Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3139312e362e38302e302f32312d3231203d3e203238323730.roa
File:                     3139312e362e38302e302f32312d3231203d3e203238323730.roa (raw, json)
Hash identifier:          0QwLbtTWdLj2e9VIDCW8z8k6o3EG63+7wWi8hRIG0nw=
Subject key identifier:   48:C3:66:51:74:BB:B9:B1:11:25:4D:D0:C4:16:DB:BE:1F:05:9E:D5
Certificate issuer:       /CN=001C1582B42E32880AA66677B51A015B52D2C781
Certificate serial:       756A8412968B74B18CCF3A114B12CD66B519728D
Authority key identifier: 00:1C:15:82:B4:2E:32:88:0A:A6:66:77:B5:1A:01:5B:52:D2:C7:81
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/001C1582B42E32880AA66677B51A015B52D2C781.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3139312e362e38302e302f32312d3231203d3e203238323730.roa
Signing time:             Mon 09 Sep 2024 15:00:20 +0000
ROA not before:           Mon 09 Sep 2024 14:55:20 +0000
ROA not after:            Mon 08 Sep 2025 15:00:20 +0000
asID:                     28270
IP address blocks:        191.6.80.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/001C1582B42E32880AA66677B51A015B52D2C781.crl
                          rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/001C1582B42E32880AA66677B51A015B52D2C781.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/001C1582B42E32880AA66677B51A015B52D2C781.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 21 Sep 2024 19:13:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:6a:84:12:96:8b:74:b1:8c:cf:3a:11:4b:12:cd:66:b5:19:72:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=001C1582B42E32880AA66677B51A015B52D2C781
        Validity
            Not Before: Sep  9 14:55:20 2024 GMT
            Not After : Sep  8 15:00:20 2025 GMT
        Subject: CN=48C3665174BBB9B111254DD0C416DBBE1F059ED5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:69:04:b4:53:d7:74:dd:74:f0:d5:72:f8:39:
                    7b:67:9d:00:d9:ca:33:9f:2b:83:48:26:b6:a2:ab:
                    21:ae:ce:1f:71:a4:e9:a7:09:02:a4:9d:dd:70:a4:
                    00:d8:5a:74:97:b6:a1:41:e7:30:4a:f4:58:e4:82:
                    b1:3b:1c:59:08:e5:62:20:f6:82:f6:3d:4a:2c:f1:
                    5a:bd:ff:37:65:1a:bc:33:da:b5:f1:3e:f1:0a:6b:
                    ed:8f:ed:df:04:97:e8:d3:01:2e:86:7f:e4:97:3b:
                    95:ef:3d:e6:33:f7:2c:b1:5f:fc:18:c7:6e:51:ad:
                    33:7c:37:03:dd:c6:62:b6:2d:dd:61:12:10:52:08:
                    ac:64:5d:94:23:8d:1d:d0:e7:1b:23:e4:bc:0a:d8:
                    35:22:ec:17:b5:ad:be:b9:aa:9b:fe:57:8d:c6:e3:
                    73:36:1a:05:65:ff:44:20:46:b4:4f:90:98:72:bb:
                    80:dc:ba:ec:85:70:ef:ef:92:e1:0c:d0:e8:e8:cd:
                    91:e3:b1:11:d0:3e:41:5e:5c:70:dd:e2:9e:b1:fe:
                    b1:62:30:b5:f9:94:3a:26:6f:82:52:cb:9c:32:c2:
                    32:13:a2:34:2d:4e:1d:8a:4b:98:4d:d2:d2:22:ea:
                    6c:3f:df:8d:d8:f0:6b:de:3a:cc:ee:84:8e:b5:55:
                    aa:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:C3:66:51:74:BB:B9:B1:11:25:4D:D0:C4:16:DB:BE:1F:05:9E:D5
            X509v3 Authority Key Identifier:
                keyid:00:1C:15:82:B4:2E:32:88:0A:A6:66:77:B5:1A:01:5B:52:D2:C7:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/001C1582B42E32880AA66677B51A015B52D2C781.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/001C1582B42E32880AA66677B51A015B52D2C781.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3139312e362e38302e302f32312d3231203d3e203238323730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.6.80.0/21

    Signature Algorithm: sha256WithRSAEncryption
         31:0c:a8:15:11:9f:fe:5f:61:4e:b0:85:5b:34:c8:f5:0f:af:
         36:b3:dd:09:14:83:d8:16:e1:c2:88:a1:06:4b:76:9d:a7:fa:
         51:46:cd:39:24:b3:8d:16:ad:f3:e1:b3:30:01:fa:6f:4b:48:
         02:4f:27:1b:6e:e2:d3:3f:b1:3c:00:99:30:a0:36:f8:ae:3e:
         35:00:f4:ba:16:9d:21:98:29:dc:87:57:d0:d1:bb:c8:0e:65:
         52:08:bf:6b:78:84:4d:d1:8f:4e:72:ef:d6:47:4d:f5:20:42:
         a8:e7:c3:1a:c4:1b:e7:8b:e4:16:60:9e:e5:fb:af:ab:24:5a:
         dc:c4:64:65:cd:18:a0:7b:5c:c6:c7:7e:85:21:1d:b4:41:5e:
         d9:87:43:de:e2:96:f4:71:7d:14:d5:3c:cd:13:96:b7:68:e4:
         64:62:01:ec:3f:08:07:fe:86:fe:b4:31:29:f8:86:38:27:05:
         1d:1a:50:c1:0f:bf:95:e0:49:f0:c7:b0:90:3a:57:a5:8d:c3:
         1a:db:99:f6:37:63:88:bd:94:e7:04:40:f0:43:b3:af:8e:19:
         e5:64:e6:a6:ec:13:c7:1a:d2:f0:d9:ba:3b:7e:b9:70:f8:6d:
         a6:c5:13:90:19:1f:c2:59:93:7c:9b:ee:38:50:6f:14:4d:83:
         83:07:60:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 20 18:51:55 2024 by rpki-client on console-fra.rpki-client.org