Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Avp9w8ghYcbVeDefvMDCChbYTGoepuXEnkYMqeQZP1PD/0/3139312e33362e3138352e302f32342d3234203d3e20323633333338.roa
File:                     3139312e33362e3138352e302f32342d3234203d3e20323633333338.roa (raw, json)
Hash identifier:          Oxg09TGtTYKNZw9PPN6aBmJK3ifRryyK4Cg7xq3G/PY=
Subject key identifier:   F5:49:F9:82:9A:14:08:E9:4B:FC:A1:8C:FF:AA:3F:F5:B9:56:54:4E
Certificate issuer:       /CN=7B463853EA4AC012BD9F3194CFA33AF32591DF0B
Certificate serial:       11AB32925C35C89E9070ACE7D52156E71FDBBBD5
Authority key identifier: 7B:46:38:53:EA:4A:C0:12:BD:9F:31:94:CF:A3:3A:F3:25:91:DF:0B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7B463853EA4AC012BD9F3194CFA33AF32591DF0B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Avp9w8ghYcbVeDefvMDCChbYTGoepuXEnkYMqeQZP1PD/0/3139312e33362e3138352e302f32342d3234203d3e20323633333338.roa
Signing time:             Thu 16 May 2024 11:38:25 +0000
ROA not before:           Thu 16 May 2024 11:33:25 +0000
ROA not after:            Thu 15 May 2025 11:38:25 +0000
asID:                     263338
IP address blocks:        191.36.185.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Avp9w8ghYcbVeDefvMDCChbYTGoepuXEnkYMqeQZP1PD/0/7B463853EA4AC012BD9F3194CFA33AF32591DF0B.crl
                          rsync://rpki-repo.registro.br/repo/Avp9w8ghYcbVeDefvMDCChbYTGoepuXEnkYMqeQZP1PD/0/7B463853EA4AC012BD9F3194CFA33AF32591DF0B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7B463853EA4AC012BD9F3194CFA33AF32591DF0B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 03 Jun 2024 03:32:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:ab:32:92:5c:35:c8:9e:90:70:ac:e7:d5:21:56:e7:1f:db:bb:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7B463853EA4AC012BD9F3194CFA33AF32591DF0B
        Validity
            Not Before: May 16 11:33:25 2024 GMT
            Not After : May 15 11:38:25 2025 GMT
        Subject: CN=F549F9829A1408E94BFCA18CFFAA3FF5B956544E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:fd:3b:fa:d9:a3:07:b7:eb:9f:5d:77:db:f4:
                    66:99:0f:e3:f7:4f:f3:b6:a2:c6:0a:bc:b7:33:81:
                    df:3a:2f:98:da:f6:33:7d:06:44:71:01:9e:ca:85:
                    ee:0b:07:bb:f3:49:6a:36:55:81:7e:e3:c3:4f:7b:
                    47:db:52:0d:77:8f:f8:71:64:b6:37:cf:4e:89:c6:
                    8f:bd:81:eb:93:ff:2d:82:16:2e:cf:47:e4:38:3e:
                    ef:78:4a:d0:bf:3a:20:88:02:12:d0:28:52:8e:6d:
                    1e:7d:35:12:87:3c:04:8b:14:4e:9a:56:3d:26:f4:
                    60:52:ea:e7:56:0b:f4:3f:27:3e:a8:4b:8f:f4:0a:
                    7b:c5:2d:a5:25:ab:c3:4b:c8:8c:e8:b6:64:c6:42:
                    15:77:7d:fe:ec:9e:80:e0:63:7c:85:91:56:58:80:
                    81:0a:ee:4f:d2:52:09:0d:20:c0:7b:90:cd:3d:b5:
                    82:d8:80:01:d5:82:27:ac:16:29:39:30:a6:16:65:
                    08:18:1e:3f:27:75:d0:b6:3f:d5:0a:ff:b2:57:0a:
                    af:44:2d:12:82:ce:55:3b:4f:f6:40:10:19:6c:30:
                    d8:8b:be:32:62:e2:05:65:98:7e:ce:c0:41:d7:3b:
                    50:06:c0:aa:86:c2:8c:c1:f4:55:84:2c:9b:6f:e3:
                    5c:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:49:F9:82:9A:14:08:E9:4B:FC:A1:8C:FF:AA:3F:F5:B9:56:54:4E
            X509v3 Authority Key Identifier:
                keyid:7B:46:38:53:EA:4A:C0:12:BD:9F:31:94:CF:A3:3A:F3:25:91:DF:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Avp9w8ghYcbVeDefvMDCChbYTGoepuXEnkYMqeQZP1PD/0/7B463853EA4AC012BD9F3194CFA33AF32591DF0B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7B463853EA4AC012BD9F3194CFA33AF32591DF0B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Avp9w8ghYcbVeDefvMDCChbYTGoepuXEnkYMqeQZP1PD/0/3139312e33362e3138352e302f32342d3234203d3e20323633333338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.36.185.0/24

    Signature Algorithm: sha256WithRSAEncryption
         11:49:4b:13:4a:e3:b4:bd:09:75:2f:59:cb:52:37:fa:58:4c:
         28:56:8d:23:e2:e9:df:b6:6b:71:96:cf:7e:e5:fe:24:12:65:
         94:b1:5d:71:c2:31:36:02:91:78:d5:65:fa:53:85:fe:ff:ce:
         3e:97:60:11:76:8c:7b:f8:b3:3f:04:39:c5:3e:f7:37:2a:15:
         bc:43:59:23:35:eb:8b:8b:3b:b7:1e:57:cc:c8:0b:9f:02:f9:
         a8:45:c8:16:8a:5f:69:21:f3:b7:85:c4:c3:d5:ca:18:90:b6:
         dd:30:1d:23:8d:e7:b6:74:0e:27:45:60:9a:72:b0:8d:99:fa:
         05:ed:8f:9c:70:d5:11:65:fc:f2:10:83:ca:c9:d9:41:aa:eb:
         a3:7f:39:83:ed:a0:c1:a3:df:5f:cf:51:51:ab:19:cd:bb:7c:
         c0:2d:d5:00:c3:d4:15:60:b2:f5:e7:16:d0:f4:8e:33:b4:7f:
         73:0b:2d:8d:35:ec:b5:5e:ad:34:0d:36:3a:cc:4e:df:b8:b3:
         e8:fc:c6:68:5f:42:05:88:76:b8:83:e3:5b:79:16:ba:bf:94:
         a4:27:18:72:5c:e3:22:5b:81:e3:5e:49:8a:21:bb:4f:09:48:
         fc:c0:52:4a:49:6b:20:44:95:db:50:e4:4e:ba:ca:8a:96:1c:
         09:14:3e:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 09:14:31 2024 by rpki-client on console-ams.rpki-client.org