Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5ewxmo2DNXG6RxgwRgRAjCNBnhqGTN6E49UJXodA2r58/0/3139312e372e31372e302f32342d3234203d3e20323632343835.roa
File:                     3139312e372e31372e302f32342d3234203d3e20323632343835.roa (raw, json)
Hash identifier:          qNu1QS7LpciYB/9NFO4d0k1Ki6tnM6I25rHziy9Y6f0=
Subject key identifier:   EC:A9:40:85:87:A5:34:65:FB:FC:03:0B:5E:9A:FA:1E:70:46:96:1C
Certificate issuer:       /CN=4774D086E10F29F42B699F993DE4061E0FDF8862
Certificate serial:       73417D7DC9FB9D50D9E9CC1714EEA30F4C0A5016
Authority key identifier: 47:74:D0:86:E1:0F:29:F4:2B:69:9F:99:3D:E4:06:1E:0F:DF:88:62
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4774D086E10F29F42B699F993DE4061E0FDF8862.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5ewxmo2DNXG6RxgwRgRAjCNBnhqGTN6E49UJXodA2r58/0/3139312e372e31372e302f32342d3234203d3e20323632343835.roa
Signing time:             Sat 27 Jul 2024 21:13:25 +0000
ROA not before:           Sat 27 Jul 2024 21:08:25 +0000
ROA not after:            Sat 26 Jul 2025 21:13:25 +0000
asID:                     262485
IP address blocks:        191.7.17.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5ewxmo2DNXG6RxgwRgRAjCNBnhqGTN6E49UJXodA2r58/0/4774D086E10F29F42B699F993DE4061E0FDF8862.crl
                          rsync://rpki-repo.registro.br/repo/5ewxmo2DNXG6RxgwRgRAjCNBnhqGTN6E49UJXodA2r58/0/4774D086E10F29F42B699F993DE4061E0FDF8862.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4774D086E10F29F42B699F993DE4061E0FDF8862.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 01:27:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:41:7d:7d:c9:fb:9d:50:d9:e9:cc:17:14:ee:a3:0f:4c:0a:50:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4774D086E10F29F42B699F993DE4061E0FDF8862
        Validity
            Not Before: Jul 27 21:08:25 2024 GMT
            Not After : Jul 26 21:13:25 2025 GMT
        Subject: CN=ECA9408587A53465FBFC030B5E9AFA1E7046961C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:ce:d7:05:02:29:d8:a6:a8:e0:b0:78:c1:c6:
                    b8:78:dc:0c:bd:6c:6b:52:c2:59:fe:73:70:fc:c2:
                    86:f2:1a:9a:c5:63:af:70:c0:96:ae:cc:1e:b5:90:
                    50:cc:90:4c:54:79:e2:d8:2f:0e:74:d6:a7:8a:95:
                    83:58:9a:43:ca:95:9e:76:72:7b:d7:9b:0c:b8:48:
                    59:cc:ab:08:69:fe:bd:07:30:41:5c:07:b3:24:44:
                    9a:06:a9:71:2e:15:cd:ac:f6:a0:9d:f7:7b:56:c4:
                    3c:dd:40:25:1a:0e:73:54:94:ef:2c:2c:98:9d:01:
                    f4:21:93:4b:4a:a0:e6:7f:fe:ea:7b:2d:57:01:93:
                    ae:54:dc:e4:8f:a6:d8:99:16:73:f0:9b:a6:80:aa:
                    cf:2a:a4:11:25:c3:67:50:c0:88:77:d2:40:e2:20:
                    67:ab:da:f9:9d:5b:28:dc:c1:dc:1b:10:5c:ad:d5:
                    27:c0:2a:dd:66:f7:d4:6e:71:50:98:71:7c:94:76:
                    2c:9e:f1:35:94:81:b6:c2:8c:72:40:54:6d:11:1b:
                    fd:2e:6c:f8:2b:64:e0:f5:84:8b:8b:ec:d7:80:d2:
                    a3:bd:6e:ef:dc:86:b8:04:11:ba:00:51:cb:32:3f:
                    8d:8a:c2:40:59:88:72:7e:f8:ca:0a:38:71:46:05:
                    46:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:A9:40:85:87:A5:34:65:FB:FC:03:0B:5E:9A:FA:1E:70:46:96:1C
            X509v3 Authority Key Identifier:
                keyid:47:74:D0:86:E1:0F:29:F4:2B:69:9F:99:3D:E4:06:1E:0F:DF:88:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5ewxmo2DNXG6RxgwRgRAjCNBnhqGTN6E49UJXodA2r58/0/4774D086E10F29F42B699F993DE4061E0FDF8862.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4774D086E10F29F42B699F993DE4061E0FDF8862.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5ewxmo2DNXG6RxgwRgRAjCNBnhqGTN6E49UJXodA2r58/0/3139312e372e31372e302f32342d3234203d3e20323632343835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.7.17.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6c:1e:39:98:3d:db:92:7c:0e:9c:da:9f:7a:1f:a7:d1:3e:98:
         6f:54:9a:7e:00:97:ed:eb:68:66:7a:0f:c7:21:9f:2d:07:da:
         ba:28:9c:81:65:96:78:67:8a:fd:a2:81:3a:62:37:e1:3c:b1:
         41:5d:aa:5e:65:8c:7f:36:c5:f0:55:b1:e5:72:a8:5c:10:ce:
         72:76:3b:08:de:6b:70:5b:fc:b9:7c:e6:20:f6:32:cd:40:61:
         27:c7:44:61:cb:4f:2a:ff:d6:0f:ff:68:1f:f5:30:50:14:a9:
         ae:1a:ef:0e:51:d1:fb:f4:c5:b8:cb:f7:30:ef:8e:08:23:5c:
         49:98:cc:79:97:83:a3:87:fd:82:58:1c:a0:7d:17:8b:5d:7d:
         b4:17:4e:cb:8e:c0:ae:60:ff:4e:e2:6a:04:f6:1b:b2:f6:2f:
         e3:7e:51:3c:b0:e6:fc:39:76:26:72:9b:3e:04:d6:b0:f2:52:
         49:03:d1:b5:26:07:96:61:dd:1f:ef:e1:24:d8:ec:1b:b6:d1:
         1f:dc:cb:3c:60:6d:20:8e:6a:01:9c:c6:d0:5e:f9:00:4f:ba:
         99:99:6a:72:3f:97:9b:ed:84:eb:b3:9a:64:f2:d6:24:33:f1:
         32:7a:ca:06:ea:72:86:38:90:fc:96:90:26:26:e7:41:13:45:
         57:e7:05:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:06:04 2024 by rpki-client on console-fra.rpki-client.org