Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FVwhhkC9qr9bnA6kabkMdZHFPoSMkDmvJRV2e1DkCiL3/1/3134332e3235352e3230302e302f32322d3234203d3e203532383633.roa
File:                     3134332e3235352e3230302e302f32322d3234203d3e203532383633.roa (raw, json)
Hash identifier:          SJFGqPmUZbRK68J6sXuT+AlY/i791PVPOy4PJJBvlt4=
Subject key identifier:   93:78:4A:42:AE:4B:C3:AA:A2:BC:A5:AF:32:90:60:37:71:3B:80:12
Certificate issuer:       /CN=D1D8C77A34CB2B0044058D74160F7A20912778C1
Certificate serial:       4843032A4E7F9894DF0D6B3500C5B027B932FDAB
Authority key identifier: D1:D8:C7:7A:34:CB:2B:00:44:05:8D:74:16:0F:7A:20:91:27:78:C1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1D8C77A34CB2B0044058D74160F7A20912778C1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FVwhhkC9qr9bnA6kabkMdZHFPoSMkDmvJRV2e1DkCiL3/1/3134332e3235352e3230302e302f32322d3234203d3e203532383633.roa
Signing time:             Wed 03 Apr 2024 19:00:00 +0000
ROA not before:           Wed 03 Apr 2024 18:55:00 +0000
ROA not after:            Thu 03 Apr 2025 19:00:00 +0000
asID:                     52863
IP address blocks:        143.255.200.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FVwhhkC9qr9bnA6kabkMdZHFPoSMkDmvJRV2e1DkCiL3/1/D1D8C77A34CB2B0044058D74160F7A20912778C1.crl
                          rsync://rpki-repo.registro.br/repo/FVwhhkC9qr9bnA6kabkMdZHFPoSMkDmvJRV2e1DkCiL3/1/D1D8C77A34CB2B0044058D74160F7A20912778C1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1D8C77A34CB2B0044058D74160F7A20912778C1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 17 Feb 2025 04:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:43:03:2a:4e:7f:98:94:df:0d:6b:35:00:c5:b0:27:b9:32:fd:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D1D8C77A34CB2B0044058D74160F7A20912778C1
        Validity
            Not Before: Apr  3 18:55:00 2024 GMT
            Not After : Apr  3 19:00:00 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:33:df:ba:3b:5d:d8:93:11:06:c3:8b:67:5e:
                    e4:7a:fd:09:2a:6c:b6:a8:02:9e:e1:73:12:2c:b9:
                    f4:23:cc:f2:36:8d:c4:61:b4:62:a8:1d:09:7a:1c:
                    e5:ec:f2:51:e4:0b:28:cf:ee:55:00:bc:01:da:81:
                    7c:e1:cb:d1:6f:54:a6:a3:fa:f3:9d:da:ec:58:c9:
                    60:f8:d4:38:9d:75:6b:0f:2b:27:18:ba:51:55:f6:
                    ca:01:78:97:7d:28:76:6f:af:0e:92:d3:58:90:80:
                    b3:df:1d:79:49:b0:b1:de:d3:f9:98:8c:46:7e:60:
                    b2:05:68:ca:42:cc:8d:eb:b4:a4:a6:82:28:df:f9:
                    1f:1c:a5:0d:42:09:be:a5:0d:19:54:46:7d:65:7b:
                    ea:b8:a9:ba:5e:4e:15:bd:9f:ac:c3:72:2b:a7:41:
                    48:68:0b:8d:9a:06:c7:d4:86:3d:eb:d0:48:49:03:
                    4d:56:97:9c:1c:32:d1:9f:02:78:6e:4f:a9:97:ff:
                    cc:c9:32:f4:45:d6:a4:23:e1:c9:05:03:12:17:c8:
                    3a:e3:bf:4c:a0:23:6b:3d:83:7b:cb:77:42:ca:fd:
                    86:2c:fa:a4:92:92:c9:ae:ac:3d:36:ba:57:5e:1a:
                    45:2d:0c:5c:b7:d7:4f:2c:8d:5b:5c:e1:45:92:48:
                    4b:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:78:4A:42:AE:4B:C3:AA:A2:BC:A5:AF:32:90:60:37:71:3B:80:12
            X509v3 Authority Key Identifier:
                keyid:D1:D8:C7:7A:34:CB:2B:00:44:05:8D:74:16:0F:7A:20:91:27:78:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FVwhhkC9qr9bnA6kabkMdZHFPoSMkDmvJRV2e1DkCiL3/1/D1D8C77A34CB2B0044058D74160F7A20912778C1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1D8C77A34CB2B0044058D74160F7A20912778C1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FVwhhkC9qr9bnA6kabkMdZHFPoSMkDmvJRV2e1DkCiL3/1/3134332e3235352e3230302e302f32322d3234203d3e203532383633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.255.200.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4f:c1:56:ac:3d:50:20:0c:ab:d1:e1:31:90:43:0c:63:42:e2:
         8a:55:d7:95:b7:0d:83:8d:3d:a6:bb:d1:7e:a9:93:e7:cb:2e:
         e2:75:20:3d:60:cb:ab:70:7b:45:7b:d2:c5:7a:50:67:8a:4d:
         3c:70:0b:e0:b0:16:2f:ae:4c:95:55:9c:c6:c6:1c:5b:85:c3:
         63:0a:69:a1:7d:0d:16:3b:3a:b0:18:34:9b:f9:ff:44:d7:2c:
         d9:3e:a1:b6:35:b3:51:0d:80:e7:68:ca:29:c6:22:a1:05:29:
         ac:2c:21:9b:60:0b:1b:60:51:9c:ea:58:6c:5e:a4:45:e2:b6:
         23:39:94:45:6a:9e:58:07:b1:5b:1d:4d:fd:37:c5:4b:60:b1:
         08:38:d4:b8:33:af:87:59:44:b4:ec:3d:67:7d:27:45:9b:50:
         89:7d:78:8b:42:e5:22:cc:a5:50:86:a7:d0:2c:6c:be:e2:02:
         79:e2:09:d7:94:c1:5b:2c:a6:46:7d:5d:09:ee:b7:77:b8:9f:
         f0:2f:67:c5:b2:0a:b9:d3:09:57:94:73:ed:24:3e:60:24:1e:
         af:b5:7a:1d:71:9d:d0:b6:78:60:5d:df:e7:57:83:3c:3f:16:
         fd:10:bb:2e:49:4d:eb:ac:70:19:28:e5:6e:d1:b8:9f:a8:8b:
         01:cb:6d:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:34:52 2025 by rpki-client