Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2RvQnmNeQqiUdDqF4qgXRBBN3oCPkMEPfdHY8i3JVPx1/1/3139312e3234322e3136302e302f32302d3234203d3e203533323436.roa
File:                     3139312e3234322e3136302e302f32302d3234203d3e203533323436.roa (raw, json)
Hash identifier:          5BnoxB5wXIzMfUD5aZMy1gYsnDUvB738qajCB6R0fLI=
Subject key identifier:   76:F4:48:0C:23:43:29:1F:A6:85:E5:33:16:BC:DC:82:7C:99:7C:1F
Certificate issuer:       /CN=30FE93C29B2D9E965F52FCED04760810A240E9E1
Certificate serial:       1ACB6B1F84549DA8DF19355C61D0D4F68DB98FBF
Authority key identifier: 30:FE:93:C2:9B:2D:9E:96:5F:52:FC:ED:04:76:08:10:A2:40:E9:E1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/30FE93C29B2D9E965F52FCED04760810A240E9E1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2RvQnmNeQqiUdDqF4qgXRBBN3oCPkMEPfdHY8i3JVPx1/1/3139312e3234322e3136302e302f32302d3234203d3e203533323436.roa
Signing time:             Thu 04 Apr 2024 18:39:41 +0000
ROA not before:           Thu 04 Apr 2024 18:34:41 +0000
ROA not after:            Thu 03 Apr 2025 18:39:41 +0000
asID:                     53246
IP address blocks:        191.242.160.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2RvQnmNeQqiUdDqF4qgXRBBN3oCPkMEPfdHY8i3JVPx1/1/30FE93C29B2D9E965F52FCED04760810A240E9E1.crl
                          rsync://rpki-repo.registro.br/repo/2RvQnmNeQqiUdDqF4qgXRBBN3oCPkMEPfdHY8i3JVPx1/1/30FE93C29B2D9E965F52FCED04760810A240E9E1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/30FE93C29B2D9E965F52FCED04760810A240E9E1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 17:40:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:cb:6b:1f:84:54:9d:a8:df:19:35:5c:61:d0:d4:f6:8d:b9:8f:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30FE93C29B2D9E965F52FCED04760810A240E9E1
        Validity
            Not Before: Apr  4 18:34:41 2024 GMT
            Not After : Apr  3 18:39:41 2025 GMT
        Subject: CN=76F4480C2343291FA685E53316BCDC827C997C1F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:5c:51:99:71:5a:08:b0:75:05:9f:ea:3a:bc:
                    06:38:a8:8d:48:1c:d4:a2:15:7b:68:e3:43:c2:77:
                    2c:68:6d:b6:e1:22:54:67:bb:50:92:1c:3f:7e:19:
                    46:35:d2:f6:ba:85:f8:f0:24:83:fb:51:4c:af:aa:
                    31:fb:85:f8:94:1c:82:11:2b:99:43:8d:ad:93:32:
                    4b:a9:20:88:a2:cb:5d:03:36:00:80:f2:1b:e6:a8:
                    5d:7a:6a:2a:fa:11:5f:f3:29:ff:af:39:1d:db:c6:
                    93:91:a2:d9:d1:c3:0a:f2:b4:c1:83:d6:51:99:8b:
                    b4:d4:bc:3e:bd:83:32:7c:4b:58:de:fd:4d:06:ec:
                    4d:f6:d2:ab:a4:48:08:f7:63:68:66:f9:fd:41:11:
                    24:e8:46:1b:00:91:83:1f:37:0a:85:37:12:d7:e7:
                    72:38:67:2c:bc:67:4c:d8:a3:97:58:8d:45:5a:2a:
                    f7:cc:06:3e:36:52:b6:45:30:e3:83:01:10:d0:dc:
                    4e:99:a1:af:1b:44:d9:e9:80:47:7e:10:7f:a6:6b:
                    69:7c:6b:62:bc:43:4c:fd:20:4e:da:94:81:d8:56:
                    f8:3a:b8:1d:74:c4:1e:60:ad:a5:c2:fe:5b:38:1b:
                    98:bb:eb:bf:46:34:2a:02:84:b9:ec:7c:74:ba:99:
                    fd:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:F4:48:0C:23:43:29:1F:A6:85:E5:33:16:BC:DC:82:7C:99:7C:1F
            X509v3 Authority Key Identifier:
                keyid:30:FE:93:C2:9B:2D:9E:96:5F:52:FC:ED:04:76:08:10:A2:40:E9:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2RvQnmNeQqiUdDqF4qgXRBBN3oCPkMEPfdHY8i3JVPx1/1/30FE93C29B2D9E965F52FCED04760810A240E9E1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/30FE93C29B2D9E965F52FCED04760810A240E9E1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2RvQnmNeQqiUdDqF4qgXRBBN3oCPkMEPfdHY8i3JVPx1/1/3139312e3234322e3136302e302f32302d3234203d3e203533323436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.242.160.0/20

    Signature Algorithm: sha256WithRSAEncryption
         1b:96:38:07:d3:99:f2:9d:9e:96:91:72:5c:eb:eb:2b:09:23:
         3c:32:26:60:cc:9f:8d:ad:66:07:e6:81:2b:5f:29:aa:9e:f6:
         f1:a4:4a:8b:45:1c:88:52:e6:8c:bf:cf:17:27:1d:cf:65:54:
         31:0e:57:d3:5a:3a:f5:9c:68:6e:38:5d:eb:38:6f:06:0a:f1:
         cc:b6:3c:21:a0:a7:ff:29:7d:6b:6f:e6:ee:03:cb:4d:34:b2:
         f6:3f:0d:ca:62:94:94:61:c2:29:41:af:1f:01:48:31:b9:57:
         e4:6a:9d:7d:52:1e:a5:28:db:c4:a2:97:1e:35:ac:41:3e:0e:
         5f:e6:66:ec:0c:16:2f:9b:90:6e:1b:d6:95:2d:e1:aa:40:e5:
         ca:d2:aa:01:5e:52:b1:f8:fc:5f:dd:cd:eb:5f:a1:bd:2c:a8:
         8b:25:34:06:ff:0a:2d:83:46:ee:8a:3e:1c:b3:45:36:be:c1:
         81:ed:74:e5:7a:80:ed:9b:9a:cd:dc:ee:03:06:12:36:fb:7c:
         34:1e:08:be:84:c0:64:1f:bf:29:bb:22:dc:99:6c:f1:ce:1e:
         b7:ae:04:76:cb:fe:42:a7:a9:13:83:d1:26:e9:2a:f3:46:6c:
         cc:82:54:d9:08:21:46:38:0a:5f:4e:e8:8a:c1:14:db:8c:78:
         53:a0:c9:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:44:13 2024 by rpki-client on console-ams.rpki-client.org