Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2mguZW3b2wH6DW3p1BaLA73thJ1PMFEgU3DnQsxjyXb8/1/3139312e3234322e3130382e302f32332d3233203d3e20323633343736.roa
File:                     3139312e3234322e3130382e302f32332d3233203d3e20323633343736.roa (raw, json)
Hash identifier:          yYuOC49FIlmxtpe6SYKdGtFk7E/Us1xCqwVewHrtn0E=
Subject key identifier:   08:46:51:01:F2:4D:E6:9A:F3:B4:D2:37:70:21:52:66:49:D3:1D:DF
Certificate issuer:       /CN=23D8772F1FE91464B5ECC47E55B96E95DD5594AA
Certificate serial:       5F4E96F31B5022846591E96E0A340A6B98CBD61D
Authority key identifier: 23:D8:77:2F:1F:E9:14:64:B5:EC:C4:7E:55:B9:6E:95:DD:55:94:AA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/23D8772F1FE91464B5ECC47E55B96E95DD5594AA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2mguZW3b2wH6DW3p1BaLA73thJ1PMFEgU3DnQsxjyXb8/1/3139312e3234322e3130382e302f32332d3233203d3e20323633343736.roa
Signing time:             Thu 04 Apr 2024 21:49:56 +0000
ROA not before:           Thu 04 Apr 2024 21:44:56 +0000
ROA not after:            Thu 03 Apr 2025 21:49:56 +0000
asID:                     263476
IP address blocks:        191.242.108.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2mguZW3b2wH6DW3p1BaLA73thJ1PMFEgU3DnQsxjyXb8/1/23D8772F1FE91464B5ECC47E55B96E95DD5594AA.crl
                          rsync://rpki-repo.registro.br/repo/2mguZW3b2wH6DW3p1BaLA73thJ1PMFEgU3DnQsxjyXb8/1/23D8772F1FE91464B5ECC47E55B96E95DD5594AA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/23D8772F1FE91464B5ECC47E55B96E95DD5594AA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:4e:96:f3:1b:50:22:84:65:91:e9:6e:0a:34:0a:6b:98:cb:d6:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23D8772F1FE91464B5ECC47E55B96E95DD5594AA
        Validity
            Not Before: Apr  4 21:44:56 2024 GMT
            Not After : Apr  3 21:49:56 2025 GMT
        Subject: CN=08465101F24DE69AF3B4D2377021526649D31DDF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:4f:fb:09:c7:57:f0:9e:ac:d5:63:34:33:cc:
                    5c:f1:2f:45:3a:1f:f8:d7:47:0d:73:a0:df:29:6d:
                    39:7c:b1:db:d7:6c:5e:b5:2a:87:ba:94:58:96:ff:
                    9d:bc:c4:db:e3:0b:2d:58:70:73:6c:3d:33:0f:f3:
                    eb:ad:2b:a7:6d:47:b6:d7:ff:3a:bc:14:f4:74:97:
                    42:67:f1:ea:a0:04:b8:37:94:3e:f9:8d:ea:0d:02:
                    fa:15:38:a7:45:5d:39:9f:3a:f4:86:67:03:91:28:
                    76:77:1a:fd:5a:0b:08:ee:0c:f4:fd:ec:06:a5:9a:
                    d9:6f:93:e8:41:61:30:cf:f9:f2:c3:be:d5:a2:c1:
                    cb:18:0d:01:3d:69:58:98:c7:d1:47:af:0c:dc:d0:
                    73:48:dc:9b:40:df:9c:65:90:8b:80:fe:7d:41:49:
                    5f:9d:81:c6:ff:be:61:40:38:0a:ad:ed:47:95:d3:
                    ba:e4:4c:35:d8:ad:f9:24:fb:30:4c:aa:e1:6c:7c:
                    99:76:99:de:74:b3:4d:03:9b:e6:1f:52:3b:3a:9d:
                    04:d0:f8:e7:90:86:47:b1:dc:75:86:df:66:3e:68:
                    91:d2:5e:5e:33:78:42:4b:04:49:39:18:ba:6b:16:
                    5f:1f:1e:45:b5:90:c2:00:63:b8:bd:2a:4f:b0:b1:
                    71:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:46:51:01:F2:4D:E6:9A:F3:B4:D2:37:70:21:52:66:49:D3:1D:DF
            X509v3 Authority Key Identifier:
                keyid:23:D8:77:2F:1F:E9:14:64:B5:EC:C4:7E:55:B9:6E:95:DD:55:94:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2mguZW3b2wH6DW3p1BaLA73thJ1PMFEgU3DnQsxjyXb8/1/23D8772F1FE91464B5ECC47E55B96E95DD5594AA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/23D8772F1FE91464B5ECC47E55B96E95DD5594AA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2mguZW3b2wH6DW3p1BaLA73thJ1PMFEgU3DnQsxjyXb8/1/3139312e3234322e3130382e302f32332d3233203d3e20323633343736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.242.108.0/23

    Signature Algorithm: sha256WithRSAEncryption
         52:3d:6d:37:d9:ff:d9:55:1e:8f:54:8e:25:8a:f2:89:93:76:
         66:3c:64:54:13:84:c3:c3:8c:0e:4c:00:4d:8f:55:b5:00:50:
         a6:a0:c3:09:48:91:82:d9:e6:4d:fe:08:72:ee:96:2b:e6:17:
         0e:78:cc:d7:95:b2:51:20:5b:ea:68:10:22:f8:5a:8b:9b:3a:
         19:b4:67:04:34:58:32:33:30:f7:1b:45:41:8b:45:13:81:3c:
         d7:fc:32:28:e5:bb:d8:e3:d7:d6:0a:7a:4b:5d:01:4c:bd:8c:
         e5:28:45:be:40:57:4b:49:3b:21:d1:8c:2b:04:c0:47:c4:2e:
         72:b2:67:d2:33:b6:11:79:d6:96:70:f2:89:df:05:f9:b8:cf:
         ad:6b:ba:81:8a:d3:0d:3f:d2:ff:bc:72:04:f4:2c:ed:84:09:
         98:78:e3:f4:9d:85:80:a7:53:35:96:ff:85:fb:09:df:b1:d0:
         71:66:64:0f:41:de:99:13:2c:b9:89:f4:3d:00:c9:78:b6:32:
         51:c0:ce:8f:2a:a2:19:5b:ff:0f:3d:7a:76:52:8b:04:89:2e:
         f2:bc:9e:73:93:df:eb:3a:d9:b1:45:35:4a:7c:69:27:cb:5e:
         07:92:59:c7:25:1e:7a:ea:1a:2e:99:77:a6:be:ca:72:87:9e:
         ee:69:d5:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:32:39 2024 by rpki-client on console-ams.rpki-client.org