Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4XopuNYA2NUaPnn15rcj4LyQy9Gw9xktbGXmRySmAqZE/1/3139322e3134312e3131332e302f32342d3234203d3e20323637343633.roa
File:                     3139322e3134312e3131332e302f32342d3234203d3e20323637343633.roa (raw, json)
Hash identifier:          ud/q8rzD94aygn2099h+lGUZDMjX1vbvV9r7IkYVWkQ=
Subject key identifier:   26:11:18:19:48:1C:94:93:44:D7:3E:AE:AE:3E:B1:EF:68:5A:C7:BF
Certificate issuer:       /CN=D6FA304477B282D06DA853CA151FF15FE4EA7B9C
Certificate serial:       0811B8FA5F4955810506E1E5F7B6631824970A2A
Authority key identifier: D6:FA:30:44:77:B2:82:D0:6D:A8:53:CA:15:1F:F1:5F:E4:EA:7B:9C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D6FA304477B282D06DA853CA151FF15FE4EA7B9C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4XopuNYA2NUaPnn15rcj4LyQy9Gw9xktbGXmRySmAqZE/1/3139322e3134312e3131332e302f32342d3234203d3e20323637343633.roa
Signing time:             Thu 04 Apr 2024 01:58:15 +0000
ROA not before:           Thu 04 Apr 2024 01:53:15 +0000
ROA not after:            Thu 03 Apr 2025 01:58:15 +0000
asID:                     267463
IP address blocks:        192.141.113.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4XopuNYA2NUaPnn15rcj4LyQy9Gw9xktbGXmRySmAqZE/1/D6FA304477B282D06DA853CA151FF15FE4EA7B9C.crl
                          rsync://rpki-repo.registro.br/repo/4XopuNYA2NUaPnn15rcj4LyQy9Gw9xktbGXmRySmAqZE/1/D6FA304477B282D06DA853CA151FF15FE4EA7B9C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D6FA304477B282D06DA853CA151FF15FE4EA7B9C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 21:26:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:11:b8:fa:5f:49:55:81:05:06:e1:e5:f7:b6:63:18:24:97:0a:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D6FA304477B282D06DA853CA151FF15FE4EA7B9C
        Validity
            Not Before: Apr  4 01:53:15 2024 GMT
            Not After : Apr  3 01:58:15 2025 GMT
        Subject: CN=26111819481C949344D73EAEAE3EB1EF685AC7BF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:36:64:59:3a:00:05:1d:a6:9b:f0:62:22:06:
                    34:67:72:ba:7e:e4:ff:23:a2:66:33:c8:fd:6b:31:
                    88:38:8f:b9:02:b9:dc:a0:d5:bb:51:98:71:a1:d2:
                    06:c9:19:59:52:8a:db:ce:2b:dc:42:78:c8:de:05:
                    75:8b:9c:bd:57:2b:6c:df:67:82:55:5c:4c:25:53:
                    f6:61:98:9f:f4:58:d9:ae:04:4a:72:a4:6c:d0:46:
                    ed:c6:d0:6b:9e:64:ea:24:f7:bf:f4:a2:1f:97:11:
                    d9:20:91:65:fb:2e:a7:2f:ea:93:07:6c:de:8f:33:
                    bf:d2:0d:82:94:ca:3c:cd:19:a0:9c:8c:c3:d4:d6:
                    60:40:54:a8:a9:9e:14:7b:7d:a8:0e:64:47:d9:fc:
                    25:35:76:71:44:dd:ca:84:d2:a4:8b:80:16:aa:2b:
                    5a:9f:bf:63:0a:9e:e4:d3:ce:ff:9d:b8:43:8b:b5:
                    97:23:48:25:fc:50:b9:f3:93:b6:fc:9b:0f:ff:10:
                    e0:40:01:16:9f:42:85:2f:78:da:1d:3c:86:9b:3b:
                    43:a3:85:24:32:fd:22:7a:6a:62:ae:5e:92:ad:18:
                    d6:91:38:ab:d7:fb:e1:36:0d:df:54:c7:0b:4e:44:
                    76:81:13:2b:bc:d5:ef:9d:cc:7e:8a:33:c4:30:5d:
                    b4:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:11:18:19:48:1C:94:93:44:D7:3E:AE:AE:3E:B1:EF:68:5A:C7:BF
            X509v3 Authority Key Identifier:
                keyid:D6:FA:30:44:77:B2:82:D0:6D:A8:53:CA:15:1F:F1:5F:E4:EA:7B:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4XopuNYA2NUaPnn15rcj4LyQy9Gw9xktbGXmRySmAqZE/1/D6FA304477B282D06DA853CA151FF15FE4EA7B9C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D6FA304477B282D06DA853CA151FF15FE4EA7B9C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4XopuNYA2NUaPnn15rcj4LyQy9Gw9xktbGXmRySmAqZE/1/3139322e3134312e3131332e302f32342d3234203d3e20323637343633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.141.113.0/24

    Signature Algorithm: sha256WithRSAEncryption
         22:8d:db:af:47:11:0b:ea:ae:e8:08:fc:4d:cd:a9:e1:a7:26:
         05:26:79:74:9a:51:98:5d:a9:85:2a:7e:87:db:ff:0b:98:31:
         85:a0:25:ee:4c:86:f3:89:c6:14:3b:1b:89:ee:ba:42:24:bd:
         24:6c:a6:96:61:47:b3:0d:30:40:95:4e:30:6d:2b:6a:cf:df:
         a5:7d:9c:cf:92:cd:4f:1b:64:fd:ef:40:c0:7e:0d:53:65:ea:
         c5:20:10:70:bb:4f:4d:f7:ed:1f:19:42:ee:ad:5c:5a:ed:fc:
         54:25:9f:bf:f6:46:12:b5:64:92:60:3d:88:34:0b:27:63:5a:
         36:71:b0:ba:04:18:17:20:bb:c1:8a:42:cb:72:49:9f:12:79:
         bd:0e:05:c3:89:4f:de:c2:23:65:26:a2:3e:34:77:12:bb:ec:
         8e:3a:0d:07:dc:37:cd:b2:9f:29:8b:15:2a:be:64:e0:7f:d1:
         47:46:02:13:d7:8e:d0:6e:f0:3e:82:5b:04:a3:6f:b5:25:21:
         0e:81:14:fd:67:92:db:ea:a7:8d:cf:5e:77:20:45:d2:5f:6c:
         17:8a:36:a7:c4:62:59:59:fa:78:2a:8c:44:68:85:c0:32:52:
         84:f0:a2:2a:4c:08:f1:a3:4c:8a:fd:e1:a3:0f:71:a7:08:f6:
         c7:de:0a:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:09:57 2024 by rpki-client on console-ams.rpki-client.org