Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FB2q7aGTLvGBVtPrYUMJtdAtbXRXVCXQLAYGfFpQYH2J/1/3139312e33362e3136382e302f32312d3234203d3e20323633333336.roa
File:                     3139312e33362e3136382e302f32312d3234203d3e20323633333336.roa (raw, json)
Hash identifier:          tdRJSni9f9zZUn7SJt15xtUoMLyBRap69ecteMAdSbA=
Subject key identifier:   DD:40:CE:B3:43:13:CD:5A:AE:59:6D:F7:47:1A:07:18:62:D0:1B:FE
Certificate issuer:       /CN=35F51181E5E9E18B41B49E6409FA12C4899C586F
Certificate serial:       3126E87011E6365BA633EDFF85AEBB5AB93CABC3
Authority key identifier: 35:F5:11:81:E5:E9:E1:8B:41:B4:9E:64:09:FA:12:C4:89:9C:58:6F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/35F51181E5E9E18B41B49E6409FA12C4899C586F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FB2q7aGTLvGBVtPrYUMJtdAtbXRXVCXQLAYGfFpQYH2J/1/3139312e33362e3136382e302f32312d3234203d3e20323633333336.roa
Signing time:             Thu 04 Apr 2024 07:11:18 +0000
ROA not before:           Thu 04 Apr 2024 07:06:18 +0000
ROA not after:            Thu 03 Apr 2025 07:11:18 +0000
asID:                     263336
IP address blocks:        191.36.168.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FB2q7aGTLvGBVtPrYUMJtdAtbXRXVCXQLAYGfFpQYH2J/1/35F51181E5E9E18B41B49E6409FA12C4899C586F.crl
                          rsync://rpki-repo.registro.br/repo/FB2q7aGTLvGBVtPrYUMJtdAtbXRXVCXQLAYGfFpQYH2J/1/35F51181E5E9E18B41B49E6409FA12C4899C586F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/35F51181E5E9E18B41B49E6409FA12C4899C586F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 14:30:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:26:e8:70:11:e6:36:5b:a6:33:ed:ff:85:ae:bb:5a:b9:3c:ab:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35F51181E5E9E18B41B49E6409FA12C4899C586F
        Validity
            Not Before: Apr  4 07:06:18 2024 GMT
            Not After : Apr  3 07:11:18 2025 GMT
        Subject: CN=DD40CEB34313CD5AAE596DF7471A071862D01BFE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:2c:92:fa:80:22:8e:3f:d5:77:c8:c9:1c:b8:
                    ac:31:7f:ca:e1:15:03:94:49:4d:7c:dc:16:f5:4f:
                    0b:11:5d:10:4b:df:46:19:5b:eb:08:61:34:3b:21:
                    a9:d9:b6:e1:c0:59:17:d7:09:dd:da:97:b8:f4:e5:
                    85:47:93:7b:6b:f6:7b:bd:d3:3b:9e:f3:89:db:96:
                    ef:c5:54:4b:d5:73:f9:26:c7:8f:f0:22:fc:5b:a7:
                    46:90:86:3a:10:f6:5a:89:52:b7:8b:1e:e1:fb:87:
                    99:8e:4c:fb:06:46:53:13:b9:f4:a5:bd:a0:68:3a:
                    01:da:ed:40:74:02:aa:02:a6:ba:8d:61:e4:f4:76:
                    31:19:8b:bd:fc:b5:e1:99:dd:e9:ff:7d:9f:b6:fd:
                    77:b6:65:33:e1:3b:b6:a6:a3:d3:2c:11:8d:27:be:
                    1e:34:03:e8:57:d1:3a:8a:f7:ae:4b:31:0e:44:8a:
                    bc:65:a7:19:fb:22:e8:a1:b0:2b:6c:a4:e4:8b:ea:
                    0c:2b:30:1b:e9:97:c7:b1:83:de:e4:40:48:35:fb:
                    de:76:e5:24:d8:95:6f:39:64:fa:9f:06:d1:a1:aa:
                    74:41:f2:6a:8b:c5:92:d6:d5:01:b1:72:96:87:8a:
                    12:8a:14:cf:4d:e9:60:c4:e4:59:c9:78:30:4d:14:
                    ee:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:40:CE:B3:43:13:CD:5A:AE:59:6D:F7:47:1A:07:18:62:D0:1B:FE
            X509v3 Authority Key Identifier:
                keyid:35:F5:11:81:E5:E9:E1:8B:41:B4:9E:64:09:FA:12:C4:89:9C:58:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FB2q7aGTLvGBVtPrYUMJtdAtbXRXVCXQLAYGfFpQYH2J/1/35F51181E5E9E18B41B49E6409FA12C4899C586F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/35F51181E5E9E18B41B49E6409FA12C4899C586F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FB2q7aGTLvGBVtPrYUMJtdAtbXRXVCXQLAYGfFpQYH2J/1/3139312e33362e3136382e302f32312d3234203d3e20323633333336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.36.168.0/21

    Signature Algorithm: sha256WithRSAEncryption
         05:af:87:42:42:13:87:99:db:12:8e:ea:f6:20:f6:ab:9c:ea:
         95:2e:88:c8:91:b6:fb:83:f9:55:b6:ed:0c:1e:b5:0a:cf:f0:
         a3:72:7c:90:0d:32:ef:e6:12:0b:9a:3d:89:72:5f:bf:11:14:
         71:e4:3b:31:67:59:9c:1f:13:70:59:61:d9:c6:b4:28:0a:1d:
         7e:05:8d:ca:4b:b7:db:82:cb:1b:c4:d1:70:ee:4f:00:dc:55:
         ff:db:6d:be:09:69:27:3a:ae:82:69:ac:53:87:89:57:63:b1:
         dd:4b:6d:be:62:56:6f:89:b7:f8:8c:71:47:1c:14:2a:43:97:
         06:72:0b:6f:51:1c:ad:58:8a:99:fc:f9:c6:16:cf:49:bd:0c:
         f9:b5:81:f5:f3:41:0d:98:32:3d:8e:3d:22:17:0d:ed:12:8a:
         f4:e0:e7:01:a4:b0:fe:bc:4e:5f:d6:ee:27:9c:8f:3d:ba:d2:
         ad:83:cb:c1:ff:c2:e9:f8:f1:a4:ea:f4:a1:3c:8e:25:00:31:
         af:65:f1:c7:6e:02:70:c3:4b:a5:b5:6d:a9:9e:f7:e9:ed:88:
         38:ae:41:1b:28:24:cb:19:99:53:c2:2c:81:6e:c9:57:7c:dd:
         3f:56:7c:42:eb:0e:73:54:cd:ae:2a:bd:77:36:33:a6:c1:4f:
         69:f3:8e:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 14:19:51 2024 by rpki-client on console-ams.rpki-client.org