Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FDAr4AV6ocbLp7YmVbqyiaoTYkRxfSoAg46dzuhkWvT/0/3137302e38332e34382e302f32322d3234203d3e20323636343731.roa
File:                     3137302e38332e34382e302f32322d3234203d3e20323636343731.roa (raw, json)
Hash identifier:          ABFrMu7upADpib6vhQnmn+NQoPySq/5klaAp4RFe+54=
Subject key identifier:   7F:13:08:80:2D:A4:F2:E1:B3:23:54:8D:AC:88:54:D1:FC:9A:E6:9C
Certificate issuer:       /CN=FB71928419F16147EADCA6AC70A8747BAFC50F8A
Certificate serial:       7836A15CDC9A407C91D44A0339FE7C9B4FD679E0
Authority key identifier: FB:71:92:84:19:F1:61:47:EA:DC:A6:AC:70:A8:74:7B:AF:C5:0F:8A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB71928419F16147EADCA6AC70A8747BAFC50F8A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FDAr4AV6ocbLp7YmVbqyiaoTYkRxfSoAg46dzuhkWvT/0/3137302e38332e34382e302f32322d3234203d3e20323636343731.roa
Signing time:             Tue 19 Nov 2024 12:20:15 +0000
ROA not before:           Tue 19 Nov 2024 12:15:15 +0000
ROA not after:            Tue 18 Nov 2025 12:20:15 +0000
asID:                     266471
IP address blocks:        170.83.48.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FDAr4AV6ocbLp7YmVbqyiaoTYkRxfSoAg46dzuhkWvT/0/FB71928419F16147EADCA6AC70A8747BAFC50F8A.crl
                          rsync://rpki-repo.registro.br/repo/FDAr4AV6ocbLp7YmVbqyiaoTYkRxfSoAg46dzuhkWvT/0/FB71928419F16147EADCA6AC70A8747BAFC50F8A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB71928419F16147EADCA6AC70A8747BAFC50F8A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 17 Feb 2025 07:32:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:36:a1:5c:dc:9a:40:7c:91:d4:4a:03:39:fe:7c:9b:4f:d6:79:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB71928419F16147EADCA6AC70A8747BAFC50F8A
        Validity
            Not Before: Nov 19 12:15:15 2024 GMT
            Not After : Nov 18 12:20:15 2025 GMT
        Subject: CN=7F1308802DA4F2E1B323548DAC8854D1FC9AE69C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:1a:8e:dd:d2:76:2a:88:4e:15:b6:14:cb:a0:
                    9e:02:43:9d:ee:68:cb:36:08:bf:ce:e6:82:f7:6c:
                    99:2c:9a:47:3c:bd:c7:1a:0e:27:f8:ec:8f:b7:51:
                    93:ca:d6:6a:ca:60:fa:be:7c:d7:18:09:76:21:9d:
                    e2:08:77:f1:4b:fa:ba:e8:04:72:2c:dd:14:ff:25:
                    f8:9f:4a:e9:1c:cf:58:48:ee:db:fb:b3:4e:1d:63:
                    13:19:6a:72:7c:40:68:fc:e9:6e:06:6d:53:91:a3:
                    50:8e:b1:f4:21:f6:4c:36:91:4e:7d:ea:cc:31:1b:
                    d5:cf:cd:e2:61:13:56:b7:e2:5b:56:8e:fc:ca:de:
                    ee:ea:65:c0:ab:96:78:71:b5:d7:74:71:6b:a4:82:
                    9c:5e:e8:08:4c:97:dd:39:14:a9:2d:43:84:2c:23:
                    bf:86:01:23:d9:59:22:89:b6:55:8e:67:f1:8e:9c:
                    f9:26:bb:67:ee:13:df:2c:34:1b:a6:bf:35:e8:1a:
                    ce:48:68:ef:d0:49:bb:9a:07:85:27:75:d1:05:1b:
                    35:b1:ec:60:f1:f8:01:32:ea:21:29:ec:db:18:9b:
                    c9:45:66:09:0c:1e:70:b8:37:8f:dc:84:29:3f:38:
                    d3:ea:9c:a8:d7:a2:68:18:25:88:d8:78:16:ad:b3:
                    0c:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:13:08:80:2D:A4:F2:E1:B3:23:54:8D:AC:88:54:D1:FC:9A:E6:9C
            X509v3 Authority Key Identifier:
                keyid:FB:71:92:84:19:F1:61:47:EA:DC:A6:AC:70:A8:74:7B:AF:C5:0F:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FDAr4AV6ocbLp7YmVbqyiaoTYkRxfSoAg46dzuhkWvT/0/FB71928419F16147EADCA6AC70A8747BAFC50F8A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB71928419F16147EADCA6AC70A8747BAFC50F8A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FDAr4AV6ocbLp7YmVbqyiaoTYkRxfSoAg46dzuhkWvT/0/3137302e38332e34382e302f32322d3234203d3e20323636343731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.83.48.0/22

    Signature Algorithm: sha256WithRSAEncryption
         88:5b:c7:03:39:e8:9c:90:7e:ca:af:23:4d:6f:ac:0b:b9:b5:
         a1:49:d9:e8:f5:8a:61:c6:81:ad:15:eb:42:de:58:82:39:4b:
         5b:6d:43:d9:62:64:58:6d:0d:07:6b:01:f8:4e:92:46:95:bd:
         9e:e3:14:82:24:fc:e1:af:5e:c5:1c:f6:44:79:48:f2:6a:76:
         dd:e4:75:c9:fe:36:8f:f0:91:ff:98:25:64:a3:f9:48:06:bd:
         20:3d:27:76:b0:57:08:40:da:89:06:4e:1b:42:3b:a5:c4:07:
         8f:4f:f4:01:c4:a0:a4:13:9e:62:bf:54:da:b3:6e:01:c4:1f:
         73:dd:e3:09:15:f9:dd:6a:53:9b:51:80:5d:cd:57:7e:70:a4:
         44:a5:b9:65:6a:2c:5c:a3:56:1c:36:47:19:e9:68:16:11:66:
         ee:15:55:0c:14:11:cf:e9:ae:8e:4c:54:9f:97:9c:15:86:8c:
         58:b3:8b:cb:e7:6f:2f:e6:78:39:c6:cc:e3:bd:13:03:a1:99:
         ad:87:23:e2:45:ee:c4:6d:23:8b:a3:be:3e:e4:89:dd:56:fa:
         0d:e8:34:fb:4e:15:91:a9:a2:59:db:fb:ad:4a:e0:3c:0f:15:
         10:e2:ff:72:d4:c7:3e:b5:46:8a:17:7d:82:e0:8e:ad:29:16:
         0d:24:9a:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:33:16 2025 by rpki-client