Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FPtJguCPrdrwdU21WTWL291rVzNigkbM285H4fWUPU3H/1/3132382e3230312e3234362e302f32332d3233203d3e20323635383835.roa
File:                     3132382e3230312e3234362e302f32332d3233203d3e20323635383835.roa (raw, json)
Hash identifier:          3u9EzmdUGId869krxk3yxEYRS+zxAYUe2m/GMR4xYdE=
Subject key identifier:   06:0F:3E:0F:0D:97:3D:16:06:B1:B5:06:E8:DD:AD:1F:03:49:BE:FD
Certificate issuer:       /CN=94C381CC9333C07A86D3A11282068476C5196FE6
Certificate serial:       722CBFBD78D61F330DCBC2F683FC3FEFF045D454
Authority key identifier: 94:C3:81:CC:93:33:C0:7A:86:D3:A1:12:82:06:84:76:C5:19:6F:E6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/94C381CC9333C07A86D3A11282068476C5196FE6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FPtJguCPrdrwdU21WTWL291rVzNigkbM285H4fWUPU3H/1/3132382e3230312e3234362e302f32332d3233203d3e20323635383835.roa
Signing time:             Thu 04 Apr 2024 18:29:14 +0000
ROA not before:           Thu 04 Apr 2024 18:24:14 +0000
ROA not after:            Thu 03 Apr 2025 18:29:14 +0000
asID:                     265885
IP address blocks:        128.201.246.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FPtJguCPrdrwdU21WTWL291rVzNigkbM285H4fWUPU3H/1/94C381CC9333C07A86D3A11282068476C5196FE6.crl
                          rsync://rpki-repo.registro.br/repo/FPtJguCPrdrwdU21WTWL291rVzNigkbM285H4fWUPU3H/1/94C381CC9333C07A86D3A11282068476C5196FE6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/94C381CC9333C07A86D3A11282068476C5196FE6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 17:48:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:2c:bf:bd:78:d6:1f:33:0d:cb:c2:f6:83:fc:3f:ef:f0:45:d4:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=94C381CC9333C07A86D3A11282068476C5196FE6
        Validity
            Not Before: Apr  4 18:24:14 2024 GMT
            Not After : Apr  3 18:29:14 2025 GMT
        Subject: CN=060F3E0F0D973D1606B1B506E8DDAD1F0349BEFD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:98:9a:f9:9d:a9:a9:4d:6d:75:97:b1:c4:9b:
                    94:e5:1a:05:5d:5c:0b:ac:7c:11:a3:81:97:be:7f:
                    f1:d9:48:be:de:9e:3d:37:a8:0f:bf:d2:9c:e9:2c:
                    83:dc:ce:6a:68:cd:4c:80:01:12:de:b2:ed:0f:33:
                    43:69:cc:d0:11:92:22:2f:24:1d:5b:ee:5a:66:a6:
                    a4:93:9b:42:d3:03:ef:b8:0f:9b:90:73:38:3a:00:
                    09:f4:2e:8e:0a:cc:3f:80:ef:db:af:a3:47:cc:eb:
                    51:b5:a8:06:dc:01:5d:61:fe:5f:ef:9f:aa:80:28:
                    39:57:af:c7:30:c2:f5:b3:bd:2c:94:82:99:34:cb:
                    a4:b6:52:5e:c2:7d:36:2b:bb:0c:d6:68:72:0c:c4:
                    db:41:46:7f:2e:d7:9e:a4:07:b9:1e:c3:06:1f:53:
                    9c:96:b1:94:3d:3d:89:dd:15:ae:b7:b2:db:53:b4:
                    da:05:e5:72:af:32:45:ac:47:f0:c2:81:2d:b9:62:
                    bb:be:18:09:d4:40:8d:e0:c3:3e:d6:f8:4f:0b:14:
                    d0:01:a9:cf:b7:b1:15:a8:41:60:bd:b3:71:4c:23:
                    51:a0:a1:55:fa:5c:3f:e8:4e:dc:41:ba:86:c2:6b:
                    ea:fa:be:ba:cb:86:04:5d:17:f5:74:0f:86:52:89:
                    0a:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:0F:3E:0F:0D:97:3D:16:06:B1:B5:06:E8:DD:AD:1F:03:49:BE:FD
            X509v3 Authority Key Identifier:
                keyid:94:C3:81:CC:93:33:C0:7A:86:D3:A1:12:82:06:84:76:C5:19:6F:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FPtJguCPrdrwdU21WTWL291rVzNigkbM285H4fWUPU3H/1/94C381CC9333C07A86D3A11282068476C5196FE6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/94C381CC9333C07A86D3A11282068476C5196FE6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FPtJguCPrdrwdU21WTWL291rVzNigkbM285H4fWUPU3H/1/3132382e3230312e3234362e302f32332d3233203d3e20323635383835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.201.246.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6e:23:ae:85:49:79:0e:be:6f:32:4b:cc:59:61:72:3b:77:c5:
         0e:67:94:e0:9f:10:dd:c6:4a:0b:27:44:8c:c2:56:44:b9:17:
         e0:b5:43:21:a6:9e:9c:a2:e8:d3:e8:e1:d1:f1:0e:38:32:a2:
         a9:2c:f4:6f:58:2c:21:4a:82:2c:20:11:3f:8f:ae:be:2e:f8:
         1a:2b:77:71:61:e1:7f:5a:1d:7b:61:df:ca:9a:f6:cd:4c:2a:
         4d:8e:ee:38:da:84:69:cd:74:13:36:0f:93:82:85:df:23:66:
         ae:25:ac:f7:cb:0b:5e:e3:b4:56:13:58:f4:36:d2:37:a0:f9:
         c2:61:59:42:d3:0f:17:bc:e3:14:fb:c5:ec:af:fe:1c:c4:d5:
         de:ff:23:e5:bc:e3:a3:b9:42:91:21:f0:2c:c4:0a:81:78:9f:
         cb:a0:1f:de:11:05:53:da:16:42:3b:b2:55:e6:81:39:ba:5c:
         65:40:90:3f:02:fc:41:10:21:e1:11:9d:fe:61:f1:93:84:4e:
         77:84:c8:ca:f8:5c:a6:69:bf:c7:24:60:10:24:63:41:f7:39:
         4b:13:4b:04:07:f7:e9:fe:61:26:e3:5e:71:b4:45:47:4e:75:
         9c:c7:44:ec:d0:c0:a9:f8:88:4f:7c:5c:f7:ca:9b:46:67:3a:
         2d:33:8b:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 17:50:32 2024 by rpki-client on console-fra.rpki-client.org