9922
        Validity
            Not Before: Nov 22 21:08:17 2024 GMT
            Not After : Nov 21 21:13:17 2025 GMT
        Subject: CN=738A9AAAF7EFB6C61AA642395C888A6DF6E1C71D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:ec:49:7e:c4:70:e8:a9:a5:83:51:98:be:97:
                    7e:b4:96:b3:e4:d6:bf:02:a2:52:6b:de:1a:c4:86:
                    29:45:7a:3e:35:0e:1c:4d:3e:7d:30:5c:32:6b:ba:
                    89:1d:bd:06:1c:4c:98:13:a5:6b:b4:65:11:ad:47:
                    3c:a7:f5:46:8a:ba:8b:8c:85:57:ca:38:2f:b0:e4:
                    0e:91:1d:e1:6f:ea:d7:c5:c1:f0:35:59:c0:bd:dc:
                    eb:1c:d9:6c:1b:61:d0:a7:0f:f0:a9:b5:a2:f9:4a:
                    d4:d7:82:4f:a3:70:b9:7d:cb:c3:81:ca:84:0e:6e:
                    52:dc:d0:24:87:4e:8e:52:45:57:bb:0c:74:f2:12:
                    e5:48:3a:62:ac:97:e0:59:67:00:5d:0b:12:54:1d:
                    f5:8f:cb:c4:5f:45:b2:fd:5f:c8:48:a7:cb:6e:f5:
                    9e:7b:26:43:e1:ed:68:7c:37:b7:37:7e:b6:98:25:
                    a7:5c:57:d8:ab:d8:e2:ba:0d:aa:f8:e2:02:78:fc:
                    da:c6:32:03:fb:cd:99:b0:ba:2c:5b:d4:7e:42:d3:
                    8d:80:8d:25:e1:a0:05:95:20:31:ed:2e:65:31:a5:
                    55:c7:f1:09:1a:02:16:53:f1:b8:55:ed:a0:bf:9b:
                    a1:09:be:17:18:0a:b3:a5:4b:2b:ad:27:c2:0c:e2:
                    b9:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:8A:9A:AA:F7:EF:B6:C6:1A:A6:42:39:5C:88:8A:6D:F6:E1:C7:1D
            X509v3 Authority Key Identifier:
                keyid:FF:4A:CB:08:28:10:1F:FD:6F:91:BF:BC:FB:F0:5E:E9:8F:2F:99:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D9wAW9gmXSmo2se5bPkDTiL5VE3z7oXUAehaCK2gzWeZ/0/FF4ACB0828101FFD6F91BFBCFBF05EE98F2F9922.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF4ACB0828101FFD6F91BFBCFBF05EE98F2F9922.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D9wAW9gmXSmo2se5bPkDTiL5VE3z7oXUAehaCK2gzWeZ/0/3136342e3136332e39362e302f32332d3233203d3e20323635393439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.163.96.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0d:6e:60:89:2b:df:12:cd:a7:00:cc:bd:24:09:c6:af:2a:5e:
         1b:da:39:c7:b2:67:a2:83:1c:7d:d6:22:8a:86:73:7e:74:61:
         d9:87:30:40:08:fc:92:29:39:5c:89:3d:5a:2a:d9:c2:7b:e7:
         ba:73:b2:c5:bf:ae:fe:b6:c0:92:41:a1:db:74:7f:3d:79:c4:
         dd:a8:3b:b7:e9:76:7e:5d:26:4e:d7:98:27:f9:de:0c:c8:a5:
         0c:bc:92:db:4a:d5:22:4e:b7:f9:c3:ba:2a:f1:b3:e6:78:a1:
         46:54:44:cf:d5:5a:6c:33:a3:7d:27:08:60:c1:8a:41:1a:ab:
         b0:b7:f7:d6:5a:ef:83:20:26:47:2b:d8:a1:4e:de:a2:66:99:
         23:b7:20:54:7e:78:04:a0:e6:4a:e4:6f:5e:19:bb:e8:3c:fb:
         25:18:23:1a:57:1b:52:e6:23:5b:e7:3f:ee:29:28:5c:9c:2d:
         ee:a2:2e:5a:9e:b6:5d:f1:ea:c4:c4:34:61:84:3e:5c:c3:3e:
         c0:35:30:1d:47:e3:d2:70:32:b7:6b:38:3d:1e:5e:6b:cd:a2:
         0a:44:45:b3:54:38:8d:3c:0d:92:90:8e:ca:5c:7d:f0:91:e3:
         1c:51:0e:96:6a:15:78:42:bb:2e:46:7b:1f:d3:b3:dd:02:42:
         7e:1c:11:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 17:13:51 2024 by rpki-client on console-fra.rpki-client.org