Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FfVJqXiKG1QTA5thsjH5zVJkLv9pq4usonmbWx5AsVBU/2/3137392e3132352e31322e302f32322d3234203d3e20323731373337.roa
File:                     3137392e3132352e31322e302f32322d3234203d3e20323731373337.roa (raw, json)
Hash identifier:          8KiXLHpvEv+tGqHltDklNGqNRAt4mEJTAlbXvp/QqSY=
Subject key identifier:   33:1B:7F:C3:9E:B8:AC:2E:AC:FD:45:CB:B3:49:43:8E:88:97:95:78
Certificate issuer:       /CN=92BA065C85B5C2643E0FD27F0C42051FDB399AC5
Certificate serial:       6F1C3A4FD9FCCF83EDC59110FD483F9EBB47BF1C
Authority key identifier: 92:BA:06:5C:85:B5:C2:64:3E:0F:D2:7F:0C:42:05:1F:DB:39:9A:C5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/92BA065C85B5C2643E0FD27F0C42051FDB399AC5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FfVJqXiKG1QTA5thsjH5zVJkLv9pq4usonmbWx5AsVBU/2/3137392e3132352e31322e302f32322d3234203d3e20323731373337.roa
Signing time:             Fri 05 Apr 2024 00:45:23 +0000
ROA not before:           Fri 05 Apr 2024 00:40:23 +0000
ROA not after:            Fri 04 Apr 2025 00:45:23 +0000
asID:                     271737
IP address blocks:        179.125.12.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FfVJqXiKG1QTA5thsjH5zVJkLv9pq4usonmbWx5AsVBU/2/92BA065C85B5C2643E0FD27F0C42051FDB399AC5.crl
                          rsync://rpki-repo.registro.br/repo/FfVJqXiKG1QTA5thsjH5zVJkLv9pq4usonmbWx5AsVBU/2/92BA065C85B5C2643E0FD27F0C42051FDB399AC5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/92BA065C85B5C2643E0FD27F0C42051FDB399AC5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:1c:3a:4f:d9:fc:cf:83:ed:c5:91:10:fd:48:3f:9e:bb:47:bf:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92BA065C85B5C2643E0FD27F0C42051FDB399AC5
        Validity
            Not Before: Apr  5 00:40:23 2024 GMT
            Not After : Apr  4 00:45:23 2025 GMT
        Subject: CN=331B7FC39EB8AC2EACFD45CBB349438E88979578
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:4e:33:eb:5f:1c:53:ac:3f:fa:e7:71:ac:7e:
                    94:0d:40:c1:45:d8:8a:04:5f:8d:78:de:69:a7:3e:
                    08:42:0b:35:2c:30:c8:31:55:5a:42:bb:7c:d1:43:
                    ea:48:c6:0b:99:30:d6:0d:93:96:b6:ad:73:aa:e9:
                    bf:7f:8d:34:48:13:38:81:5f:af:af:38:02:3e:ba:
                    70:31:b1:2d:09:62:c5:f6:e3:e1:34:8b:bb:2a:e7:
                    c0:1e:df:0f:e2:bf:a7:4d:51:3d:76:84:fb:04:5c:
                    91:fa:a6:ee:60:ae:89:42:46:de:c4:81:54:07:2d:
                    f1:94:41:11:86:d6:69:1e:aa:38:00:56:9b:95:6b:
                    13:4a:2b:95:71:45:ea:b0:12:db:3f:68:9d:c1:47:
                    f6:f7:2a:63:70:34:97:9b:4b:ec:df:5c:a3:0d:4b:
                    e4:be:d6:54:1c:0f:b4:e8:72:6e:4b:47:99:58:bd:
                    74:6c:e2:79:80:3b:97:12:db:6f:d3:25:b5:62:65:
                    b9:2d:cb:46:de:fb:2b:bb:94:4a:40:e5:6c:1f:e3:
                    a3:af:30:8c:a9:31:e4:dc:b4:77:af:da:67:9f:40:
                    33:01:90:54:ff:2a:0f:73:4f:8d:4a:39:27:4f:fc:
                    83:d7:72:55:1c:69:b7:85:d8:b8:8d:d6:f7:85:03:
                    1f:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:1B:7F:C3:9E:B8:AC:2E:AC:FD:45:CB:B3:49:43:8E:88:97:95:78
            X509v3 Authority Key Identifier:
                keyid:92:BA:06:5C:85:B5:C2:64:3E:0F:D2:7F:0C:42:05:1F:DB:39:9A:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FfVJqXiKG1QTA5thsjH5zVJkLv9pq4usonmbWx5AsVBU/2/92BA065C85B5C2643E0FD27F0C42051FDB399AC5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/92BA065C85B5C2643E0FD27F0C42051FDB399AC5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FfVJqXiKG1QTA5thsjH5zVJkLv9pq4usonmbWx5AsVBU/2/3137392e3132352e31322e302f32322d3234203d3e20323731373337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.125.12.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3e:a7:d7:23:23:fb:a4:6a:2c:33:35:8f:64:2a:39:06:d9:06:
         e5:97:95:b0:fb:14:3c:8a:17:ab:b8:68:f1:dc:d7:c3:dc:a0:
         53:c4:37:ee:6e:27:b6:0d:b5:79:3e:43:73:80:84:d7:f3:bc:
         2d:a0:83:13:b8:32:3e:91:60:2c:cd:c0:e4:90:fa:91:01:00:
         80:52:e6:4e:87:52:d5:32:d3:d8:e7:a1:f1:cc:89:60:d6:b3:
         3f:7f:56:67:3c:58:6f:73:f6:62:16:46:c9:32:48:ff:91:32:
         65:fc:3a:8e:14:80:de:91:d4:0f:14:d1:03:ff:af:24:4f:b3:
         0d:63:d8:2b:b3:9e:a4:54:2c:c7:b5:c1:ba:f0:f3:f0:22:24:
         98:42:ae:b9:e3:a4:a2:d8:34:1e:10:79:a3:49:7c:8b:a7:bc:
         bd:91:3d:da:99:3f:d0:6c:63:21:8a:72:73:b6:36:e5:48:44:
         95:6d:02:73:bd:2c:50:96:4e:fb:57:a9:54:2f:7e:54:15:b9:
         00:ce:cd:0e:a5:66:08:a8:a0:d4:82:aa:6e:fd:9b:a4:6c:45:
         26:04:8a:94:33:08:73:6c:49:b6:0d:06:5f:a9:cf:9f:d1:c4:
         27:40:a0:71:fc:d6:c5:68:76:9f:fe:29:14:9e:31:ce:07:d9:
         46:2c:3c:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 02:30:11 2024 by rpki-client on console-fra.rpki-client.org