Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5uENiHDYwVy4DAAeQgxL4nLtsrqnHafPDVw3KYwuwJL5/1/3139312e3234312e3134342e302f32302d3230203d3e20323632373834.roa
File:                     3139312e3234312e3134342e302f32302d3230203d3e20323632373834.roa (raw, json)
Hash identifier:          /GEWznApCdu+srKJvlOuB4IJfOc6QstYHSNbmCgALMU=
Subject key identifier:   50:17:7B:8A:D3:46:37:22:5C:FC:71:FE:34:55:4D:66:2A:CA:36:3E
Certificate issuer:       /CN=8CD2E74C0B51414825F95C9D3D432ADD56896751
Certificate serial:       5C8CDB1CB0E1DCF5475CFF43C1C3F04557B59580
Authority key identifier: 8C:D2:E7:4C:0B:51:41:48:25:F9:5C:9D:3D:43:2A:DD:56:89:67:51
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8CD2E74C0B51414825F95C9D3D432ADD56896751.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5uENiHDYwVy4DAAeQgxL4nLtsrqnHafPDVw3KYwuwJL5/1/3139312e3234312e3134342e302f32302d3230203d3e20323632373834.roa
Signing time:             Sat 20 Apr 2024 09:49:02 +0000
ROA not before:           Sat 20 Apr 2024 09:44:02 +0000
ROA not after:            Sat 19 Apr 2025 09:49:02 +0000
asID:                     262784
IP address blocks:        191.241.144.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5uENiHDYwVy4DAAeQgxL4nLtsrqnHafPDVw3KYwuwJL5/1/8CD2E74C0B51414825F95C9D3D432ADD56896751.crl
                          rsync://rpki-repo.registro.br/repo/5uENiHDYwVy4DAAeQgxL4nLtsrqnHafPDVw3KYwuwJL5/1/8CD2E74C0B51414825F95C9D3D432ADD56896751.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8CD2E74C0B51414825F95C9D3D432ADD56896751.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 11:43:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:8c:db:1c:b0:e1:dc:f5:47:5c:ff:43:c1:c3:f0:45:57:b5:95:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8CD2E74C0B51414825F95C9D3D432ADD56896751
        Validity
            Not Before: Apr 20 09:44:02 2024 GMT
            Not After : Apr 19 09:49:02 2025 GMT
        Subject: CN=50177B8AD34637225CFC71FE34554D662ACA363E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:ba:93:98:34:3d:3b:31:e9:02:ec:97:15:18:
                    a7:3f:6a:0c:6c:bf:5b:d8:ff:a6:90:fe:ee:0b:88:
                    04:62:4f:60:e6:5e:2f:1f:be:6a:d7:ef:e4:89:23:
                    da:80:ba:7d:62:d2:03:d1:f2:36:c4:fa:ae:f1:6f:
                    8f:2b:c2:0a:d8:a1:28:fc:af:e5:16:6b:ff:ee:db:
                    ca:02:17:d6:b9:5c:6e:2f:31:02:7a:ef:61:d2:2a:
                    51:8f:36:b1:d4:da:2a:c4:7c:2c:a3:5f:6a:cc:ba:
                    20:92:d2:3c:28:31:19:36:04:ba:54:15:cd:33:f2:
                    80:e0:96:76:71:74:49:52:02:db:32:b5:1f:50:8b:
                    15:f0:c2:92:e5:5f:ed:51:27:9a:d2:d6:00:24:56:
                    07:11:55:56:bb:3c:1d:34:75:79:60:46:00:9c:09:
                    1c:04:dc:32:93:0d:3e:67:aa:b3:86:c8:04:18:de:
                    19:bf:84:11:99:e7:52:a6:02:4a:5c:2c:df:d7:11:
                    02:a1:d4:59:ee:cc:88:c2:33:b5:5e:8b:d2:66:7d:
                    5d:cf:d3:f4:80:86:92:99:b9:63:3e:f3:a1:cd:ac:
                    a6:dc:1f:d8:f9:f1:3d:f9:f3:77:2d:21:4a:29:6c:
                    75:57:6f:76:46:09:9e:3c:c2:02:94:8c:20:74:66:
                    b9:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:17:7B:8A:D3:46:37:22:5C:FC:71:FE:34:55:4D:66:2A:CA:36:3E
            X509v3 Authority Key Identifier:
                keyid:8C:D2:E7:4C:0B:51:41:48:25:F9:5C:9D:3D:43:2A:DD:56:89:67:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5uENiHDYwVy4DAAeQgxL4nLtsrqnHafPDVw3KYwuwJL5/1/8CD2E74C0B51414825F95C9D3D432ADD56896751.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8CD2E74C0B51414825F95C9D3D432ADD56896751.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5uENiHDYwVy4DAAeQgxL4nLtsrqnHafPDVw3KYwuwJL5/1/3139312e3234312e3134342e302f32302d3230203d3e20323632373834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.241.144.0/20

    Signature Algorithm: sha256WithRSAEncryption
         ed:24:10:98:ed:4a:08:7f:27:d8:18:ad:69:75:da:90:ae:6c:
         58:9f:c0:5d:c6:2a:54:9a:aa:90:06:8f:74:03:ff:c4:c7:21:
         ee:59:d3:8e:c4:79:bf:47:92:f6:b9:fc:e3:b5:4a:c9:c6:e0:
         56:12:4a:47:72:f5:9f:01:81:95:55:9c:90:34:f9:3b:61:d4:
         b5:54:55:0b:25:9c:96:26:89:62:d5:15:f2:81:fc:ed:e6:8f:
         95:cf:b1:0a:b6:dc:ea:d3:8b:cb:d5:21:fd:69:62:b3:9b:f6:
         f3:29:37:71:7a:30:ff:cd:a8:d0:a1:a1:57:d9:20:0d:89:59:
         0c:94:07:7a:6a:e4:cf:41:ba:8b:2e:dc:dc:e6:1e:20:c4:f1:
         d3:62:f6:dd:07:17:66:98:56:45:4e:94:e8:70:be:f1:62:f1:
         b2:3e:1d:73:40:63:b0:ca:a5:90:a5:82:af:65:7f:e8:33:4b:
         b7:63:2e:45:44:39:1b:5a:be:e9:09:25:5d:83:a5:d6:d1:2f:
         e3:73:5d:b6:86:36:c8:7a:64:ba:9e:8e:14:9b:7f:d9:83:a5:
         7f:2b:9b:f9:8d:54:12:ac:73:ff:71:ed:11:95:95:4b:2b:4a:
         90:7a:83:69:fd:f4:37:c3:97:0f:09:1e:35:7f:a8:89:07:37:
         6f:67:b4:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:14:43 2024 by rpki-client on console-fra.rpki-client.org