Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FJLhJfe6hkNEJAxa6z9tMktNPsBuiYnErLxfhac5fshU/0/3137302e3233312e3132322e302f32332d3233203d3e20323635303535.roa
File:                     3137302e3233312e3132322e302f32332d3233203d3e20323635303535.roa (raw, json)
Hash identifier:          KVh0q+3BOVVU9qKXF4/H0mQ4HOAiEdHhKjNxA8wIrPY=
Subject key identifier:   26:B3:E4:1A:4D:9E:CB:8E:CF:E2:FF:65:E4:F9:D9:18:93:1C:20:E8
Certificate issuer:       /CN=A0BD39FF72B4E3DAFE3521F40F4E4389CB5887F3
Certificate serial:       69B359F577FCEDDBCF8800A0C327BAF70005FDE4
Authority key identifier: A0:BD:39:FF:72:B4:E3:DA:FE:35:21:F4:0F:4E:43:89:CB:58:87:F3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A0BD39FF72B4E3DAFE3521F40F4E4389CB5887F3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FJLhJfe6hkNEJAxa6z9tMktNPsBuiYnErLxfhac5fshU/0/3137302e3233312e3132322e302f32332d3233203d3e20323635303535.roa
Signing time:             Wed 06 Nov 2024 19:56:46 +0000
ROA not before:           Wed 06 Nov 2024 19:51:46 +0000
ROA not after:            Wed 05 Nov 2025 19:56:46 +0000
asID:                     265055
IP address blocks:        170.231.122.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FJLhJfe6hkNEJAxa6z9tMktNPsBuiYnErLxfhac5fshU/0/A0BD39FF72B4E3DAFE3521F40F4E4389CB5887F3.crl
                          rsync://rpki-repo.registro.br/repo/FJLhJfe6hkNEJAxa6z9tMktNPsBuiYnErLxfhac5fshU/0/A0BD39FF72B4E3DAFE3521F40F4E4389CB5887F3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A0BD39FF72B4E3DAFE3521F40F4E4389CB5887F3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 01:20:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:b3:59:f5:77:fc:ed:db:cf:88:00:a0:c3:27:ba:f7:00:05:fd:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A0BD39FF72B4E3DAFE3521F40F4E4389CB5887F3
        Validity
            Not Before: Nov  6 19:51:46 2024 GMT
            Not After : Nov  5 19:56:46 2025 GMT
        Subject: CN=26B3E41A4D9ECB8ECFE2FF65E4F9D918931C20E8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:e0:2a:74:52:f5:4f:36:cf:9b:01:87:8e:65:
                    85:d1:c3:1b:19:89:bc:db:15:a4:79:e1:23:c6:52:
                    e2:60:e4:ca:4e:d5:ee:a2:75:d5:62:36:2e:0b:ff:
                    8e:12:eb:2d:5f:fc:57:9c:de:dd:83:a3:85:2b:fa:
                    f2:cd:a9:19:a9:11:71:bc:dd:47:5c:cf:af:1a:6b:
                    6b:1a:ca:ba:3b:55:4f:7c:a1:12:12:46:25:c8:cc:
                    d0:59:5a:16:85:9a:db:61:a9:17:65:4e:f1:5f:ac:
                    00:48:0b:6a:a9:ce:fb:59:22:80:85:80:43:86:7a:
                    48:66:5e:b6:7d:b6:ca:dc:58:e2:fe:15:96:ab:5a:
                    0c:5a:b7:fe:06:9a:bd:b1:bd:13:6e:39:6a:e5:57:
                    93:65:df:5c:18:e0:0b:7f:e6:a2:23:81:eb:ac:06:
                    73:38:a8:08:a3:30:f7:23:5a:a0:12:ea:7e:46:ce:
                    00:13:77:ba:a9:57:08:2e:20:87:d6:ae:12:d9:43:
                    19:6b:fb:b2:9c:3e:03:fe:fb:82:1d:50:0b:5c:15:
                    af:dd:50:ad:e4:91:f1:d5:95:e2:d1:b6:43:40:43:
                    51:d6:88:6b:c2:9b:df:65:20:4f:f4:a9:30:cd:05:
                    f7:20:32:a8:ed:7f:d1:15:1c:03:35:41:3a:89:ce:
                    06:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:B3:E4:1A:4D:9E:CB:8E:CF:E2:FF:65:E4:F9:D9:18:93:1C:20:E8
            X509v3 Authority Key Identifier:
                keyid:A0:BD:39:FF:72:B4:E3:DA:FE:35:21:F4:0F:4E:43:89:CB:58:87:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FJLhJfe6hkNEJAxa6z9tMktNPsBuiYnErLxfhac5fshU/0/A0BD39FF72B4E3DAFE3521F40F4E4389CB5887F3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A0BD39FF72B4E3DAFE3521F40F4E4389CB5887F3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FJLhJfe6hkNEJAxa6z9tMktNPsBuiYnErLxfhac5fshU/0/3137302e3233312e3132322e302f32332d3233203d3e20323635303535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.231.122.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5a:78:4b:04:08:75:51:9b:f9:19:49:27:c0:4a:3a:00:dd:cd:
         88:97:4d:c9:99:c0:4d:6f:4c:30:46:7c:47:49:49:da:4d:03:
         36:57:a5:68:4a:8d:65:75:72:21:87:68:ae:b6:f6:c5:f6:77:
         f7:b2:c2:45:d0:d5:18:32:10:b8:7a:51:e8:2a:65:b3:bc:1b:
         c9:93:27:47:51:2d:0b:9c:fd:93:f6:d7:13:85:7b:a6:ab:73:
         60:9e:a2:08:8c:27:0f:a5:0c:34:0b:39:bf:d5:a6:ee:b3:83:
         5d:2d:d8:50:6b:e3:15:11:92:7e:bb:80:4e:54:73:30:f9:bd:
         ec:d1:5c:8c:e7:5d:05:61:d3:0c:f4:bb:54:83:7f:0a:9b:82:
         47:8c:a1:75:47:e8:c0:8e:fd:3b:9a:49:96:bf:75:20:1c:c1:
         12:0c:ff:90:29:5c:55:59:b3:71:63:c2:55:ca:24:78:e5:7e:
         5a:6c:f8:98:51:2a:4d:07:89:5e:79:3e:52:36:86:94:bb:0a:
         96:f6:8a:8e:fb:ee:04:94:eb:0d:ed:23:8f:23:80:61:11:b7:
         3a:3a:19:40:f2:d1:0e:d2:63:c3:20:4c:2d:e7:47:fb:87:b5:
         a1:d7:b8:46:04:46:82:e9:dc:f0:53:16:65:e5:5a:64:d1:38:
         77:30:a6:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 00:22:00 2024 by rpki-client on console-fra.rpki-client.org