Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4sRS7Q4Meq9bNtq9RNbRGXfYSEKz6myEMPRabdKLoyPt/0/3139312e3234332e3232342e302f32302d3234203d3e20323633353137.roa
File:                     3139312e3234332e3232342e302f32302d3234203d3e20323633353137.roa (raw, json)
Hash identifier:          qnTtVUD3MCCbJ3+p3H8YhwUfiDuoj7RyprxZ2LpiU8Q=
Subject key identifier:   C0:29:C3:47:54:DE:5A:B6:15:84:51:C7:6F:1E:AB:AD:2C:A3:5C:52
Certificate issuer:       /CN=C00FB53F604F018C47E70501EB1D8A1047AE4DB1
Certificate serial:       5B6D118CB2A67AE3BC0DE0ACE2D825797A53E1C6
Authority key identifier: C0:0F:B5:3F:60:4F:01:8C:47:E7:05:01:EB:1D:8A:10:47:AE:4D:B1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C00FB53F604F018C47E70501EB1D8A1047AE4DB1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4sRS7Q4Meq9bNtq9RNbRGXfYSEKz6myEMPRabdKLoyPt/0/3139312e3234332e3232342e302f32302d3234203d3e20323633353137.roa
Signing time:             Mon 29 Jul 2024 15:14:49 +0000
ROA not before:           Mon 29 Jul 2024 15:09:49 +0000
ROA not after:            Mon 28 Jul 2025 15:14:49 +0000
asID:                     263517
IP address blocks:        191.243.224.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4sRS7Q4Meq9bNtq9RNbRGXfYSEKz6myEMPRabdKLoyPt/0/C00FB53F604F018C47E70501EB1D8A1047AE4DB1.crl
                          rsync://rpki-repo.registro.br/repo/4sRS7Q4Meq9bNtq9RNbRGXfYSEKz6myEMPRabdKLoyPt/0/C00FB53F604F018C47E70501EB1D8A1047AE4DB1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C00FB53F604F018C47E70501EB1D8A1047AE4DB1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:6d:11:8c:b2:a6:7a:e3:bc:0d:e0:ac:e2:d8:25:79:7a:53:e1:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C00FB53F604F018C47E70501EB1D8A1047AE4DB1
        Validity
            Not Before: Jul 29 15:09:49 2024 GMT
            Not After : Jul 28 15:14:49 2025 GMT
        Subject: CN=C029C34754DE5AB6158451C76F1EABAD2CA35C52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:60:48:38:ee:14:47:5d:ef:83:da:7b:af:86:
                    60:75:a0:e4:26:a6:e3:6b:b3:56:df:78:e8:0b:b4:
                    48:f4:7e:2c:fb:af:84:6f:9c:3f:fa:45:06:4e:a8:
                    e1:e5:e9:2b:fe:4c:b1:99:1e:5c:77:8c:57:a7:5b:
                    ef:1c:34:79:3b:c0:a9:99:4a:fa:f3:32:aa:7b:f4:
                    d0:c1:05:2e:a6:f2:14:37:b5:08:44:5d:4c:32:f0:
                    ac:bf:2e:90:74:94:a6:b4:8f:6e:76:09:dc:96:47:
                    6c:8b:5b:9f:98:12:16:ea:f2:a1:aa:b9:4b:1c:28:
                    c5:66:ad:e8:f6:36:8b:29:99:83:11:79:48:5a:13:
                    a6:74:7b:77:b9:e1:6a:6a:11:94:82:41:35:1c:81:
                    60:bb:47:63:3d:db:44:2c:ed:58:93:b6:1a:21:c4:
                    6b:ef:33:2e:7c:bc:b7:24:ef:d7:32:53:e7:df:5c:
                    bd:22:fd:54:6a:ec:48:b4:24:be:d4:7c:8e:fd:92:
                    af:31:b2:9a:16:b5:c1:ad:d3:8a:bf:e5:6b:de:48:
                    ee:2d:08:3a:c3:61:41:6f:d2:b7:36:5b:91:6e:bc:
                    c4:9c:38:c4:80:ca:10:12:a8:39:ba:70:56:80:34:
                    da:12:5e:58:87:6f:06:de:a3:93:0d:e4:5d:5e:41:
                    bb:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:29:C3:47:54:DE:5A:B6:15:84:51:C7:6F:1E:AB:AD:2C:A3:5C:52
            X509v3 Authority Key Identifier:
                keyid:C0:0F:B5:3F:60:4F:01:8C:47:E7:05:01:EB:1D:8A:10:47:AE:4D:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4sRS7Q4Meq9bNtq9RNbRGXfYSEKz6myEMPRabdKLoyPt/0/C00FB53F604F018C47E70501EB1D8A1047AE4DB1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C00FB53F604F018C47E70501EB1D8A1047AE4DB1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4sRS7Q4Meq9bNtq9RNbRGXfYSEKz6myEMPRabdKLoyPt/0/3139312e3234332e3232342e302f32302d3234203d3e20323633353137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.243.224.0/20

    Signature Algorithm: sha256WithRSAEncryption
         6d:32:dd:1c:3f:7a:a9:b4:48:17:1a:6c:a5:02:0a:4d:02:4a:
         10:7e:07:89:65:41:f8:f4:b6:7f:0e:17:76:f9:f6:1c:ab:c6:
         6c:e5:a1:f7:cc:b1:2c:b3:84:44:f4:c4:78:01:fc:31:84:62:
         f0:39:28:b9:2a:2c:e3:41:29:ff:f3:ce:bc:4d:95:b3:f8:1c:
         36:73:30:ac:78:01:30:25:7b:de:fa:99:79:da:8a:47:04:a0:
         6e:76:4e:bc:e0:8f:5a:b4:9b:9c:b8:53:48:87:e5:b4:32:91:
         ab:5d:2f:d7:1b:80:34:f6:81:c3:87:e5:86:5d:84:a8:cc:cb:
         18:26:52:ce:71:ca:88:9b:fd:35:86:4c:e1:bf:d8:82:2c:8a:
         57:ad:7d:e1:07:0b:21:f2:36:d6:ff:3c:51:54:26:36:9d:95:
         93:42:e5:48:c4:08:64:ee:29:72:5d:d3:6c:e9:df:dc:98:ad:
         d1:cf:2a:10:ec:4b:f0:bd:43:0b:58:e1:d5:bb:8e:96:bb:3e:
         25:9b:91:11:39:b6:d0:48:38:11:9d:71:e5:a1:d6:08:ae:ee:
         be:4c:11:81:98:8d:3c:e6:1e:12:dc:f0:12:f1:69:3f:8f:2f:
         1f:84:b2:b5:c4:65:89:be:fe:e8:69:12:1f:a5:d8:7f:5d:ab:
         35:06:46:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 12:36:31 2024 by rpki-client on console-ams.rpki-client.org