Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FMfPokTrt9EfG1UmiZ5AQ3kvymy5AxttsnDiNiNhwque/1/3139312e3234332e33362e302f32322d3232203d3e20323633343932.roa
File:                     3139312e3234332e33362e302f32322d3232203d3e20323633343932.roa (raw, json)
Hash identifier:          F4ouV0N4JFek744NCHTLhEekrBAxvnmRnmy9zQ6BNPU=
Subject key identifier:   C5:7D:57:8E:01:F4:52:0E:BE:59:EE:75:A5:0D:01:66:5B:31:F2:32
Certificate issuer:       /CN=D7F3F67EA800504F23795E22991815F9E686C811
Certificate serial:       5A0D55F80834407F8A93D00DD794AFDC552431B9
Authority key identifier: D7:F3:F6:7E:A8:00:50:4F:23:79:5E:22:99:18:15:F9:E6:86:C8:11
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D7F3F67EA800504F23795E22991815F9E686C811.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FMfPokTrt9EfG1UmiZ5AQ3kvymy5AxttsnDiNiNhwque/1/3139312e3234332e33362e302f32322d3232203d3e20323633343932.roa
Signing time:             Wed 03 Apr 2024 18:32:17 +0000
ROA not before:           Wed 03 Apr 2024 18:27:17 +0000
ROA not after:            Wed 02 Apr 2025 18:32:17 +0000
asID:                     263492
IP address blocks:        191.243.36.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FMfPokTrt9EfG1UmiZ5AQ3kvymy5AxttsnDiNiNhwque/1/D7F3F67EA800504F23795E22991815F9E686C811.crl
                          rsync://rpki-repo.registro.br/repo/FMfPokTrt9EfG1UmiZ5AQ3kvymy5AxttsnDiNiNhwque/1/D7F3F67EA800504F23795E22991815F9E686C811.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D7F3F67EA800504F23795E22991815F9E686C811.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 06:14:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:0d:55:f8:08:34:40:7f:8a:93:d0:0d:d7:94:af:dc:55:24:31:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D7F3F67EA800504F23795E22991815F9E686C811
        Validity
            Not Before: Apr  3 18:27:17 2024 GMT
            Not After : Apr  2 18:32:17 2025 GMT
        Subject: CN=C57D578E01F4520EBE59EE75A50D01665B31F232
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:5c:ea:c9:50:d7:a4:c0:53:74:f8:46:bf:ca:
                    35:67:69:ab:91:70:33:ff:82:02:b4:2e:f0:c2:d0:
                    b4:3c:7a:a1:cf:8d:8f:f0:06:94:2d:ed:e9:51:46:
                    11:d7:4b:c9:71:f8:34:f4:b1:9a:fb:67:e7:59:bf:
                    17:27:74:d7:2a:dc:b9:88:76:e8:6c:70:cc:92:41:
                    b8:7a:e0:7f:80:49:02:18:78:43:03:b4:d2:45:e3:
                    63:9f:78:9f:b7:e4:13:a4:2e:4f:4a:99:1d:4f:86:
                    4c:df:39:1b:39:f4:de:88:da:20:55:60:a6:0e:44:
                    47:45:4e:19:24:fd:78:9b:60:66:3a:82:8a:6c:db:
                    73:b1:8b:ff:b8:30:6f:85:25:a1:40:4c:eb:89:2e:
                    b1:ce:80:5a:19:9a:2c:ef:27:bd:ef:76:a0:49:31:
                    32:64:c8:d6:10:bb:1a:26:57:e2:e8:66:65:c2:b6:
                    d9:3c:91:5e:64:f8:a8:c6:8f:c0:5b:cc:6c:95:63:
                    f6:48:08:7d:e7:91:6b:4c:6a:85:07:94:fc:6b:41:
                    4d:db:70:f4:5e:b0:a5:c6:e6:6b:0b:7e:69:ad:36:
                    5f:37:03:39:1d:c1:f6:fd:d8:c9:f3:01:03:c9:5a:
                    6b:b7:25:7f:63:02:06:d4:dd:d1:da:92:bb:4e:1f:
                    db:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:7D:57:8E:01:F4:52:0E:BE:59:EE:75:A5:0D:01:66:5B:31:F2:32
            X509v3 Authority Key Identifier:
                keyid:D7:F3:F6:7E:A8:00:50:4F:23:79:5E:22:99:18:15:F9:E6:86:C8:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FMfPokTrt9EfG1UmiZ5AQ3kvymy5AxttsnDiNiNhwque/1/D7F3F67EA800504F23795E22991815F9E686C811.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D7F3F67EA800504F23795E22991815F9E686C811.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FMfPokTrt9EfG1UmiZ5AQ3kvymy5AxttsnDiNiNhwque/1/3139312e3234332e33362e302f32322d3232203d3e20323633343932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.243.36.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b2:68:d3:62:3e:b0:b8:d8:30:99:ab:d7:9e:4f:74:2b:6f:ac:
         f8:da:ed:dd:ef:19:25:49:6f:2b:d5:05:72:df:6d:3f:d4:c2:
         ab:b4:3f:fd:a2:ff:0d:a0:1a:0a:53:85:e7:a6:2d:e0:00:1a:
         5c:7a:58:c8:46:6b:55:cd:1d:7d:99:38:c8:04:41:4a:31:c3:
         0a:44:96:bf:f1:9e:f2:e3:b9:c9:8b:85:b2:72:7e:60:a0:db:
         d5:5a:dd:dd:2f:02:4c:fc:ea:64:21:3e:8d:24:87:0a:dc:55:
         93:48:52:31:a2:49:18:fe:f8:af:56:29:c3:cc:00:5a:94:bf:
         ff:dc:c1:5c:43:65:3c:11:e0:b5:d4:f3:a2:da:0f:e2:88:cd:
         c2:74:26:18:29:e7:a4:f8:6a:64:33:16:60:42:4f:5e:60:86:
         6b:fd:6b:a9:4a:d2:51:63:b5:7b:30:a8:57:31:4a:25:95:36:
         77:10:93:91:28:2e:4b:73:ff:71:c0:51:67:1f:bd:76:8a:3a:
         86:82:6f:e3:23:04:fc:d1:e6:9e:c7:88:4c:57:48:c6:1b:75:
         13:9d:01:82:fc:8f:4f:a6:73:66:d1:1d:9e:f1:31:c9:12:d8:
         d1:0a:85:6b:1c:67:b6:20:c5:32:b4:a4:0f:73:55:34:c5:6a:
         83:49:13:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 08:13:13 2024 by rpki-client on console-fra.rpki-client.org