Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FB3WX4aCmLrBhhQtTFCUG7d63jpVkoX4FkDDngLKorgT/1/3138362e3139322e36342e302f32302d3234203d3e20323632373237.roa
File:                     3138362e3139322e36342e302f32302d3234203d3e20323632373237.roa (raw, json)
Hash identifier:          9K+CCa3+8GgHR+7WLHTudcYIIB6xt7Ru4lMVlLaURJE=
Subject key identifier:   62:90:BC:3D:58:54:56:EF:93:CF:00:CF:5A:34:1A:AB:D6:EB:1C:93
Certificate issuer:       /CN=20453DF9CBCD59107BDF91EC0FDEEE8A867A031B
Certificate serial:       474B6F823A72E8C6B8EE1F3B3EBB05B9661748B0
Authority key identifier: 20:45:3D:F9:CB:CD:59:10:7B:DF:91:EC:0F:DE:EE:8A:86:7A:03:1B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/20453DF9CBCD59107BDF91EC0FDEEE8A867A031B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FB3WX4aCmLrBhhQtTFCUG7d63jpVkoX4FkDDngLKorgT/1/3138362e3139322e36342e302f32302d3234203d3e20323632373237.roa
Signing time:             Thu 04 Apr 2024 01:56:59 +0000
ROA not before:           Thu 04 Apr 2024 01:51:59 +0000
ROA not after:            Thu 03 Apr 2025 01:56:59 +0000
asID:                     262727
IP address blocks:        186.192.64.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FB3WX4aCmLrBhhQtTFCUG7d63jpVkoX4FkDDngLKorgT/1/20453DF9CBCD59107BDF91EC0FDEEE8A867A031B.crl
                          rsync://rpki-repo.registro.br/repo/FB3WX4aCmLrBhhQtTFCUG7d63jpVkoX4FkDDngLKorgT/1/20453DF9CBCD59107BDF91EC0FDEEE8A867A031B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/20453DF9CBCD59107BDF91EC0FDEEE8A867A031B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 20:23:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:4b:6f:82:3a:72:e8:c6:b8:ee:1f:3b:3e:bb:05:b9:66:17:48:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20453DF9CBCD59107BDF91EC0FDEEE8A867A031B
        Validity
            Not Before: Apr  4 01:51:59 2024 GMT
            Not After : Apr  3 01:56:59 2025 GMT
        Subject: CN=6290BC3D585456EF93CF00CF5A341AABD6EB1C93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:fb:40:c7:c5:6a:7a:f6:2e:ed:c5:4c:b0:b1:
                    e0:8c:31:db:7f:f2:a6:9d:51:5a:d0:de:52:0e:1e:
                    c6:51:f2:59:b5:61:4e:78:8a:99:83:58:18:bf:75:
                    ab:71:7f:d0:0e:cf:f7:d0:06:b3:3f:76:f5:df:3c:
                    36:2f:86:0c:b7:18:85:fb:86:ed:bb:05:7f:f5:3e:
                    a8:23:03:10:6b:e0:fd:dd:ea:5d:70:b6:1e:81:30:
                    ad:08:4c:47:84:22:8e:17:4e:2a:fe:97:91:3f:f5:
                    0e:33:dc:c7:99:a1:d7:00:43:1c:63:6b:d0:ae:74:
                    d9:ae:80:73:8a:08:ca:35:ee:74:e3:39:17:fa:8e:
                    1e:c5:58:ac:b4:04:5e:3f:82:43:1b:00:b7:af:98:
                    0b:1b:dd:b6:43:22:72:81:bc:cb:c0:d0:25:48:20:
                    eb:3b:59:52:bd:c7:50:9f:2b:5d:33:91:c0:81:9c:
                    8f:05:16:9f:7a:1d:b7:03:87:7c:8c:78:20:3d:87:
                    cc:16:67:54:30:de:8a:71:e7:90:95:02:43:5b:d3:
                    9b:8f:69:2f:54:c9:14:ce:54:fc:99:da:61:c2:15:
                    ba:9d:06:bc:8e:78:4d:97:47:9d:43:e5:64:a1:b8:
                    5c:54:2a:13:cf:f3:6d:0b:bf:e4:13:37:75:50:19:
                    9b:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:90:BC:3D:58:54:56:EF:93:CF:00:CF:5A:34:1A:AB:D6:EB:1C:93
            X509v3 Authority Key Identifier:
                keyid:20:45:3D:F9:CB:CD:59:10:7B:DF:91:EC:0F:DE:EE:8A:86:7A:03:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FB3WX4aCmLrBhhQtTFCUG7d63jpVkoX4FkDDngLKorgT/1/20453DF9CBCD59107BDF91EC0FDEEE8A867A031B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/20453DF9CBCD59107BDF91EC0FDEEE8A867A031B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FB3WX4aCmLrBhhQtTFCUG7d63jpVkoX4FkDDngLKorgT/1/3138362e3139322e36342e302f32302d3234203d3e20323632373237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.192.64.0/20

    Signature Algorithm: sha256WithRSAEncryption
         67:66:ef:91:bf:bf:eb:80:df:a6:ad:78:b1:2b:67:f5:dc:6b:
         c7:d9:48:ca:cb:a7:e4:70:d2:dc:0d:2a:34:d5:63:9a:2d:f6:
         36:58:c3:db:2f:0c:b0:e8:f5:39:05:18:8c:93:12:e4:95:d3:
         53:a9:33:ed:71:8f:1c:87:d7:7f:0f:12:06:c5:46:a6:08:d2:
         9d:b4:f7:02:58:fa:f2:e9:84:e3:f4:69:2a:a7:7f:22:4a:e1:
         c7:d9:87:73:a1:87:07:53:ff:ac:47:4e:82:c5:28:fe:3e:31:
         0f:2f:a2:0e:af:5b:92:97:49:e5:60:8b:5c:95:43:9d:7d:64:
         15:41:2e:47:b4:97:e3:de:b7:ae:2a:56:62:81:21:e3:83:2a:
         17:a6:e2:09:ac:91:aa:f4:1a:58:fb:9f:1f:13:cb:c6:3c:0c:
         c9:88:c4:da:3f:8a:20:7c:04:d6:5f:e8:51:45:2b:6a:da:68:
         e1:33:3e:8e:62:f7:a8:25:83:0c:62:3a:b1:be:99:04:4d:cf:
         c9:65:dc:94:a8:73:39:4f:76:ac:f9:57:22:54:7a:f4:b1:a7:
         5c:92:02:98:fc:0d:6f:64:6a:2e:9a:bf:09:ee:63:9a:5e:d5:
         93:0a:4f:52:b8:78:8f:c4:ab:43:58:ec:24:96:d5:38:f0:1c:
         eb:1d:f0:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 21:02:38 2024 by rpki-client on console-fra.rpki-client.org