Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FHkLgcgBFTWGScNbM3oSB4tRjBURmqaEyciqEyoD2y6b/1/3139322e3134302e38342e302f32322d3232203d3e20323731313131.roa
File:                     3139322e3134302e38342e302f32322d3232203d3e20323731313131.roa (raw, json)
Hash identifier:          n/HfrD0bpHDTWPGYfwvrqtcqUzgxDbboLl90hy3KKjM=
Subject key identifier:   FC:23:95:B3:62:D8:94:76:C5:CE:C5:57:A5:53:71:92:18:EB:62:CA
Certificate issuer:       /CN=4A76AD5E8EDE48E8E0141FB450CC590B38DF818A
Certificate serial:       773F2A521A63BBDA4271E501A9703D6FF040D37F
Authority key identifier: 4A:76:AD:5E:8E:DE:48:E8:E0:14:1F:B4:50:CC:59:0B:38:DF:81:8A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4A76AD5E8EDE48E8E0141FB450CC590B38DF818A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FHkLgcgBFTWGScNbM3oSB4tRjBURmqaEyciqEyoD2y6b/1/3139322e3134302e38342e302f32322d3232203d3e20323731313131.roa
Signing time:             Thu 04 Apr 2024 18:36:32 +0000
ROA not before:           Thu 04 Apr 2024 18:31:32 +0000
ROA not after:            Thu 03 Apr 2025 18:36:32 +0000
asID:                     271111
IP address blocks:        192.140.84.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FHkLgcgBFTWGScNbM3oSB4tRjBURmqaEyciqEyoD2y6b/1/4A76AD5E8EDE48E8E0141FB450CC590B38DF818A.crl
                          rsync://rpki-repo.registro.br/repo/FHkLgcgBFTWGScNbM3oSB4tRjBURmqaEyciqEyoD2y6b/1/4A76AD5E8EDE48E8E0141FB450CC590B38DF818A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4A76AD5E8EDE48E8E0141FB450CC590B38DF818A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 13:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:3f:2a:52:1a:63:bb:da:42:71:e5:01:a9:70:3d:6f:f0:40:d3:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4A76AD5E8EDE48E8E0141FB450CC590B38DF818A
        Validity
            Not Before: Apr  4 18:31:32 2024 GMT
            Not After : Apr  3 18:36:32 2025 GMT
        Subject: CN=FC2395B362D89476C5CEC557A553719218EB62CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:c3:a5:c2:97:f4:c8:a3:3c:44:d3:d6:5c:1f:
                    a8:18:06:32:04:04:11:f1:4a:e1:26:ab:08:12:c3:
                    cf:c3:ce:b6:dd:86:03:8f:1a:d8:1d:11:0e:a9:dc:
                    a8:27:bc:f6:78:f5:31:06:44:20:7b:a7:92:80:2d:
                    ca:bd:fb:e9:5e:4b:85:cf:19:9f:f7:e1:95:cf:eb:
                    59:d2:c9:7f:67:35:90:fb:bb:8f:34:20:72:94:d4:
                    5c:ab:f1:33:ba:e4:b8:c7:ff:af:79:70:a2:49:6f:
                    2c:b7:42:ec:c8:5f:e2:3b:ff:82:dc:df:8f:66:60:
                    d2:ca:49:b9:de:c5:df:96:4a:85:d5:c5:cc:5d:e7:
                    69:bd:52:3d:1e:bf:12:fc:c3:2f:e8:ed:67:c9:b8:
                    bb:a1:7e:31:d7:a5:d5:49:0a:d1:22:ce:dd:43:9d:
                    e9:b1:6a:63:f7:bf:00:a2:f9:c5:78:a0:c2:b5:81:
                    fd:7c:45:82:2c:7a:fb:d1:32:65:44:20:9a:8e:4b:
                    84:91:de:2c:3c:e6:46:28:6b:c6:a4:1d:4c:09:7e:
                    10:0b:79:7a:4d:e0:c0:c0:a5:99:17:6b:b9:54:ad:
                    13:8a:27:00:9a:76:2f:06:1d:ae:02:6d:d4:8c:f4:
                    17:4c:68:8f:ff:bc:56:a0:cd:6d:54:a2:4a:cd:d9:
                    85:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:23:95:B3:62:D8:94:76:C5:CE:C5:57:A5:53:71:92:18:EB:62:CA
            X509v3 Authority Key Identifier:
                keyid:4A:76:AD:5E:8E:DE:48:E8:E0:14:1F:B4:50:CC:59:0B:38:DF:81:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FHkLgcgBFTWGScNbM3oSB4tRjBURmqaEyciqEyoD2y6b/1/4A76AD5E8EDE48E8E0141FB450CC590B38DF818A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4A76AD5E8EDE48E8E0141FB450CC590B38DF818A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FHkLgcgBFTWGScNbM3oSB4tRjBURmqaEyciqEyoD2y6b/1/3139322e3134302e38342e302f32322d3232203d3e20323731313131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.140.84.0/22

    Signature Algorithm: sha256WithRSAEncryption
         59:74:03:ad:88:80:aa:27:dc:23:39:ad:c4:7c:c7:c4:07:74:
         a8:53:79:f2:96:aa:f2:65:af:2e:9b:69:03:bd:54:5c:dc:da:
         78:71:44:72:33:f6:1e:23:3a:d9:dc:73:be:40:b2:44:a9:d2:
         3a:8e:8a:1d:e8:49:66:af:5e:ab:c1:a8:e7:50:bf:12:e8:e1:
         55:d1:d2:ee:24:d0:a9:ce:d9:d8:cb:0d:a7:3d:6d:47:96:69:
         e1:02:96:89:f9:c1:3e:36:45:03:06:71:c5:12:22:87:68:a0:
         2d:6b:c6:f3:be:1b:6c:dd:d1:af:d4:4f:55:7b:5d:95:3e:a0:
         34:16:e4:e0:0c:64:5c:ec:66:f5:37:f4:85:c1:08:0f:64:77:
         e6:15:ef:89:77:9a:7d:d6:50:b1:b2:5b:8c:10:a0:64:b5:b0:
         20:b7:73:df:55:fc:e8:fb:d7:46:41:8f:c9:fd:c9:f5:db:f0:
         d9:21:c4:8e:ff:b3:9a:bf:13:e1:b6:e9:9e:a0:82:7f:28:f4:
         0c:80:01:70:8a:15:74:00:68:53:64:70:81:74:98:da:2f:ea:
         78:46:0f:33:9b:57:f1:c7:e5:9c:79:af:a0:23:aa:90:d0:d0:
         4f:d6:9e:25:06:59:24:6c:46:c9:2d:ab:78:e8:d8:52:40:25:
         42:c8:93:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 14:26:58 2024 by rpki-client on console-ams.rpki-client.org