Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/3134332e3230322e3132342e302f32322d3332203d3e20323632373733.roa
File:                     3134332e3230322e3132342e302f32322d3332203d3e20323632373733.roa (raw, json)
Hash identifier:          AefMuc5aen3RaGXUMG55lAaTkIbFLTrn04WPVMC1BsQ=
Subject key identifier:   2F:99:DC:80:87:04:F7:82:0B:A8:90:A2:91:CC:2C:D3:1D:BB:EC:C8
Certificate issuer:       /CN=FBF9AC500C589970B9E8A6C6E6F882DC6F244885
Certificate serial:       1C72115357EEF959F3ED7D5E8B070A300A0F3092
Authority key identifier: FB:F9:AC:50:0C:58:99:70:B9:E8:A6:C6:E6:F8:82:DC:6F:24:48:85
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/3134332e3230322e3132342e302f32322d3332203d3e20323632373733.roa
Signing time:             Mon 09 Sep 2024 14:47:51 +0000
ROA not before:           Mon 09 Sep 2024 14:42:51 +0000
ROA not after:            Mon 08 Sep 2025 14:47:51 +0000
asID:                     262773
IP address blocks:        143.202.124.0/22 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.crl
                          rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:72:11:53:57:ee:f9:59:f3:ed:7d:5e:8b:07:0a:30:0a:0f:30:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FBF9AC500C589970B9E8A6C6E6F882DC6F244885
        Validity
            Not Before: Sep  9 14:42:51 2024 GMT
            Not After : Sep  8 14:47:51 2025 GMT
        Subject: CN=2F99DC808704F7820BA890A291CC2CD31DBBECC8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:4c:83:92:fb:7a:b4:37:8a:6d:9c:f2:d5:85:
                    ee:f3:49:f6:18:eb:21:32:ab:ad:79:aa:2c:dd:e5:
                    39:47:4a:ce:6b:ba:ad:d0:9b:d5:6d:14:0b:6d:43:
                    a7:6e:05:af:ae:61:a2:ab:af:bd:3b:c7:73:98:27:
                    ed:c7:1c:a1:22:e1:85:b9:67:71:95:b1:ff:47:fa:
                    1f:86:80:8c:2d:50:57:0c:69:87:e7:78:9a:df:78:
                    0e:18:0f:ef:5e:7d:5d:a3:ec:87:b0:7a:56:33:9f:
                    36:d7:54:fa:5e:be:45:c1:e7:9e:a4:56:95:04:08:
                    99:00:95:62:72:1c:d8:55:9d:c7:4c:60:b8:ff:4d:
                    98:fd:a1:a7:02:ce:e2:b6:05:7e:89:17:28:47:27:
                    a5:57:c0:c0:54:3d:47:08:a3:d7:b6:01:00:f0:c7:
                    47:06:12:e6:ac:af:3a:19:ae:02:d5:93:eb:b7:b7:
                    bb:cd:bc:d5:93:c5:bb:13:2b:07:0a:d2:aa:fc:b9:
                    71:62:57:fd:79:45:25:2c:62:a6:df:e3:ce:90:61:
                    4a:a1:32:a8:d2:9d:36:3f:a8:bb:57:27:cf:92:0c:
                    0d:16:b7:31:65:1a:15:7f:27:6e:5f:d7:26:41:05:
                    34:3a:b3:48:0a:39:65:50:d0:de:26:6b:aa:f7:94:
                    ea:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:99:DC:80:87:04:F7:82:0B:A8:90:A2:91:CC:2C:D3:1D:BB:EC:C8
            X509v3 Authority Key Identifier:
                keyid:FB:F9:AC:50:0C:58:99:70:B9:E8:A6:C6:E6:F8:82:DC:6F:24:48:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/3134332e3230322e3132342e302f32322d3332203d3e20323632373733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.202.124.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a9:3d:82:ad:32:5c:0d:76:e1:b6:2d:db:2b:b6:af:30:02:7b:
         7b:31:1a:84:67:79:ce:d3:2a:65:e3:ff:8a:00:3c:40:23:b0:
         b4:a2:be:4f:30:0b:4e:f0:10:b9:28:2a:62:cb:78:bf:f6:b9:
         6e:70:f5:4d:85:a4:4c:31:23:f9:89:07:2d:9b:60:6e:0a:71:
         18:0d:64:a1:7f:69:52:62:5c:2b:07:b9:05:81:b9:26:a3:a5:
         57:2d:1d:26:d8:e0:6d:9a:78:21:67:bd:b8:3b:d7:09:e1:62:
         00:50:1f:fa:5b:8a:22:43:4e:42:0f:72:7e:6c:ea:07:ad:10:
         6a:2f:f2:ae:ea:91:35:ef:47:65:24:f7:b0:a1:87:b6:c8:83:
         fb:ba:fb:d5:fc:cb:5d:f5:4c:81:cf:d4:3f:3b:4f:5d:84:e6:
         5a:a6:8d:22:3a:a9:b6:1e:b6:af:c7:a4:93:29:50:59:4b:80:
         81:47:a5:4c:48:89:3f:b5:90:c6:19:57:56:22:9c:6f:81:a1:
         43:a6:83:3d:42:d5:c1:1b:69:7b:2e:47:1c:24:35:f1:1c:b8:
         2a:33:07:60:98:10:c5:8b:fd:a1:94:90:60:bf:b1:31:60:28:
         4e:18:e1:91:d7:60:b0:45:7e:50:fb:a7:8b:b7:5a:94:a6:5d:
         e7:ed:e2:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 00:48:20 2024 by rpki-client on console-fra.rpki-client.org