Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FBnQaHyNR5kUSvvjw6BKmUn4pU8Jsk5mGyNVbaRXhkvC/1/3136382e3230352e38372e302f32342d3234203d3e203532373830.roa
File:                     3136382e3230352e38372e302f32342d3234203d3e203532373830.roa (raw, json)
Hash identifier:          JF8n1RpBzWpPHHoZUs3jvFtFRCmOMHEeUzyBmLE7PTw=
Subject key identifier:   97:CB:D2:49:73:B2:10:15:29:10:CF:C4:F1:3C:E1:C9:2D:9C:B4:43
Certificate issuer:       /CN=75CE80B0487A970663EA1E04C2CDBEFF72B104EA
Certificate serial:       7E1375BECE8B44DFD33E99A715F475360D77C309
Authority key identifier: 75:CE:80:B0:48:7A:97:06:63:EA:1E:04:C2:CD:BE:FF:72:B1:04:EA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/75CE80B0487A970663EA1E04C2CDBEFF72B104EA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FBnQaHyNR5kUSvvjw6BKmUn4pU8Jsk5mGyNVbaRXhkvC/1/3136382e3230352e38372e302f32342d3234203d3e203532373830.roa
Signing time:             Thu 04 Apr 2024 14:56:22 +0000
ROA not before:           Thu 04 Apr 2024 14:51:22 +0000
ROA not after:            Thu 03 Apr 2025 14:56:22 +0000
asID:                     52780
IP address blocks:        168.205.87.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FBnQaHyNR5kUSvvjw6BKmUn4pU8Jsk5mGyNVbaRXhkvC/1/75CE80B0487A970663EA1E04C2CDBEFF72B104EA.crl
                          rsync://rpki-repo.registro.br/repo/FBnQaHyNR5kUSvvjw6BKmUn4pU8Jsk5mGyNVbaRXhkvC/1/75CE80B0487A970663EA1E04C2CDBEFF72B104EA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/75CE80B0487A970663EA1E04C2CDBEFF72B104EA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 16:33:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:13:75:be:ce:8b:44:df:d3:3e:99:a7:15:f4:75:36:0d:77:c3:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75CE80B0487A970663EA1E04C2CDBEFF72B104EA
        Validity
            Not Before: Apr  4 14:51:22 2024 GMT
            Not After : Apr  3 14:56:22 2025 GMT
        Subject: CN=97CBD24973B210152910CFC4F13CE1C92D9CB443
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:2e:21:01:56:9c:ee:c1:af:28:1b:db:20:e1:
                    6b:15:cb:f6:c5:45:33:df:8e:32:39:b3:32:53:30:
                    45:e4:a0:3d:60:dc:91:40:e0:b4:7f:c4:d7:c7:43:
                    c1:be:f2:39:1a:76:5d:9a:4f:f9:e5:5c:d7:12:e9:
                    a6:93:49:f5:4e:bc:71:fa:e8:40:4a:f1:93:fa:ca:
                    94:e9:26:f2:23:46:95:72:c0:f7:34:88:c8:6d:bf:
                    e2:2e:b3:d8:23:3c:fa:45:db:72:99:01:34:bb:8b:
                    bc:7d:91:82:66:81:6a:cb:12:0c:fb:8a:3e:58:17:
                    2e:ad:57:9b:06:1f:95:2b:d3:0b:81:a6:9a:99:3f:
                    93:ec:d9:da:26:83:d2:23:bf:d9:95:85:d3:64:a6:
                    6d:8f:72:80:62:8f:4b:e5:f9:5b:3a:7c:51:97:41:
                    1c:eb:7d:70:0e:99:a6:9f:c5:24:61:bc:fd:8f:56:
                    58:61:5f:eb:4f:df:68:f3:91:7e:38:04:3d:2d:36:
                    55:44:5d:fc:45:d1:80:d2:6b:8d:37:6c:1f:64:27:
                    d6:b4:38:e1:9a:51:bf:12:b7:ef:37:8e:57:46:9a:
                    e6:d9:ba:82:c7:57:bc:22:19:d7:4a:88:89:28:f5:
                    75:12:9c:ba:48:e3:e8:18:7d:16:f1:40:6c:1f:bc:
                    a8:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:CB:D2:49:73:B2:10:15:29:10:CF:C4:F1:3C:E1:C9:2D:9C:B4:43
            X509v3 Authority Key Identifier:
                keyid:75:CE:80:B0:48:7A:97:06:63:EA:1E:04:C2:CD:BE:FF:72:B1:04:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FBnQaHyNR5kUSvvjw6BKmUn4pU8Jsk5mGyNVbaRXhkvC/1/75CE80B0487A970663EA1E04C2CDBEFF72B104EA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/75CE80B0487A970663EA1E04C2CDBEFF72B104EA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FBnQaHyNR5kUSvvjw6BKmUn4pU8Jsk5mGyNVbaRXhkvC/1/3136382e3230352e38372e302f32342d3234203d3e203532373830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.205.87.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7c:55:09:45:6f:bf:b9:4a:ab:08:68:d6:87:c0:2a:69:a7:9f:
         79:94:bf:6f:6b:c8:34:c3:5b:53:13:20:e0:69:4c:b7:f4:6d:
         3b:2f:ed:84:5d:c7:26:c0:a5:a0:c1:94:5f:48:3c:1b:9d:fa:
         fc:d6:a2:fd:a6:88:01:de:7f:64:ec:69:c4:b3:8c:8a:60:ed:
         86:f8:62:95:7c:71:c4:38:45:8d:68:c6:7a:46:31:a2:78:3f:
         28:f6:1b:f2:62:bb:d7:e1:f6:76:e8:c2:18:3b:c5:e2:6c:a1:
         cc:8f:b9:6a:e6:43:ba:51:42:41:0d:90:75:5b:45:e1:cc:e6:
         25:42:95:c5:b7:dc:6a:f8:0f:c2:ba:c5:ba:d9:23:92:52:ab:
         d6:6d:2b:e3:a4:27:a9:69:39:6e:91:eb:87:34:9a:3f:04:66:
         d7:ca:25:1d:81:cd:83:7b:40:c2:6f:41:da:95:ae:ba:c6:b8:
         70:3b:5c:ea:71:60:ca:e9:1e:8f:c6:ad:2f:f1:e6:0f:92:97:
         ba:60:9d:74:d4:7c:c4:c1:b1:28:50:ae:11:e2:9f:4b:bd:b3:
         ce:81:d9:da:fb:03:60:79:81:31:2d:1e:60:a6:fe:b7:eb:79:
         fa:87:2b:a9:06:21:2f:93:c7:fd:7f:0f:a4:dc:69:1e:33:11:
         20:e5:8f:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 14:19:51 2024 by rpki-client on console-ams.rpki-client.org