Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E2NusR2ijw6G3YNiMEF333MRkoDTDbWggx7YKfVrfUmw/0/3138392e33362e3136302e302f31392d3234203d3e20323632353839.roa
File:                     3138392e33362e3136302e302f31392d3234203d3e20323632353839.roa (raw, json)
Hash identifier:          HnawtpMPL8uzhoe88zDTgF5WE7/AoRxejqPR3UFciw4=
Subject key identifier:   B2:5F:4F:9B:21:77:F2:B1:54:DE:70:0E:2D:EB:E9:FA:62:6B:10:24
Certificate issuer:       /CN=F44EDF36C881BC97A766BDEEFF070251613E095D
Certificate serial:       5488FB99F1C724F90B9AB8C49E55B87D5827BB91
Authority key identifier: F4:4E:DF:36:C8:81:BC:97:A7:66:BD:EE:FF:07:02:51:61:3E:09:5D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F44EDF36C881BC97A766BDEEFF070251613E095D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E2NusR2ijw6G3YNiMEF333MRkoDTDbWggx7YKfVrfUmw/0/3138392e33362e3136302e302f31392d3234203d3e20323632353839.roa
Signing time:             Tue 28 Nov 2023 20:33:53 +0000
ROA not before:           Tue 28 Nov 2023 20:28:53 +0000
ROA not after:            Tue 26 Nov 2024 20:33:53 +0000
asID:                     262589
IP address blocks:        189.36.160.0/19 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/E2NusR2ijw6G3YNiMEF333MRkoDTDbWggx7YKfVrfUmw/0/F44EDF36C881BC97A766BDEEFF070251613E095D.crl
                          rsync://rpki-repo.registro.br/repo/E2NusR2ijw6G3YNiMEF333MRkoDTDbWggx7YKfVrfUmw/0/F44EDF36C881BC97A766BDEEFF070251613E095D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F44EDF36C881BC97A766BDEEFF070251613E095D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 30 Mar 2024 02:33:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:88:fb:99:f1:c7:24:f9:0b:9a:b8:c4:9e:55:b8:7d:58:27:bb:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F44EDF36C881BC97A766BDEEFF070251613E095D
        Validity
            Not Before: Nov 28 20:28:53 2023 GMT
            Not After : Nov 26 20:33:53 2024 GMT
        Subject: CN=B25F4F9B2177F2B154DE700E2DEBE9FA626B1024
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:31:ca:3c:d2:aa:7f:01:c2:a6:87:89:f6:4a:
                    3c:72:08:07:a0:70:14:11:98:d0:c0:e5:ac:6e:99:
                    bc:43:9e:0f:ac:fa:2f:d8:c4:21:b1:04:f5:26:40:
                    70:9f:d6:4f:12:6e:88:63:10:12:b1:f9:44:28:9b:
                    0c:aa:23:04:16:0f:5c:d6:2d:57:ff:19:0c:0b:c4:
                    1b:02:62:54:45:bd:e8:14:49:e4:9a:f1:52:05:26:
                    4e:c8:6c:dd:e4:32:ed:c5:fd:d4:f2:22:da:d7:a6:
                    3f:33:7f:1e:67:80:06:9f:32:5b:11:00:74:eb:c8:
                    db:f8:5e:b7:b2:c6:29:72:85:88:f1:c1:f3:66:ba:
                    db:6b:74:11:f2:e0:51:75:71:e7:ab:b6:71:18:28:
                    55:66:34:ae:ba:5a:d1:2a:a9:7b:95:b2:38:9c:dc:
                    e6:9e:7b:de:1f:48:bf:ae:c6:f5:9a:a0:5a:95:73:
                    71:7f:03:99:2b:6c:49:1d:55:e2:fa:0c:a6:5c:70:
                    5e:df:1c:6f:fb:a2:18:42:47:e9:ae:54:fd:aa:b4:
                    6e:51:60:82:48:33:5f:d0:f8:33:2b:5c:5b:9c:71:
                    16:1b:02:b8:d7:da:b1:4f:f8:2f:68:0d:7e:6f:7c:
                    4c:97:ba:82:ed:1d:6f:cf:1c:a3:70:73:17:34:fe:
                    09:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:5F:4F:9B:21:77:F2:B1:54:DE:70:0E:2D:EB:E9:FA:62:6B:10:24
            X509v3 Authority Key Identifier:
                keyid:F4:4E:DF:36:C8:81:BC:97:A7:66:BD:EE:FF:07:02:51:61:3E:09:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E2NusR2ijw6G3YNiMEF333MRkoDTDbWggx7YKfVrfUmw/0/F44EDF36C881BC97A766BDEEFF070251613E095D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F44EDF36C881BC97A766BDEEFF070251613E095D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E2NusR2ijw6G3YNiMEF333MRkoDTDbWggx7YKfVrfUmw/0/3138392e33362e3136302e302f31392d3234203d3e20323632353839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.36.160.0/19

    Signature Algorithm: sha256WithRSAEncryption
         72:56:72:30:c3:4b:a7:cf:ca:c0:84:5d:94:63:ee:59:a6:1a:
         63:30:da:7d:d5:de:b5:59:12:23:b9:53:96:6e:19:03:9e:a3:
         63:94:72:dd:2e:bc:7a:13:ae:3f:cc:82:4b:1a:08:4b:26:90:
         86:67:c4:68:cb:7d:18:52:43:9f:23:00:7b:88:f5:30:17:d1:
         16:76:9e:e7:52:3a:34:aa:f0:15:0d:0f:cd:96:71:8d:f8:ab:
         0c:f7:e6:2d:7d:a6:4b:8d:c0:94:d1:d9:b6:d5:f9:4b:e3:f2:
         aa:57:c5:ee:05:2e:92:18:0b:13:3b:8e:55:d1:77:46:e9:26:
         68:b5:c9:f5:1a:b3:ac:4f:28:65:77:48:8c:fd:13:1b:8d:01:
         4f:ac:3b:b0:26:40:32:9a:ff:d8:31:f0:bf:97:c5:d9:23:58:
         ee:c2:e8:64:6c:3a:62:6d:10:8c:d0:e2:f5:59:07:37:89:f6:
         8c:3f:4d:ad:07:8f:a2:6c:04:44:2d:02:70:ed:78:40:38:4a:
         5c:54:c1:6f:42:4b:aa:6e:f7:e2:49:50:ff:10:57:d4:68:cc:
         be:58:ac:fb:6e:10:53:92:b6:4a:b6:c7:9a:d6:72:7f:df:32:
         ac:6a:6e:ad:53:db:dd:e1:2d:01:71:e1:f1:89:73:52:3f:57:
         32:23:04:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 29 04:59:37 2024 by rpki-client on console-fra.rpki-client.org