Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5ewxmo2DNXG6RxgwRgRAjCNBnhqGTN6E49UJXodA2r58/0/3139312e372e31362e302f32322d3232203d3e20323632343835.roa
File:                     3139312e372e31362e302f32322d3232203d3e20323632343835.roa (raw, json)
Hash identifier:          5r+6GWt4wVDCDmm+NNfG3ji4GmcD+uShkkDLGH4Mj8U=
Subject key identifier:   09:19:95:20:19:D3:1D:E4:AC:3D:4C:DA:B7:0E:4C:A8:39:81:1C:FC
Certificate issuer:       /CN=4774D086E10F29F42B699F993DE4061E0FDF8862
Certificate serial:       0D8A9DD16D7E38DF4C66FBD63C8C179FE434681F
Authority key identifier: 47:74:D0:86:E1:0F:29:F4:2B:69:9F:99:3D:E4:06:1E:0F:DF:88:62
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4774D086E10F29F42B699F993DE4061E0FDF8862.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5ewxmo2DNXG6RxgwRgRAjCNBnhqGTN6E49UJXodA2r58/0/3139312e372e31362e302f32322d3232203d3e20323632343835.roa
Signing time:             Sat 27 Jul 2024 21:13:21 +0000
ROA not before:           Sat 27 Jul 2024 21:08:21 +0000
ROA not after:            Sat 26 Jul 2025 21:13:21 +0000
asID:                     262485
IP address blocks:        191.7.16.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5ewxmo2DNXG6RxgwRgRAjCNBnhqGTN6E49UJXodA2r58/0/4774D086E10F29F42B699F993DE4061E0FDF8862.crl
                          rsync://rpki-repo.registro.br/repo/5ewxmo2DNXG6RxgwRgRAjCNBnhqGTN6E49UJXodA2r58/0/4774D086E10F29F42B699F993DE4061E0FDF8862.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4774D086E10F29F42B699F993DE4061E0FDF8862.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 Nov 2024 01:24:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:8a:9d:d1:6d:7e:38:df:4c:66:fb:d6:3c:8c:17:9f:e4:34:68:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4774D086E10F29F42B699F993DE4061E0FDF8862
        Validity
            Not Before: Jul 27 21:08:21 2024 GMT
            Not After : Jul 26 21:13:21 2025 GMT
        Subject: CN=0919952019D31DE4AC3D4CDAB70E4CA839811CFC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:29:44:96:c2:74:2b:9e:0e:40:a1:e1:4e:f2:
                    32:09:f9:fe:81:d4:bf:49:2f:86:3c:41:45:23:67:
                    f8:2a:d2:6a:19:87:24:3d:e8:7c:94:b0:d3:fd:82:
                    d2:87:6b:81:d4:c4:53:07:4e:e6:23:00:6f:ba:67:
                    22:f0:0a:b9:f7:90:62:92:2e:a7:50:c8:af:5f:7f:
                    c6:df:34:e0:c2:71:a2:c1:fb:cc:76:31:63:0f:71:
                    44:f2:f0:3d:14:92:e1:8c:5b:ca:85:17:7f:54:46:
                    d6:79:27:32:04:0d:8b:a6:3f:c0:b5:68:3c:2f:a5:
                    12:6e:1c:75:4f:d3:a2:7d:20:64:b2:6b:42:23:11:
                    6c:cb:17:da:f2:ae:b4:f9:f7:b4:ef:ab:8e:f8:dd:
                    e1:96:0b:b5:ee:13:5d:cd:3a:d0:38:a7:6d:d6:30:
                    a7:25:c1:21:66:ee:d5:bf:bb:ff:eb:b0:96:8e:98:
                    12:fc:2d:e2:fb:5d:02:cb:6a:9d:68:bd:23:ae:54:
                    ef:2f:2d:80:8f:7b:b9:f3:01:69:36:29:b8:34:a3:
                    a8:ad:b2:46:9f:40:7d:79:26:da:3b:08:7f:9e:02:
                    da:da:22:1e:9b:1c:f3:4d:19:f9:d5:28:ce:2a:e4:
                    2c:0c:29:38:a3:18:14:fc:b0:49:8e:0a:c3:9b:a0:
                    9c:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:19:95:20:19:D3:1D:E4:AC:3D:4C:DA:B7:0E:4C:A8:39:81:1C:FC
            X509v3 Authority Key Identifier:
                keyid:47:74:D0:86:E1:0F:29:F4:2B:69:9F:99:3D:E4:06:1E:0F:DF:88:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5ewxmo2DNXG6RxgwRgRAjCNBnhqGTN6E49UJXodA2r58/0/4774D086E10F29F42B699F993DE4061E0FDF8862.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4774D086E10F29F42B699F993DE4061E0FDF8862.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5ewxmo2DNXG6RxgwRgRAjCNBnhqGTN6E49UJXodA2r58/0/3139312e372e31362e302f32322d3232203d3e20323632343835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.7.16.0/22

    Signature Algorithm: sha256WithRSAEncryption
         43:8e:0e:77:65:91:dc:89:35:3c:55:f9:6d:38:28:b6:7e:59:
         1a:b8:92:6a:57:f9:6f:d4:fb:45:ca:e5:f8:8d:4a:0b:c3:84:
         42:a1:90:53:d7:aa:b8:a9:32:cb:4a:78:a9:62:b0:7e:f6:d2:
         82:aa:33:42:8e:d5:6b:50:52:e8:ac:bb:ec:38:fd:08:fb:c6:
         05:bd:4c:9c:59:42:05:54:cf:28:a0:5f:c1:44:33:12:db:98:
         55:c9:5c:28:f3:01:70:d8:c8:c6:dc:56:c1:3b:4e:35:88:6c:
         74:56:ab:f8:fd:60:55:0c:7f:c5:94:d8:d7:0c:1b:7e:eb:bc:
         fe:36:c7:8e:f0:bd:da:02:68:6e:6b:d5:45:9c:86:09:33:c9:
         e6:8d:92:9d:1c:ba:19:d1:c5:5b:1c:75:8d:63:84:b2:4a:5d:
         6b:a1:21:4b:33:cb:ae:c8:c7:58:2b:42:ef:97:1e:c2:ac:3f:
         68:1e:cd:10:bf:18:33:f1:ee:fa:6c:38:3a:77:92:2f:f5:b0:
         3c:70:57:20:f1:23:09:87:84:95:03:86:aa:a6:db:5e:6a:e9:
         93:64:09:18:18:d4:93:58:20:0a:29:20:b7:5a:0f:c7:3f:22:
         92:52:7c:67:66:7f:a9:b8:69:f4:dd:aa:73:4b:7d:95:55:05:
         2a:37:68:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 13 03:39:06 2024 by rpki-client on console-fra.rpki-client.org