Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2mguZW3b2wH6DW3p1BaLA73thJ1PMFEgU3DnQsxjyXb8/1/3139312e3234322e3131302e302f32342d3234203d3e20323633343736.roa
File:                     3139312e3234322e3131302e302f32342d3234203d3e20323633343736.roa (raw, json)
Hash identifier:          yJCb5Tff9JS49wJ1WairNOXsl9sypRlYNZC5VbGYcTE=
Subject key identifier:   0E:9C:CA:0F:86:AA:51:17:40:57:04:2F:F1:D3:C3:3D:0E:7A:2F:48
Certificate issuer:       /CN=23D8772F1FE91464B5ECC47E55B96E95DD5594AA
Certificate serial:       7E669DF286B7A2C164A1DCF22A58A839F298A980
Authority key identifier: 23:D8:77:2F:1F:E9:14:64:B5:EC:C4:7E:55:B9:6E:95:DD:55:94:AA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/23D8772F1FE91464B5ECC47E55B96E95DD5594AA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2mguZW3b2wH6DW3p1BaLA73thJ1PMFEgU3DnQsxjyXb8/1/3139312e3234322e3131302e302f32342d3234203d3e20323633343736.roa
Signing time:             Thu 04 Apr 2024 21:49:56 +0000
ROA not before:           Thu 04 Apr 2024 21:44:56 +0000
ROA not after:            Thu 03 Apr 2025 21:49:56 +0000
asID:                     263476
IP address blocks:        191.242.110.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2mguZW3b2wH6DW3p1BaLA73thJ1PMFEgU3DnQsxjyXb8/1/23D8772F1FE91464B5ECC47E55B96E95DD5594AA.crl
                          rsync://rpki-repo.registro.br/repo/2mguZW3b2wH6DW3p1BaLA73thJ1PMFEgU3DnQsxjyXb8/1/23D8772F1FE91464B5ECC47E55B96E95DD5594AA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/23D8772F1FE91464B5ECC47E55B96E95DD5594AA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:66:9d:f2:86:b7:a2:c1:64:a1:dc:f2:2a:58:a8:39:f2:98:a9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23D8772F1FE91464B5ECC47E55B96E95DD5594AA
        Validity
            Not Before: Apr  4 21:44:56 2024 GMT
            Not After : Apr  3 21:49:56 2025 GMT
        Subject: CN=0E9CCA0F86AA51174057042FF1D3C33D0E7A2F48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:8e:0c:9a:be:1a:4e:92:89:e0:57:cd:b3:ad:
                    67:1e:8c:6a:1f:d8:12:c2:f6:ef:88:4d:d4:c2:99:
                    f4:27:e1:da:8e:21:cd:52:a6:14:67:44:63:d7:5c:
                    2e:92:3a:2f:a1:db:c6:fc:98:2b:96:4e:d7:bd:c2:
                    a6:47:b7:c8:cc:18:5b:cb:0a:bb:b2:0e:89:af:0a:
                    54:df:aa:ca:da:a4:dd:7b:05:59:34:80:8c:3f:3b:
                    46:29:06:c1:77:ee:a0:ab:ba:37:60:28:05:93:84:
                    cc:6c:f2:2a:94:80:b8:27:5c:2b:9a:6d:0f:40:74:
                    57:27:3b:3f:7f:44:1d:9e:75:13:81:4d:15:f4:4a:
                    4c:de:7a:d7:ac:a5:25:0b:39:66:ad:05:ec:be:64:
                    9d:86:8d:4f:90:ca:24:57:b6:9a:d7:3b:db:24:ea:
                    83:95:ef:dd:35:df:53:6f:ba:6c:47:90:5b:44:e9:
                    26:d9:8d:85:3d:e2:ba:b4:12:28:9c:79:9d:68:07:
                    23:43:6e:ae:fa:1d:12:02:4b:e1:06:ed:7a:bd:ad:
                    87:f1:51:58:d8:78:c0:d7:61:e1:de:ee:f0:fa:df:
                    2c:8f:18:6f:57:4d:b7:fc:c8:86:29:f5:c9:8c:b2:
                    92:94:99:0e:18:fe:d3:de:0d:e4:32:a5:0a:ae:ed:
                    84:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:9C:CA:0F:86:AA:51:17:40:57:04:2F:F1:D3:C3:3D:0E:7A:2F:48
            X509v3 Authority Key Identifier:
                keyid:23:D8:77:2F:1F:E9:14:64:B5:EC:C4:7E:55:B9:6E:95:DD:55:94:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2mguZW3b2wH6DW3p1BaLA73thJ1PMFEgU3DnQsxjyXb8/1/23D8772F1FE91464B5ECC47E55B96E95DD5594AA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/23D8772F1FE91464B5ECC47E55B96E95DD5594AA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2mguZW3b2wH6DW3p1BaLA73thJ1PMFEgU3DnQsxjyXb8/1/3139312e3234322e3131302e302f32342d3234203d3e20323633343736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.242.110.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a6:b5:c7:e4:af:af:77:3d:17:aa:9e:cc:31:c5:1c:94:ef:7f:
         55:74:4c:76:e1:dc:07:ee:23:ed:78:fd:eb:a2:0c:d0:ff:e8:
         ab:a8:91:a4:d0:54:96:89:ea:67:07:98:b2:39:88:26:73:5c:
         25:31:ae:4a:53:be:68:f7:bc:c9:48:d1:ce:c0:d4:99:59:27:
         38:d7:f8:60:16:97:c2:e1:3e:77:0c:81:4b:12:bb:42:7e:86:
         34:bc:96:ca:64:6d:d1:fe:b6:0c:7e:5c:2f:01:4e:11:35:9b:
         95:5e:ff:03:3c:6e:cc:b6:c1:79:bc:02:57:d0:40:55:47:f0:
         c7:6e:e7:8c:5f:bf:8e:f6:ea:2b:c4:0d:79:d6:3b:ee:0a:84:
         34:25:24:2e:0e:1f:dc:05:b1:1d:21:8e:66:fe:0e:ed:19:92:
         c1:a3:76:88:8a:e6:b4:19:ab:e7:5f:d1:f8:32:87:d5:7b:b6:
         a2:0d:68:49:59:7b:71:09:54:cf:46:3d:51:41:71:ce:69:17:
         da:8b:39:da:85:52:a7:e2:6e:c4:1b:ef:3c:91:0c:25:04:1d:
         b7:fa:cf:0b:60:3c:bc:96:24:73:c3:05:ba:49:64:a4:74:f0:
         f3:f9:62:65:95:69:ce:6b:2d:b2:2f:27:91:71:47:53:c7:c8:
         fd:40:a4:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 11:32:47 2024 by rpki-client on console-fra.rpki-client.org