Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FNjzx5VdKKfVA8X54KYjsABHsYaEAzaN7M3Ms2xXY77P/0/3137392e3132372e3139322e302f32312d3332203d3e20323632383534.roa
File:                     3137392e3132372e3139322e302f32312d3332203d3e20323632383534.roa (raw, json)
Hash identifier:          Fc4v69Ev6vbbEJBAeX5gqF+xvCfRUVbB61O4gjQK8Wo=
Subject key identifier:   0B:F0:51:53:FE:86:B5:9E:A9:94:CD:C7:AB:41:2E:7A:94:F1:CA:B7
Certificate issuer:       /CN=484909AE55FE5D252EF7E025126B88260867CF80
Certificate serial:       184AB6194DABE7003E66B05272FEB618411CE611
Authority key identifier: 48:49:09:AE:55:FE:5D:25:2E:F7:E0:25:12:6B:88:26:08:67:CF:80
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/484909AE55FE5D252EF7E025126B88260867CF80.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FNjzx5VdKKfVA8X54KYjsABHsYaEAzaN7M3Ms2xXY77P/0/3137392e3132372e3139322e302f32312d3332203d3e20323632383534.roa
Signing time:             Tue 12 Nov 2024 14:55:34 +0000
ROA not before:           Tue 12 Nov 2024 14:50:34 +0000
ROA not after:            Tue 11 Nov 2025 14:55:34 +0000
asID:                     262854
IP address blocks:        179.127.192.0/21 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FNjzx5VdKKfVA8X54KYjsABHsYaEAzaN7M3Ms2xXY77P/0/484909AE55FE5D252EF7E025126B88260867CF80.crl
                          rsync://rpki-repo.registro.br/repo/FNjzx5VdKKfVA8X54KYjsABHsYaEAzaN7M3Ms2xXY77P/0/484909AE55FE5D252EF7E025126B88260867CF80.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/484909AE55FE5D252EF7E025126B88260867CF80.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 04:17:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:4a:b6:19:4d:ab:e7:00:3e:66:b0:52:72:fe:b6:18:41:1c:e6:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=484909AE55FE5D252EF7E025126B88260867CF80
        Validity
            Not Before: Nov 12 14:50:34 2024 GMT
            Not After : Nov 11 14:55:34 2025 GMT
        Subject: CN=0BF05153FE86B59EA994CDC7AB412E7A94F1CAB7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:1b:ab:18:7c:8b:cd:35:b3:c4:8a:6b:3f:cb:
                    4b:26:62:d9:d6:53:ac:1c:ac:db:79:b1:d9:1f:c9:
                    2b:9e:bf:d4:7a:0b:bc:63:2d:ae:de:c3:ad:52:c3:
                    9a:a8:15:b2:6f:ad:ff:13:2b:ed:72:4f:bb:c6:96:
                    c4:a1:fa:dd:55:6a:ea:90:e1:e3:6d:1a:20:c9:b1:
                    e0:9e:86:19:f0:f3:86:2c:67:d3:c2:05:e5:bc:a5:
                    05:ca:91:be:9c:0c:bd:8d:2b:25:28:57:9c:26:64:
                    9c:ed:93:63:4d:8a:f3:70:9f:ec:b1:7c:18:d1:58:
                    5f:06:a4:62:b1:a1:71:f8:ef:1a:bd:89:ac:91:54:
                    95:e5:af:64:1b:16:57:3f:ef:10:09:c0:fd:68:04:
                    41:9c:1b:4e:b4:29:92:e7:6d:fa:27:94:d2:03:5c:
                    b8:5d:49:da:f2:7b:81:d6:f6:d7:14:f3:8f:12:fb:
                    6f:de:0c:1e:39:d6:44:ac:03:82:4e:04:f2:45:c8:
                    ae:9f:43:06:b2:f9:19:2e:ab:49:45:17:d9:1b:6a:
                    16:f3:d3:90:7c:94:5f:3d:94:97:23:86:f1:9c:a3:
                    f6:24:bc:21:cd:d5:8a:cb:78:98:f4:bb:90:31:4d:
                    09:4d:3e:71:56:77:db:bc:86:ed:c8:bc:83:04:fb:
                    f0:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:F0:51:53:FE:86:B5:9E:A9:94:CD:C7:AB:41:2E:7A:94:F1:CA:B7
            X509v3 Authority Key Identifier:
                keyid:48:49:09:AE:55:FE:5D:25:2E:F7:E0:25:12:6B:88:26:08:67:CF:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FNjzx5VdKKfVA8X54KYjsABHsYaEAzaN7M3Ms2xXY77P/0/484909AE55FE5D252EF7E025126B88260867CF80.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/484909AE55FE5D252EF7E025126B88260867CF80.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FNjzx5VdKKfVA8X54KYjsABHsYaEAzaN7M3Ms2xXY77P/0/3137392e3132372e3139322e302f32312d3332203d3e20323632383534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.127.192.0/21

    Signature Algorithm: sha256WithRSAEncryption
         29:b9:d0:49:87:67:81:01:99:91:53:f8:0a:87:f7:44:1c:d3:
         84:57:1c:c3:d4:57:d1:7f:dd:03:a1:2d:e5:be:bc:7b:2f:dd:
         e0:48:ae:af:df:2d:a1:cb:e4:7e:44:bc:68:2b:28:a6:93:d4:
         7c:58:bb:68:f6:b0:b7:68:87:5d:cd:c6:59:fc:d3:26:98:ba:
         0b:1b:5e:23:97:72:59:99:07:8c:98:0a:7d:81:cd:c4:ba:85:
         d4:56:87:0f:c2:11:8c:b8:e7:ad:b9:d9:3f:79:f4:9d:85:b5:
         4f:c2:69:e0:41:3f:12:4d:1a:19:22:24:e2:1d:0a:20:54:c5:
         7e:fd:e8:db:ab:6d:9f:7a:c4:3a:ff:8b:09:de:b1:33:18:12:
         f9:57:2b:06:fc:f7:41:86:27:4b:fa:77:6b:7b:db:00:94:09:
         6d:6b:8e:6b:fb:84:82:26:a8:02:dc:06:a3:33:59:4b:54:29:
         59:55:8e:88:78:96:f8:8d:e9:9b:ee:de:3b:08:6b:79:d7:ee:
         54:39:86:4f:96:f7:e1:e0:ea:ec:6e:8f:ba:80:7b:21:84:19:
         f3:6f:16:4c:d8:1e:ff:b7:c2:a9:12:67:50:a8:72:0d:d5:c3:
         44:cb:b8:1f:3d:0a:cc:76:b3:70:7f:9c:05:cb:44:da:72:17:
         b8:c0:e4:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 04:52:56 2024 by rpki-client on console-ams.rpki-client.org