Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3H9QCx2HAzmUgn4Xy7inndDm2fDLyuEHmqnw74RuwDh8/1/3139312e3234312e35362e302f32322d3234203d3e20323633363638.roa
File:                     3139312e3234312e35362e302f32322d3234203d3e20323633363638.roa (raw, json)
Hash identifier:          KziogyOV/MWL4wuLPDZOvgJocTdi3i0NC94EHSaeW7o=
Subject key identifier:   E8:66:D2:FB:E3:28:B7:11:DC:9F:A1:B3:DA:EA:C9:A8:53:5A:F6:47
Certificate issuer:       /CN=3536DA9FA1CF7E312AAF7721ED15384E063AE2E2
Certificate serial:       24D9479C7E6FB927D9C974F0273B1B1FF37E0729
Authority key identifier: 35:36:DA:9F:A1:CF:7E:31:2A:AF:77:21:ED:15:38:4E:06:3A:E2:E2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3536DA9FA1CF7E312AAF7721ED15384E063AE2E2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3H9QCx2HAzmUgn4Xy7inndDm2fDLyuEHmqnw74RuwDh8/1/3139312e3234312e35362e302f32322d3234203d3e20323633363638.roa
Signing time:             Thu 04 Apr 2024 09:56:23 +0000
ROA not before:           Thu 04 Apr 2024 09:51:23 +0000
ROA not after:            Thu 03 Apr 2025 09:56:23 +0000
asID:                     263668
IP address blocks:        191.241.56.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3H9QCx2HAzmUgn4Xy7inndDm2fDLyuEHmqnw74RuwDh8/1/3536DA9FA1CF7E312AAF7721ED15384E063AE2E2.crl
                          rsync://rpki-repo.registro.br/repo/3H9QCx2HAzmUgn4Xy7inndDm2fDLyuEHmqnw74RuwDh8/1/3536DA9FA1CF7E312AAF7721ED15384E063AE2E2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3536DA9FA1CF7E312AAF7721ED15384E063AE2E2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 15:34:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:d9:47:9c:7e:6f:b9:27:d9:c9:74:f0:27:3b:1b:1f:f3:7e:07:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3536DA9FA1CF7E312AAF7721ED15384E063AE2E2
        Validity
            Not Before: Apr  4 09:51:23 2024 GMT
            Not After : Apr  3 09:56:23 2025 GMT
        Subject: CN=E866D2FBE328B711DC9FA1B3DAEAC9A8535AF647
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:20:ad:51:88:75:57:11:7e:dd:3d:56:d6:d9:
                    d8:12:f5:97:2e:51:76:2d:c6:e4:4c:0d:41:74:90:
                    c9:f9:08:8e:47:a7:60:b3:dd:d3:6c:fa:63:32:03:
                    8d:b0:95:ec:bb:ea:21:fb:51:89:3f:64:2b:c3:4b:
                    bf:32:12:2d:d6:19:8e:a2:d7:dc:aa:4f:b7:45:19:
                    5a:66:96:2c:7c:b2:bc:ea:68:35:ce:f7:af:e7:f4:
                    05:54:76:98:d3:d1:59:79:88:af:13:8b:d1:c1:c0:
                    c6:34:a6:aa:69:ac:00:d5:5a:3d:52:d7:86:53:72:
                    bd:13:3d:0c:fe:94:b0:d4:83:c8:d5:ce:e3:bc:f8:
                    9e:65:2e:9f:fd:93:55:09:07:b8:89:b3:29:46:16:
                    5b:91:ea:ab:13:80:1c:88:72:98:ed:c5:a1:52:9a:
                    8e:94:80:b0:dd:bf:dc:b7:88:60:b6:e8:3c:f5:ec:
                    25:71:8f:8a:81:8c:95:aa:8c:c8:7a:02:40:c5:6b:
                    20:f5:4c:d6:a1:72:d3:80:44:0e:c5:7b:23:3b:5e:
                    16:1e:1a:cb:1f:3d:66:9d:50:b0:be:1f:b3:9e:38:
                    44:6a:01:f2:b6:2b:5a:11:74:c5:b3:b5:96:a1:8e:
                    d8:a4:21:55:cd:b7:7e:57:ff:94:d4:cc:87:c8:d8:
                    5f:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:66:D2:FB:E3:28:B7:11:DC:9F:A1:B3:DA:EA:C9:A8:53:5A:F6:47
            X509v3 Authority Key Identifier:
                keyid:35:36:DA:9F:A1:CF:7E:31:2A:AF:77:21:ED:15:38:4E:06:3A:E2:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3H9QCx2HAzmUgn4Xy7inndDm2fDLyuEHmqnw74RuwDh8/1/3536DA9FA1CF7E312AAF7721ED15384E063AE2E2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3536DA9FA1CF7E312AAF7721ED15384E063AE2E2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3H9QCx2HAzmUgn4Xy7inndDm2fDLyuEHmqnw74RuwDh8/1/3139312e3234312e35362e302f32322d3234203d3e20323633363638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.241.56.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8c:29:dd:9c:70:53:ca:f8:1d:a6:80:a5:7c:0c:2e:91:a6:0f:
         ca:a1:50:44:da:a2:ea:ea:86:2a:a0:88:6e:ef:69:96:b9:3a:
         48:6a:80:f4:b6:6b:a5:ae:19:d9:50:37:21:00:5a:4a:b5:67:
         07:ab:5e:08:b1:12:cf:e1:a3:f3:95:14:36:b1:dc:c8:90:6c:
         e7:ac:72:ef:d3:7b:42:c9:4d:ca:c3:3f:db:e1:f4:52:72:b8:
         7a:01:93:02:13:a3:c5:c5:9f:30:1d:d1:8a:52:f3:63:9d:7c:
         8e:0b:c0:ee:a8:ef:fa:45:17:fb:3c:a1:e9:0f:ea:e9:d6:5e:
         6d:61:f3:8e:cf:9f:6c:44:60:41:2c:96:50:0b:a8:f2:2d:6a:
         28:c0:bf:fa:2e:23:4d:b5:7d:8e:11:c6:b3:e9:cf:d8:58:9f:
         e5:b5:79:93:97:fe:7e:b9:26:04:76:7e:b0:10:66:4c:6c:35:
         1e:54:59:44:ed:dc:26:ec:7d:bf:34:c5:5d:9b:91:ce:e5:6d:
         32:dd:4c:c3:64:bc:07:b3:4e:ee:91:ab:86:61:b2:4e:14:0f:
         aa:d4:25:6e:70:f1:8a:07:b7:f4:a6:b5:4b:fb:15:3c:53:9e:
         1d:5d:a1:76:73:b9:b8:5a:b7:9e:be:4f:ab:79:ad:f6:92:ec:
         62:cd:ef:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 15:22:36 2024 by rpki-client on console-fra.rpki-client.org