Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4o414r8kJZihQDCtpLjHERmPjcyjpxPUywaRh9ehcPJX/0/3139312e3234332e382e302f32322d3234203d3e203631393030.roa
File:                     3139312e3234332e382e302f32322d3234203d3e203631393030.roa (raw, json)
Hash identifier:          o2MipD333TbmhzNUFAk72Qr6tup/JXwu48OkQxtmvLM=
Subject key identifier:   34:D3:99:EA:C8:F8:C2:62:98:0B:2F:EA:FE:5B:EC:FA:C1:76:73:8E
Certificate issuer:       /CN=0044F546621F1EBF7CBF849F4FEDA8E8C16D1E9A
Certificate serial:       16E0D6BC59101D7778BC6BD4F09EE3D4C277A2B0
Authority key identifier: 00:44:F5:46:62:1F:1E:BF:7C:BF:84:9F:4F:ED:A8:E8:C1:6D:1E:9A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0044F546621F1EBF7CBF849F4FEDA8E8C16D1E9A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4o414r8kJZihQDCtpLjHERmPjcyjpxPUywaRh9ehcPJX/0/3139312e3234332e382e302f32322d3234203d3e203631393030.roa
Signing time:             Mon 07 Oct 2024 19:22:47 +0000
ROA not before:           Mon 07 Oct 2024 19:17:47 +0000
ROA not after:            Mon 06 Oct 2025 19:22:47 +0000
asID:                     61900
IP address blocks:        191.243.8.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4o414r8kJZihQDCtpLjHERmPjcyjpxPUywaRh9ehcPJX/0/0044F546621F1EBF7CBF849F4FEDA8E8C16D1E9A.crl
                          rsync://rpki-repo.registro.br/repo/4o414r8kJZihQDCtpLjHERmPjcyjpxPUywaRh9ehcPJX/0/0044F546621F1EBF7CBF849F4FEDA8E8C16D1E9A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0044F546621F1EBF7CBF849F4FEDA8E8C16D1E9A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 22:33:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:e0:d6:bc:59:10:1d:77:78:bc:6b:d4:f0:9e:e3:d4:c2:77:a2:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0044F546621F1EBF7CBF849F4FEDA8E8C16D1E9A
        Validity
            Not Before: Oct  7 19:17:47 2024 GMT
            Not After : Oct  6 19:22:47 2025 GMT
        Subject: CN=34D399EAC8F8C262980B2FEAFE5BECFAC176738E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:ef:3c:a7:a1:dd:73:55:fa:cf:f6:4b:a5:1d:
                    5e:63:ed:6b:b0:b8:2f:49:ae:15:a0:ff:ad:5e:a6:
                    c0:6d:b6:bc:dc:14:80:24:4f:17:98:5f:65:95:e8:
                    ba:01:ad:f2:97:b8:5b:93:37:36:41:09:60:5c:6f:
                    6c:22:ce:82:97:8c:1d:d2:5a:ba:21:c8:7c:de:02:
                    f3:00:b9:c9:4d:66:6f:73:59:ef:1b:95:42:c4:df:
                    c3:69:04:94:de:db:be:b6:e8:76:1d:e9:b9:f4:f4:
                    49:cc:56:d0:2d:f2:ee:51:03:88:ee:74:52:c3:f2:
                    04:09:2b:43:f5:54:d8:45:7d:87:65:ef:95:e6:17:
                    f3:fe:f1:3f:8a:6f:d3:29:a1:d1:06:10:96:13:8d:
                    cc:39:b2:06:14:5c:ea:b7:f4:f8:30:10:53:85:d9:
                    f7:7e:6d:1b:be:ac:41:88:1d:5b:24:6b:7e:34:84:
                    d6:1c:91:d0:04:f2:09:51:e3:6b:e3:c1:72:64:58:
                    67:8d:b6:6d:58:cd:36:85:fa:9c:17:6b:e3:7a:e8:
                    d2:7d:11:9f:b6:9b:a0:9a:64:46:11:8a:df:b7:e5:
                    95:4c:cc:02:72:b9:ae:74:ef:bf:f8:bd:65:7e:3e:
                    03:55:d9:72:e1:39:83:c9:4f:f7:fa:b9:73:3e:36:
                    ec:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:D3:99:EA:C8:F8:C2:62:98:0B:2F:EA:FE:5B:EC:FA:C1:76:73:8E
            X509v3 Authority Key Identifier:
                keyid:00:44:F5:46:62:1F:1E:BF:7C:BF:84:9F:4F:ED:A8:E8:C1:6D:1E:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4o414r8kJZihQDCtpLjHERmPjcyjpxPUywaRh9ehcPJX/0/0044F546621F1EBF7CBF849F4FEDA8E8C16D1E9A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0044F546621F1EBF7CBF849F4FEDA8E8C16D1E9A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4o414r8kJZihQDCtpLjHERmPjcyjpxPUywaRh9ehcPJX/0/3139312e3234332e382e302f32322d3234203d3e203631393030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.243.8.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3d:51:e3:66:88:4d:63:47:e1:f4:e9:9c:c0:23:44:a4:81:ce:
         e8:e6:7f:da:6b:ce:44:9b:d4:d0:29:2d:7c:a9:74:30:d5:dc:
         23:3d:bc:8d:f0:0d:49:1a:c6:d2:2b:03:05:19:e8:52:bd:30:
         7a:2b:77:b6:b9:1d:00:26:4f:ef:0e:92:d7:ee:04:68:57:c9:
         28:6d:4c:fc:05:d9:77:1e:73:6c:6f:dc:86:21:fd:16:b0:e8:
         d7:11:11:e3:84:14:83:e4:af:8e:b7:0b:67:2d:65:f4:f4:be:
         8f:a3:76:86:fb:4e:19:f9:74:33:08:9e:33:99:07:e5:42:68:
         87:ec:d8:33:e0:33:90:59:65:a1:bf:f0:1f:e4:2a:05:8e:fc:
         cb:a5:37:51:d9:9c:85:de:c7:58:d0:3f:39:ff:5f:c5:30:85:
         d7:70:c9:bc:3c:de:1f:be:fd:60:df:97:f3:e8:8c:79:28:2c:
         35:3b:d2:fe:6b:51:7f:35:d0:ef:7f:24:4f:2e:80:6e:9c:62:
         52:7c:9f:81:c6:ed:e5:d0:02:91:d2:41:ee:53:6b:49:80:76:
         48:5f:8d:f9:52:95:71:ba:a8:81:71:4c:a3:bc:bd:91:01:36:
         5d:4c:b4:e1:7f:c4:77:e7:f9:6d:97:85:39:93:66:48:ba:3a:
         1f:89:02:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 23:58:51 2024 by rpki-client on console-fra.rpki-client.org