Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FMfPokTrt9EfG1UmiZ5AQ3kvymy5AxttsnDiNiNhwque/1/3139312e3234332e33362e302f32342d3234203d3e20323633343932.roa
File:                     3139312e3234332e33362e302f32342d3234203d3e20323633343932.roa (raw, json)
Hash identifier:          6PGW+Rf7aX8NMKDhBD+QnaBcUDo0OpCXYXelgQZ345Q=
Subject key identifier:   A0:B8:C1:21:94:B9:AB:34:B1:29:64:32:D3:E1:AC:8E:AF:01:72:26
Certificate issuer:       /CN=D7F3F67EA800504F23795E22991815F9E686C811
Certificate serial:       380D37CA85EA828F0C0902F13B62DC0FF025F7BE
Authority key identifier: D7:F3:F6:7E:A8:00:50:4F:23:79:5E:22:99:18:15:F9:E6:86:C8:11
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D7F3F67EA800504F23795E22991815F9E686C811.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FMfPokTrt9EfG1UmiZ5AQ3kvymy5AxttsnDiNiNhwque/1/3139312e3234332e33362e302f32342d3234203d3e20323633343932.roa
Signing time:             Wed 03 Apr 2024 18:32:17 +0000
ROA not before:           Wed 03 Apr 2024 18:27:17 +0000
ROA not after:            Wed 02 Apr 2025 18:32:17 +0000
asID:                     263492
IP address blocks:        191.243.36.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FMfPokTrt9EfG1UmiZ5AQ3kvymy5AxttsnDiNiNhwque/1/D7F3F67EA800504F23795E22991815F9E686C811.crl
                          rsync://rpki-repo.registro.br/repo/FMfPokTrt9EfG1UmiZ5AQ3kvymy5AxttsnDiNiNhwque/1/D7F3F67EA800504F23795E22991815F9E686C811.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D7F3F67EA800504F23795E22991815F9E686C811.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 06:14:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:0d:37:ca:85:ea:82:8f:0c:09:02:f1:3b:62:dc:0f:f0:25:f7:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D7F3F67EA800504F23795E22991815F9E686C811
        Validity
            Not Before: Apr  3 18:27:17 2024 GMT
            Not After : Apr  2 18:32:17 2025 GMT
        Subject: CN=A0B8C12194B9AB34B1296432D3E1AC8EAF017226
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:f4:14:40:47:65:04:e7:b4:63:64:27:3a:55:
                    ef:c7:b7:f1:27:5f:26:97:16:5e:d3:fa:3a:95:77:
                    9f:72:d0:d9:e4:80:a5:c2:d3:28:07:d4:19:fa:c8:
                    4c:43:29:07:aa:5b:7c:cf:52:c2:aa:78:ec:1c:ca:
                    7b:35:05:68:e3:21:2f:77:bc:ec:8b:ec:60:4a:d7:
                    f0:4e:3e:6a:be:49:a6:7b:2d:bd:51:b0:05:df:55:
                    d3:55:23:50:81:5f:8f:95:1e:a6:c8:97:f9:4c:8e:
                    58:41:3d:53:8f:49:ff:d2:24:f2:01:fc:58:20:17:
                    b5:e3:d4:b2:4c:01:84:05:8d:b7:56:c1:8a:ca:aa:
                    20:ca:51:02:29:73:97:31:91:c2:b7:d2:64:b0:7d:
                    19:70:76:bd:5b:74:ef:87:24:48:90:f1:c6:69:3c:
                    6e:bc:2e:57:90:b0:78:d2:f4:cc:9d:8f:64:4a:22:
                    3e:60:73:03:46:03:7e:8b:4b:3f:89:b6:41:a3:25:
                    e4:72:7f:6c:54:b7:46:2b:05:ab:58:e4:7c:79:11:
                    cc:b7:d5:71:b4:f8:14:91:f8:87:87:88:ae:56:76:
                    2f:6a:58:23:ca:c9:38:83:a5:17:70:11:88:39:24:
                    3e:b0:b6:97:4b:be:9f:d0:fd:17:de:33:11:5e:b2:
                    03:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:B8:C1:21:94:B9:AB:34:B1:29:64:32:D3:E1:AC:8E:AF:01:72:26
            X509v3 Authority Key Identifier:
                keyid:D7:F3:F6:7E:A8:00:50:4F:23:79:5E:22:99:18:15:F9:E6:86:C8:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FMfPokTrt9EfG1UmiZ5AQ3kvymy5AxttsnDiNiNhwque/1/D7F3F67EA800504F23795E22991815F9E686C811.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D7F3F67EA800504F23795E22991815F9E686C811.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FMfPokTrt9EfG1UmiZ5AQ3kvymy5AxttsnDiNiNhwque/1/3139312e3234332e33362e302f32342d3234203d3e20323633343932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.243.36.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b6:e2:98:05:16:b2:09:ea:ee:9f:4c:3f:90:a5:1d:20:98:f2:
         1e:20:cd:fd:29:49:93:be:13:4d:2e:9d:ae:22:c3:58:b8:a4:
         3b:13:b2:55:b2:93:a2:5a:42:90:d6:e3:cf:14:9e:7d:23:d9:
         44:6e:ca:84:7c:78:a0:35:34:fe:a0:d2:5d:25:49:e4:af:49:
         59:76:65:e2:e7:c6:02:73:01:1f:8d:61:df:d8:78:38:e4:46:
         c4:ad:85:5a:3d:6c:97:78:85:b2:5a:ee:61:d3:9a:8d:d0:fd:
         d5:82:1f:32:5b:6b:f6:c2:be:12:17:ba:d6:64:16:9d:58:f4:
         07:81:7d:be:75:9d:d1:a2:43:1d:17:f6:ff:0b:8d:94:5b:52:
         4f:71:5d:e5:c6:c9:b4:7c:f6:84:eb:cd:4c:b3:8a:18:f2:ac:
         17:54:6f:2b:c5:bf:7f:89:23:5b:7e:06:f6:da:35:f2:14:64:
         b6:37:45:0b:cd:58:6a:a7:f1:69:40:14:6a:be:20:7b:3e:80:
         f1:7d:f1:6e:7d:18:00:dd:0d:ea:85:6e:46:03:3a:ac:35:df:
         f9:f7:a2:cd:ca:4b:d3:f1:1d:1e:e0:62:d4:cc:f9:2f:25:30:
         31:0c:dd:3d:6a:e8:b8:23:05:ee:0f:a9:51:fe:b0:34:36:ed:
         9b:d5:34:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 08:13:13 2024 by rpki-client on console-fra.rpki-client.org