Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FcrizYV9P6TLwTrhn9L8ZWRkzwMXq7PUefAWNMb3w5zd/1/3137302e3233332e3136382e302f32322d3332203d3e20323633343431.roa
File:                     3137302e3233332e3136382e302f32322d3332203d3e20323633343431.roa (raw, json)
Hash identifier:          18LPiXHz5Khk7krN+NqvwHWMYoQUtNdHP7+9rDa00nU=
Subject key identifier:   8D:F6:31:A4:7F:48:92:4B:CA:99:16:3D:C5:3C:76:E7:19:C5:AB:E6
Certificate issuer:       /CN=C3B68558E36D4474BB9E1DFA6237B9F0343AA0D4
Certificate serial:       3972485E0008A611209BCD0F20F388E489D0323B
Authority key identifier: C3:B6:85:58:E3:6D:44:74:BB:9E:1D:FA:62:37:B9:F0:34:3A:A0:D4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C3B68558E36D4474BB9E1DFA6237B9F0343AA0D4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FcrizYV9P6TLwTrhn9L8ZWRkzwMXq7PUefAWNMb3w5zd/1/3137302e3233332e3136382e302f32322d3332203d3e20323633343431.roa
Signing time:             Fri 05 Apr 2024 03:20:40 +0000
ROA not before:           Fri 05 Apr 2024 03:15:40 +0000
ROA not after:            Fri 04 Apr 2025 03:20:40 +0000
asID:                     263441
IP address blocks:        170.233.168.0/22 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FcrizYV9P6TLwTrhn9L8ZWRkzwMXq7PUefAWNMb3w5zd/1/C3B68558E36D4474BB9E1DFA6237B9F0343AA0D4.crl
                          rsync://rpki-repo.registro.br/repo/FcrizYV9P6TLwTrhn9L8ZWRkzwMXq7PUefAWNMb3w5zd/1/C3B68558E36D4474BB9E1DFA6237B9F0343AA0D4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C3B68558E36D4474BB9E1DFA6237B9F0343AA0D4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Sep 2024 22:38:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:72:48:5e:00:08:a6:11:20:9b:cd:0f:20:f3:88:e4:89:d0:32:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C3B68558E36D4474BB9E1DFA6237B9F0343AA0D4
        Validity
            Not Before: Apr  5 03:15:40 2024 GMT
            Not After : Apr  4 03:20:40 2025 GMT
        Subject: CN=8DF631A47F48924BCA99163DC53C76E719C5ABE6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:51:cf:89:c6:f6:67:8d:3f:7e:2e:2d:1c:7f:
                    59:3a:63:19:96:7e:31:1f:e8:80:39:d8:88:c0:04:
                    0e:4d:ec:67:8e:6e:73:9d:7d:e1:58:c7:cf:4a:00:
                    9f:b6:be:ef:76:c4:e6:35:df:6e:a4:10:9b:c1:a0:
                    50:1f:4d:d0:e1:37:05:20:2b:b5:9c:31:a5:a2:2b:
                    71:7e:10:46:97:7c:2b:64:c3:25:90:b3:8f:af:f2:
                    6c:c8:2a:a1:c9:b5:e1:79:88:3f:19:18:e0:3c:74:
                    f6:b8:7c:31:be:64:e9:0f:40:12:e9:51:8a:d1:87:
                    a1:fe:fc:19:74:6f:f8:08:2e:13:61:e1:0a:22:41:
                    fc:0d:c5:ee:0e:e4:49:6d:f2:67:3a:ad:67:67:86:
                    1d:5c:06:89:bd:f1:d6:e6:cc:5b:a1:d1:13:f8:d2:
                    fc:0a:42:6f:94:47:b6:d5:09:2e:f4:b9:69:8c:7c:
                    9a:37:6d:e2:58:1f:7d:a9:50:6f:10:3e:a8:67:58:
                    2e:7e:4e:91:5f:9b:c6:04:88:05:1d:8a:8f:41:fe:
                    97:e3:da:54:7b:2a:ae:67:d5:ce:cc:fe:a8:e8:0c:
                    03:09:21:15:bf:e9:e2:39:03:79:8a:85:49:7d:4d:
                    41:45:69:22:93:9f:09:91:17:86:30:0f:e5:64:f9:
                    f5:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:F6:31:A4:7F:48:92:4B:CA:99:16:3D:C5:3C:76:E7:19:C5:AB:E6
            X509v3 Authority Key Identifier:
                keyid:C3:B6:85:58:E3:6D:44:74:BB:9E:1D:FA:62:37:B9:F0:34:3A:A0:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FcrizYV9P6TLwTrhn9L8ZWRkzwMXq7PUefAWNMb3w5zd/1/C3B68558E36D4474BB9E1DFA6237B9F0343AA0D4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C3B68558E36D4474BB9E1DFA6237B9F0343AA0D4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FcrizYV9P6TLwTrhn9L8ZWRkzwMXq7PUefAWNMb3w5zd/1/3137302e3233332e3136382e302f32322d3332203d3e20323633343431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.233.168.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b5:23:6c:66:a7:57:4d:d2:db:b7:7c:7e:c1:f8:a8:ca:47:e3:
         e4:aa:cd:cf:ff:32:75:83:0c:b2:46:6a:56:ee:6f:c8:8d:7c:
         c3:09:1b:e7:e9:56:14:76:c3:ae:af:b0:d9:03:0e:85:53:55:
         90:4d:5a:9a:76:76:49:c9:08:34:de:89:3f:ce:ce:7c:4b:48:
         bc:ff:05:fb:6e:d8:9f:e3:8c:af:39:da:f0:d5:51:d7:ca:59:
         f8:67:ed:4e:db:e4:b9:f6:ab:4b:08:81:61:0e:8e:af:dc:a9:
         b1:9d:bf:2c:37:4b:80:3c:aa:0f:f0:60:33:71:8c:26:bf:36:
         0b:dc:ac:a4:95:a8:ab:8d:24:7f:67:c5:36:b5:e6:07:14:ca:
         86:67:55:c3:db:a8:c1:6f:d5:d6:b7:82:8b:fb:76:17:3f:be:
         8a:e1:8e:33:ca:c6:c6:d6:e0:eb:60:5d:20:64:11:23:bd:4f:
         6b:89:6d:61:09:2d:32:2b:d0:d9:8d:6d:a2:44:7c:ee:54:c8:
         17:c4:65:a2:02:b1:14:8d:6a:64:ef:37:29:23:96:00:49:43:
         00:82:0a:df:59:02:f3:2b:a8:17:d1:31:d7:3b:d0:ed:71:29:
         cf:86:25:7d:f6:9a:08:b2:70:42:1e:6f:27:91:ea:58:39:30:
         cf:a8:89:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 20 07:37:26 2024 by rpki-client on console-fra.rpki-client.org