Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2mguZW3b2wH6DW3p1BaLA73thJ1PMFEgU3DnQsxjyXb8/1/3139312e3234322e3130342e302f32322d3232203d3e20323633343736.roa
File:                     3139312e3234322e3130342e302f32322d3232203d3e20323633343736.roa (raw, json)
Hash identifier:          VXGTRJA5jj12lCQbEy/TILRUWXzNGnby2w8m605Tqjs=
Subject key identifier:   33:BC:F9:A8:DE:40:65:FD:9A:9D:B9:A8:44:C2:41:54:BA:15:81:87
Certificate issuer:       /CN=23D8772F1FE91464B5ECC47E55B96E95DD5594AA
Certificate serial:       46E1730608F1899F441DD7DE6C1F836087663E3B
Authority key identifier: 23:D8:77:2F:1F:E9:14:64:B5:EC:C4:7E:55:B9:6E:95:DD:55:94:AA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/23D8772F1FE91464B5ECC47E55B96E95DD5594AA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2mguZW3b2wH6DW3p1BaLA73thJ1PMFEgU3DnQsxjyXb8/1/3139312e3234322e3130342e302f32322d3232203d3e20323633343736.roa
Signing time:             Thu 04 Apr 2024 21:49:56 +0000
ROA not before:           Thu 04 Apr 2024 21:44:56 +0000
ROA not after:            Thu 03 Apr 2025 21:49:56 +0000
asID:                     263476
IP address blocks:        191.242.104.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2mguZW3b2wH6DW3p1BaLA73thJ1PMFEgU3DnQsxjyXb8/1/23D8772F1FE91464B5ECC47E55B96E95DD5594AA.crl
                          rsync://rpki-repo.registro.br/repo/2mguZW3b2wH6DW3p1BaLA73thJ1PMFEgU3DnQsxjyXb8/1/23D8772F1FE91464B5ECC47E55B96E95DD5594AA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/23D8772F1FE91464B5ECC47E55B96E95DD5594AA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:e1:73:06:08:f1:89:9f:44:1d:d7:de:6c:1f:83:60:87:66:3e:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23D8772F1FE91464B5ECC47E55B96E95DD5594AA
        Validity
            Not Before: Apr  4 21:44:56 2024 GMT
            Not After : Apr  3 21:49:56 2025 GMT
        Subject: CN=33BCF9A8DE4065FD9A9DB9A844C24154BA158187
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:50:db:42:80:15:26:73:90:b2:21:47:5c:e4:
                    8c:8f:15:bd:c9:20:57:3f:41:1f:71:89:84:1f:dd:
                    69:5b:27:2f:a9:8b:20:1f:18:a6:5e:fa:ad:ce:8d:
                    41:89:d0:6e:b8:eb:3f:18:54:03:db:ba:ff:2f:a2:
                    fb:78:6b:20:47:1d:a7:0b:4d:93:cc:60:9b:e6:8b:
                    9d:6d:4c:36:cf:b4:0f:ab:1b:fc:ff:8d:28:25:1a:
                    c2:84:7c:34:43:d3:87:ba:be:65:73:63:aa:00:bd:
                    00:5f:02:fd:5a:39:dc:ac:cc:f1:94:50:7a:8b:20:
                    c5:7c:b8:d2:42:40:a0:64:8f:8d:41:11:c6:14:2f:
                    93:93:7e:1c:10:01:ca:00:67:23:ac:21:12:a6:31:
                    d4:9d:c8:eb:a4:24:09:bf:0e:2d:e4:cf:65:9a:48:
                    3f:7b:22:37:99:6e:c2:5f:3a:30:87:9b:8c:ec:b4:
                    dd:4b:20:f5:1c:f2:9e:43:a1:35:83:79:59:ae:51:
                    15:67:29:44:d0:f0:a0:a5:d7:9b:2f:15:2f:71:b9:
                    f9:95:7d:fd:f1:de:c6:b2:fa:16:d7:e8:19:22:fe:
                    b8:ad:60:9d:73:d5:a7:34:ac:35:55:46:12:d7:07:
                    29:20:1c:c7:40:0d:15:61:fe:22:1b:47:6a:7c:47:
                    6a:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:BC:F9:A8:DE:40:65:FD:9A:9D:B9:A8:44:C2:41:54:BA:15:81:87
            X509v3 Authority Key Identifier:
                keyid:23:D8:77:2F:1F:E9:14:64:B5:EC:C4:7E:55:B9:6E:95:DD:55:94:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2mguZW3b2wH6DW3p1BaLA73thJ1PMFEgU3DnQsxjyXb8/1/23D8772F1FE91464B5ECC47E55B96E95DD5594AA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/23D8772F1FE91464B5ECC47E55B96E95DD5594AA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2mguZW3b2wH6DW3p1BaLA73thJ1PMFEgU3DnQsxjyXb8/1/3139312e3234322e3130342e302f32322d3232203d3e20323633343736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.242.104.0/22

    Signature Algorithm: sha256WithRSAEncryption
         74:ec:3f:35:7b:96:ff:da:9f:32:fa:24:13:9e:09:5d:6a:ba:
         8f:3f:a0:88:b1:da:7c:60:17:1c:95:83:f1:5c:59:47:a0:ed:
         36:e8:cb:b1:b4:08:15:27:3b:07:ee:29:da:04:2e:35:87:14:
         f1:2e:de:56:aa:fe:14:d2:9b:ad:6e:37:39:ce:96:dd:04:bd:
         38:41:d6:3c:63:c3:99:18:86:57:54:4a:a8:0f:0e:cf:bd:b5:
         fd:39:85:82:d0:90:90:4b:cc:5a:81:62:7e:7d:07:cc:aa:ff:
         25:d3:f1:8a:86:2c:25:c2:9b:99:ed:00:19:02:fe:60:30:8e:
         f2:c8:21:f7:2a:2c:75:fd:55:ae:04:b7:11:2b:51:1f:08:b7:
         17:b3:a3:c4:bc:af:69:c8:b5:72:a2:9d:69:57:92:e6:df:19:
         90:5c:2a:00:f5:b5:57:55:57:3e:31:4b:ad:da:c2:a2:fc:e7:
         bd:4d:89:8d:da:60:f0:00:46:1c:e5:88:f2:76:7d:81:ab:78:
         0c:a0:cb:54:fc:6a:0f:b6:9f:e9:8e:7f:29:94:f5:18:dc:38:
         91:41:d1:83:1f:c8:a0:95:f8:1f:51:46:82:29:3d:bf:e7:d8:
         3e:56:49:4b:47:26:18:a9:b9:2d:2b:e3:a3:83:2d:64:b6:94:
         ca:66:f2:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:32:39 2024 by rpki-client on console-ams.rpki-client.org