Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FBxuLpCf3yae9MGeB2c6TC9axBZGZDV5wcQ5vfFopGSE/1/3137372e35342e3234382e302f32312d3234203d3e20323632323939.roa
File:                     3137372e35342e3234382e302f32312d3234203d3e20323632323939.roa (raw, json)
Hash identifier:          2nNnazD/VsQXzlSWOjKI0J2CJ4d8Kof/gvXqkf1Olfg=
Subject key identifier:   C4:23:9B:1C:74:15:6A:DB:64:10:FB:11:44:32:0C:BD:0C:9A:59:D9
Certificate issuer:       /CN=203DCCA7DE79C8C4DABAA10A6CA9E93EA7D39DF7
Certificate serial:       039398F19C105A0303B3C92127DB3C77996940AD
Authority key identifier: 20:3D:CC:A7:DE:79:C8:C4:DA:BA:A1:0A:6C:A9:E9:3E:A7:D3:9D:F7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/203DCCA7DE79C8C4DABAA10A6CA9E93EA7D39DF7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FBxuLpCf3yae9MGeB2c6TC9axBZGZDV5wcQ5vfFopGSE/1/3137372e35342e3234382e302f32312d3234203d3e20323632323939.roa
Signing time:             Thu 04 Apr 2024 20:40:20 +0000
ROA not before:           Thu 04 Apr 2024 20:35:20 +0000
ROA not after:            Thu 03 Apr 2025 20:40:20 +0000
asID:                     262299
IP address blocks:        177.54.248.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FBxuLpCf3yae9MGeB2c6TC9axBZGZDV5wcQ5vfFopGSE/1/203DCCA7DE79C8C4DABAA10A6CA9E93EA7D39DF7.crl
                          rsync://rpki-repo.registro.br/repo/FBxuLpCf3yae9MGeB2c6TC9axBZGZDV5wcQ5vfFopGSE/1/203DCCA7DE79C8C4DABAA10A6CA9E93EA7D39DF7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/203DCCA7DE79C8C4DABAA10A6CA9E93EA7D39DF7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 19:46:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:93:98:f1:9c:10:5a:03:03:b3:c9:21:27:db:3c:77:99:69:40:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=203DCCA7DE79C8C4DABAA10A6CA9E93EA7D39DF7
        Validity
            Not Before: Apr  4 20:35:20 2024 GMT
            Not After : Apr  3 20:40:20 2025 GMT
        Subject: CN=C4239B1C74156ADB6410FB1144320CBD0C9A59D9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:bf:36:68:21:17:9d:18:44:e3:3a:ca:37:84:
                    62:8e:4e:bf:35:a9:2e:af:ad:e7:13:14:5f:5d:da:
                    83:62:32:be:20:af:1c:df:9a:ff:6d:5c:09:42:ec:
                    54:68:f5:cf:c1:83:9c:c4:c6:2b:0a:6c:c1:ec:77:
                    4c:a0:1f:3d:14:04:06:9b:09:0e:34:5f:6e:ef:27:
                    4c:f3:bd:55:72:ae:ae:b3:b9:09:10:14:42:90:a4:
                    c8:37:d4:fa:5c:af:d9:57:0e:30:48:64:eb:fe:5f:
                    7a:4b:bd:ee:8e:61:3b:83:ee:98:53:ad:b6:d0:b0:
                    4b:10:4a:95:67:69:84:8b:4c:41:20:79:d3:4c:21:
                    6d:90:b2:15:17:8c:6c:e8:2f:12:74:71:a5:e5:0f:
                    72:0d:e6:db:a2:f0:16:e0:9f:a7:b9:b5:4f:7a:a8:
                    98:0c:36:05:96:9e:06:b4:e4:c4:92:d0:4c:98:86:
                    ea:96:11:69:a6:17:2d:58:0a:0b:22:3c:b4:c0:de:
                    a3:c4:96:86:9c:3f:af:8a:74:b6:f9:c9:d7:b2:30:
                    aa:c4:4c:ef:9e:cf:86:a1:ca:f4:86:3b:42:54:1a:
                    ba:94:a5:08:7f:48:94:e1:20:c5:00:10:53:59:ea:
                    7f:c5:d1:23:38:d1:03:a1:31:eb:d1:65:62:7a:06:
                    bb:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:23:9B:1C:74:15:6A:DB:64:10:FB:11:44:32:0C:BD:0C:9A:59:D9
            X509v3 Authority Key Identifier:
                keyid:20:3D:CC:A7:DE:79:C8:C4:DA:BA:A1:0A:6C:A9:E9:3E:A7:D3:9D:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FBxuLpCf3yae9MGeB2c6TC9axBZGZDV5wcQ5vfFopGSE/1/203DCCA7DE79C8C4DABAA10A6CA9E93EA7D39DF7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/203DCCA7DE79C8C4DABAA10A6CA9E93EA7D39DF7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FBxuLpCf3yae9MGeB2c6TC9axBZGZDV5wcQ5vfFopGSE/1/3137372e35342e3234382e302f32312d3234203d3e20323632323939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.54.248.0/21

    Signature Algorithm: sha256WithRSAEncryption
         85:a2:1f:c8:25:68:43:19:4d:08:fc:4e:f4:38:35:28:f4:47:
         12:07:a7:e4:b1:4d:f2:aa:8f:05:07:cc:a7:f0:b8:b3:54:4c:
         61:14:45:29:bc:aa:dd:f7:ec:c0:55:85:31:f2:97:56:05:6f:
         fb:46:e3:15:f9:87:3e:a5:08:23:cc:68:f3:0c:af:53:2f:96:
         a5:11:49:ae:99:8d:b3:aa:be:16:75:13:e3:8c:23:cd:1b:27:
         7f:c6:42:82:f5:27:e6:df:37:fe:db:a4:3e:0a:66:9b:2e:2e:
         d2:43:2d:ea:ef:50:f4:2c:97:68:23:79:a7:b8:42:a2:91:df:
         a3:ba:5b:f7:b1:19:f7:fd:0d:03:71:80:22:c6:75:7f:b2:c1:
         aa:58:41:de:36:93:79:72:d1:7d:7b:cb:5e:00:77:2d:fd:84:
         f9:42:e2:85:e8:37:81:65:de:75:b4:f1:41:33:1d:1b:7f:b3:
         be:6b:00:68:54:59:83:1a:73:1f:90:b4:75:d5:06:aa:e3:16:
         79:ea:17:68:b7:a4:33:91:ef:31:18:96:5d:33:75:b4:41:94:
         b3:e8:22:ec:7e:cc:cc:4b:0d:f4:5e:cd:25:3b:ac:cd:70:6b:
         22:0d:14:71:7b:9f:ed:fc:f7:5f:b9:e3:56:4f:2b:78:90:2d:
         0c:04:65:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 19:05:47 2024 by rpki-client on console-fra.rpki-client.org