Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2mguZW3b2wH6DW3p1BaLA73thJ1PMFEgU3DnQsxjyXb8/1/3139312e3234322e3130342e302f32332d3233203d3e20323633343736.roa
File:                     3139312e3234322e3130342e302f32332d3233203d3e20323633343736.roa (raw, json)
Hash identifier:          w2qJrruK3vsUBCL8MwHsyZvkPtSfV+zUEIwIPOaRkDw=
Subject key identifier:   CF:8F:CB:8F:1D:57:AD:9F:A9:07:A1:95:0F:A1:43:89:5C:4E:68:DA
Certificate issuer:       /CN=23D8772F1FE91464B5ECC47E55B96E95DD5594AA
Certificate serial:       697615E78027609D9921D5C8B8DC7BB654A042DA
Authority key identifier: 23:D8:77:2F:1F:E9:14:64:B5:EC:C4:7E:55:B9:6E:95:DD:55:94:AA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/23D8772F1FE91464B5ECC47E55B96E95DD5594AA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2mguZW3b2wH6DW3p1BaLA73thJ1PMFEgU3DnQsxjyXb8/1/3139312e3234322e3130342e302f32332d3233203d3e20323633343736.roa
Signing time:             Thu 04 Apr 2024 21:49:57 +0000
ROA not before:           Thu 04 Apr 2024 21:44:57 +0000
ROA not after:            Thu 03 Apr 2025 21:49:57 +0000
asID:                     263476
IP address blocks:        191.242.104.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2mguZW3b2wH6DW3p1BaLA73thJ1PMFEgU3DnQsxjyXb8/1/23D8772F1FE91464B5ECC47E55B96E95DD5594AA.crl
                          rsync://rpki-repo.registro.br/repo/2mguZW3b2wH6DW3p1BaLA73thJ1PMFEgU3DnQsxjyXb8/1/23D8772F1FE91464B5ECC47E55B96E95DD5594AA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/23D8772F1FE91464B5ECC47E55B96E95DD5594AA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:76:15:e7:80:27:60:9d:99:21:d5:c8:b8:dc:7b:b6:54:a0:42:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23D8772F1FE91464B5ECC47E55B96E95DD5594AA
        Validity
            Not Before: Apr  4 21:44:57 2024 GMT
            Not After : Apr  3 21:49:57 2025 GMT
        Subject: CN=CF8FCB8F1D57AD9FA907A1950FA143895C4E68DA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:df:08:24:a9:10:91:f0:4e:7d:cc:34:ad:a1:
                    54:e7:cd:f1:8b:bf:10:c8:ce:f3:d0:2e:68:92:9f:
                    5b:8b:43:10:01:cc:b9:67:c2:29:a2:f8:d5:06:16:
                    fc:97:a9:59:96:db:a8:9f:6f:82:f1:20:68:21:c2:
                    f5:2a:3b:48:0e:41:bd:3d:dd:db:c8:ab:2f:04:af:
                    ec:7c:d1:ac:a5:3a:72:9b:eb:c9:25:66:81:9f:9d:
                    1c:c9:2f:e6:8f:60:c8:43:93:e7:7b:75:25:33:e5:
                    55:73:e8:c1:dc:fb:37:7f:f8:4e:8b:d1:ab:0a:6c:
                    a7:f4:25:4a:a3:d8:99:75:11:45:e8:8e:57:56:2b:
                    c1:75:47:85:dc:56:8a:56:76:ac:30:f0:c7:c4:a3:
                    79:f3:82:da:dd:77:60:eb:d0:b6:ed:d1:6a:53:83:
                    3b:b3:b3:28:25:8b:22:ee:4c:cd:85:4a:1c:f7:29:
                    56:f2:0f:8d:e0:2e:95:2f:58:38:94:ea:55:1c:da:
                    a8:77:0d:4d:93:6e:ed:db:b8:76:72:73:e4:62:75:
                    d5:51:bc:cf:ae:f1:d3:4b:96:4f:7e:19:55:95:88:
                    54:ce:cf:76:df:36:4b:41:49:4b:32:82:a6:0a:f1:
                    8e:17:e0:4b:a0:66:b4:ce:a8:2b:b9:7b:33:b1:6c:
                    db:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:8F:CB:8F:1D:57:AD:9F:A9:07:A1:95:0F:A1:43:89:5C:4E:68:DA
            X509v3 Authority Key Identifier:
                keyid:23:D8:77:2F:1F:E9:14:64:B5:EC:C4:7E:55:B9:6E:95:DD:55:94:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2mguZW3b2wH6DW3p1BaLA73thJ1PMFEgU3DnQsxjyXb8/1/23D8772F1FE91464B5ECC47E55B96E95DD5594AA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/23D8772F1FE91464B5ECC47E55B96E95DD5594AA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2mguZW3b2wH6DW3p1BaLA73thJ1PMFEgU3DnQsxjyXb8/1/3139312e3234322e3130342e302f32332d3233203d3e20323633343736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.242.104.0/23

    Signature Algorithm: sha256WithRSAEncryption
         26:de:54:e9:2f:9e:be:1f:7c:47:ac:26:8e:80:ed:76:44:65:
         3e:b4:3c:59:e9:f5:af:34:dd:50:16:48:8b:54:a8:ee:bf:e5:
         98:c0:cb:2d:8b:37:f1:b6:e5:ed:96:05:78:ef:45:21:ed:f9:
         8f:6d:72:b3:d6:99:d8:1e:2b:cc:20:e7:5f:f7:cf:ee:e5:e1:
         d9:0a:23:c6:c2:e9:a3:de:dc:40:2a:70:3d:89:76:b1:2b:26:
         8b:d2:d3:b0:d9:2d:bf:2a:fb:85:e2:e1:30:09:c5:aa:ca:bb:
         3f:25:87:8a:30:2a:f6:b9:00:19:9c:49:c1:fb:4a:c1:0c:d4:
         ac:40:d0:33:88:76:75:aa:33:4d:70:a0:ac:26:0b:a4:32:ad:
         a7:d1:79:0f:a3:4f:23:42:c7:93:3f:9f:a3:5b:f9:22:3d:29:
         22:e5:2b:9d:1d:00:05:41:8f:17:c2:6e:05:0b:7f:d3:0e:cd:
         7f:3b:6b:7e:ee:db:9c:df:dc:00:06:fe:c8:b6:47:33:ef:3a:
         3e:f7:6c:d2:87:9d:3f:c9:86:75:8f:59:ba:96:01:aa:8e:a4:
         34:72:b5:ea:b5:bb:f9:16:d9:20:1d:81:71:cb:90:46:97:25:
         d4:d6:12:2d:d3:db:4e:30:30:46:95:d3:e6:8f:d6:e0:5d:0c:
         73:2f:07:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:32:39 2024 by rpki-client on console-ams.rpki-client.org