Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FvPPg2KDY3De4mDA7Eiyc6fF6wKh3aRSyQ5faJQZ8mfD/1/3139322e3134342e37332e302f32342d3234203d3e20323637333232.roa
File:                     3139322e3134342e37332e302f32342d3234203d3e20323637333232.roa (raw, json)
Hash identifier:          vqXFdUwzgkcbyMNBQkkSyZoVOHCKOHWteg6L7SGLWAo=
Subject key identifier:   19:CE:D4:B8:A3:59:30:D8:7B:7D:34:7F:5E:CC:F1:8B:7D:C3:C6:E2
Certificate issuer:       /CN=C1C7F834309205DF0944BA5C05FE62D65607F6C0
Certificate serial:       715A2218A8F9FE5DE5E74D25FED8FF9FC8B95CC9
Authority key identifier: C1:C7:F8:34:30:92:05:DF:09:44:BA:5C:05:FE:62:D6:56:07:F6:C0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C1C7F834309205DF0944BA5C05FE62D65607F6C0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FvPPg2KDY3De4mDA7Eiyc6fF6wKh3aRSyQ5faJQZ8mfD/1/3139322e3134342e37332e302f32342d3234203d3e20323637333232.roa
Signing time:             Wed 03 Apr 2024 18:31:53 +0000
ROA not before:           Wed 03 Apr 2024 18:26:53 +0000
ROA not after:            Wed 02 Apr 2025 18:31:53 +0000
asID:                     267322
IP address blocks:        192.144.73.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FvPPg2KDY3De4mDA7Eiyc6fF6wKh3aRSyQ5faJQZ8mfD/1/C1C7F834309205DF0944BA5C05FE62D65607F6C0.crl
                          rsync://rpki-repo.registro.br/repo/FvPPg2KDY3De4mDA7Eiyc6fF6wKh3aRSyQ5faJQZ8mfD/1/C1C7F834309205DF0944BA5C05FE62D65607F6C0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C1C7F834309205DF0944BA5C05FE62D65607F6C0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:5a:22:18:a8:f9:fe:5d:e5:e7:4d:25:fe:d8:ff:9f:c8:b9:5c:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C1C7F834309205DF0944BA5C05FE62D65607F6C0
        Validity
            Not Before: Apr  3 18:26:53 2024 GMT
            Not After : Apr  2 18:31:53 2025 GMT
        Subject: CN=19CED4B8A35930D87B7D347F5ECCF18B7DC3C6E2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:ab:c7:be:e9:11:4f:3e:71:97:ce:fd:23:75:
                    5e:d4:48:25:a1:09:e0:ba:d0:6a:61:83:a0:de:dc:
                    fc:9c:53:23:c6:ad:05:f3:04:43:6e:5d:29:18:3f:
                    e9:27:0a:9b:2d:e3:18:c8:1f:5e:5b:f3:ef:d2:bf:
                    a4:b4:fd:be:83:57:ce:86:d6:bd:ba:86:ef:d8:8f:
                    2e:4d:75:7a:17:e2:9b:64:e6:33:cc:7a:e3:fb:f4:
                    af:69:89:df:a8:09:d5:c8:b8:f6:18:98:f2:35:82:
                    07:21:36:66:47:23:80:06:c8:82:5d:1e:21:4a:90:
                    f1:34:4e:4b:b9:39:84:46:ca:ba:51:1e:b9:8f:bf:
                    d3:df:fc:b8:d7:fd:bc:01:e9:4a:35:93:43:d8:b1:
                    6c:ad:df:de:e7:38:88:4d:03:13:c0:07:78:9d:e2:
                    d5:d8:21:57:fb:9b:9a:c5:72:fc:f8:ea:f4:a8:db:
                    97:2f:6a:6a:22:02:19:42:d8:1e:02:0e:d7:63:45:
                    f2:50:2b:5a:cc:47:20:39:72:68:59:c6:7c:a2:ea:
                    d7:5f:68:2e:08:d4:e5:b6:db:db:56:4a:c7:69:c3:
                    bf:14:be:74:4e:39:c9:05:5f:34:2f:3e:d1:77:8b:
                    d2:f9:3d:1d:d1:6c:50:84:29:04:91:b5:94:6f:b4:
                    ed:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:CE:D4:B8:A3:59:30:D8:7B:7D:34:7F:5E:CC:F1:8B:7D:C3:C6:E2
            X509v3 Authority Key Identifier:
                keyid:C1:C7:F8:34:30:92:05:DF:09:44:BA:5C:05:FE:62:D6:56:07:F6:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FvPPg2KDY3De4mDA7Eiyc6fF6wKh3aRSyQ5faJQZ8mfD/1/C1C7F834309205DF0944BA5C05FE62D65607F6C0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C1C7F834309205DF0944BA5C05FE62D65607F6C0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FvPPg2KDY3De4mDA7Eiyc6fF6wKh3aRSyQ5faJQZ8mfD/1/3139322e3134342e37332e302f32342d3234203d3e20323637333232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.144.73.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9c:f0:76:4e:1b:c0:92:21:9b:87:bc:a7:a3:ce:5a:b3:c8:30:
         c7:eb:1a:56:b2:c0:57:6b:6b:e6:04:7d:7c:19:94:88:6e:57:
         62:a7:21:88:90:31:c9:56:03:b1:21:81:3d:10:4b:ba:87:00:
         88:de:37:a0:c9:09:a1:03:49:dd:51:8a:60:c6:5d:59:a5:53:
         e5:18:3e:9d:f6:71:a5:b8:d6:48:c2:df:62:af:de:cc:dd:21:
         65:de:13:51:1a:8b:16:a2:09:f1:c0:78:3a:24:cf:15:f2:3e:
         71:21:b9:d2:ee:c8:8d:03:0b:6b:e7:8b:c4:b0:ec:0e:ee:9a:
         9d:15:53:9b:74:09:77:30:54:49:b4:f2:92:6f:a7:e9:6f:fc:
         be:66:a0:e7:20:bd:1a:1a:fa:f5:f4:fe:6a:e5:ce:27:69:4f:
         20:7e:f6:8f:29:11:87:1c:3a:4c:90:f9:8e:37:c0:c7:11:a2:
         0c:94:1b:50:76:c1:0a:bf:6f:12:af:19:1c:30:27:b1:ae:e9:
         1b:d3:50:78:20:b4:fe:bb:f7:c4:6b:b1:85:6f:52:da:bf:dd:
         a3:6c:87:1d:a6:01:66:0e:47:8e:56:58:14:a2:e1:9b:b8:9f:
         db:70:8a:7e:30:37:3b:24:c4:c6:37:a9:ac:27:ec:e3:05:64:
         68:e2:c4:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 01:25:38 2024 by rpki-client on console-ams.rpki-client.org