Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FPtJguCPrdrwdU21WTWL291rVzNigkbM285H4fWUPU3H/1/3132382e3230312e3234362e302f32342d3234203d3e20323635383835.roa
File:                     3132382e3230312e3234362e302f32342d3234203d3e20323635383835.roa (raw, json)
Hash identifier:          ZzzY0KseDAJkJRub26zcJcXYQUvVg65HW5W7NkX9sHo=
Subject key identifier:   40:80:2F:95:6C:68:A5:FC:CE:A3:43:9A:5D:E1:84:90:39:EC:DC:E5
Certificate issuer:       /CN=94C381CC9333C07A86D3A11282068476C5196FE6
Certificate serial:       44A571B9C04E7C248D22612C9D2EADAE81DB7184
Authority key identifier: 94:C3:81:CC:93:33:C0:7A:86:D3:A1:12:82:06:84:76:C5:19:6F:E6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/94C381CC9333C07A86D3A11282068476C5196FE6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FPtJguCPrdrwdU21WTWL291rVzNigkbM285H4fWUPU3H/1/3132382e3230312e3234362e302f32342d3234203d3e20323635383835.roa
Signing time:             Thu 04 Apr 2024 18:29:09 +0000
ROA not before:           Thu 04 Apr 2024 18:24:09 +0000
ROA not after:            Thu 03 Apr 2025 18:29:09 +0000
asID:                     265885
IP address blocks:        128.201.246.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FPtJguCPrdrwdU21WTWL291rVzNigkbM285H4fWUPU3H/1/94C381CC9333C07A86D3A11282068476C5196FE6.crl
                          rsync://rpki-repo.registro.br/repo/FPtJguCPrdrwdU21WTWL291rVzNigkbM285H4fWUPU3H/1/94C381CC9333C07A86D3A11282068476C5196FE6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/94C381CC9333C07A86D3A11282068476C5196FE6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 17:48:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:a5:71:b9:c0:4e:7c:24:8d:22:61:2c:9d:2e:ad:ae:81:db:71:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=94C381CC9333C07A86D3A11282068476C5196FE6
        Validity
            Not Before: Apr  4 18:24:09 2024 GMT
            Not After : Apr  3 18:29:09 2025 GMT
        Subject: CN=40802F956C68A5FCCEA3439A5DE1849039ECDCE5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:ab:3f:33:ae:61:86:c3:2d:1b:60:4e:c5:de:
                    7d:ff:51:43:e6:a7:41:e1:e0:cd:ad:5a:b8:7b:92:
                    6d:53:9e:c2:39:ac:1c:88:27:bc:b4:db:3b:cf:36:
                    36:a4:c0:a5:d4:8b:6a:0c:7d:44:4a:89:1e:30:6d:
                    ca:1e:65:04:b1:df:1b:38:ec:1d:40:77:82:08:ce:
                    d9:dc:d2:ef:45:c6:5a:69:0d:e9:3e:85:97:c1:c6:
                    bf:dd:eb:a7:d7:e1:b5:2b:a0:d8:83:f5:49:65:a4:
                    75:bb:99:2b:c5:40:c4:ee:a3:d3:94:0c:46:2f:ea:
                    62:af:51:60:1f:8f:b1:1c:8a:96:af:ec:95:c7:8e:
                    57:51:83:f7:2a:a9:ec:64:c4:5e:cf:c2:5c:41:32:
                    7b:6b:71:dd:d7:77:f4:f1:b8:01:b9:03:ff:d3:8a:
                    cc:23:d1:97:76:0d:62:83:f5:3c:48:1c:d4:70:c3:
                    26:e2:66:1d:22:df:c5:e1:df:cb:bc:2f:96:98:c7:
                    e6:b8:99:7d:81:d4:79:25:ad:e6:66:34:59:f2:8f:
                    a9:25:75:f2:33:42:d9:65:a2:3e:9a:2e:bb:63:5a:
                    c3:02:06:06:da:bf:ee:da:a7:3f:81:72:65:0e:62:
                    03:27:cb:85:28:fe:36:de:a6:82:3b:ce:7c:c4:df:
                    2e:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:80:2F:95:6C:68:A5:FC:CE:A3:43:9A:5D:E1:84:90:39:EC:DC:E5
            X509v3 Authority Key Identifier:
                keyid:94:C3:81:CC:93:33:C0:7A:86:D3:A1:12:82:06:84:76:C5:19:6F:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FPtJguCPrdrwdU21WTWL291rVzNigkbM285H4fWUPU3H/1/94C381CC9333C07A86D3A11282068476C5196FE6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/94C381CC9333C07A86D3A11282068476C5196FE6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FPtJguCPrdrwdU21WTWL291rVzNigkbM285H4fWUPU3H/1/3132382e3230312e3234362e302f32342d3234203d3e20323635383835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.201.246.0/24

    Signature Algorithm: sha256WithRSAEncryption
         60:31:b4:c2:fa:95:ef:a4:9c:22:1a:ea:16:a1:84:20:25:98:
         01:e0:f6:f8:69:25:1f:39:33:91:06:04:a4:c2:4f:77:9e:74:
         ea:94:d5:27:19:3c:62:b7:71:5c:d6:51:5a:e1:d0:fb:6e:0f:
         5e:d8:9c:db:85:6f:12:74:a5:37:ed:6c:d8:aa:82:3b:29:42:
         66:e1:68:14:dd:07:b6:45:5e:0d:da:56:e9:79:f8:de:e1:6d:
         35:3e:99:6d:61:7a:52:4d:96:fd:3a:be:11:c4:2b:1a:f3:a6:
         19:26:98:b6:f8:04:39:fc:19:57:2c:09:b0:ad:7e:31:3b:d3:
         48:ce:ae:27:ab:74:8b:37:a0:b5:50:cd:9c:c7:83:4c:20:f0:
         f6:d4:e0:65:ba:02:8a:44:8e:a5:b3:fb:8d:fc:63:05:05:85:
         a8:0c:a9:25:79:cf:b0:77:b1:83:d8:55:2a:e1:58:cb:05:db:
         73:59:1c:c2:5a:6f:52:0a:bf:81:a6:d8:d7:f7:72:b2:04:ad:
         29:2e:0d:b9:90:c8:5b:44:99:d9:63:94:f0:35:1e:38:2a:c3:
         fc:8a:77:7a:0c:0d:5b:df:45:11:fb:d5:12:ae:47:00:9f:d6:
         72:71:63:bd:5a:55:85:ae:d9:61:2b:0b:b6:4b:e3:ed:8c:f8:
         af:ed:39:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:44:08 2024 by rpki-client on console-ams.rpki-client.org