Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FJy2APg7gkmafh7wmZxrbFMFPZNVrRMX3SqYr2oFg8qD/0/3139312e3234302e3230302e302f32312d3332203d3e20323632383531.roa
File:                     3139312e3234302e3230302e302f32312d3332203d3e20323632383531.roa (raw, json)
Hash identifier:          RkFWkkFNdedCetv31drNKQSKmXqArnhx8f692jAW8s4=
Subject key identifier:   A0:F7:7B:6B:DB:38:26:84:12:E2:EA:9B:67:2E:05:81:15:E8:7C:75
Certificate issuer:       /CN=F4EA0476EF3A040C1ACF291B4BF7D98083835610
Certificate serial:       2ACEA6A9BD00DB1BFDEBB763358DEBD5A28503A9
Authority key identifier: F4:EA:04:76:EF:3A:04:0C:1A:CF:29:1B:4B:F7:D9:80:83:83:56:10
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F4EA0476EF3A040C1ACF291B4BF7D98083835610.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FJy2APg7gkmafh7wmZxrbFMFPZNVrRMX3SqYr2oFg8qD/0/3139312e3234302e3230302e302f32312d3332203d3e20323632383531.roa
Signing time:             Fri 08 Nov 2024 14:12:33 +0000
ROA not before:           Fri 08 Nov 2024 14:07:33 +0000
ROA not after:            Fri 07 Nov 2025 14:12:33 +0000
asID:                     262851
IP address blocks:        191.240.200.0/21 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FJy2APg7gkmafh7wmZxrbFMFPZNVrRMX3SqYr2oFg8qD/0/F4EA0476EF3A040C1ACF291B4BF7D98083835610.crl
                          rsync://rpki-repo.registro.br/repo/FJy2APg7gkmafh7wmZxrbFMFPZNVrRMX3SqYr2oFg8qD/0/F4EA0476EF3A040C1ACF291B4BF7D98083835610.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F4EA0476EF3A040C1ACF291B4BF7D98083835610.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 16:41:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:ce:a6:a9:bd:00:db:1b:fd:eb:b7:63:35:8d:eb:d5:a2:85:03:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F4EA0476EF3A040C1ACF291B4BF7D98083835610
        Validity
            Not Before: Nov  8 14:07:33 2024 GMT
            Not After : Nov  7 14:12:33 2025 GMT
        Subject: CN=A0F77B6BDB38268412E2EA9B672E058115E87C75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:17:54:90:4d:f1:aa:14:72:d7:cd:86:a0:30:
                    d1:65:c7:bc:aa:29:af:4f:0e:90:57:63:f8:f6:a9:
                    3b:6d:2b:63:a9:53:f6:38:fb:da:2d:5d:49:f5:c0:
                    d3:84:03:43:7d:72:ae:16:cd:d0:d2:ba:98:0e:59:
                    61:60:34:50:9b:45:53:0e:b7:40:26:0d:60:d4:a2:
                    82:52:02:3e:8f:10:32:e9:d8:a8:63:1a:9f:50:4b:
                    11:28:a9:5b:70:ef:2e:13:2e:59:cf:20:4a:ec:68:
                    c8:1f:95:73:29:5e:fb:17:a9:5a:49:99:f9:64:ec:
                    ae:c9:e5:e2:00:75:b3:14:a1:3f:0b:b4:fa:21:c4:
                    61:2d:94:41:02:00:28:2d:5a:23:0a:07:af:8c:26:
                    0c:36:fd:32:bd:10:bb:41:ef:16:2a:d9:45:84:a1:
                    35:31:d2:c9:1e:ed:2a:aa:90:d1:9d:e5:7d:a0:41:
                    d4:61:91:b1:77:3a:33:35:53:e1:2a:17:ed:42:08:
                    ac:69:8f:dc:08:4c:6f:68:03:27:ac:43:b9:c8:b0:
                    bc:a3:e8:ad:0c:10:74:9b:83:21:14:28:76:4c:9b:
                    b9:0d:ea:22:95:8f:41:c8:cf:71:ca:61:7d:6b:35:
                    98:8a:bc:c9:8e:1f:e9:a9:e0:8f:d1:ce:c2:51:5e:
                    eb:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:F7:7B:6B:DB:38:26:84:12:E2:EA:9B:67:2E:05:81:15:E8:7C:75
            X509v3 Authority Key Identifier:
                keyid:F4:EA:04:76:EF:3A:04:0C:1A:CF:29:1B:4B:F7:D9:80:83:83:56:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FJy2APg7gkmafh7wmZxrbFMFPZNVrRMX3SqYr2oFg8qD/0/F4EA0476EF3A040C1ACF291B4BF7D98083835610.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F4EA0476EF3A040C1ACF291B4BF7D98083835610.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FJy2APg7gkmafh7wmZxrbFMFPZNVrRMX3SqYr2oFg8qD/0/3139312e3234302e3230302e302f32312d3332203d3e20323632383531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.240.200.0/21

    Signature Algorithm: sha256WithRSAEncryption
         bd:74:f9:a9:81:dc:2e:24:29:7c:57:08:b4:a6:2d:17:ee:b2:
         45:96:33:7d:3d:65:ac:7f:dd:54:38:e9:73:5d:db:8d:81:6c:
         51:2c:91:f1:ed:b9:9b:79:d4:b1:fe:4b:8f:b6:20:17:48:10:
         a8:05:79:91:02:f0:67:42:33:5f:c9:06:cf:59:80:3d:7e:a2:
         d8:65:9e:33:d8:18:37:88:df:db:5c:f8:a3:da:16:2c:ff:3b:
         cc:40:75:c9:e7:51:f8:46:d8:75:44:fe:54:9e:63:fb:f1:95:
         27:0f:e4:7a:08:a7:4c:99:85:fc:2c:19:c5:08:0b:2d:8d:4d:
         a7:37:6b:fe:8c:02:30:cb:79:0f:c7:33:a8:a0:01:14:ab:e5:
         2c:f1:ce:f3:aa:59:77:da:41:d2:89:c2:47:c9:64:d8:99:5c:
         45:ad:75:01:57:4a:46:6b:4d:ec:16:9a:3d:ea:88:fa:5e:af:
         cd:1f:86:12:d5:8b:22:79:68:af:d6:4e:5a:42:1a:fb:d0:4a:
         31:09:cf:81:db:62:ca:c5:fc:63:29:a0:d3:eb:6c:d9:ad:b1:
         27:80:0f:4a:6f:ae:0c:a7:aa:e3:29:96:c1:2a:b5:e0:59:11:
         8b:cb:ea:31:d1:52:49:5f:63:59:1c:e6:2b:74:21:53:b9:d0:
         65:43:90:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 17:31:59 2024 by rpki-client on console-fra.rpki-client.org