Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HtwWDikdvR1YYjULLBzkE2BBBQZuWHLgPtx1Lh2YJsqg/1/3139312e372e3136382e302f32312d3234203d3e20323632383631.roa
File:                     3139312e372e3136382e302f32312d3234203d3e20323632383631.roa (raw, json)
Hash identifier:          Yl3nn6w0EjZldrxi9DWBLJ6o8Sb7nIzO9CckV/7FVHw=
Subject key identifier:   FF:FD:B9:75:62:C4:18:34:4D:7C:D6:0A:67:62:5A:D2:A8:45:D5:CD
Certificate issuer:       /CN=43230BA37049255C04E85C87D9F4BDD3B9313605
Certificate serial:       27A2162EADCE664C859F88328E11D9ED938DD36E
Authority key identifier: 43:23:0B:A3:70:49:25:5C:04:E8:5C:87:D9:F4:BD:D3:B9:31:36:05
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/43230BA37049255C04E85C87D9F4BDD3B9313605.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HtwWDikdvR1YYjULLBzkE2BBBQZuWHLgPtx1Lh2YJsqg/1/3139312e372e3136382e302f32312d3234203d3e20323632383631.roa
Signing time:             Thu 04 Apr 2024 08:22:44 +0000
ROA not before:           Thu 04 Apr 2024 08:17:44 +0000
ROA not after:            Thu 03 Apr 2025 08:22:44 +0000
asID:                     262861
IP address blocks:        191.7.168.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HtwWDikdvR1YYjULLBzkE2BBBQZuWHLgPtx1Lh2YJsqg/1/43230BA37049255C04E85C87D9F4BDD3B9313605.crl
                          rsync://rpki-repo.registro.br/repo/HtwWDikdvR1YYjULLBzkE2BBBQZuWHLgPtx1Lh2YJsqg/1/43230BA37049255C04E85C87D9F4BDD3B9313605.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/43230BA37049255C04E85C87D9F4BDD3B9313605.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 14:39:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:a2:16:2e:ad:ce:66:4c:85:9f:88:32:8e:11:d9:ed:93:8d:d3:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43230BA37049255C04E85C87D9F4BDD3B9313605
        Validity
            Not Before: Apr  4 08:17:44 2024 GMT
            Not After : Apr  3 08:22:44 2025 GMT
        Subject: CN=FFFDB97562C418344D7CD60A67625AD2A845D5CD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:27:de:a0:74:48:14:2f:53:ff:ff:8a:4e:a2:
                    18:67:a7:80:3a:70:b6:88:9d:ef:8f:c8:ad:28:34:
                    94:d6:26:c8:be:d2:59:f6:a9:8c:1b:55:4c:cf:b7:
                    59:8c:cf:16:13:0e:1a:41:9e:e1:0c:55:53:66:70:
                    47:5f:4e:44:c9:3e:e4:6a:2a:8e:f9:07:2a:41:85:
                    e2:da:c7:33:db:4a:50:1d:f7:8b:cc:17:a8:a9:03:
                    50:22:7f:fd:df:3f:8c:88:fa:f4:fc:d7:a2:5a:fd:
                    6e:12:21:e2:8a:47:8d:fd:24:b8:96:3e:bc:41:b9:
                    c4:b8:2d:ac:23:21:99:fc:0d:ab:23:38:35:74:28:
                    9c:2e:b8:9e:f6:2d:29:ca:e2:03:82:ba:ba:2e:8f:
                    a4:ef:60:19:72:e0:0d:87:97:33:f1:c4:76:57:b1:
                    6e:eb:0d:7a:e3:23:76:22:3c:ac:6e:d4:7a:38:15:
                    e6:f9:af:d5:26:7f:0d:4d:4b:1c:6b:f9:53:92:a8:
                    85:95:b9:6e:12:6b:1d:ef:d2:c1:9e:32:23:58:8c:
                    08:0d:6a:c8:77:e1:43:55:21:8d:13:cb:cd:a6:de:
                    03:82:c8:43:a4:db:1b:1b:8f:0b:07:e4:39:dc:4a:
                    77:59:3a:c6:bc:dd:3a:7f:59:da:4c:33:05:0d:13:
                    2d:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:FD:B9:75:62:C4:18:34:4D:7C:D6:0A:67:62:5A:D2:A8:45:D5:CD
            X509v3 Authority Key Identifier:
                keyid:43:23:0B:A3:70:49:25:5C:04:E8:5C:87:D9:F4:BD:D3:B9:31:36:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HtwWDikdvR1YYjULLBzkE2BBBQZuWHLgPtx1Lh2YJsqg/1/43230BA37049255C04E85C87D9F4BDD3B9313605.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/43230BA37049255C04E85C87D9F4BDD3B9313605.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HtwWDikdvR1YYjULLBzkE2BBBQZuWHLgPtx1Lh2YJsqg/1/3139312e372e3136382e302f32312d3234203d3e20323632383631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.7.168.0/21

    Signature Algorithm: sha256WithRSAEncryption
         42:4b:c4:b4:c3:4d:bf:ba:b4:88:8b:bb:2b:02:ec:83:2c:a7:
         bb:4e:5b:a9:98:d4:4f:da:27:a5:f5:a1:ee:40:d1:47:fd:8c:
         28:55:f5:37:19:31:25:8a:91:89:a9:c4:0e:c2:61:9a:86:8e:
         10:35:e9:c2:de:85:2a:bb:3c:eb:e7:d8:34:26:0e:df:68:e4:
         b5:76:a7:d0:b5:f7:b0:11:3f:cc:72:26:b3:d6:4d:4d:ab:dc:
         4f:be:1a:e7:7e:e0:62:c5:30:3e:2d:a6:d0:3a:5e:2d:a7:f7:
         30:2b:31:b9:38:08:25:0c:cd:d1:dd:e1:e5:3e:49:b1:dd:27:
         15:fb:8f:f5:5a:17:d8:72:14:e7:c3:03:cd:ee:40:70:11:56:
         ef:5c:81:45:a9:01:4e:97:4a:8d:93:5b:21:4c:bf:c0:a5:fa:
         1e:6f:ec:fb:03:89:3e:0f:8b:e0:0e:1f:04:fb:50:e9:fb:2d:
         99:27:64:77:46:d3:ad:f9:2a:7d:d3:28:c5:c3:0d:0d:e3:4b:
         ec:4a:f9:b3:d8:2e:dc:a1:41:95:7c:11:84:1a:cc:a1:fd:78:
         60:67:b9:c5:82:71:aa:2d:3b:7d:9c:89:00:de:c7:60:63:57:
         73:ed:13:bd:5b:88:45:52:72:dd:dc:8d:48:49:4c:a6:c2:ac:
         d2:b1:e8:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 15:22:46 2024 by rpki-client on console-fra.rpki-client.org