Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DHMQPB7KFTD3RWnQMQDzkXSp2fCQhkEFZSK3NYo5QDVs/1/3138392e38342e34342e302f32332d3234203d3e20323633343832.roa
File:                     3138392e38342e34342e302f32332d3234203d3e20323633343832.roa (raw, json)
Hash identifier:          VoQLdy+RFhXzcZRctrR9ABYMu+sDjIdpgBEgaZ583As=
Subject key identifier:   33:F8:4A:CF:EA:ED:48:B3:69:8C:67:AF:3F:D0:91:A9:55:DE:A2:A3
Certificate issuer:       /CN=FBF94AFF4C54027D56402BFC27B7A1EE29FCBA52
Certificate serial:       316D2E359B962334ABBB5BA7DFFDC661C84461BC
Authority key identifier: FB:F9:4A:FF:4C:54:02:7D:56:40:2B:FC:27:B7:A1:EE:29:FC:BA:52
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FBF94AFF4C54027D56402BFC27B7A1EE29FCBA52.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DHMQPB7KFTD3RWnQMQDzkXSp2fCQhkEFZSK3NYo5QDVs/1/3138392e38342e34342e302f32332d3234203d3e20323633343832.roa
Signing time:             Fri 17 May 2024 23:02:31 +0000
ROA not before:           Fri 17 May 2024 22:57:31 +0000
ROA not after:            Fri 16 May 2025 23:02:31 +0000
asID:                     263482
IP address blocks:        189.84.44.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DHMQPB7KFTD3RWnQMQDzkXSp2fCQhkEFZSK3NYo5QDVs/1/FBF94AFF4C54027D56402BFC27B7A1EE29FCBA52.crl
                          rsync://rpki-repo.registro.br/repo/DHMQPB7KFTD3RWnQMQDzkXSp2fCQhkEFZSK3NYo5QDVs/1/FBF94AFF4C54027D56402BFC27B7A1EE29FCBA52.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FBF94AFF4C54027D56402BFC27B7A1EE29FCBA52.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 21:15:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:6d:2e:35:9b:96:23:34:ab:bb:5b:a7:df:fd:c6:61:c8:44:61:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FBF94AFF4C54027D56402BFC27B7A1EE29FCBA52
        Validity
            Not Before: May 17 22:57:31 2024 GMT
            Not After : May 16 23:02:31 2025 GMT
        Subject: CN=33F84ACFEAED48B3698C67AF3FD091A955DEA2A3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:37:78:b0:bb:09:6f:42:84:85:4b:77:88:87:
                    1b:91:72:ba:db:c5:51:02:62:24:6d:34:2d:71:50:
                    58:99:ca:77:5d:09:22:f7:2c:60:aa:60:6a:b2:6c:
                    fd:7d:63:9c:94:96:db:d2:fb:8b:66:5a:be:d1:0e:
                    a6:41:75:11:60:c2:16:57:f9:39:bb:a6:cc:a4:f7:
                    56:7a:9f:10:3f:98:e1:c7:5c:b8:ec:38:63:5f:af:
                    49:3d:b0:e1:91:c2:84:14:a5:08:9a:f6:40:61:95:
                    55:ad:52:44:16:ce:5b:bf:35:62:c3:11:75:58:ed:
                    7e:36:e4:9f:4c:3e:47:23:d6:80:f4:5f:6f:e7:00:
                    5c:80:82:de:12:3e:4b:e5:69:dd:23:0f:c7:aa:91:
                    2f:5e:e9:d9:f3:a5:ee:ef:0a:62:13:63:b2:8a:2a:
                    ec:e1:4c:d9:5b:a3:6c:48:8f:e5:1f:18:dd:65:a8:
                    c7:3b:b5:0a:d4:dd:87:0d:61:39:7e:b8:6f:e0:94:
                    8f:a5:6e:e3:c6:09:20:45:f6:bf:7f:0d:29:c5:78:
                    a4:b6:49:fe:23:bb:2c:86:13:e8:d1:81:a6:05:f5:
                    a4:33:4f:24:bd:f9:76:fb:dd:5a:20:26:4e:b7:6b:
                    6c:9d:4d:f4:ab:cf:ac:9f:c0:b9:5d:d4:9b:e0:47:
                    dc:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:F8:4A:CF:EA:ED:48:B3:69:8C:67:AF:3F:D0:91:A9:55:DE:A2:A3
            X509v3 Authority Key Identifier:
                keyid:FB:F9:4A:FF:4C:54:02:7D:56:40:2B:FC:27:B7:A1:EE:29:FC:BA:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DHMQPB7KFTD3RWnQMQDzkXSp2fCQhkEFZSK3NYo5QDVs/1/FBF94AFF4C54027D56402BFC27B7A1EE29FCBA52.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FBF94AFF4C54027D56402BFC27B7A1EE29FCBA52.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DHMQPB7KFTD3RWnQMQDzkXSp2fCQhkEFZSK3NYo5QDVs/1/3138392e38342e34342e302f32332d3234203d3e20323633343832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.84.44.0/23

    Signature Algorithm: sha256WithRSAEncryption
         12:e6:5a:de:f9:37:6e:06:13:d0:1e:3c:27:52:56:00:74:a9:
         fa:d2:f3:69:d0:8b:7e:84:43:61:bc:a8:e2:4c:ed:5f:79:fc:
         b6:11:28:b7:7b:c2:1f:65:a9:54:ab:80:03:3a:22:11:47:b2:
         60:65:5f:97:30:16:e9:0f:f0:18:b1:04:c0:93:c2:bb:a9:6d:
         8f:f8:4c:f0:fb:1f:ea:c9:ba:7b:1b:81:c7:72:9a:a6:fc:46:
         3b:45:69:ec:46:bb:85:56:9c:18:5d:14:33:7e:a6:ae:49:a5:
         ed:71:34:21:ca:d5:23:b0:5f:1d:17:01:49:d6:ab:89:89:78:
         54:39:ce:e3:17:18:21:b2:cd:07:86:3e:31:fd:80:90:0a:3b:
         71:ee:47:00:21:8d:33:e0:00:75:4c:8a:83:dd:0c:d3:06:05:
         17:09:5f:75:49:4a:d2:13:34:55:32:38:de:9b:86:c3:ec:f7:
         eb:48:8b:3f:0b:de:45:fe:b2:90:17:f6:97:91:af:f2:44:24:
         91:2e:a6:f7:78:64:bc:75:00:a6:8a:78:f0:7e:f2:37:e5:5d:
         8f:06:1e:16:94:d5:99:7f:8c:27:b5:e5:e7:fa:6a:f9:32:fc:
         59:63:0b:b1:18:d3:39:49:ce:1c:52:40:39:d7:fd:4f:b3:6a:
         2c:9c:01:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 21:52:40 2024 by rpki-client on console-fra.rpki-client.org