Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5uENiHDYwVy4DAAeQgxL4nLtsrqnHafPDVw3KYwuwJL5/1/3139312e3234312e3134372e302f32342d3234203d3e20323632373834.roa
File:                     3139312e3234312e3134372e302f32342d3234203d3e20323632373834.roa (raw, json)
Hash identifier:          JZ0sbthBVdxbBBMC6sCV2cilQhim7/QY+DsLG+Rq8qA=
Subject key identifier:   7D:7D:75:C5:79:46:2D:7A:C7:85:7D:6E:1A:20:4E:33:41:96:47:EB
Certificate issuer:       /CN=8CD2E74C0B51414825F95C9D3D432ADD56896751
Certificate serial:       68B9B8B76DE16899F63596382BDB7CDEAB8B96A3
Authority key identifier: 8C:D2:E7:4C:0B:51:41:48:25:F9:5C:9D:3D:43:2A:DD:56:89:67:51
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8CD2E74C0B51414825F95C9D3D432ADD56896751.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5uENiHDYwVy4DAAeQgxL4nLtsrqnHafPDVw3KYwuwJL5/1/3139312e3234312e3134372e302f32342d3234203d3e20323632373834.roa
Signing time:             Sat 20 Apr 2024 09:49:04 +0000
ROA not before:           Sat 20 Apr 2024 09:44:04 +0000
ROA not after:            Sat 19 Apr 2025 09:49:04 +0000
asID:                     262784
IP address blocks:        191.241.147.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5uENiHDYwVy4DAAeQgxL4nLtsrqnHafPDVw3KYwuwJL5/1/8CD2E74C0B51414825F95C9D3D432ADD56896751.crl
                          rsync://rpki-repo.registro.br/repo/5uENiHDYwVy4DAAeQgxL4nLtsrqnHafPDVw3KYwuwJL5/1/8CD2E74C0B51414825F95C9D3D432ADD56896751.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8CD2E74C0B51414825F95C9D3D432ADD56896751.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 11:43:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:b9:b8:b7:6d:e1:68:99:f6:35:96:38:2b:db:7c:de:ab:8b:96:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8CD2E74C0B51414825F95C9D3D432ADD56896751
        Validity
            Not Before: Apr 20 09:44:04 2024 GMT
            Not After : Apr 19 09:49:04 2025 GMT
        Subject: CN=7D7D75C579462D7AC7857D6E1A204E33419647EB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:3d:a1:66:51:9e:22:6d:a6:c8:0d:c6:a4:07:
                    84:7c:4d:9b:34:d2:d9:80:5e:57:20:72:7b:fe:80:
                    9f:29:e3:87:d5:ae:63:2f:df:1a:6b:01:6b:4a:a7:
                    2c:52:30:a3:83:66:51:5a:e0:33:fa:bf:4c:fc:22:
                    09:51:72:95:27:eb:96:b4:59:7d:07:da:fe:08:75:
                    1c:3d:b3:5b:83:3f:c6:cf:c6:54:7f:6c:23:f0:17:
                    7b:a5:c4:b3:53:84:40:0f:02:8b:17:6c:ec:a1:6a:
                    01:d0:70:78:b8:87:5c:ff:20:2c:0e:bf:e4:3c:ce:
                    a5:7b:64:42:1c:2e:f7:d3:aa:4f:4a:45:1f:b4:10:
                    d3:bc:b6:88:55:16:2e:da:85:ab:f7:88:f7:dc:a5:
                    d7:84:08:1d:70:67:b0:d3:ac:cf:70:a9:44:e5:d0:
                    22:35:15:32:cc:73:23:1e:58:27:e2:3a:ee:59:4f:
                    24:ee:40:52:3f:16:f6:77:28:39:2b:f4:2a:0b:ee:
                    4a:8a:07:b2:31:fe:4f:75:58:c2:20:fe:f6:25:7a:
                    c8:4d:33:23:63:91:07:db:e9:5e:0e:e0:6e:95:b1:
                    11:f5:90:d8:dc:03:3d:70:b4:27:9f:1f:57:ee:d9:
                    ee:c9:bc:20:e1:3d:52:c8:b5:c5:eb:c2:73:51:d5:
                    71:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:7D:75:C5:79:46:2D:7A:C7:85:7D:6E:1A:20:4E:33:41:96:47:EB
            X509v3 Authority Key Identifier:
                keyid:8C:D2:E7:4C:0B:51:41:48:25:F9:5C:9D:3D:43:2A:DD:56:89:67:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5uENiHDYwVy4DAAeQgxL4nLtsrqnHafPDVw3KYwuwJL5/1/8CD2E74C0B51414825F95C9D3D432ADD56896751.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8CD2E74C0B51414825F95C9D3D432ADD56896751.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5uENiHDYwVy4DAAeQgxL4nLtsrqnHafPDVw3KYwuwJL5/1/3139312e3234312e3134372e302f32342d3234203d3e20323632373834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.241.147.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9b:e1:d8:5f:4c:d0:e5:ce:f0:e9:d0:56:d3:a4:e8:09:1e:86:
         64:2a:1e:9b:cd:0f:f0:00:14:8d:1e:87:a4:08:5e:1d:0e:9b:
         1c:ed:84:54:e7:c1:13:4d:2b:d7:0f:f7:14:c2:51:cd:ef:e0:
         43:b7:f8:84:28:30:2d:21:f7:3f:e8:e6:e6:b2:b6:66:74:70:
         d0:d3:fc:ab:d1:d0:15:ec:2b:4f:e4:86:88:4e:84:0c:b6:08:
         c9:66:e9:1d:3b:74:2d:0c:19:f5:e9:98:29:d1:db:c2:a7:18:
         27:d3:28:07:17:8a:f6:3d:72:ab:a6:6e:ad:e0:02:72:96:50:
         c8:48:3b:d8:e9:9d:b8:9c:b6:4c:88:d1:2a:ae:e5:b8:20:6d:
         fb:d8:8b:bd:d2:8c:de:49:25:c4:8c:a3:7e:c0:ba:cb:c6:5e:
         66:54:ae:48:2e:ce:93:16:66:26:bf:3d:10:05:18:09:8a:f7:
         43:df:04:b1:93:3d:17:22:8a:c8:f4:4c:13:a7:94:dd:34:29:
         71:1a:5b:c0:3b:30:c5:0f:a8:e6:70:4c:0b:49:cd:92:41:0d:
         6d:21:15:dc:ef:58:82:05:3a:18:c4:f3:a3:6e:50:f0:fb:65:
         9b:7f:8f:04:c4:c2:0e:c6:01:5c:fb:03:3e:12:79:30:28:d5:
         64:f7:c2:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:14:43 2024 by rpki-client on console-fra.rpki-client.org