Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DVaBNpcMKzq7DBzxANUPfQCgHSD1E3zauTXCscViW4H4/0/3230312e37312e3132382e302f31392d3234203d3e203238363335.roa
File:                     3230312e37312e3132382e302f31392d3234203d3e203238363335.roa (raw, json)
Hash identifier:          wnVh0VXpmFwrtFdnUelUowFGhavCgceJ8+BTpk/uZ0M=
Subject key identifier:   04:19:96:42:56:9A:49:4F:1C:17:EE:41:BA:22:DC:DD:3C:18:49:B7
Certificate issuer:       /CN=FF5D171186C7F92AA82E56A3848B9D1390938458
Certificate serial:       3EF5C6949C42664C6E26F279799E3CCCDE5ECE83
Authority key identifier: FF:5D:17:11:86:C7:F9:2A:A8:2E:56:A3:84:8B:9D:13:90:93:84:58
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF5D171186C7F92AA82E56A3848B9D1390938458.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DVaBNpcMKzq7DBzxANUPfQCgHSD1E3zauTXCscViW4H4/0/3230312e37312e3132382e302f31392d3234203d3e203238363335.roa
Signing time:             Wed 29 May 2024 18:17:18 +0000
ROA not before:           Wed 29 May 2024 18:12:18 +0000
ROA not after:            Wed 28 May 2025 18:17:18 +0000
asID:                     28635
IP address blocks:        201.71.128.0/19 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DVaBNpcMKzq7DBzxANUPfQCgHSD1E3zauTXCscViW4H4/0/FF5D171186C7F92AA82E56A3848B9D1390938458.crl
                          rsync://rpki-repo.registro.br/repo/DVaBNpcMKzq7DBzxANUPfQCgHSD1E3zauTXCscViW4H4/0/FF5D171186C7F92AA82E56A3848B9D1390938458.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF5D171186C7F92AA82E56A3848B9D1390938458.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 23:59:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:f5:c6:94:9c:42:66:4c:6e:26:f2:79:79:9e:3c:cc:de:5e:ce:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF5D171186C7F92AA82E56A3848B9D1390938458
        Validity
            Not Before: May 29 18:12:18 2024 GMT
            Not After : May 28 18:17:18 2025 GMT
        Subject: CN=04199642569A494F1C17EE41BA22DCDD3C1849B7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:e2:6c:41:ba:79:15:8f:dd:28:ea:0d:f4:57:
                    6e:74:10:48:c7:74:cb:21:23:5b:d4:51:07:37:3f:
                    78:e3:06:d0:80:ce:04:91:6b:da:a9:59:e3:36:33:
                    7c:85:9b:0f:8d:ee:bd:cd:27:dc:e7:9a:34:6d:3f:
                    03:a2:ae:42:2c:d4:05:e6:f6:89:96:2b:1b:2a:45:
                    0c:c2:df:09:6a:53:31:d1:5f:fb:61:8a:ae:da:a2:
                    de:dd:31:18:d2:43:59:db:8e:9b:0b:6f:80:00:df:
                    dc:90:6f:85:dc:0c:48:e3:79:41:7c:18:e4:2f:48:
                    9e:a1:55:c6:af:1a:cf:00:dd:ca:48:c3:f6:27:b5:
                    6c:e4:a9:7d:88:64:f3:be:ed:ba:75:f1:09:de:8e:
                    b6:95:77:9a:35:27:5f:c6:04:29:5e:2f:aa:ba:d0:
                    3c:d8:f4:c7:42:07:bc:5e:15:d1:18:ca:08:ee:c0:
                    65:bc:8f:86:4e:2f:ef:7a:3d:62:04:07:12:69:34:
                    75:d6:3e:51:f9:2c:cc:0c:50:2e:9b:57:65:58:24:
                    82:7c:6e:45:ad:8d:9f:98:6b:53:57:58:50:99:8a:
                    05:e0:20:62:6a:15:d9:6d:76:3a:67:61:ed:4d:69:
                    19:2e:9c:ae:8a:d3:9d:67:08:cd:10:da:c0:32:96:
                    35:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:19:96:42:56:9A:49:4F:1C:17:EE:41:BA:22:DC:DD:3C:18:49:B7
            X509v3 Authority Key Identifier:
                keyid:FF:5D:17:11:86:C7:F9:2A:A8:2E:56:A3:84:8B:9D:13:90:93:84:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DVaBNpcMKzq7DBzxANUPfQCgHSD1E3zauTXCscViW4H4/0/FF5D171186C7F92AA82E56A3848B9D1390938458.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF5D171186C7F92AA82E56A3848B9D1390938458.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DVaBNpcMKzq7DBzxANUPfQCgHSD1E3zauTXCscViW4H4/0/3230312e37312e3132382e302f31392d3234203d3e203238363335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.71.128.0/19

    Signature Algorithm: sha256WithRSAEncryption
         8c:d6:93:ab:71:ee:9a:db:9c:fc:bf:70:0f:a8:22:77:fc:66:
         c8:ee:ec:5a:2c:d0:35:08:d0:4f:96:9e:22:95:b9:73:f8:18:
         50:8f:a4:8b:d8:ed:d2:29:35:e0:11:6c:8e:d2:25:e7:8d:56:
         df:0d:80:c9:b1:9d:22:18:1e:99:55:4a:99:53:ac:62:2a:37:
         0f:dc:c4:c6:26:26:0c:ca:53:59:77:da:0f:ea:f2:32:43:f7:
         4e:1b:62:06:c6:f6:7a:81:47:36:7c:f8:dd:f8:a5:f1:a5:93:
         4a:98:af:bb:6a:8c:48:76:c9:f3:66:12:f1:7c:64:a6:95:21:
         88:0d:fb:8b:c0:e4:62:5e:31:42:9e:05:ee:95:33:c5:27:00:
         7f:07:40:24:7c:e5:42:18:b8:2c:5f:cb:93:88:3d:9f:fe:3a:
         dd:6a:c7:79:8e:e8:49:d7:05:63:8d:74:02:0a:e3:d2:3c:25:
         77:40:08:98:b9:e2:29:ff:bb:5f:22:74:57:db:25:79:a5:58:
         2b:a5:df:c4:21:89:1a:6e:b4:8e:59:39:e3:bf:a5:2d:02:f9:
         e8:9c:12:2f:a0:80:04:6b:ed:42:25:92:19:f8:b0:f9:b3:14:
         c3:d2:4c:9a:77:0b:75:16:86:b3:00:9d:09:0d:18:25:5e:73:
         34:0b:d6:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 01:25:37 2024 by rpki-client on console-ams.rpki-client.org