Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FJy2APg7gkmafh7wmZxrbFMFPZNVrRMX3SqYr2oFg8qD/0/3137372e31302e3134342e302f32312d3332203d3e20323632383531.roa
File:                     3137372e31302e3134342e302f32312d3332203d3e20323632383531.roa (raw, json)
Hash identifier:          HDQEo/g+lV6VUGl5EEa8QCqdqanpX4wsIwWC5MWbUnQ=
Subject key identifier:   43:16:05:88:C2:B8:6D:A5:0D:8E:98:F6:A6:A1:BD:89:48:BE:6E:52
Certificate issuer:       /CN=F4EA0476EF3A040C1ACF291B4BF7D98083835610
Certificate serial:       09AB5731761919ABC66727DBF2F11FEE961A605B
Authority key identifier: F4:EA:04:76:EF:3A:04:0C:1A:CF:29:1B:4B:F7:D9:80:83:83:56:10
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F4EA0476EF3A040C1ACF291B4BF7D98083835610.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FJy2APg7gkmafh7wmZxrbFMFPZNVrRMX3SqYr2oFg8qD/0/3137372e31302e3134342e302f32312d3332203d3e20323632383531.roa
Signing time:             Fri 08 Nov 2024 14:11:40 +0000
ROA not before:           Fri 08 Nov 2024 14:06:40 +0000
ROA not after:            Fri 07 Nov 2025 14:11:40 +0000
asID:                     262851
IP address blocks:        177.10.144.0/21 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FJy2APg7gkmafh7wmZxrbFMFPZNVrRMX3SqYr2oFg8qD/0/F4EA0476EF3A040C1ACF291B4BF7D98083835610.crl
                          rsync://rpki-repo.registro.br/repo/FJy2APg7gkmafh7wmZxrbFMFPZNVrRMX3SqYr2oFg8qD/0/F4EA0476EF3A040C1ACF291B4BF7D98083835610.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F4EA0476EF3A040C1ACF291B4BF7D98083835610.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 16:41:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:ab:57:31:76:19:19:ab:c6:67:27:db:f2:f1:1f:ee:96:1a:60:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F4EA0476EF3A040C1ACF291B4BF7D98083835610
        Validity
            Not Before: Nov  8 14:06:40 2024 GMT
            Not After : Nov  7 14:11:40 2025 GMT
        Subject: CN=43160588C2B86DA50D8E98F6A6A1BD8948BE6E52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:fa:13:94:14:10:62:39:5f:d2:45:74:d3:f0:
                    74:18:ff:4b:c2:17:20:be:cd:46:ed:b1:98:f7:93:
                    36:55:53:6c:ff:56:2e:fa:72:df:fb:c3:68:ed:14:
                    f0:57:14:aa:11:67:63:a2:fc:fe:46:e0:fe:d6:87:
                    21:2f:23:5c:ab:b7:1d:97:b3:d6:0f:c7:f1:ce:39:
                    79:e9:c0:c2:51:73:47:2d:19:99:99:b2:58:73:4f:
                    7b:ab:aa:36:68:51:2d:69:8b:9a:e6:56:8d:73:3f:
                    46:81:67:49:eb:ad:0a:56:f0:aa:cf:78:10:5f:af:
                    16:60:63:e0:39:cb:a5:06:89:fd:9c:c0:f6:e7:93:
                    1e:04:f3:46:6f:5f:85:9f:cf:b3:7f:7c:64:a9:5d:
                    43:c5:a4:f8:00:2f:64:18:2a:02:4e:a1:17:fe:01:
                    0a:90:ed:ce:41:7f:7d:06:08:5c:7f:76:b7:1e:b1:
                    a2:37:d9:4f:d3:f5:be:1b:e5:0a:6d:30:f4:71:58:
                    6b:e6:5e:74:cb:b1:c9:84:35:83:2b:c7:08:16:8e:
                    eb:e4:06:35:40:cb:fc:f7:45:e9:45:3d:2f:0e:be:
                    2d:6b:be:29:43:b1:bf:7d:e9:76:e2:0d:ad:5a:5d:
                    e3:56:aa:93:d7:a4:75:18:9f:22:f1:61:e4:61:d0:
                    bf:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:16:05:88:C2:B8:6D:A5:0D:8E:98:F6:A6:A1:BD:89:48:BE:6E:52
            X509v3 Authority Key Identifier:
                keyid:F4:EA:04:76:EF:3A:04:0C:1A:CF:29:1B:4B:F7:D9:80:83:83:56:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FJy2APg7gkmafh7wmZxrbFMFPZNVrRMX3SqYr2oFg8qD/0/F4EA0476EF3A040C1ACF291B4BF7D98083835610.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F4EA0476EF3A040C1ACF291B4BF7D98083835610.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FJy2APg7gkmafh7wmZxrbFMFPZNVrRMX3SqYr2oFg8qD/0/3137372e31302e3134342e302f32312d3332203d3e20323632383531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.10.144.0/21

    Signature Algorithm: sha256WithRSAEncryption
         7c:e6:b7:c0:81:a5:60:6b:8b:25:d8:7e:4c:4c:72:b3:e6:74:
         e7:53:00:5a:bc:5e:4e:c8:12:9a:f3:c9:18:a4:7d:bb:ab:25:
         d4:a2:73:dd:19:53:61:29:42:47:12:5b:78:8c:58:66:57:06:
         34:77:29:8c:ce:ca:a0:47:92:16:c0:51:80:8c:34:6e:8c:25:
         c0:34:e9:ba:6e:bd:d1:56:01:d1:90:c7:b3:b5:ea:16:19:40:
         a3:2d:e0:64:37:6b:ab:32:01:25:ad:5d:bd:b4:b6:d7:ff:e5:
         77:a7:60:0b:31:4b:75:7c:f3:ce:db:cb:27:94:a6:20:bb:53:
         e3:4c:dc:8b:72:f8:a6:b7:2c:25:67:85:dc:33:4c:66:18:7e:
         88:e9:da:17:69:81:58:d3:be:23:a9:8c:4e:47:69:d4:00:c9:
         03:85:5c:15:fe:ed:bb:42:b3:ea:95:eb:ad:37:c4:41:8d:5f:
         f4:8a:2a:fe:87:49:78:26:67:20:55:9b:f5:d1:42:c9:ac:c3:
         51:1f:44:af:2f:31:07:f5:a0:b2:e9:0c:c6:4c:c6:06:46:30:
         f9:08:47:de:2b:a2:79:1e:2d:e3:af:c6:4d:9d:98:61:e0:87:
         54:29:2a:a1:0d:a5:6e:b8:6a:f6:4c:a9:bb:ab:d9:80:05:2b:
         e6:6d:7f:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 16:21:12 2024 by rpki-client on console-ams.rpki-client.org