Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4miZnQ5GuFBVhvobBhcfY7aR9Gn12saHsSjgTuS5byFy/0/3139312e3235332e36342e302f32322d3234203d3e20323633353238.roa
File:                     3139312e3235332e36342e302f32322d3234203d3e20323633353238.roa (raw, json)
Hash identifier:          QFeGo9z+xnDn9TfvQo7+CzLYmFi4mQOMZ53KXPIhFAs=
Subject key identifier:   7C:70:02:37:E0:64:0F:95:04:44:F2:1E:D0:91:1D:85:3D:CA:0E:E7
Certificate issuer:       /CN=33D99B8EAE1AB8BEE4198B87031CFE8FEDBE7780
Certificate serial:       66558167E81CC437766F75E6C4C9AFF9C3C07335
Authority key identifier: 33:D9:9B:8E:AE:1A:B8:BE:E4:19:8B:87:03:1C:FE:8F:ED:BE:77:80
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/33D99B8EAE1AB8BEE4198B87031CFE8FEDBE7780.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4miZnQ5GuFBVhvobBhcfY7aR9Gn12saHsSjgTuS5byFy/0/3139312e3235332e36342e302f32322d3234203d3e20323633353238.roa
Signing time:             Wed 05 Jun 2024 19:16:45 +0000
ROA not before:           Wed 05 Jun 2024 19:11:45 +0000
ROA not after:            Wed 04 Jun 2025 19:16:45 +0000
asID:                     263528
IP address blocks:        191.253.64.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4miZnQ5GuFBVhvobBhcfY7aR9Gn12saHsSjgTuS5byFy/0/33D99B8EAE1AB8BEE4198B87031CFE8FEDBE7780.crl
                          rsync://rpki-repo.registro.br/repo/4miZnQ5GuFBVhvobBhcfY7aR9Gn12saHsSjgTuS5byFy/0/33D99B8EAE1AB8BEE4198B87031CFE8FEDBE7780.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/33D99B8EAE1AB8BEE4198B87031CFE8FEDBE7780.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 16:05:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:55:81:67:e8:1c:c4:37:76:6f:75:e6:c4:c9:af:f9:c3:c0:73:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33D99B8EAE1AB8BEE4198B87031CFE8FEDBE7780
        Validity
            Not Before: Jun  5 19:11:45 2024 GMT
            Not After : Jun  4 19:16:45 2025 GMT
        Subject: CN=7C700237E0640F950444F21ED0911D853DCA0EE7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:09:8b:f8:10:66:82:0f:8c:24:55:89:f7:3d:
                    8a:20:fa:21:e5:02:23:58:34:29:e3:26:2d:34:49:
                    8b:3d:93:a5:24:66:5e:2a:29:43:71:f7:81:c3:bb:
                    a6:d3:a5:8c:9e:91:37:83:19:b0:47:be:cc:05:8a:
                    40:d3:d6:c6:6a:c1:97:2f:23:f3:93:a6:d6:77:c1:
                    76:29:42:99:63:b6:4f:8a:6a:91:06:42:d7:74:eb:
                    09:2b:7b:ce:8a:20:63:f3:45:a0:e9:fe:a6:74:96:
                    09:82:36:59:be:b0:0a:30:90:f0:58:9b:f5:95:e4:
                    7e:e3:3e:a7:d8:dc:61:0b:05:a3:80:75:4f:06:24:
                    2b:aa:47:90:9f:f2:ce:08:05:98:84:33:19:1d:23:
                    49:13:8e:be:a9:0c:9f:7c:6a:e7:1e:fc:c0:3b:49:
                    25:da:8c:0e:25:a2:6e:2f:81:31:e2:26:6b:be:da:
                    da:ca:a7:08:a9:06:22:f5:fc:21:93:ca:1e:45:9e:
                    cb:f2:4d:f9:00:21:87:2f:8d:48:7c:36:60:f4:e2:
                    b5:e4:af:a0:13:b2:27:47:ed:3a:0f:76:68:b4:70:
                    de:12:ac:b1:97:de:d7:24:68:c2:09:04:9e:51:62:
                    0a:fa:aa:b7:e0:14:c0:fa:ad:db:43:20:04:1c:8e:
                    d3:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:70:02:37:E0:64:0F:95:04:44:F2:1E:D0:91:1D:85:3D:CA:0E:E7
            X509v3 Authority Key Identifier:
                keyid:33:D9:9B:8E:AE:1A:B8:BE:E4:19:8B:87:03:1C:FE:8F:ED:BE:77:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4miZnQ5GuFBVhvobBhcfY7aR9Gn12saHsSjgTuS5byFy/0/33D99B8EAE1AB8BEE4198B87031CFE8FEDBE7780.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/33D99B8EAE1AB8BEE4198B87031CFE8FEDBE7780.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4miZnQ5GuFBVhvobBhcfY7aR9Gn12saHsSjgTuS5byFy/0/3139312e3235332e36342e302f32322d3234203d3e20323633353238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.253.64.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8c:7e:0f:a3:6c:8b:e3:7e:3b:d5:c1:26:56:15:fe:18:0c:a8:
         00:01:d3:94:40:14:16:03:fc:9b:27:3c:ad:77:89:20:dd:9c:
         70:e4:2a:5c:67:77:e2:24:43:30:ce:b2:ca:eb:40:68:6d:78:
         dd:15:d6:ec:6b:42:1d:f2:79:f7:9d:bc:69:b2:79:60:a2:ca:
         8b:84:a6:5e:3d:28:67:d8:a8:c5:ad:d6:2e:c7:38:d1:d2:f5:
         99:8e:d7:02:d1:70:1f:3a:51:ff:2c:6e:e7:1c:32:50:fc:a5:
         29:e4:4a:9d:11:e5:b4:3a:3c:5f:85:2e:ad:82:82:14:f7:61:
         d7:69:73:1d:bd:a2:fe:a7:62:96:c0:fd:8e:98:56:29:1a:3d:
         f6:a1:b2:f4:82:d0:ad:c3:95:54:86:14:f0:61:5e:3f:ec:da:
         80:6e:3e:e2:f1:ce:69:55:fb:9b:6e:89:8e:fd:67:e2:10:10:
         ef:84:83:1a:db:71:2d:70:69:a6:85:36:5d:fb:2c:db:c6:1f:
         8a:99:0b:fa:1c:32:1b:0d:ee:fa:42:58:d1:8e:51:c3:c2:5d:
         6d:a9:5a:3b:dc:56:a9:97:1c:3c:15:1c:69:c5:6c:0f:fa:93:
         4d:ac:3e:84:6f:cf:a9:bf:13:79:d2:c4:1c:3d:d6:49:b8:47:
         32:2b:5c:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 15:49:49 2024 by rpki-client on console-ams.rpki-client.org