Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/3138362e3233322e3139322e302f32312d3332203d3e20323632373733.roa
File:                     3138362e3233322e3139322e302f32312d3332203d3e20323632373733.roa (raw, json)
Hash identifier:          y1SY2ooDfCsgnjbwyFNNsFbH+x00AQIcr1hzSpR/o6M=
Subject key identifier:   93:FC:14:A8:FE:0C:1D:8E:F3:69:5C:B0:62:66:4B:64:B7:74:5E:9D
Certificate issuer:       /CN=FBF9AC500C589970B9E8A6C6E6F882DC6F244885
Certificate serial:       043BC2F5580794F6E7B8A582B169997259EA1D99
Authority key identifier: FB:F9:AC:50:0C:58:99:70:B9:E8:A6:C6:E6:F8:82:DC:6F:24:48:85
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/3138362e3233322e3139322e302f32312d3332203d3e20323632373733.roa
Signing time:             Mon 09 Sep 2024 15:07:35 +0000
ROA not before:           Mon 09 Sep 2024 15:02:35 +0000
ROA not after:            Mon 08 Sep 2025 15:07:35 +0000
asID:                     262773
IP address blocks:        186.232.192.0/21 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.crl
                          rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:3b:c2:f5:58:07:94:f6:e7:b8:a5:82:b1:69:99:72:59:ea:1d:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FBF9AC500C589970B9E8A6C6E6F882DC6F244885
        Validity
            Not Before: Sep  9 15:02:35 2024 GMT
            Not After : Sep  8 15:07:35 2025 GMT
        Subject: CN=93FC14A8FE0C1D8EF3695CB062664B64B7745E9D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:ee:ea:ba:03:84:de:c3:25:05:09:0d:0d:73:
                    3b:ca:1c:fa:c2:75:12:c7:1f:5d:26:42:a8:c1:d2:
                    6c:22:9c:98:f6:35:d8:f7:1d:b9:fd:19:79:47:51:
                    c5:4e:00:dd:ef:ac:46:4d:62:ad:4d:37:c9:a0:01:
                    68:fb:dd:77:98:75:c5:6d:be:07:e1:78:0a:fb:43:
                    d6:23:f0:e7:f0:ff:c0:60:1d:2b:aa:c8:77:cd:6f:
                    a6:3f:dc:47:ee:9c:02:5d:fc:f2:bc:d2:c8:c7:e3:
                    40:46:54:46:d7:6c:6d:c4:3d:d0:ad:e8:00:cd:17:
                    ce:b4:ba:89:1a:24:49:e8:6e:a2:bb:ac:d0:e7:36:
                    6b:99:c0:bb:fb:b0:02:97:2b:0a:ee:c8:a3:c1:a5:
                    1c:59:7b:6a:a2:1c:e8:ab:fd:b3:0d:e6:b3:9a:0b:
                    76:48:46:44:38:10:d9:c8:6b:a6:49:67:d1:d3:36:
                    7e:55:bd:5c:31:7a:79:98:44:df:df:ac:1b:9e:44:
                    61:50:ac:68:ef:da:61:a2:03:19:f1:9e:10:73:58:
                    ba:63:6b:46:73:55:14:08:4f:36:2b:ae:4e:3b:8a:
                    46:30:f6:eb:58:36:61:ee:6b:95:aa:a9:df:34:02:
                    5c:75:8d:54:30:94:a0:2e:66:33:49:26:98:df:d9:
                    2c:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:FC:14:A8:FE:0C:1D:8E:F3:69:5C:B0:62:66:4B:64:B7:74:5E:9D
            X509v3 Authority Key Identifier:
                keyid:FB:F9:AC:50:0C:58:99:70:B9:E8:A6:C6:E6:F8:82:DC:6F:24:48:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/3138362e3233322e3139322e302f32312d3332203d3e20323632373733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.232.192.0/21

    Signature Algorithm: sha256WithRSAEncryption
         6d:3e:2b:41:72:e1:a4:79:e4:d7:6a:3b:fe:96:6e:55:aa:03:
         51:70:4b:ee:fd:3b:8f:47:cc:ce:87:00:49:dc:4f:10:e8:15:
         9d:9b:d8:99:d5:62:36:52:1c:39:52:97:fc:3a:ee:6e:29:bb:
         4c:64:18:b0:2d:47:68:b3:6f:7a:dc:f1:cb:4b:32:ab:2f:69:
         ac:a8:0c:2a:4d:1d:f4:9f:0a:a1:0d:be:cd:07:00:f7:67:50:
         42:34:6c:13:3b:ab:9c:22:4c:5e:58:bf:da:95:3f:2f:70:29:
         3d:98:ea:ae:5c:4e:86:2e:f3:fc:47:4c:7a:f0:2d:a5:2d:f8:
         b1:e5:3b:a3:bf:a9:c1:ee:a5:75:11:02:e2:35:c5:14:bb:1a:
         94:cc:38:f4:c6:da:9f:22:d5:16:4a:6d:78:14:8d:51:37:56:
         2b:28:c9:26:7c:e6:50:1d:3d:01:50:d2:38:83:96:b9:db:9c:
         6f:ba:c9:f6:e1:7c:3e:95:43:9d:49:85:19:89:98:2b:d9:4b:
         dd:c2:35:ad:2b:99:1d:a8:77:05:e1:7b:ef:a2:e5:41:e5:46:
         0f:d3:77:00:ca:fc:d9:1e:30:78:8a:a5:97:2d:58:00:63:58:
         4f:92:67:f9:e7:af:b4:05:b5:f2:e6:3f:4a:f7:3b:f4:ec:65:
         2b:5d:93:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 01:25:41 2024 by rpki-client on console-ams.rpki-client.org