Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5ewxmo2DNXG6RxgwRgRAjCNBnhqGTN6E49UJXodA2r58/0/3139312e372e31382e302f32332d3233203d3e20323632343835.roa
File:                     3139312e372e31382e302f32332d3233203d3e20323632343835.roa (raw, json)
Hash identifier:          g3z4ZvxrxnbZdbX4b7aV9t3N2T8ASQkwudXRu8RcCRY=
Subject key identifier:   4A:DB:B0:2E:37:62:A7:86:CE:14:89:80:9C:52:68:4D:C2:4A:A1:F7
Certificate issuer:       /CN=4774D086E10F29F42B699F993DE4061E0FDF8862
Certificate serial:       2498405D96D232AFC53F3690BBE07EB57B83E19E
Authority key identifier: 47:74:D0:86:E1:0F:29:F4:2B:69:9F:99:3D:E4:06:1E:0F:DF:88:62
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4774D086E10F29F42B699F993DE4061E0FDF8862.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5ewxmo2DNXG6RxgwRgRAjCNBnhqGTN6E49UJXodA2r58/0/3139312e372e31382e302f32332d3233203d3e20323632343835.roa
Signing time:             Sat 27 Jul 2024 21:13:19 +0000
ROA not before:           Sat 27 Jul 2024 21:08:19 +0000
ROA not after:            Sat 26 Jul 2025 21:13:19 +0000
asID:                     262485
IP address blocks:        191.7.18.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5ewxmo2DNXG6RxgwRgRAjCNBnhqGTN6E49UJXodA2r58/0/4774D086E10F29F42B699F993DE4061E0FDF8862.crl
                          rsync://rpki-repo.registro.br/repo/5ewxmo2DNXG6RxgwRgRAjCNBnhqGTN6E49UJXodA2r58/0/4774D086E10F29F42B699F993DE4061E0FDF8862.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4774D086E10F29F42B699F993DE4061E0FDF8862.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 Nov 2024 01:24:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:98:40:5d:96:d2:32:af:c5:3f:36:90:bb:e0:7e:b5:7b:83:e1:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4774D086E10F29F42B699F993DE4061E0FDF8862
        Validity
            Not Before: Jul 27 21:08:19 2024 GMT
            Not After : Jul 26 21:13:19 2025 GMT
        Subject: CN=4ADBB02E3762A786CE1489809C52684DC24AA1F7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:6d:85:7b:79:83:37:45:6c:4a:85:c2:37:a1:
                    c2:68:eb:56:88:3c:9c:c9:a6:fd:c1:87:96:e9:da:
                    0d:b6:ab:ee:da:63:b3:1f:84:89:fb:0b:80:ea:fd:
                    c9:e6:5d:da:8b:46:86:97:ce:a5:f5:e8:de:0f:b1:
                    ec:c8:18:bb:cd:7a:e6:74:80:c9:cf:5c:8a:32:26:
                    3e:aa:5f:a6:1e:34:9c:94:3f:a4:60:6a:ec:04:53:
                    23:04:3c:81:69:5f:b5:d7:37:b8:57:26:5d:13:03:
                    30:8e:0c:fd:0f:b3:98:aa:70:af:42:33:4a:dd:d0:
                    0d:47:9c:22:f5:d0:af:9b:b9:18:48:92:5e:d5:44:
                    4a:e2:97:36:d8:07:36:11:a2:1c:56:09:df:e5:c6:
                    c1:b3:ac:eb:c1:06:4c:be:2a:9d:c7:f8:db:4f:f4:
                    f4:44:f2:92:6f:45:8f:90:d2:ef:5c:46:44:75:33:
                    95:a1:b5:f5:91:5c:69:cf:f0:25:af:2f:ba:ce:82:
                    50:6c:8d:5a:ea:84:a4:8d:43:23:5c:fc:ac:ad:fd:
                    47:e7:2c:db:77:af:88:7c:f8:08:75:47:e5:9f:02:
                    be:50:50:1f:db:70:16:b6:37:8b:39:4b:05:c9:45:
                    25:b1:e0:f4:77:2e:86:2b:e6:3b:19:1c:c6:a1:65:
                    c2:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:DB:B0:2E:37:62:A7:86:CE:14:89:80:9C:52:68:4D:C2:4A:A1:F7
            X509v3 Authority Key Identifier:
                keyid:47:74:D0:86:E1:0F:29:F4:2B:69:9F:99:3D:E4:06:1E:0F:DF:88:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5ewxmo2DNXG6RxgwRgRAjCNBnhqGTN6E49UJXodA2r58/0/4774D086E10F29F42B699F993DE4061E0FDF8862.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4774D086E10F29F42B699F993DE4061E0FDF8862.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5ewxmo2DNXG6RxgwRgRAjCNBnhqGTN6E49UJXodA2r58/0/3139312e372e31382e302f32332d3233203d3e20323632343835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.7.18.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0f:88:a8:be:f8:b8:8f:64:ac:90:16:aa:c8:1f:0d:13:77:73:
         7b:58:8b:94:61:7c:f4:ef:5f:30:8d:89:16:ec:5d:be:8e:b9:
         d5:94:5c:b5:14:f7:5e:8e:b8:55:f6:0e:3c:2e:af:a4:d5:79:
         e2:fc:58:b7:54:96:7c:87:34:37:e2:68:e4:51:95:75:4b:0a:
         98:03:e8:89:ae:fe:88:c7:e9:1c:1a:19:6d:01:26:44:8e:a6:
         bf:82:2b:63:38:90:6b:98:81:42:b3:8d:86:bd:8d:d1:17:58:
         87:6a:a2:da:95:5f:73:9a:45:5b:5e:9d:3b:12:98:f1:32:f7:
         01:cc:95:7e:fc:ce:98:00:66:b5:ee:6e:7c:94:1e:88:a8:a3:
         88:8c:34:b5:47:03:d5:12:92:12:ba:93:a0:a1:46:48:90:35:
         5d:ae:3b:cc:bb:52:a3:47:9f:b7:67:44:37:27:4c:45:8e:9c:
         93:3b:ca:d8:f3:5c:72:11:17:c2:19:cc:8e:3d:b1:e5:60:6e:
         0f:f0:8d:57:ad:7b:05:0f:02:9a:b6:6b:a6:d0:c5:26:eb:64:
         fb:f7:c9:77:2f:3e:01:60:11:ec:85:27:03:c3:d7:25:d7:57:
         bf:96:11:1b:b6:1d:89:bc:e4:07:c7:50:f9:32:43:21:a6:33:
         2e:38:9f:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 13 03:39:06 2024 by rpki-client on console-fra.rpki-client.org