Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/3137302e37392e34382e302f32322d3332203d3e20323632373733.roa
File:                     3137302e37392e34382e302f32322d3332203d3e20323632373733.roa (raw, json)
Hash identifier:          QB7P2xbUV7IpP/BhAzP9Mn9wApMatEbCVrIhaY0CsHw=
Subject key identifier:   BC:EB:C0:13:BE:F4:19:1A:D4:7E:E1:DF:8C:9B:91:4F:94:1F:B9:18
Certificate issuer:       /CN=FBF9AC500C589970B9E8A6C6E6F882DC6F244885
Certificate serial:       511BAE2F36DD893354FECDD1540BE0727D024541
Authority key identifier: FB:F9:AC:50:0C:58:99:70:B9:E8:A6:C6:E6:F8:82:DC:6F:24:48:85
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/3137302e37392e34382e302f32322d3332203d3e20323632373733.roa
Signing time:             Mon 09 Sep 2024 14:51:34 +0000
ROA not before:           Mon 09 Sep 2024 14:46:34 +0000
ROA not after:            Mon 08 Sep 2025 14:51:34 +0000
asID:                     262773
IP address blocks:        170.79.48.0/22 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.crl
                          rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:1b:ae:2f:36:dd:89:33:54:fe:cd:d1:54:0b:e0:72:7d:02:45:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FBF9AC500C589970B9E8A6C6E6F882DC6F244885
        Validity
            Not Before: Sep  9 14:46:34 2024 GMT
            Not After : Sep  8 14:51:34 2025 GMT
        Subject: CN=BCEBC013BEF4191AD47EE1DF8C9B914F941FB918
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:c6:71:86:d9:4f:42:2c:9c:88:f7:71:e1:cf:
                    44:a8:c6:23:7d:20:c1:26:d4:1a:12:95:58:d5:61:
                    a1:bb:50:d3:51:33:c7:38:8d:8f:ad:64:59:20:0a:
                    78:fb:0a:c4:7d:bc:aa:cd:6b:eb:83:01:33:76:71:
                    e3:f8:94:31:65:b7:6e:e1:60:a9:16:b7:18:cf:d1:
                    42:d2:10:1e:f8:41:d6:90:86:c8:55:33:bd:04:48:
                    b2:9a:6a:71:6a:d2:4f:f1:f9:97:76:ef:62:df:bf:
                    6a:4d:02:78:d9:3b:48:55:48:bf:86:80:ba:f4:8c:
                    97:6c:25:aa:8e:de:74:f6:e4:dd:91:1a:42:11:2e:
                    ab:d6:a6:c3:df:10:a3:1d:76:c9:e9:00:fe:02:b6:
                    09:3a:5e:58:ee:24:9d:a0:40:ae:0d:53:4d:40:4a:
                    dc:d3:98:d4:7a:9e:c7:a7:5f:38:82:36:2e:fc:de:
                    06:43:85:45:ad:e8:58:bf:a0:6f:11:68:2a:54:73:
                    87:5b:de:74:94:3c:75:8e:03:92:f8:8b:93:f9:5e:
                    89:88:9d:04:e7:d2:96:93:f3:7e:5f:bc:cd:55:b4:
                    2d:81:3a:9c:b4:7b:68:58:8c:b0:c0:df:a1:01:75:
                    cc:65:f3:60:09:7f:36:30:02:d2:7c:8d:47:a7:51:
                    9e:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:EB:C0:13:BE:F4:19:1A:D4:7E:E1:DF:8C:9B:91:4F:94:1F:B9:18
            X509v3 Authority Key Identifier:
                keyid:FB:F9:AC:50:0C:58:99:70:B9:E8:A6:C6:E6:F8:82:DC:6F:24:48:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/3137302e37392e34382e302f32322d3332203d3e20323632373733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.79.48.0/22

    Signature Algorithm: sha256WithRSAEncryption
         28:ef:28:d7:47:5d:e2:74:07:c5:0c:6e:25:5b:5d:24:ff:67:
         8c:e9:17:10:73:6e:22:30:d9:af:6e:10:ae:54:be:d6:75:25:
         ef:28:5b:83:cd:54:41:51:66:d2:24:1c:d9:c6:d1:75:f3:fe:
         33:48:56:3b:5e:6b:bf:d2:f9:f8:d1:f1:87:39:f6:04:37:3b:
         42:6e:39:53:69:84:e1:86:b4:60:a5:d4:b4:c7:5c:54:90:83:
         77:ea:57:34:ef:4f:db:cc:a0:70:dd:e4:31:8d:00:1d:0f:6e:
         e8:8d:4b:f4:ee:68:6c:02:0f:14:75:c8:7c:f2:e6:6f:76:81:
         5a:cd:19:95:ad:0c:66:b2:af:ce:b7:31:4b:2f:82:f4:e6:74:
         b2:8e:27:ba:f4:d9:76:d7:07:e7:6b:01:e6:5b:97:f0:6e:18:
         83:b4:75:71:10:a5:c0:61:69:67:03:f1:a0:6d:75:42:71:5c:
         59:ba:07:87:68:03:1b:1f:1a:3f:07:ea:8b:92:53:5f:97:0d:
         31:17:6b:ca:9e:62:cd:82:c1:77:b5:3b:24:40:e8:70:4b:a4:
         13:07:ef:37:77:bd:8c:9d:b4:62:9d:a6:6f:b5:aa:ca:3f:a8:
         62:8f:58:5a:14:05:e0:1d:b9:5d:33:bc:cb:b4:e1:73:a6:4c:
         6f:0a:b1:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 00:48:20 2024 by rpki-client on console-fra.rpki-client.org