Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4ipk4eQd9zUucyExLksCYxyK4SqEdvGQsJLLk9MspmFX/0/3139312e372e302e302f32332d3332203d3e20323733343331.roa
File:                     3139312e372e302e302f32332d3332203d3e20323733343331.roa (raw, json)
Hash identifier:          XcxoPOwe/YoeCSg/SLaaXCa+nk98HwV7toBai83moJw=
Subject key identifier:   B4:7E:1C:C7:D4:11:21:DC:66:8B:DA:AE:76:C3:AD:E5:01:21:F5:6A
Certificate issuer:       /CN=A83805AAB0B5A6B033CA8EACFC11FD0673D00DEC
Certificate serial:       6EDBE4CAE95223091614662AEA126DBE9A1AAF24
Authority key identifier: A8:38:05:AA:B0:B5:A6:B0:33:CA:8E:AC:FC:11:FD:06:73:D0:0D:EC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A83805AAB0B5A6B033CA8EACFC11FD0673D00DEC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4ipk4eQd9zUucyExLksCYxyK4SqEdvGQsJLLk9MspmFX/0/3139312e372e302e302f32332d3332203d3e20323733343331.roa
Signing time:             Fri 05 Jul 2024 20:01:46 +0000
ROA not before:           Fri 05 Jul 2024 19:56:46 +0000
ROA not after:            Fri 04 Jul 2025 20:01:46 +0000
asID:                     273431
IP address blocks:        191.7.0.0/23 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4ipk4eQd9zUucyExLksCYxyK4SqEdvGQsJLLk9MspmFX/0/A83805AAB0B5A6B033CA8EACFC11FD0673D00DEC.crl
                          rsync://rpki-repo.registro.br/repo/4ipk4eQd9zUucyExLksCYxyK4SqEdvGQsJLLk9MspmFX/0/A83805AAB0B5A6B033CA8EACFC11FD0673D00DEC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A83805AAB0B5A6B033CA8EACFC11FD0673D00DEC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 14:50:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:db:e4:ca:e9:52:23:09:16:14:66:2a:ea:12:6d:be:9a:1a:af:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A83805AAB0B5A6B033CA8EACFC11FD0673D00DEC
        Validity
            Not Before: Jul  5 19:56:46 2024 GMT
            Not After : Jul  4 20:01:46 2025 GMT
        Subject: CN=B47E1CC7D41121DC668BDAAE76C3ADE50121F56A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:89:47:d4:a5:9a:88:4d:b9:2a:66:fb:5f:c3:
                    07:ee:99:7c:65:33:e2:7c:a9:64:20:8c:78:c1:a5:
                    69:ed:78:bb:c8:52:a0:43:81:14:38:6e:14:62:53:
                    cc:8a:60:56:c1:0c:bc:70:87:c7:77:c8:dd:8f:13:
                    ef:1e:1e:da:63:64:a2:ba:ca:d2:3c:0e:37:86:78:
                    6f:61:bd:0e:56:35:08:1f:26:bf:22:a4:2b:13:4a:
                    33:d2:07:e9:f9:5e:3d:97:11:e3:1d:65:55:3a:e3:
                    ae:9b:b0:e0:fe:83:b0:9f:a5:0a:7a:7f:4d:50:56:
                    60:60:ae:32:47:9d:c8:15:cc:e8:fc:3d:3c:86:37:
                    6c:80:b2:ce:99:8e:01:a0:9a:18:5f:a2:dd:87:c6:
                    41:7b:54:fd:d0:27:ef:80:42:19:72:a4:ad:22:d6:
                    89:ab:7c:9b:b3:80:57:e9:1b:24:61:57:c0:06:e6:
                    6e:56:f4:e9:b3:db:39:f0:ae:6d:1d:63:15:7f:67:
                    18:09:e8:82:fa:d3:c2:27:ab:58:ee:cf:58:77:22:
                    dc:5b:2b:d6:ba:2f:10:03:d2:49:51:36:ad:b5:1f:
                    24:bf:12:d1:7b:a2:f3:57:89:a5:a1:fd:3d:eb:7b:
                    0e:5c:08:1f:5a:27:4d:bd:35:54:09:cb:ef:50:02:
                    d6:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:7E:1C:C7:D4:11:21:DC:66:8B:DA:AE:76:C3:AD:E5:01:21:F5:6A
            X509v3 Authority Key Identifier:
                keyid:A8:38:05:AA:B0:B5:A6:B0:33:CA:8E:AC:FC:11:FD:06:73:D0:0D:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4ipk4eQd9zUucyExLksCYxyK4SqEdvGQsJLLk9MspmFX/0/A83805AAB0B5A6B033CA8EACFC11FD0673D00DEC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A83805AAB0B5A6B033CA8EACFC11FD0673D00DEC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4ipk4eQd9zUucyExLksCYxyK4SqEdvGQsJLLk9MspmFX/0/3139312e372e302e302f32332d3332203d3e20323733343331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.7.0.0/23

    Signature Algorithm: sha256WithRSAEncryption
         13:00:b4:9f:d6:47:53:92:fd:78:49:48:69:2f:24:9e:1c:9e:
         09:e6:8e:07:f9:1e:54:d2:17:9f:4c:72:95:92:e6:f8:d5:91:
         61:cd:72:a1:c3:79:b5:61:e8:ec:5e:3d:3d:67:fd:72:4b:58:
         a9:eb:d9:6d:44:99:57:77:b5:34:ae:59:1b:34:ee:00:bf:31:
         31:b4:80:55:b7:6b:01:89:31:d5:33:60:60:3e:ba:1d:3d:02:
         de:27:1e:57:9b:85:ff:b8:91:f9:24:a5:cc:36:91:2b:95:48:
         a3:9e:cb:e5:8d:f1:0a:52:18:d1:58:b1:a3:b3:77:c0:53:39:
         ba:fe:1a:53:de:49:09:27:38:a5:33:29:f1:92:21:56:23:cc:
         43:d3:23:71:66:ba:6b:38:89:ce:74:7b:e3:ce:63:a5:5d:86:
         33:ab:04:5d:ec:d1:d8:79:fe:41:06:64:08:5f:4f:1c:03:c7:
         9a:16:3c:55:31:3c:9b:6b:ba:d3:68:a4:df:79:b6:7f:0e:9c:
         0b:c1:5c:22:3c:2e:70:05:a5:0f:d2:54:2a:9c:21:f9:9c:57:
         3e:16:23:15:a0:cc:60:0b:bc:fe:0c:c5:e8:e1:49:e8:1e:3c:
         60:b7:f9:1f:13:d6:d2:ad:b0:89:04:86:06:62:32:00:95:5d:
         49:f4:ca:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 17:27:44 2024 by rpki-client on console-fra.rpki-client.org