Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DHMQPB7KFTD3RWnQMQDzkXSp2fCQhkEFZSK3NYo5QDVs/1/3139312e3234322e3231362e302f32322d3232203d3e20323633343832.roa
File:                     3139312e3234322e3231362e302f32322d3232203d3e20323633343832.roa (raw, json)
Hash identifier:          2sLvfsh4XGBFFrb0WdHVFXv4LtjJq01ahYf/P0+k1N8=
Subject key identifier:   F2:EE:87:73:97:81:8C:49:39:ED:44:00:2E:FB:EB:4B:1F:6D:36:EA
Certificate issuer:       /CN=FBF94AFF4C54027D56402BFC27B7A1EE29FCBA52
Certificate serial:       4C1EE44B606FE0538EE1FC06A458E6DC26561F40
Authority key identifier: FB:F9:4A:FF:4C:54:02:7D:56:40:2B:FC:27:B7:A1:EE:29:FC:BA:52
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FBF94AFF4C54027D56402BFC27B7A1EE29FCBA52.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DHMQPB7KFTD3RWnQMQDzkXSp2fCQhkEFZSK3NYo5QDVs/1/3139312e3234322e3231362e302f32322d3232203d3e20323633343832.roa
Signing time:             Thu 04 Apr 2024 09:31:45 +0000
ROA not before:           Thu 04 Apr 2024 09:26:45 +0000
ROA not after:            Thu 03 Apr 2025 09:31:45 +0000
asID:                     263482
IP address blocks:        191.242.216.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DHMQPB7KFTD3RWnQMQDzkXSp2fCQhkEFZSK3NYo5QDVs/1/FBF94AFF4C54027D56402BFC27B7A1EE29FCBA52.crl
                          rsync://rpki-repo.registro.br/repo/DHMQPB7KFTD3RWnQMQDzkXSp2fCQhkEFZSK3NYo5QDVs/1/FBF94AFF4C54027D56402BFC27B7A1EE29FCBA52.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FBF94AFF4C54027D56402BFC27B7A1EE29FCBA52.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 06:55:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:1e:e4:4b:60:6f:e0:53:8e:e1:fc:06:a4:58:e6:dc:26:56:1f:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FBF94AFF4C54027D56402BFC27B7A1EE29FCBA52
        Validity
            Not Before: Apr  4 09:26:45 2024 GMT
            Not After : Apr  3 09:31:45 2025 GMT
        Subject: CN=F2EE877397818C4939ED44002EFBEB4B1F6D36EA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:90:a2:fe:16:77:19:2b:c2:f8:ce:d2:39:63:
                    55:bf:2a:9f:9b:99:9c:ec:51:eb:34:cd:3d:c2:16:
                    79:d8:84:49:38:28:fb:7e:e6:7e:2c:16:91:21:c7:
                    8b:90:bd:0b:9c:03:de:15:b4:af:a2:0c:33:5d:88:
                    9e:1f:c9:e0:b8:35:15:1e:b7:3c:3e:2d:fe:4c:3a:
                    ba:1a:37:4e:02:26:a7:b1:0b:7c:34:da:0f:87:65:
                    bb:e8:5f:d1:66:27:6d:42:0a:84:6e:60:ba:ca:b7:
                    f0:31:2d:8b:c3:5e:06:64:ee:67:fc:81:31:dc:bb:
                    b2:d7:d2:51:db:0e:e2:1d:7d:71:f5:e9:b0:b8:9f:
                    8b:82:6c:47:33:e7:ab:56:72:cf:84:0b:16:1d:ac:
                    54:62:f5:6d:d3:6a:15:32:e5:68:b1:1f:fe:78:a5:
                    ec:dd:ce:3c:08:d1:35:2e:a5:8e:81:a4:d7:d8:eb:
                    f9:d1:e1:f6:7c:bf:ac:1a:9c:f8:6a:e3:9a:0c:15:
                    91:ba:3e:63:7d:b0:87:51:b1:af:0e:3f:72:bf:6c:
                    8c:eb:0e:0e:67:aa:d8:a5:04:6f:8b:b0:83:eb:eb:
                    27:ab:1f:4b:03:ac:f5:4a:36:07:cc:33:41:20:3e:
                    97:7b:b1:ae:ea:c5:45:dd:cf:78:48:5c:75:d0:a8:
                    5b:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:EE:87:73:97:81:8C:49:39:ED:44:00:2E:FB:EB:4B:1F:6D:36:EA
            X509v3 Authority Key Identifier:
                keyid:FB:F9:4A:FF:4C:54:02:7D:56:40:2B:FC:27:B7:A1:EE:29:FC:BA:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DHMQPB7KFTD3RWnQMQDzkXSp2fCQhkEFZSK3NYo5QDVs/1/FBF94AFF4C54027D56402BFC27B7A1EE29FCBA52.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FBF94AFF4C54027D56402BFC27B7A1EE29FCBA52.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DHMQPB7KFTD3RWnQMQDzkXSp2fCQhkEFZSK3NYo5QDVs/1/3139312e3234322e3231362e302f32322d3232203d3e20323633343832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.242.216.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4c:64:79:23:7d:38:4e:db:2f:29:f0:cf:3e:81:3f:3b:4c:e0:
         61:2b:ba:81:ed:6e:10:62:24:e9:c8:c9:57:7e:c5:e7:57:cd:
         29:80:e1:0b:7c:63:08:2c:8d:eb:48:65:29:43:9a:ad:e7:8c:
         e2:79:a1:72:0a:7f:8a:2b:42:0c:1a:ee:71:7a:2d:d2:91:e5:
         cc:64:dd:18:f1:9f:f3:c1:c2:e3:69:7d:80:0d:ef:32:ad:57:
         2a:56:7d:4f:9f:33:9d:5f:e7:29:34:7f:2a:e0:4a:65:a3:4b:
         fb:eb:84:78:ed:48:ec:36:9b:4d:23:2e:c7:2c:08:ef:8b:d8:
         29:56:c1:62:17:f4:64:f8:81:22:19:cc:82:18:d0:d5:bf:bc:
         f9:50:1e:17:f0:94:ee:cc:e3:44:c4:f8:aa:41:c9:9d:5e:eb:
         3d:3c:8f:da:2b:79:e6:52:8f:ce:78:63:ab:44:9f:d2:7d:7e:
         c7:da:60:b3:02:38:37:36:40:a8:4f:f7:89:e5:bd:5c:8f:78:
         50:6a:43:a4:58:c8:6d:06:a7:4d:b3:46:44:b0:10:eb:59:f3:
         8a:92:32:db:68:ed:22:8e:5d:b4:11:ec:53:08:ea:e7:5d:9b:
         61:06:e3:4a:3f:c7:14:f6:9c:d4:4f:b2:c4:86:36:2c:a9:96:
         e0:cd:e4:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 09:12:29 2024 by rpki-client on console-fra.rpki-client.org