Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5Es261YjqWbPGUu6zHG7g8voXciw9C55LKm5mJv5AGpj/0/3139312e3234302e3137362e302f32302d3332203d3e20323632393031.roa
File:                     3139312e3234302e3137362e302f32302d3332203d3e20323632393031.roa (raw, json)
Hash identifier:          P6DE49PVQ1wlWBO1q6hluK4705k5d7/MPJchHKvd2go=
Subject key identifier:   40:1D:11:91:8F:96:E5:44:DE:B8:C7:3C:91:8B:90:D3:0C:54:F7:D4
Certificate issuer:       /CN=E792BDE63D5999B942575841C2AF8D944B3B4BE2
Certificate serial:       3EA3319A9A5200A65E4F3F5FBAB7332EDA59FC21
Authority key identifier: E7:92:BD:E6:3D:59:99:B9:42:57:58:41:C2:AF:8D:94:4B:3B:4B:E2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E792BDE63D5999B942575841C2AF8D944B3B4BE2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5Es261YjqWbPGUu6zHG7g8voXciw9C55LKm5mJv5AGpj/0/3139312e3234302e3137362e302f32302d3332203d3e20323632393031.roa
Signing time:             Thu 26 Sep 2024 14:43:50 +0000
ROA not before:           Thu 26 Sep 2024 14:38:50 +0000
ROA not after:            Thu 25 Sep 2025 14:43:50 +0000
asID:                     262901
IP address blocks:        191.240.176.0/20 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5Es261YjqWbPGUu6zHG7g8voXciw9C55LKm5mJv5AGpj/0/E792BDE63D5999B942575841C2AF8D944B3B4BE2.crl
                          rsync://rpki-repo.registro.br/repo/5Es261YjqWbPGUu6zHG7g8voXciw9C55LKm5mJv5AGpj/0/E792BDE63D5999B942575841C2AF8D944B3B4BE2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E792BDE63D5999B942575841C2AF8D944B3B4BE2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 22 Nov 2024 14:44:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:a3:31:9a:9a:52:00:a6:5e:4f:3f:5f:ba:b7:33:2e:da:59:fc:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E792BDE63D5999B942575841C2AF8D944B3B4BE2
        Validity
            Not Before: Sep 26 14:38:50 2024 GMT
            Not After : Sep 25 14:43:50 2025 GMT
        Subject: CN=401D11918F96E544DEB8C73C918B90D30C54F7D4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:1a:20:2c:39:fa:8c:c0:94:62:2a:de:14:4f:
                    93:e9:03:0a:a3:c0:1e:df:db:2b:51:29:5e:a1:36:
                    d9:05:29:92:bf:0c:4b:22:e2:6f:f0:c8:06:70:4d:
                    90:ee:5f:22:00:8b:bb:ab:3c:ab:65:31:e1:17:eb:
                    41:7a:71:24:c4:ef:aa:e3:66:8d:a4:9b:38:7f:9c:
                    28:01:5c:18:2a:06:b9:ec:b6:51:94:49:d3:90:ae:
                    5d:6f:94:82:cc:d3:f2:2e:7c:cf:e4:00:5e:78:6a:
                    e9:eb:5c:8b:e8:37:78:3b:65:20:61:f1:fd:bd:66:
                    47:16:96:d1:43:eb:5d:4a:b0:d7:36:01:45:5e:1d:
                    a4:26:f1:82:ee:51:4a:db:1b:4e:07:79:dd:0e:f9:
                    b2:b0:d4:56:79:28:47:07:37:ac:5a:6b:aa:12:8c:
                    d0:0e:3b:ff:1d:74:69:30:73:66:3f:19:19:ce:ae:
                    56:cb:f9:7b:89:ac:b7:e0:b6:22:a2:33:28:7a:c5:
                    88:71:62:10:bc:fa:48:0a:d5:d2:cc:59:c2:f4:b3:
                    f9:58:e9:ff:48:40:9a:0a:b3:fd:ee:66:1b:b0:82:
                    84:a1:a3:57:07:fd:77:f3:d7:69:86:5b:6b:f3:65:
                    1f:78:c3:e1:7a:ba:0c:1f:5b:7a:a2:6b:24:89:e0:
                    2b:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:1D:11:91:8F:96:E5:44:DE:B8:C7:3C:91:8B:90:D3:0C:54:F7:D4
            X509v3 Authority Key Identifier:
                keyid:E7:92:BD:E6:3D:59:99:B9:42:57:58:41:C2:AF:8D:94:4B:3B:4B:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5Es261YjqWbPGUu6zHG7g8voXciw9C55LKm5mJv5AGpj/0/E792BDE63D5999B942575841C2AF8D944B3B4BE2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E792BDE63D5999B942575841C2AF8D944B3B4BE2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5Es261YjqWbPGUu6zHG7g8voXciw9C55LKm5mJv5AGpj/0/3139312e3234302e3137362e302f32302d3332203d3e20323632393031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.240.176.0/20

    Signature Algorithm: sha256WithRSAEncryption
         6c:b0:6a:2a:44:43:df:d5:27:cb:7a:b5:62:39:0e:d5:77:80:
         f3:9e:bb:e1:79:39:9d:f4:41:f1:f8:46:ff:a9:73:cf:f3:78:
         3e:46:69:1a:fa:f3:a7:f4:c7:d9:11:63:42:63:72:1c:3a:e2:
         68:cd:07:47:de:fc:ef:33:f1:08:91:71:bd:a3:73:d2:06:9a:
         ec:d0:50:58:48:3f:b9:07:a4:ee:07:6c:db:b7:2c:e2:63:68:
         6c:ff:2e:a9:89:de:08:42:82:70:e0:c1:14:c1:1e:94:a2:b4:
         c5:84:90:fa:cb:71:31:70:5a:dc:46:08:84:3c:e7:47:31:bb:
         9d:ef:8f:d2:10:16:49:c3:1a:46:49:ce:3a:ba:27:84:c8:ee:
         6d:ba:a2:dc:8c:d7:57:db:9d:23:b7:d7:0a:52:98:02:fe:4e:
         4f:59:e1:b8:ee:56:84:0e:d4:b9:5f:66:66:0e:af:bc:db:ab:
         0e:d1:c9:7b:f7:bd:6a:1e:1c:92:5c:91:48:7f:fa:05:9c:d6:
         04:f6:94:42:57:2a:28:c2:01:f9:b6:2f:15:b5:f6:fb:2c:22:
         24:9d:7f:c7:4e:b7:30:02:2d:bf:a2:80:05:28:35:67:70:0a:
         4a:43:f9:66:6f:d3:eb:14:fb:8e:ce:1a:ea:68:bf:c5:42:d2:
         c7:b1:fb:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 13:37:53 2024 by rpki-client on console-ams.rpki-client.org