Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FHkLgcgBFTWGScNbM3oSB4tRjBURmqaEyciqEyoD2y6b/1/3139322e3134302e38342e302f32332d3233203d3e20323731313131.roa
File:                     3139322e3134302e38342e302f32332d3233203d3e20323731313131.roa (raw, json)
Hash identifier:          BD/Ym2+0fiIkio/Jcnmam/8F3RopfLxIexvz1J7fBVY=
Subject key identifier:   53:FC:C5:69:39:A2:D9:9E:AB:5A:CD:57:5A:35:16:95:B2:EC:EE:56
Certificate issuer:       /CN=4A76AD5E8EDE48E8E0141FB450CC590B38DF818A
Certificate serial:       572855E93EF52BDDA6D76F06F895B0D140C71FDF
Authority key identifier: 4A:76:AD:5E:8E:DE:48:E8:E0:14:1F:B4:50:CC:59:0B:38:DF:81:8A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4A76AD5E8EDE48E8E0141FB450CC590B38DF818A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FHkLgcgBFTWGScNbM3oSB4tRjBURmqaEyciqEyoD2y6b/1/3139322e3134302e38342e302f32332d3233203d3e20323731313131.roa
Signing time:             Thu 04 Apr 2024 18:36:31 +0000
ROA not before:           Thu 04 Apr 2024 18:31:31 +0000
ROA not after:            Thu 03 Apr 2025 18:36:31 +0000
asID:                     271111
IP address blocks:        192.140.84.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FHkLgcgBFTWGScNbM3oSB4tRjBURmqaEyciqEyoD2y6b/1/4A76AD5E8EDE48E8E0141FB450CC590B38DF818A.crl
                          rsync://rpki-repo.registro.br/repo/FHkLgcgBFTWGScNbM3oSB4tRjBURmqaEyciqEyoD2y6b/1/4A76AD5E8EDE48E8E0141FB450CC590B38DF818A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4A76AD5E8EDE48E8E0141FB450CC590B38DF818A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 16:26:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:28:55:e9:3e:f5:2b:dd:a6:d7:6f:06:f8:95:b0:d1:40:c7:1f:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4A76AD5E8EDE48E8E0141FB450CC590B38DF818A
        Validity
            Not Before: Apr  4 18:31:31 2024 GMT
            Not After : Apr  3 18:36:31 2025 GMT
        Subject: CN=53FCC56939A2D99EAB5ACD575A351695B2ECEE56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:b2:ea:4a:e5:a2:46:49:67:a5:df:87:9d:3a:
                    52:8f:25:ae:51:e0:6a:f8:01:97:45:db:a3:ea:06:
                    12:1d:65:9e:c2:f8:37:48:e7:a8:6d:17:50:da:7d:
                    29:81:6b:56:c5:ab:08:e4:1c:1c:98:42:fb:c6:73:
                    ab:5b:15:3d:6d:c7:56:2f:bd:6a:0b:86:2e:ca:1b:
                    0f:54:60:db:27:b3:5a:67:34:d6:9b:19:37:ff:97:
                    e3:89:b0:ec:7c:15:71:8c:2f:b5:de:20:fe:91:49:
                    33:af:48:ff:e5:22:ad:32:f3:7e:80:bc:99:10:32:
                    1e:2f:95:85:e1:36:fd:89:d2:7d:22:c3:51:91:52:
                    ca:98:71:50:2f:4b:af:cd:28:ae:21:91:e7:01:70:
                    cc:9a:16:95:b6:42:28:3b:d4:9a:fd:d0:88:3b:8e:
                    33:a9:35:66:a9:bc:fc:ba:e3:cc:bd:b1:a9:2c:49:
                    bb:4d:12:80:21:26:8e:be:e3:a6:fa:a7:fd:aa:b5:
                    de:7b:f1:66:65:a5:40:65:d7:f1:99:be:cb:0d:fc:
                    31:5b:c4:2b:4d:2a:4b:c2:bc:42:4d:cf:03:5b:f2:
                    e7:b4:c9:fb:3f:48:3e:bc:af:ee:e2:02:f6:cc:d8:
                    a7:d1:bf:21:cb:f4:33:84:f4:bd:08:a9:0d:79:fa:
                    a3:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:FC:C5:69:39:A2:D9:9E:AB:5A:CD:57:5A:35:16:95:B2:EC:EE:56
            X509v3 Authority Key Identifier:
                keyid:4A:76:AD:5E:8E:DE:48:E8:E0:14:1F:B4:50:CC:59:0B:38:DF:81:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FHkLgcgBFTWGScNbM3oSB4tRjBURmqaEyciqEyoD2y6b/1/4A76AD5E8EDE48E8E0141FB450CC590B38DF818A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4A76AD5E8EDE48E8E0141FB450CC590B38DF818A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FHkLgcgBFTWGScNbM3oSB4tRjBURmqaEyciqEyoD2y6b/1/3139322e3134302e38342e302f32332d3233203d3e20323731313131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.140.84.0/23

    Signature Algorithm: sha256WithRSAEncryption
         44:fc:41:4c:b3:5f:b3:d0:38:32:ce:3e:57:b4:a2:d7:68:31:
         08:5c:ff:6d:94:2b:d1:f0:3a:8d:96:0e:38:43:70:58:b3:d5:
         3d:e3:3b:e0:6e:3c:e0:71:f6:0c:5d:48:e9:a9:72:c5:8d:f6:
         b7:d3:19:f7:c7:47:d4:47:51:65:8b:40:bc:31:57:86:4a:7c:
         7b:28:a2:5e:04:42:13:e5:44:54:a3:6b:a7:71:fe:02:09:71:
         26:b7:ec:df:19:7d:53:71:9c:96:96:5e:ce:3f:f5:58:75:23:
         bb:59:42:ad:40:ad:3e:1d:54:05:1c:d2:10:98:38:3a:f3:bc:
         24:d9:9c:7a:7d:35:c7:f8:da:e5:be:9a:73:37:1d:d5:f4:a3:
         fe:6f:df:19:7e:95:01:41:72:f1:a2:39:bc:20:f0:28:3f:b1:
         ec:5d:c4:ce:0d:21:bb:d7:fd:8e:dc:47:c0:ef:70:12:c0:e0:
         d1:23:ea:75:df:b7:2e:79:31:d7:c4:85:51:cd:0b:ea:4c:e0:
         1a:8d:78:88:44:cb:eb:51:b3:59:ff:3b:18:1b:99:7f:f8:bf:
         71:0d:2f:c2:e1:11:95:19:ea:a6:bc:ce:b9:76:a8:73:a8:0e:
         99:fb:0f:1c:22:9e:d8:cc:cb:bc:d3:ab:ad:a3:f7:5d:e9:92:
         b0:05:a0:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 15:42:25 2024 by rpki-client on console-fra.rpki-client.org