Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5uENiHDYwVy4DAAeQgxL4nLtsrqnHafPDVw3KYwuwJL5/1/3139312e3234312e3134342e302f32342d3234203d3e20323632373834.roa
File:                     3139312e3234312e3134342e302f32342d3234203d3e20323632373834.roa (raw, json)
Hash identifier:          +srNexvaBuGadiplsp5c20ClaU9OYD6XCR4YmDwvowY=
Subject key identifier:   79:72:4F:18:F3:F7:63:42:89:04:4A:D1:6A:CC:7D:B8:02:54:01:8F
Certificate issuer:       /CN=8CD2E74C0B51414825F95C9D3D432ADD56896751
Certificate serial:       1941BCD3CEDAFFAE9E7AE7262684700013F79E59
Authority key identifier: 8C:D2:E7:4C:0B:51:41:48:25:F9:5C:9D:3D:43:2A:DD:56:89:67:51
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8CD2E74C0B51414825F95C9D3D432ADD56896751.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5uENiHDYwVy4DAAeQgxL4nLtsrqnHafPDVw3KYwuwJL5/1/3139312e3234312e3134342e302f32342d3234203d3e20323632373834.roa
Signing time:             Sat 20 Apr 2024 09:49:05 +0000
ROA not before:           Sat 20 Apr 2024 09:44:05 +0000
ROA not after:            Sat 19 Apr 2025 09:49:05 +0000
asID:                     262784
IP address blocks:        191.241.144.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5uENiHDYwVy4DAAeQgxL4nLtsrqnHafPDVw3KYwuwJL5/1/8CD2E74C0B51414825F95C9D3D432ADD56896751.crl
                          rsync://rpki-repo.registro.br/repo/5uENiHDYwVy4DAAeQgxL4nLtsrqnHafPDVw3KYwuwJL5/1/8CD2E74C0B51414825F95C9D3D432ADD56896751.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8CD2E74C0B51414825F95C9D3D432ADD56896751.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 11:43:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:41:bc:d3:ce:da:ff:ae:9e:7a:e7:26:26:84:70:00:13:f7:9e:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8CD2E74C0B51414825F95C9D3D432ADD56896751
        Validity
            Not Before: Apr 20 09:44:05 2024 GMT
            Not After : Apr 19 09:49:05 2025 GMT
        Subject: CN=79724F18F3F7634289044AD16ACC7DB80254018F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:7c:a0:c1:da:58:7f:5d:05:cc:c4:57:51:5f:
                    a7:ed:af:c0:59:94:81:a5:53:50:fb:46:66:57:6f:
                    a6:4a:05:e0:85:ac:58:e5:9f:18:66:03:f9:a8:48:
                    49:88:73:a2:70:55:fc:66:78:b3:5f:3d:29:90:b5:
                    db:c5:39:ff:03:8c:07:3c:35:bf:87:ab:26:a3:74:
                    29:a7:f4:5d:2c:16:ff:94:8b:ce:ae:62:a2:9f:ef:
                    eb:67:87:b6:ce:04:74:a1:ce:8f:5e:80:91:2a:c2:
                    9c:ec:3d:5e:00:ec:b5:52:6b:f1:62:13:bf:2b:6d:
                    06:22:75:58:e7:78:56:ac:65:66:c4:54:5a:c9:73:
                    a0:c5:f5:9b:92:d9:99:1b:f9:ec:79:28:bd:e0:b2:
                    d4:11:0a:86:1c:55:cd:06:ad:8c:69:97:80:0d:8c:
                    aa:3c:fc:19:ce:73:81:6e:9a:6c:85:8d:9c:65:35:
                    3b:97:12:4e:cd:99:42:8c:57:16:f3:e7:30:e1:56:
                    e3:38:13:84:db:c5:d2:a7:e5:fb:e4:45:5f:71:32:
                    62:cf:7c:af:8d:02:f0:96:51:64:fe:ce:9e:d6:79:
                    d2:61:f7:b6:a0:9a:e5:c5:5f:be:b2:33:08:c1:e5:
                    db:3b:46:75:18:1d:0c:95:c8:ce:04:30:1c:9f:0f:
                    20:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:72:4F:18:F3:F7:63:42:89:04:4A:D1:6A:CC:7D:B8:02:54:01:8F
            X509v3 Authority Key Identifier:
                keyid:8C:D2:E7:4C:0B:51:41:48:25:F9:5C:9D:3D:43:2A:DD:56:89:67:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5uENiHDYwVy4DAAeQgxL4nLtsrqnHafPDVw3KYwuwJL5/1/8CD2E74C0B51414825F95C9D3D432ADD56896751.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8CD2E74C0B51414825F95C9D3D432ADD56896751.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5uENiHDYwVy4DAAeQgxL4nLtsrqnHafPDVw3KYwuwJL5/1/3139312e3234312e3134342e302f32342d3234203d3e20323632373834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.241.144.0/24

    Signature Algorithm: sha256WithRSAEncryption
         f2:e6:d2:62:53:c9:8e:d6:cd:ff:70:3a:80:b7:70:c0:fc:0c:
         81:7e:85:e0:35:10:62:f4:af:59:c1:e3:e7:b0:93:1f:40:a6:
         28:38:5a:b7:a9:49:94:9f:72:f1:35:2f:9f:3a:7b:c7:97:ec:
         45:f1:e3:53:a6:a7:51:ab:36:d5:aa:eb:b6:b7:1b:3d:38:c5:
         0b:f6:36:c5:35:fc:bc:26:0d:f2:4a:20:4e:f0:54:80:b5:67:
         3f:4d:52:6f:d2:5f:97:5d:b4:3b:2e:e2:02:e5:8e:7e:5b:06:
         88:d6:76:79:34:66:27:32:ec:80:16:90:a9:00:bb:21:e0:b9:
         be:99:2d:ca:8e:ae:6c:cc:4b:f1:2c:4f:bc:3a:f9:75:78:e5:
         e1:57:83:9a:52:76:0c:ce:1e:e7:43:0e:62:89:b9:d1:0c:df:
         91:03:17:ba:60:6b:4f:13:7b:36:fa:3e:a4:96:28:d9:f8:80:
         33:87:3f:9d:e6:60:1b:02:3e:cb:ad:c6:54:bd:16:9a:7e:17:
         10:17:40:cf:96:b3:2c:b2:97:fa:5f:c0:9f:39:9c:c7:42:b1:
         76:29:bf:45:83:32:9b:5e:07:5a:87:84:c4:92:ab:b5:e8:23:
         95:6e:a2:0b:98:73:93:61:c4:92:75:f9:22:e6:69:62:62:c8:
         60:f6:7c:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:14:43 2024 by rpki-client on console-fra.rpki-client.org