Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/3136372e3234392e34382e302f32322d3332203d3e20323632373733.roa
File:                     3136372e3234392e34382e302f32322d3332203d3e20323632373733.roa (raw, json)
Hash identifier:          KC5ZnOKKawRisK0o/84pncp02lUQcp0hyCq8T/93x88=
Subject key identifier:   2E:12:CA:47:20:EA:1E:1E:49:0F:05:3B:D4:59:00:84:57:69:62:DC
Certificate issuer:       /CN=FBF9AC500C589970B9E8A6C6E6F882DC6F244885
Certificate serial:       520744888E6C894C3A7CCB7339C7E778A4E519A8
Authority key identifier: FB:F9:AC:50:0C:58:99:70:B9:E8:A6:C6:E6:F8:82:DC:6F:24:48:85
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/3136372e3234392e34382e302f32322d3332203d3e20323632373733.roa
Signing time:             Mon 09 Sep 2024 14:48:30 +0000
ROA not before:           Mon 09 Sep 2024 14:43:30 +0000
ROA not after:            Mon 08 Sep 2025 14:48:30 +0000
asID:                     262773
IP address blocks:        167.249.48.0/22 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.crl
                          rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:07:44:88:8e:6c:89:4c:3a:7c:cb:73:39:c7:e7:78:a4:e5:19:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FBF9AC500C589970B9E8A6C6E6F882DC6F244885
        Validity
            Not Before: Sep  9 14:43:30 2024 GMT
            Not After : Sep  8 14:48:30 2025 GMT
        Subject: CN=2E12CA4720EA1E1E490F053BD4590084576962DC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:c5:bd:2e:30:66:59:04:c0:e5:ea:90:70:d6:
                    d9:6d:ca:67:6b:94:ff:54:52:bc:d4:17:1e:36:73:
                    be:14:2c:11:e4:32:d4:8d:7e:b6:a2:2d:5a:6a:ae:
                    b5:e3:10:e6:51:90:7a:70:8e:f9:2e:06:5a:e1:fc:
                    6a:cf:b9:7c:9f:28:e5:a3:40:05:ac:f3:09:fa:d4:
                    0e:7e:6f:9f:c9:99:54:50:f2:c9:fc:fb:2d:08:a5:
                    48:55:bb:74:01:fb:5e:ca:8a:8f:97:29:0b:39:76:
                    72:02:d9:92:4e:31:63:5d:2a:5a:b9:37:e6:66:4a:
                    44:77:7f:d3:14:af:7a:4c:84:40:0d:92:20:39:2b:
                    bc:59:cc:07:13:f8:e1:54:7e:a5:e3:fe:42:4d:b0:
                    d4:24:28:df:bb:b2:74:37:2e:39:f1:6c:cd:09:81:
                    f7:34:c5:28:11:e3:9f:9f:dd:b2:3d:2b:22:7e:3f:
                    9d:c6:24:20:b5:18:34:e2:07:18:3a:8c:e9:2c:88:
                    ff:2a:33:af:be:9d:04:a1:36:f4:17:70:7b:9c:c3:
                    31:ac:cf:de:a0:34:b9:a6:b6:c1:cb:98:fb:75:3f:
                    29:5d:91:69:c7:4d:7b:d8:80:b5:cb:7e:94:3d:0b:
                    20:ac:93:3c:92:5c:7b:d6:b8:97:cd:7c:55:2c:ff:
                    e2:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:12:CA:47:20:EA:1E:1E:49:0F:05:3B:D4:59:00:84:57:69:62:DC
            X509v3 Authority Key Identifier:
                keyid:FB:F9:AC:50:0C:58:99:70:B9:E8:A6:C6:E6:F8:82:DC:6F:24:48:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/3136372e3234392e34382e302f32322d3332203d3e20323632373733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.249.48.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6f:11:fe:5a:f4:2e:45:d8:67:e8:30:0b:9f:c0:9d:c1:8c:4d:
         50:7a:dd:a4:07:6a:aa:51:e4:ef:58:5c:85:ac:d3:b0:87:72:
         90:e9:a1:b3:44:96:5b:04:bc:b6:d6:93:4d:8a:14:06:d1:c2:
         7b:d7:b6:0a:70:88:37:46:f5:ba:a4:64:38:65:61:33:68:de:
         49:01:f1:16:a9:fb:0b:42:11:8b:e3:d4:42:7d:aa:25:57:55:
         cc:a0:3b:a3:b1:a1:50:a3:bf:8f:3e:7c:da:2a:db:b7:69:b8:
         91:36:fc:75:f8:a1:e5:f8:02:77:02:6e:7a:4f:69:b8:d4:1c:
         21:8a:c1:8e:4e:02:cc:35:d1:46:56:5c:18:1d:d4:92:54:05:
         4f:86:d6:fa:d4:f4:2e:e2:e2:70:cc:5d:3f:bd:20:47:05:26:
         13:4b:13:e1:3c:bc:29:10:a6:aa:65:2a:ca:4d:fb:1b:b5:cd:
         cc:dc:23:a2:d1:5c:06:fd:af:35:d3:e5:4c:74:5f:cf:ea:c6:
         f8:7b:88:1f:d2:33:b2:b4:a2:ad:0f:54:5f:97:d1:b3:e2:02:
         0e:f6:cc:cf:03:50:ef:a3:53:78:b3:c7:20:48:4d:49:c8:c4:
         26:42:12:3c:29:a7:5b:b1:f9:01:11:60:05:0b:84:ea:77:1a:
         cf:54:73:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 00:48:20 2024 by rpki-client on console-fra.rpki-client.org