Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5ewxmo2DNXG6RxgwRgRAjCNBnhqGTN6E49UJXodA2r58/0/3139312e372e31392e302f32342d3234203d3e20323632343835.roa
File:                     3139312e372e31392e302f32342d3234203d3e20323632343835.roa (raw, json)
Hash identifier:          wBkpIFZFSAY9yfe8u6dW3V/P7yXSbrs2TUr8cFEck7s=
Subject key identifier:   EA:81:4F:58:4D:25:C7:0D:10:44:84:5C:7F:51:81:5E:7D:3C:74:F9
Certificate issuer:       /CN=4774D086E10F29F42B699F993DE4061E0FDF8862
Certificate serial:       5593485B83D746D9D3033C1C73BCFD90DE898C8F
Authority key identifier: 47:74:D0:86:E1:0F:29:F4:2B:69:9F:99:3D:E4:06:1E:0F:DF:88:62
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4774D086E10F29F42B699F993DE4061E0FDF8862.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5ewxmo2DNXG6RxgwRgRAjCNBnhqGTN6E49UJXodA2r58/0/3139312e372e31392e302f32342d3234203d3e20323632343835.roa
Signing time:             Sat 27 Jul 2024 21:13:21 +0000
ROA not before:           Sat 27 Jul 2024 21:08:21 +0000
ROA not after:            Sat 26 Jul 2025 21:13:21 +0000
asID:                     262485
IP address blocks:        191.7.19.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5ewxmo2DNXG6RxgwRgRAjCNBnhqGTN6E49UJXodA2r58/0/4774D086E10F29F42B699F993DE4061E0FDF8862.crl
                          rsync://rpki-repo.registro.br/repo/5ewxmo2DNXG6RxgwRgRAjCNBnhqGTN6E49UJXodA2r58/0/4774D086E10F29F42B699F993DE4061E0FDF8862.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4774D086E10F29F42B699F993DE4061E0FDF8862.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 17 Feb 2025 08:28:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:93:48:5b:83:d7:46:d9:d3:03:3c:1c:73:bc:fd:90:de:89:8c:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4774D086E10F29F42B699F993DE4061E0FDF8862
        Validity
            Not Before: Jul 27 21:08:21 2024 GMT
            Not After : Jul 26 21:13:21 2025 GMT
        Subject: CN=EA814F584D25C70D1044845C7F51815E7D3C74F9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:e3:b5:4f:2f:cc:b8:d4:a7:c6:a3:6a:96:dd:
                    60:35:9c:83:f2:91:8d:93:d9:fa:a3:46:92:e5:e6:
                    bb:22:db:97:ee:24:ec:44:14:de:b3:b6:f5:fb:ba:
                    5f:17:f4:ca:24:b5:72:a4:fb:8c:cf:49:91:56:4f:
                    ce:00:ce:86:33:6f:c6:49:ef:a8:c5:03:b2:4c:8b:
                    03:1e:73:46:b6:2a:3c:1c:63:88:af:69:12:13:18:
                    99:1f:7f:e2:3f:46:2f:32:a6:cf:34:3e:90:37:d0:
                    36:84:df:80:67:0d:66:9a:20:6a:e1:2d:0b:8c:9c:
                    63:4f:cf:56:f1:82:f6:cd:0e:60:aa:a2:4c:24:5a:
                    a8:43:b9:b9:9f:a9:c9:42:a4:b7:03:d3:e5:9d:0d:
                    76:11:d9:6d:df:e2:37:0e:00:28:cc:15:bc:9f:3c:
                    78:12:f2:b9:d6:18:d3:14:97:3a:b8:12:3e:38:f7:
                    f2:36:2a:2e:66:0b:ca:92:0b:99:05:9e:a8:e1:7c:
                    4c:bd:39:de:ed:fd:0a:88:02:43:04:99:0b:20:0c:
                    f7:aa:38:e6:8a:ae:9b:4e:26:5a:56:86:f5:2a:fa:
                    2b:13:12:cb:19:2f:7e:9d:26:97:e7:b5:d1:1e:07:
                    5c:15:28:31:1c:ec:1a:c1:1b:b6:ab:05:4f:a5:a9:
                    bd:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:81:4F:58:4D:25:C7:0D:10:44:84:5C:7F:51:81:5E:7D:3C:74:F9
            X509v3 Authority Key Identifier:
                keyid:47:74:D0:86:E1:0F:29:F4:2B:69:9F:99:3D:E4:06:1E:0F:DF:88:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5ewxmo2DNXG6RxgwRgRAjCNBnhqGTN6E49UJXodA2r58/0/4774D086E10F29F42B699F993DE4061E0FDF8862.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4774D086E10F29F42B699F993DE4061E0FDF8862.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5ewxmo2DNXG6RxgwRgRAjCNBnhqGTN6E49UJXodA2r58/0/3139312e372e31392e302f32342d3234203d3e20323632343835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.7.19.0/24

    Signature Algorithm: sha256WithRSAEncryption
         61:90:6f:9a:27:b8:d1:a4:2e:05:c3:89:a8:d8:20:56:62:ec:
         38:02:5b:fc:7d:3b:56:0a:49:e0:92:f9:d1:e1:34:3c:8d:d0:
         9c:b8:41:e9:5d:b7:41:96:14:94:11:a9:b7:44:10:1b:d1:8f:
         81:ca:e5:d4:09:a9:a4:79:70:d6:b6:36:a3:ae:46:bf:a8:14:
         4e:0a:24:18:57:39:ca:e7:d7:4e:33:d3:f2:9b:de:ed:1e:d5:
         5d:c4:35:4a:66:c9:cc:5c:24:f9:6a:df:ef:66:ae:c6:82:45:
         48:56:81:6b:b5:59:3d:ec:8d:3f:58:a9:7e:7d:3c:0e:5f:05:
         bd:d1:94:05:0a:83:b6:b9:7a:87:9b:96:e3:66:f5:14:27:ff:
         83:1f:94:75:74:54:18:ce:3e:a3:d6:c7:19:d9:ab:94:e0:6e:
         a0:fa:45:40:88:fd:e1:00:e4:2a:37:40:63:f3:59:62:4a:62:
         a3:eb:29:bf:a3:cd:e1:c1:97:14:83:22:9e:30:b1:d4:38:e3:
         ea:16:c8:fa:32:fb:9f:23:60:dd:c9:c2:26:24:c2:a2:85:10:
         ac:56:c4:fd:42:0e:b6:74:3b:e0:38:3f:80:74:36:cc:51:7c:
         86:75:5a:d3:5d:69:4a:96:30:4c:c3:7d:e6:22:a8:2f:ad:3a:
         dc:85:e9:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:21:39 2025 by rpki-client