Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fc99dqVeQW26eSoW87ho6AcTGgatndcEFXaokMps5mFV/0/3134332e3230322e302e302f32322d3332203d3e20323634303635.roa
File:                     3134332e3230322e302e302f32322d3332203d3e20323634303635.roa (raw, json)
Hash identifier:          JMk8d6NJQWFlAz8xeMM4DPz0e4RrZR60l21WWTuwPrs=
Subject key identifier:   FF:1C:DC:3A:5C:DD:96:96:97:72:0E:72:83:1C:62:D3:F4:EC:B9:85
Certificate issuer:       /CN=724DC903C9E8AA1FC0AFD08B80ECCA1AEB1DAAB4
Certificate serial:       7AEE49601FB43DEF7BF5DADF6D75B5FCE5417D1C
Authority key identifier: 72:4D:C9:03:C9:E8:AA:1F:C0:AF:D0:8B:80:EC:CA:1A:EB:1D:AA:B4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/724DC903C9E8AA1FC0AFD08B80ECCA1AEB1DAAB4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fc99dqVeQW26eSoW87ho6AcTGgatndcEFXaokMps5mFV/0/3134332e3230322e302e302f32322d3332203d3e20323634303635.roa
Signing time:             Mon 11 Nov 2024 12:03:43 +0000
ROA not before:           Mon 11 Nov 2024 11:58:43 +0000
ROA not after:            Mon 10 Nov 2025 12:03:43 +0000
asID:                     264065
IP address blocks:        143.202.0.0/22 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Fc99dqVeQW26eSoW87ho6AcTGgatndcEFXaokMps5mFV/0/724DC903C9E8AA1FC0AFD08B80ECCA1AEB1DAAB4.crl
                          rsync://rpki-repo.registro.br/repo/Fc99dqVeQW26eSoW87ho6AcTGgatndcEFXaokMps5mFV/0/724DC903C9E8AA1FC0AFD08B80ECCA1AEB1DAAB4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/724DC903C9E8AA1FC0AFD08B80ECCA1AEB1DAAB4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 28 Nov 2024 00:48:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:ee:49:60:1f:b4:3d:ef:7b:f5:da:df:6d:75:b5:fc:e5:41:7d:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=724DC903C9E8AA1FC0AFD08B80ECCA1AEB1DAAB4
        Validity
            Not Before: Nov 11 11:58:43 2024 GMT
            Not After : Nov 10 12:03:43 2025 GMT
        Subject: CN=FF1CDC3A5CDD969697720E72831C62D3F4ECB985
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:4d:36:2c:60:1a:43:fe:29:e5:39:21:b5:78:
                    c7:7a:a7:4a:51:ea:58:9b:cd:84:c9:42:1f:96:c5:
                    d5:26:d6:6e:02:35:04:27:be:78:da:4e:d7:68:6c:
                    ed:3c:b9:10:1d:fd:bc:ab:5f:81:5c:6b:6a:64:55:
                    e6:af:10:a8:e0:d7:20:29:10:a6:04:3a:6e:f4:dc:
                    75:12:af:56:d8:82:50:6d:01:63:8f:6e:fa:c2:8e:
                    86:78:87:a9:85:25:36:cf:d4:34:f4:e1:4c:e0:6a:
                    c0:71:a5:cd:e8:e1:09:e1:4e:b5:8c:e6:11:73:72:
                    23:95:0d:4e:39:f6:5b:94:7b:20:12:75:4e:c4:21:
                    0d:5b:52:47:af:bd:9e:d0:9b:f3:a7:d6:e6:a9:06:
                    43:7a:b9:28:31:89:ff:e5:df:5c:ed:b1:3e:5b:74:
                    fc:31:c8:4c:49:64:e8:fd:df:0d:2a:33:e4:02:a1:
                    7c:f1:ea:b2:4d:7e:7e:83:41:b8:60:5e:47:c5:c1:
                    3d:81:e1:f4:1f:6f:ad:a6:ff:3d:85:e2:d7:82:33:
                    bf:13:31:6e:ae:c9:f7:c8:85:10:0c:c7:48:ae:df:
                    8f:23:5a:48:ae:78:7f:12:fd:d1:06:25:6f:14:9a:
                    0d:4b:26:cc:82:f3:85:b2:18:82:fb:b4:ba:0f:fb:
                    d5:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:1C:DC:3A:5C:DD:96:96:97:72:0E:72:83:1C:62:D3:F4:EC:B9:85
            X509v3 Authority Key Identifier:
                keyid:72:4D:C9:03:C9:E8:AA:1F:C0:AF:D0:8B:80:EC:CA:1A:EB:1D:AA:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fc99dqVeQW26eSoW87ho6AcTGgatndcEFXaokMps5mFV/0/724DC903C9E8AA1FC0AFD08B80ECCA1AEB1DAAB4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/724DC903C9E8AA1FC0AFD08B80ECCA1AEB1DAAB4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fc99dqVeQW26eSoW87ho6AcTGgatndcEFXaokMps5mFV/0/3134332e3230322e302e302f32322d3332203d3e20323634303635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.202.0.0/22

    Signature Algorithm: sha256WithRSAEncryption
         29:e7:d4:bc:c2:02:26:71:c1:4b:f2:38:9b:f9:b2:a1:2d:00:
         c0:0c:04:0f:00:64:7a:31:3d:8b:dc:f3:b2:48:29:a9:9f:3c:
         76:91:73:04:da:fe:38:9e:6e:9e:1b:70:7f:78:ef:0a:24:c9:
         11:82:ac:4f:9a:1b:0d:85:1a:f7:67:7e:ef:6d:a6:66:81:e1:
         eb:f4:6e:8a:54:6c:37:61:9c:70:86:34:7f:39:b1:4a:54:c8:
         92:cb:2f:3e:79:9c:79:17:64:0c:66:1c:d7:9a:f3:53:f1:b1:
         7b:a2:a1:5d:c6:32:7b:f8:dd:44:dc:e0:2f:bd:7b:df:57:14:
         b9:b7:f2:a5:5b:b5:97:19:c2:8c:93:c6:92:2c:24:57:44:16:
         2b:9b:4c:0a:82:7c:51:9a:23:6e:da:38:61:a9:59:b3:0d:21:
         41:30:ad:5c:cb:6a:0f:38:d4:92:81:cb:7b:3d:0a:03:da:39:
         ee:6b:98:92:80:37:de:71:40:b3:66:a8:e7:27:d2:ac:40:92:
         61:42:eb:fc:01:56:e1:bf:d0:bc:f3:fd:43:cd:b2:04:3c:23:
         e8:49:95:4a:92:63:e3:2b:a0:b1:35:cd:47:87:6c:b5:27:a4:
         da:72:ad:6f:77:82:18:91:77:d9:c2:9b:ce:72:f0:66:fb:e8:
         13:22:cd:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 06:13:05 2024 by rpki-client on console-ams.rpki-client.org