Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2zVR29nhkFArjm3boG6xrJCVPQ36b5DaeVsyn44SZtAB/0/3139312e362e3134302e302f32322d3332203d3e20323633313430.roa
File:                     3139312e362e3134302e302f32322d3332203d3e20323633313430.roa (raw, json)
Hash identifier:          wMPhwjYkOWGZ9HZ4zm0ZYYXDA+LnFz+G36xuUiIu3RQ=
Subject key identifier:   CE:9A:88:9E:9C:70:61:6A:BA:24:DE:21:D8:BD:8C:B7:A8:FF:86:79
Certificate issuer:       /CN=8F327FEFA4E8788FFCFDCD7C6D190640F8A62810
Certificate serial:       6F2E1A72BDBDEA7F2DEF940BCF68C1C88DE9D785
Authority key identifier: 8F:32:7F:EF:A4:E8:78:8F:FC:FD:CD:7C:6D:19:06:40:F8:A6:28:10
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8F327FEFA4E8788FFCFDCD7C6D190640F8A62810.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2zVR29nhkFArjm3boG6xrJCVPQ36b5DaeVsyn44SZtAB/0/3139312e362e3134302e302f32322d3332203d3e20323633313430.roa
Signing time:             Wed 10 Jul 2024 16:35:57 +0000
ROA not before:           Wed 10 Jul 2024 16:30:57 +0000
ROA not after:            Wed 09 Jul 2025 16:35:57 +0000
asID:                     263140
IP address blocks:        191.6.140.0/22 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2zVR29nhkFArjm3boG6xrJCVPQ36b5DaeVsyn44SZtAB/0/8F327FEFA4E8788FFCFDCD7C6D190640F8A62810.crl
                          rsync://rpki-repo.registro.br/repo/2zVR29nhkFArjm3boG6xrJCVPQ36b5DaeVsyn44SZtAB/0/8F327FEFA4E8788FFCFDCD7C6D190640F8A62810.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8F327FEFA4E8788FFCFDCD7C6D190640F8A62810.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 11:01:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:2e:1a:72:bd:bd:ea:7f:2d:ef:94:0b:cf:68:c1:c8:8d:e9:d7:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8F327FEFA4E8788FFCFDCD7C6D190640F8A62810
        Validity
            Not Before: Jul 10 16:30:57 2024 GMT
            Not After : Jul  9 16:35:57 2025 GMT
        Subject: CN=CE9A889E9C70616ABA24DE21D8BD8CB7A8FF8679
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:54:5f:6e:58:2e:4f:e9:49:bf:28:64:97:ef:
                    30:a5:af:a6:65:86:d5:74:df:d0:f6:03:de:f6:51:
                    ac:76:57:59:f9:7a:6f:a4:e9:d4:2c:8c:eb:af:19:
                    30:1e:03:6a:ad:4d:4d:65:0f:a0:3b:79:7f:98:cf:
                    7c:80:7b:3f:29:f2:29:9c:02:2c:e0:75:43:cd:ab:
                    8a:96:ce:5c:7d:7b:c7:cf:fe:5e:76:ce:54:5c:9f:
                    ff:7c:a1:57:67:71:56:48:d1:33:59:04:a1:ec:5b:
                    ec:67:44:e1:a3:8e:ae:e8:d3:0e:10:5f:49:86:1c:
                    5f:63:be:c4:ff:58:e7:4a:9b:f3:cc:de:c5:b5:c0:
                    00:2a:31:90:ba:ad:cd:01:a0:e2:a5:99:a4:3a:e1:
                    4c:90:9b:2c:57:06:54:c7:18:ce:ea:49:3d:59:f1:
                    93:eb:5f:e6:07:05:58:11:9b:ca:df:e3:11:2f:6f:
                    7c:a9:ba:bc:dc:a9:b3:e4:0d:7f:a4:28:a9:32:da:
                    54:b0:d4:1a:31:a9:a1:f0:a8:97:33:83:c0:e1:f3:
                    b5:2a:43:a5:79:f8:ee:47:3b:78:1d:1d:c9:e5:3e:
                    5d:26:01:5b:d9:b1:0a:6a:8e:f8:e3:8c:6f:c3:82:
                    ed:03:c5:98:b6:d4:b6:01:69:c0:29:31:b0:f5:40:
                    bb:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:9A:88:9E:9C:70:61:6A:BA:24:DE:21:D8:BD:8C:B7:A8:FF:86:79
            X509v3 Authority Key Identifier:
                keyid:8F:32:7F:EF:A4:E8:78:8F:FC:FD:CD:7C:6D:19:06:40:F8:A6:28:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2zVR29nhkFArjm3boG6xrJCVPQ36b5DaeVsyn44SZtAB/0/8F327FEFA4E8788FFCFDCD7C6D190640F8A62810.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8F327FEFA4E8788FFCFDCD7C6D190640F8A62810.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2zVR29nhkFArjm3boG6xrJCVPQ36b5DaeVsyn44SZtAB/0/3139312e362e3134302e302f32322d3332203d3e20323633313430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.6.140.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a9:1c:19:97:b0:da:aa:da:70:de:b5:14:72:b5:01:09:ee:54:
         70:69:8b:0e:bf:b7:e8:8b:2f:60:a7:65:65:64:29:03:9c:07:
         c3:6d:4c:28:f4:ea:fd:d8:45:0b:7d:11:87:e5:84:ee:82:bb:
         3b:b9:8e:0f:7e:35:43:b5:d4:f9:de:e8:66:4a:53:68:21:a7:
         33:6e:31:b3:3d:e1:0a:e8:c0:94:d6:10:dc:8e:7d:12:f8:9e:
         97:ed:1d:52:f5:e3:2f:56:9f:bd:c1:07:7e:48:d7:45:50:60:
         c1:ae:2b:9d:32:0b:15:a6:54:fb:ec:0a:5f:2e:f5:ec:e6:ef:
         17:10:38:6d:53:01:b1:e3:70:f1:7d:93:35:09:be:2a:8f:6c:
         8a:b4:7c:fc:1d:9e:f7:65:90:e7:3d:d3:90:d2:54:5e:4b:43:
         e3:95:ee:e9:0d:b4:ce:a7:56:08:62:12:5a:dc:5f:1e:2f:31:
         bb:81:a7:63:45:f8:13:a9:8d:bf:31:0c:14:6f:64:60:c3:e1:
         2b:3f:c3:9e:c0:03:1b:6d:0a:b5:a7:78:10:19:46:47:32:1d:
         dd:9c:11:02:f4:67:16:19:17:b2:6a:a0:c5:7d:b3:86:23:26:
         96:6c:73:92:94:7e:84:25:66:f4:58:52:f9:62:32:a9:0c:76:
         1e:27:8d:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 13:14:40 2024 by rpki-client on console-ams.rpki-client.org