Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4XopuNYA2NUaPnn15rcj4LyQy9Gw9xktbGXmRySmAqZE/1/3139322e3134312e3131322e302f32332d3233203d3e20323637343633.roa
File:                     3139322e3134312e3131322e302f32332d3233203d3e20323637343633.roa (raw, json)
Hash identifier:          0kLgt8lJeSenzguDPharpK6tQDW9iyamA0k7DXolaVY=
Subject key identifier:   A3:3C:F8:41:46:0F:DA:12:30:3F:4B:A4:89:6D:DB:65:0B:A7:1F:34
Certificate issuer:       /CN=D6FA304477B282D06DA853CA151FF15FE4EA7B9C
Certificate serial:       04A07E640A104C7F34EC43B95F8016576C66D394
Authority key identifier: D6:FA:30:44:77:B2:82:D0:6D:A8:53:CA:15:1F:F1:5F:E4:EA:7B:9C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D6FA304477B282D06DA853CA151FF15FE4EA7B9C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4XopuNYA2NUaPnn15rcj4LyQy9Gw9xktbGXmRySmAqZE/1/3139322e3134312e3131322e302f32332d3233203d3e20323637343633.roa
Signing time:             Thu 04 Apr 2024 01:58:14 +0000
ROA not before:           Thu 04 Apr 2024 01:53:14 +0000
ROA not after:            Thu 03 Apr 2025 01:58:14 +0000
asID:                     267463
IP address blocks:        192.141.112.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4XopuNYA2NUaPnn15rcj4LyQy9Gw9xktbGXmRySmAqZE/1/D6FA304477B282D06DA853CA151FF15FE4EA7B9C.crl
                          rsync://rpki-repo.registro.br/repo/4XopuNYA2NUaPnn15rcj4LyQy9Gw9xktbGXmRySmAqZE/1/D6FA304477B282D06DA853CA151FF15FE4EA7B9C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D6FA304477B282D06DA853CA151FF15FE4EA7B9C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 21:26:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:a0:7e:64:0a:10:4c:7f:34:ec:43:b9:5f:80:16:57:6c:66:d3:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D6FA304477B282D06DA853CA151FF15FE4EA7B9C
        Validity
            Not Before: Apr  4 01:53:14 2024 GMT
            Not After : Apr  3 01:58:14 2025 GMT
        Subject: CN=A33CF841460FDA12303F4BA4896DDB650BA71F34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:73:6f:7d:8c:4c:ac:4a:3a:d5:83:aa:e9:29:
                    3e:b5:9c:2d:c7:ef:f7:89:d4:a3:6e:e1:6f:53:11:
                    88:75:0a:f1:07:f9:d5:e4:06:91:23:ed:49:c4:50:
                    fa:e5:b0:d4:66:d9:46:a3:4a:18:03:3d:ba:0c:41:
                    45:87:5b:eb:5c:59:36:30:b6:43:94:7a:3a:4f:d7:
                    ee:f3:e7:b7:2b:d3:48:1f:09:ac:91:bf:a7:19:f6:
                    65:26:5e:83:54:9d:9e:19:3a:f3:6c:34:f5:e8:5d:
                    9e:cd:e9:f1:b0:fb:ee:3e:03:e2:d6:8a:56:85:f8:
                    d4:04:ec:62:16:8a:7a:c0:ac:3e:a7:37:22:c8:d5:
                    3f:b8:9e:d0:db:d6:da:92:13:33:ca:a3:c1:d4:32:
                    e2:85:4d:a4:04:db:26:a3:02:ac:34:28:56:0d:c5:
                    1b:cb:93:98:98:80:51:f3:1c:b3:4d:c6:b4:48:f7:
                    23:85:24:bf:62:bd:c1:8a:74:04:e7:04:d4:0a:63:
                    43:a7:98:16:09:42:68:9d:21:6c:0e:b2:c9:ca:41:
                    b8:77:24:e1:b4:35:da:e5:8a:70:db:76:1e:6e:1e:
                    91:b0:72:8a:a0:06:94:3e:f8:69:dd:af:eb:1f:e9:
                    9a:d9:fe:87:38:58:aa:4d:b9:44:45:69:af:45:f1:
                    76:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:3C:F8:41:46:0F:DA:12:30:3F:4B:A4:89:6D:DB:65:0B:A7:1F:34
            X509v3 Authority Key Identifier:
                keyid:D6:FA:30:44:77:B2:82:D0:6D:A8:53:CA:15:1F:F1:5F:E4:EA:7B:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4XopuNYA2NUaPnn15rcj4LyQy9Gw9xktbGXmRySmAqZE/1/D6FA304477B282D06DA853CA151FF15FE4EA7B9C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D6FA304477B282D06DA853CA151FF15FE4EA7B9C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4XopuNYA2NUaPnn15rcj4LyQy9Gw9xktbGXmRySmAqZE/1/3139322e3134312e3131322e302f32332d3233203d3e20323637343633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.141.112.0/23

    Signature Algorithm: sha256WithRSAEncryption
         85:1c:26:33:ea:96:04:47:04:f9:9d:1e:59:4b:81:e6:8c:f8:
         ea:3b:71:9d:21:40:a6:2d:1e:61:81:a2:2c:16:4c:59:db:35:
         bc:6d:ee:dc:ef:d8:b6:1e:6a:54:c7:5c:1c:2f:a7:f6:8d:ea:
         22:87:fb:6d:98:73:6a:0a:66:cc:76:9d:01:13:74:5d:c8:02:
         f8:d9:3e:52:9e:aa:b8:c9:6f:50:0b:de:88:c6:1b:bb:cb:cc:
         7d:a1:ee:91:43:52:61:01:99:fa:d0:ef:22:a8:74:b5:2f:fe:
         5a:0f:65:ee:a4:ae:a7:17:83:b9:1f:10:94:50:2f:45:f5:f6:
         5b:3f:76:5e:58:35:ba:f2:e1:d9:4a:72:c5:2e:71:14:4f:e5:
         fe:1f:6f:e0:9c:61:f8:cd:8d:d5:2c:dc:c5:bc:5e:e4:87:8e:
         7e:87:c0:38:c8:54:45:0a:e9:9b:2c:44:32:7b:61:ef:e8:1e:
         46:70:28:8c:b5:d8:9c:15:bf:e7:6a:da:c6:9b:8c:01:dc:88:
         3d:10:d1:eb:15:1f:b3:7e:13:f9:83:6f:ad:2f:87:96:46:22:
         1e:eb:60:8a:d6:ba:12:69:4d:dc:f9:5b:33:8b:0c:d3:a4:15:
         b7:4c:53:85:c1:2c:cb:31:9c:5f:a2:4a:34:0f:1b:fa:4b:1c:
         07:90:4e:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:09:57 2024 by rpki-client on console-ams.rpki-client.org