Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/q9g6AQUVeUdhYJQDTf81qcSeJjnCMKofX141GRDEmo1/0/3137372e39312e3134342e302f32302d3234203d3e20323633343432.roa
File:                     3137372e39312e3134342e302f32302d3234203d3e20323633343432.roa (raw, json)
Hash identifier:          UP1Fg1f1ObibaRK8Ba31miiZw8g0ZKp+6WnrZk5PB/Y=
Subject key identifier:   1F:48:A8:38:AE:15:76:F2:47:C4:9B:39:41:BF:4F:D0:39:17:CD:59
Certificate issuer:       /CN=FB461D579ACEC168E1A251E10C7BBCD0BF4E7B33
Certificate serial:       50E5ED6719617E2EAEA46828E36C58A7F8783D2A
Authority key identifier: FB:46:1D:57:9A:CE:C1:68:E1:A2:51:E1:0C:7B:BC:D0:BF:4E:7B:33
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB461D579ACEC168E1A251E10C7BBCD0BF4E7B33.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/q9g6AQUVeUdhYJQDTf81qcSeJjnCMKofX141GRDEmo1/0/3137372e39312e3134342e302f32302d3234203d3e20323633343432.roa
Signing time:             Fri 02 Aug 2024 17:55:47 +0000
ROA not before:           Fri 02 Aug 2024 17:50:47 +0000
ROA not after:            Fri 01 Aug 2025 17:55:47 +0000
asID:                     263442
IP address blocks:        177.91.144.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/q9g6AQUVeUdhYJQDTf81qcSeJjnCMKofX141GRDEmo1/0/FB461D579ACEC168E1A251E10C7BBCD0BF4E7B33.crl
                          rsync://rpki-repo.registro.br/repo/q9g6AQUVeUdhYJQDTf81qcSeJjnCMKofX141GRDEmo1/0/FB461D579ACEC168E1A251E10C7BBCD0BF4E7B33.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB461D579ACEC168E1A251E10C7BBCD0BF4E7B33.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:e5:ed:67:19:61:7e:2e:ae:a4:68:28:e3:6c:58:a7:f8:78:3d:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB461D579ACEC168E1A251E10C7BBCD0BF4E7B33
        Validity
            Not Before: Aug  2 17:50:47 2024 GMT
            Not After : Aug  1 17:55:47 2025 GMT
        Subject: CN=1F48A838AE1576F247C49B3941BF4FD03917CD59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:25:22:44:94:3c:82:8d:25:52:17:49:25:72:
                    e2:eb:05:62:bb:82:93:8a:9a:bf:48:c0:f9:9a:3a:
                    b8:6f:f0:bb:aa:73:c6:ac:4d:16:aa:30:23:7d:ef:
                    f4:2a:1f:ed:56:c7:9b:01:00:9f:0d:85:ae:af:27:
                    e6:e9:32:9d:59:3f:2b:1f:ad:e1:0e:e0:bf:7b:af:
                    a4:c5:97:d6:b3:24:35:a4:45:27:e3:8e:74:91:a3:
                    87:52:a4:fe:26:3b:10:5b:9e:c9:0e:54:44:33:f5:
                    0a:59:0f:6e:6b:e4:00:60:c4:47:35:6b:ed:3d:ac:
                    f3:b4:46:b6:43:12:4c:82:25:6a:b5:4d:f7:38:39:
                    b1:0a:4c:b7:54:8a:37:28:29:b2:7c:ba:38:45:e2:
                    62:a4:08:cf:ca:04:b8:0c:15:10:7d:18:a5:8b:a0:
                    2f:13:d4:ce:10:5e:63:5f:ce:6a:cc:96:c3:ee:66:
                    43:06:f2:59:f5:b4:7a:0c:8d:f7:68:8d:b4:ac:1d:
                    93:14:5a:8e:4b:2f:97:37:e0:81:87:57:af:a1:a5:
                    55:f0:de:12:bb:5b:a7:8f:06:5e:af:b5:6d:c3:b5:
                    6c:b6:9c:e6:bb:ec:c0:dd:35:26:01:a4:5c:1d:7c:
                    05:eb:91:bc:40:1c:b7:e1:c9:db:bb:49:a6:f7:33:
                    f1:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:48:A8:38:AE:15:76:F2:47:C4:9B:39:41:BF:4F:D0:39:17:CD:59
            X509v3 Authority Key Identifier:
                keyid:FB:46:1D:57:9A:CE:C1:68:E1:A2:51:E1:0C:7B:BC:D0:BF:4E:7B:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/q9g6AQUVeUdhYJQDTf81qcSeJjnCMKofX141GRDEmo1/0/FB461D579ACEC168E1A251E10C7BBCD0BF4E7B33.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB461D579ACEC168E1A251E10C7BBCD0BF4E7B33.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/q9g6AQUVeUdhYJQDTf81qcSeJjnCMKofX141GRDEmo1/0/3137372e39312e3134342e302f32302d3234203d3e20323633343432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.91.144.0/20

    Signature Algorithm: sha256WithRSAEncryption
         71:68:17:d3:13:46:0c:07:5d:aa:c7:13:f7:9b:3a:69:49:f0:
         af:0d:fd:73:14:f4:98:7d:4f:ab:a5:85:00:50:bf:23:81:d5:
         23:2c:2c:c7:f0:4e:3d:e4:f4:2f:17:6e:44:d8:3f:e1:f0:2d:
         3e:ad:f1:e3:34:05:f2:27:31:e4:b3:e6:7e:40:c6:41:68:2f:
         19:07:3c:f9:a4:f8:79:ce:de:00:1f:71:2e:6d:5b:ba:9e:0e:
         08:61:78:64:67:91:9a:3a:e5:04:96:af:bb:16:9e:a1:0b:bd:
         e0:b9:7d:c5:b1:20:24:8e:23:6d:6e:44:7f:2f:b0:3a:e0:28:
         99:88:31:b2:52:be:b3:34:85:68:8b:ef:f5:6e:c8:e5:9b:0a:
         32:53:2b:82:5b:cb:80:11:35:41:68:3d:7d:45:03:09:d3:11:
         fc:4c:d0:f8:78:43:47:40:25:8d:8f:cf:eb:73:28:69:f9:ed:
         ed:c6:3a:7a:ef:7b:07:f4:60:b6:e5:0a:9c:22:51:ed:c6:cc:
         8e:81:60:ba:34:2d:33:47:f4:ab:7b:1e:fb:9d:cd:35:0e:69:
         46:28:68:89:0a:13:a4:f4:c5:95:4f:c3:c7:cc:6d:87:6a:af:
         1f:e1:41:72:91:de:ec:4d:07:3b:68:b8:70:e0:63:bd:60:8a:
         ff:10:37:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:54:47 2024 by rpki-client on console-ams.rpki-client.org