Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FMfPokTrt9EfG1UmiZ5AQ3kvymy5AxttsnDiNiNhwque/1/3139312e3234332e33362e302f32332d3233203d3e20323633343932.roa
File:                     3139312e3234332e33362e302f32332d3233203d3e20323633343932.roa (raw, json)
Hash identifier:          m4JXSkgWMMrCGu+j5VuQZu3jejUoCzZmOim8z3Mdqz8=
Subject key identifier:   05:9B:8E:B9:D5:4E:02:7D:CB:37:AB:95:D0:68:6B:C3:35:7F:25:D0
Certificate issuer:       /CN=D7F3F67EA800504F23795E22991815F9E686C811
Certificate serial:       7FC598AD234897AC2AD8F951326DF974F4025D22
Authority key identifier: D7:F3:F6:7E:A8:00:50:4F:23:79:5E:22:99:18:15:F9:E6:86:C8:11
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D7F3F67EA800504F23795E22991815F9E686C811.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FMfPokTrt9EfG1UmiZ5AQ3kvymy5AxttsnDiNiNhwque/1/3139312e3234332e33362e302f32332d3233203d3e20323633343932.roa
Signing time:             Wed 03 Apr 2024 18:32:17 +0000
ROA not before:           Wed 03 Apr 2024 18:27:17 +0000
ROA not after:            Wed 02 Apr 2025 18:32:17 +0000
asID:                     263492
IP address blocks:        191.243.36.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FMfPokTrt9EfG1UmiZ5AQ3kvymy5AxttsnDiNiNhwque/1/D7F3F67EA800504F23795E22991815F9E686C811.crl
                          rsync://rpki-repo.registro.br/repo/FMfPokTrt9EfG1UmiZ5AQ3kvymy5AxttsnDiNiNhwque/1/D7F3F67EA800504F23795E22991815F9E686C811.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D7F3F67EA800504F23795E22991815F9E686C811.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 10:56:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:c5:98:ad:23:48:97:ac:2a:d8:f9:51:32:6d:f9:74:f4:02:5d:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D7F3F67EA800504F23795E22991815F9E686C811
        Validity
            Not Before: Apr  3 18:27:17 2024 GMT
            Not After : Apr  2 18:32:17 2025 GMT
        Subject: CN=059B8EB9D54E027DCB37AB95D0686BC3357F25D0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:3e:d0:ab:93:ad:4f:5a:4a:af:5d:f4:b2:58:
                    05:f5:60:ab:82:f2:68:8c:a2:dc:4d:50:03:ea:07:
                    ed:3f:e0:d6:b7:4b:7f:17:64:8f:36:06:60:3a:e9:
                    a2:e9:95:83:0d:76:2f:3b:03:c0:3c:a6:f4:2b:c6:
                    4d:0b:26:2d:93:98:3e:59:46:b7:cc:d3:92:cc:12:
                    a8:11:10:bc:9b:b7:0f:aa:68:a3:8c:71:d5:15:b8:
                    fd:ee:fb:b7:f3:a8:8d:12:8a:a7:2d:04:eb:2c:29:
                    28:8e:00:df:06:0f:f5:f9:98:4c:82:5a:46:ff:2f:
                    23:25:99:ec:9d:ee:cd:c0:51:da:14:d6:55:1d:ff:
                    68:8f:e4:95:d7:e3:54:b9:85:5f:7a:09:f8:cc:99:
                    f3:01:fe:13:46:bb:dc:d0:0b:0c:8e:2e:08:f5:b4:
                    a9:d8:09:86:a1:3f:9e:96:cd:fa:76:95:3e:a8:56:
                    9b:1f:17:15:6d:f0:5a:e5:19:83:7b:cf:9d:12:51:
                    38:a3:f6:9f:be:13:e1:b4:f8:bb:ce:a7:fc:dc:ed:
                    e6:94:3a:d0:1a:5f:91:1a:65:f6:82:3f:f4:d8:4e:
                    33:5f:26:85:bb:69:df:72:37:56:e1:27:70:66:3b:
                    24:f2:83:b7:78:f3:c3:ce:71:70:9d:80:32:f7:65:
                    2d:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:9B:8E:B9:D5:4E:02:7D:CB:37:AB:95:D0:68:6B:C3:35:7F:25:D0
            X509v3 Authority Key Identifier:
                keyid:D7:F3:F6:7E:A8:00:50:4F:23:79:5E:22:99:18:15:F9:E6:86:C8:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FMfPokTrt9EfG1UmiZ5AQ3kvymy5AxttsnDiNiNhwque/1/D7F3F67EA800504F23795E22991815F9E686C811.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D7F3F67EA800504F23795E22991815F9E686C811.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FMfPokTrt9EfG1UmiZ5AQ3kvymy5AxttsnDiNiNhwque/1/3139312e3234332e33362e302f32332d3233203d3e20323633343932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.243.36.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5c:ce:aa:f7:2a:54:ae:75:cc:04:38:c1:1c:1b:7f:da:8f:8a:
         96:d3:a5:23:f4:d0:b4:0b:bd:41:9d:dc:97:62:c9:43:4f:af:
         06:cc:cb:a9:a1:b1:b1:71:fc:e3:4a:2b:73:ee:ea:64:de:5d:
         db:44:b4:ed:c4:ad:fc:73:0e:bb:53:15:4e:12:37:fd:99:3b:
         fd:85:a1:55:57:cb:21:af:17:93:29:0d:69:26:47:ba:fd:51:
         d6:8e:fe:58:42:0d:a2:3e:dd:ef:19:74:87:f6:d1:23:31:5a:
         ba:bb:ee:a5:75:4d:3b:96:1b:10:81:76:71:92:95:34:cd:59:
         ce:5b:d6:ce:85:5b:7a:4e:b0:61:f2:35:9d:07:17:1e:98:5f:
         7c:6c:f2:f5:fa:27:c1:79:fa:ce:c4:9a:c2:4e:35:78:9b:a0:
         80:f5:d9:9b:37:56:e5:e0:8a:7c:4d:0b:bf:84:6c:ec:84:20:
         e1:6c:31:27:f3:32:f4:f0:c0:9c:d8:4f:b2:42:fb:b2:e4:6b:
         ca:6e:cf:b4:ff:7e:dd:4b:b2:26:7f:c0:87:96:8e:5b:e3:70:
         18:35:84:1f:e2:84:dc:28:0c:7b:a9:21:6a:e4:92:be:65:8d:
         44:38:44:cf:49:b5:3a:f2:0c:93:28:0d:68:2d:bb:fe:d3:61:
         d1:18:1c:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:39:25 2024 by rpki-client on console-ams.rpki-client.org