Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/3137372e3135322e36342e302f32332d3233203d3e20323632373733.roa
File:                     3137372e3135322e36342e302f32332d3233203d3e20323632373733.roa (raw, json)
Hash identifier:          hKdgzZvQ5JZnklsiqOMRvhSP+STBQ14rN9R9NEWn5tc=
Subject key identifier:   F1:9A:A3:AD:E5:DE:AA:DF:30:F3:2C:D2:F9:F6:92:E5:3C:8E:C2:AE
Certificate issuer:       /CN=FBF9AC500C589970B9E8A6C6E6F882DC6F244885
Certificate serial:       1ED7DDCC68D17B43F5DF41D1B1EEB9876FA63256
Authority key identifier: FB:F9:AC:50:0C:58:99:70:B9:E8:A6:C6:E6:F8:82:DC:6F:24:48:85
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/3137372e3135322e36342e302f32332d3233203d3e20323632373733.roa
Signing time:             Thu 04 Apr 2024 06:12:45 +0000
ROA not before:           Thu 04 Apr 2024 06:07:45 +0000
ROA not after:            Thu 03 Apr 2025 06:12:45 +0000
asID:                     262773
IP address blocks:        177.152.64.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.crl
                          rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 17:36:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:d7:dd:cc:68:d1:7b:43:f5:df:41:d1:b1:ee:b9:87:6f:a6:32:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FBF9AC500C589970B9E8A6C6E6F882DC6F244885
        Validity
            Not Before: Apr  4 06:07:45 2024 GMT
            Not After : Apr  3 06:12:45 2025 GMT
        Subject: CN=F19AA3ADE5DEAADF30F32CD2F9F692E53C8EC2AE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:21:ef:f0:3c:21:a7:52:c9:11:4b:5b:ce:cc:
                    cf:46:97:24:f5:29:b1:75:93:56:e5:b7:bf:81:b2:
                    8b:a9:96:f3:ce:ac:37:47:75:6f:13:be:f3:74:22:
                    aa:81:b8:7f:c5:99:e9:dc:36:7d:02:dc:b5:8a:a1:
                    3b:58:81:e6:fb:d7:d1:82:44:f6:c3:fc:fd:c6:06:
                    ad:da:7b:41:83:fa:17:d4:61:3f:c5:ea:6f:7d:4e:
                    23:ac:21:d1:e8:33:bf:33:aa:5e:c8:18:23:db:06:
                    06:fa:ec:c8:35:ce:b6:2c:d3:17:49:6c:59:ee:75:
                    b1:b1:0e:ee:4d:24:e9:73:0f:80:b2:2f:8f:d2:8e:
                    26:34:d4:cf:3e:7f:af:91:9d:2d:0c:41:f8:94:32:
                    7c:33:66:c6:2e:70:8e:8e:2d:9e:46:b8:83:a3:b1:
                    7b:66:bb:8a:f5:37:41:6a:11:9f:90:14:d0:48:61:
                    98:e5:90:67:66:f0:d8:e8:e0:9c:25:71:0a:c5:88:
                    25:f6:6c:dd:90:19:d8:4f:59:87:62:82:bc:be:8f:
                    1a:19:64:42:d2:bf:22:d4:72:9d:09:05:86:9c:0a:
                    fa:c3:24:65:dd:06:45:40:57:9a:da:30:53:82:97:
                    0d:9d:ca:c8:10:57:92:85:a5:b6:ee:c5:04:df:37:
                    fe:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:9A:A3:AD:E5:DE:AA:DF:30:F3:2C:D2:F9:F6:92:E5:3C:8E:C2:AE
            X509v3 Authority Key Identifier:
                keyid:FB:F9:AC:50:0C:58:99:70:B9:E8:A6:C6:E6:F8:82:DC:6F:24:48:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/3137372e3135322e36342e302f32332d3233203d3e20323632373733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.152.64.0/23

    Signature Algorithm: sha256WithRSAEncryption
         13:cc:1b:df:7e:25:08:43:b8:bc:27:70:23:46:98:80:55:36:
         9b:a5:c0:a0:cf:2f:ad:2b:61:30:91:56:55:83:7a:a0:92:99:
         66:5a:81:6f:b2:18:49:ba:7e:5d:10:fd:ea:e2:36:b0:fd:7f:
         71:da:9a:0e:11:29:2f:58:32:fa:9d:b8:3b:b4:ec:1a:e6:36:
         da:f6:8c:6e:e4:de:8e:47:1c:b0:fc:c5:47:b9:e7:16:30:48:
         90:12:0c:09:58:75:84:65:c4:8d:96:90:dd:bf:5a:e3:a5:3e:
         5e:bb:e9:25:bf:b0:31:97:3c:20:00:a1:8b:18:7a:58:1c:52:
         ea:51:cd:dd:b0:c6:92:8b:2e:2c:81:07:37:e0:23:d7:3a:4f:
         0d:d0:05:85:f0:ac:88:77:ef:5d:a1:7a:f8:44:ae:95:3b:eb:
         51:1b:e3:3b:d7:7e:e5:62:55:f7:19:1e:dc:92:f8:28:93:6d:
         9c:ca:cb:10:64:14:ff:b6:5a:f5:83:42:3c:0f:7b:3a:aa:5b:
         70:f6:2d:c3:6f:1b:16:7f:24:17:b3:0b:64:18:6a:4d:0d:ad:
         94:45:36:6a:d7:18:c8:dc:ae:d4:87:2f:80:0e:56:68:4f:fa:
         a6:fe:64:d9:c3:d5:4f:a0:2d:03:2f:45:5f:57:2c:6d:e2:16:
         30:b2:b6:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 19:18:12 2024 by rpki-client on console-fra.rpki-client.org