Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2mguZW3b2wH6DW3p1BaLA73thJ1PMFEgU3DnQsxjyXb8/1/3139312e3234322e3131312e302f32342d3234203d3e20323633343736.roa
File:                     3139312e3234322e3131312e302f32342d3234203d3e20323633343736.roa (raw, json)
Hash identifier:          MUVfi8vlXy/MgEvBzN65h41NGxTJ/4uNxoiiNQv9vgU=
Subject key identifier:   C9:5F:C1:BB:52:F3:78:4F:44:44:98:3F:B7:33:07:16:24:33:F1:87
Certificate issuer:       /CN=23D8772F1FE91464B5ECC47E55B96E95DD5594AA
Certificate serial:       3C474FE2FBDBC5F2EB43D27FE8D3FC435CF649FC
Authority key identifier: 23:D8:77:2F:1F:E9:14:64:B5:EC:C4:7E:55:B9:6E:95:DD:55:94:AA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/23D8772F1FE91464B5ECC47E55B96E95DD5594AA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2mguZW3b2wH6DW3p1BaLA73thJ1PMFEgU3DnQsxjyXb8/1/3139312e3234322e3131312e302f32342d3234203d3e20323633343736.roa
Signing time:             Thu 04 Apr 2024 21:49:56 +0000
ROA not before:           Thu 04 Apr 2024 21:44:56 +0000
ROA not after:            Thu 03 Apr 2025 21:49:56 +0000
asID:                     263476
IP address blocks:        191.242.111.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2mguZW3b2wH6DW3p1BaLA73thJ1PMFEgU3DnQsxjyXb8/1/23D8772F1FE91464B5ECC47E55B96E95DD5594AA.crl
                          rsync://rpki-repo.registro.br/repo/2mguZW3b2wH6DW3p1BaLA73thJ1PMFEgU3DnQsxjyXb8/1/23D8772F1FE91464B5ECC47E55B96E95DD5594AA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/23D8772F1FE91464B5ECC47E55B96E95DD5594AA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:47:4f:e2:fb:db:c5:f2:eb:43:d2:7f:e8:d3:fc:43:5c:f6:49:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23D8772F1FE91464B5ECC47E55B96E95DD5594AA
        Validity
            Not Before: Apr  4 21:44:56 2024 GMT
            Not After : Apr  3 21:49:56 2025 GMT
        Subject: CN=C95FC1BB52F3784F4444983FB73307162433F187
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:9b:da:9d:e2:f9:d3:06:b5:59:71:50:89:87:
                    15:10:4e:02:48:30:5c:db:ac:29:95:ca:d8:a7:8d:
                    04:a8:09:2f:a5:ad:59:80:26:54:86:f2:39:03:fd:
                    5c:f9:7f:53:b0:ec:4f:19:86:c9:99:46:ae:63:fa:
                    58:f2:86:3e:b4:22:1f:6e:c4:0b:ef:b4:81:d9:ef:
                    d0:02:1c:ec:eb:82:9b:79:50:c5:be:0c:3b:70:87:
                    d5:13:f7:18:b4:7f:aa:94:70:20:e5:c5:d5:a3:b8:
                    97:e1:07:fd:1e:1c:c1:66:c5:4c:c1:50:74:09:58:
                    0b:b0:e0:9a:97:06:bc:86:19:24:bb:16:0f:bf:b6:
                    d6:a9:17:57:8d:96:84:03:47:35:90:12:1f:49:be:
                    91:c9:ae:8b:5b:1d:aa:7a:ac:f0:65:98:76:9d:84:
                    98:cf:8c:0a:17:11:bc:9f:a5:d8:8b:cf:5e:61:05:
                    32:09:77:fe:5e:a3:5f:d1:87:46:e6:f7:f2:07:fc:
                    03:f8:c1:b0:a0:51:ca:55:1b:cd:83:35:7b:27:ca:
                    c9:77:de:d4:0c:9f:18:72:75:60:ed:65:0b:9d:58:
                    5e:e5:27:85:68:bd:fb:ad:9d:6c:82:4c:ba:f2:33:
                    7f:7f:e9:84:a5:1b:b0:d4:b6:a3:c8:15:e9:c7:66:
                    59:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:5F:C1:BB:52:F3:78:4F:44:44:98:3F:B7:33:07:16:24:33:F1:87
            X509v3 Authority Key Identifier:
                keyid:23:D8:77:2F:1F:E9:14:64:B5:EC:C4:7E:55:B9:6E:95:DD:55:94:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2mguZW3b2wH6DW3p1BaLA73thJ1PMFEgU3DnQsxjyXb8/1/23D8772F1FE91464B5ECC47E55B96E95DD5594AA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/23D8772F1FE91464B5ECC47E55B96E95DD5594AA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2mguZW3b2wH6DW3p1BaLA73thJ1PMFEgU3DnQsxjyXb8/1/3139312e3234322e3131312e302f32342d3234203d3e20323633343736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.242.111.0/24

    Signature Algorithm: sha256WithRSAEncryption
         48:a8:db:5b:41:29:14:a3:77:72:64:36:b3:ac:0e:32:30:d0:
         58:d6:85:dc:37:f1:60:ec:b9:82:ab:07:76:78:12:2c:d9:f4:
         fa:8c:e2:16:eb:4c:54:d5:29:83:8c:74:c6:e0:31:43:ea:7f:
         65:89:26:43:82:d8:58:e2:8f:c8:4a:2f:9d:cd:f2:49:c9:5e:
         02:61:4b:a4:96:f9:d8:6a:53:29:00:66:b9:a6:4c:78:d3:be:
         46:47:45:ac:55:21:a6:c6:07:ce:c8:68:da:20:ee:da:36:82:
         60:ba:77:bf:5a:95:76:f6:4e:fd:58:24:09:c3:43:1a:fc:9b:
         81:79:c9:00:6e:9a:eb:ec:4f:09:bc:3a:19:27:6d:1f:78:d3:
         80:1e:4a:00:3e:af:9f:2d:db:90:06:ca:85:63:a5:e2:8b:39:
         5a:16:cf:ab:42:5b:65:34:99:69:95:58:32:b6:2c:36:b0:b4:
         93:10:87:10:0f:67:33:f7:91:94:90:52:74:88:32:21:e5:46:
         25:7e:8a:2d:31:ed:89:5f:83:5e:bc:77:0d:d5:c6:c4:c7:47:
         d0:19:1d:f6:c8:92:83:a3:6b:de:81:f1:c6:c0:9a:fe:85:07:
         87:e2:79:c9:f9:84:31:6d:fb:76:2a:98:0d:f2:4b:a2:94:fa:
         a4:b5:55:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:32:39 2024 by rpki-client on console-ams.rpki-client.org