Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5uENiHDYwVy4DAAeQgxL4nLtsrqnHafPDVw3KYwuwJL5/1/3139312e3234312e3134382e302f32342d3234203d3e20323632373834.roa
File:                     3139312e3234312e3134382e302f32342d3234203d3e20323632373834.roa (raw, json)
Hash identifier:          iWvWrtCcyYgycDesQV7lu/vIz2095iDD3g1FXY6DRKc=
Subject key identifier:   51:D5:0F:5A:D7:62:6A:46:BD:60:2A:7E:1B:CE:61:00:17:D2:A9:C2
Certificate issuer:       /CN=8CD2E74C0B51414825F95C9D3D432ADD56896751
Certificate serial:       3BC284A5438B721DE15FC447428A150444244138
Authority key identifier: 8C:D2:E7:4C:0B:51:41:48:25:F9:5C:9D:3D:43:2A:DD:56:89:67:51
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8CD2E74C0B51414825F95C9D3D432ADD56896751.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5uENiHDYwVy4DAAeQgxL4nLtsrqnHafPDVw3KYwuwJL5/1/3139312e3234312e3134382e302f32342d3234203d3e20323632373834.roa
Signing time:             Sat 20 Apr 2024 09:49:01 +0000
ROA not before:           Sat 20 Apr 2024 09:44:01 +0000
ROA not after:            Sat 19 Apr 2025 09:49:01 +0000
asID:                     262784
IP address blocks:        191.241.148.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5uENiHDYwVy4DAAeQgxL4nLtsrqnHafPDVw3KYwuwJL5/1/8CD2E74C0B51414825F95C9D3D432ADD56896751.crl
                          rsync://rpki-repo.registro.br/repo/5uENiHDYwVy4DAAeQgxL4nLtsrqnHafPDVw3KYwuwJL5/1/8CD2E74C0B51414825F95C9D3D432ADD56896751.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8CD2E74C0B51414825F95C9D3D432ADD56896751.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 03:35:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:c2:84:a5:43:8b:72:1d:e1:5f:c4:47:42:8a:15:04:44:24:41:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8CD2E74C0B51414825F95C9D3D432ADD56896751
        Validity
            Not Before: Apr 20 09:44:01 2024 GMT
            Not After : Apr 19 09:49:01 2025 GMT
        Subject: CN=51D50F5AD7626A46BD602A7E1BCE610017D2A9C2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:d6:16:1f:fb:0c:e9:68:70:e8:b5:a6:07:b0:
                    12:bd:ea:da:18:cf:14:19:77:70:ec:21:ae:0e:c3:
                    44:36:50:3c:a2:e0:98:e3:e6:b2:91:5a:0a:41:c2:
                    36:9c:6d:6b:28:22:05:c7:20:59:cc:47:a0:02:6d:
                    0f:ed:12:60:16:b5:dd:9d:52:25:41:84:b6:24:16:
                    27:19:74:3a:6a:82:3b:35:b4:b1:4a:b6:b4:f8:f3:
                    af:3b:95:1d:73:27:72:99:a6:4b:cf:9e:00:06:c3:
                    ac:37:8b:58:44:e0:f8:fa:14:9b:2d:8e:f1:8d:ad:
                    e6:af:3f:57:d5:bf:78:32:6b:aa:cf:ff:51:1b:7a:
                    7c:14:c9:d6:28:45:74:9b:43:0b:5e:c6:96:5a:c9:
                    e0:8d:4e:6a:31:79:c3:1c:3e:e8:07:25:80:27:2b:
                    9f:d3:f2:f9:b9:4d:79:0c:ff:a9:93:e4:bd:27:70:
                    c3:68:97:1c:23:0e:15:99:21:64:cc:af:bc:83:a3:
                    92:5f:3c:aa:81:18:0c:dd:c2:fe:6d:1e:52:8f:cd:
                    f0:ef:8a:de:65:c2:56:56:a8:ee:19:02:50:af:6c:
                    56:26:8f:f9:0f:15:7f:ea:a3:74:a5:33:48:1f:cc:
                    ae:67:87:95:fe:8e:c9:1b:e0:aa:5f:ce:80:14:f5:
                    67:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:D5:0F:5A:D7:62:6A:46:BD:60:2A:7E:1B:CE:61:00:17:D2:A9:C2
            X509v3 Authority Key Identifier:
                keyid:8C:D2:E7:4C:0B:51:41:48:25:F9:5C:9D:3D:43:2A:DD:56:89:67:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5uENiHDYwVy4DAAeQgxL4nLtsrqnHafPDVw3KYwuwJL5/1/8CD2E74C0B51414825F95C9D3D432ADD56896751.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8CD2E74C0B51414825F95C9D3D432ADD56896751.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5uENiHDYwVy4DAAeQgxL4nLtsrqnHafPDVw3KYwuwJL5/1/3139312e3234312e3134382e302f32342d3234203d3e20323632373834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.241.148.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ed:a2:98:a1:04:25:6a:73:59:99:c9:bb:bf:ee:c0:73:a7:5d:
         32:a1:b2:c1:63:16:de:85:d0:03:37:f1:d5:06:da:7d:b5:89:
         3b:d2:e1:67:56:9b:98:f4:e9:3c:46:a0:ab:45:8a:96:38:be:
         94:3f:6c:af:3a:8e:7e:90:84:b7:f9:db:4c:ab:02:0c:10:76:
         e4:7e:08:49:2d:d8:b5:9b:3e:ce:cc:53:ac:9d:f4:f1:ab:d7:
         84:31:93:5c:db:0a:34:6e:3c:89:06:b4:cf:0c:3c:8d:d2:ba:
         4d:3c:7e:be:cd:16:2b:a2:8e:9a:cd:5d:c3:7e:d7:a0:21:fe:
         2a:13:14:0b:ec:c6:e1:b9:76:d4:e0:5d:1a:4c:a2:63:80:f1:
         1d:c6:06:e9:ad:61:97:cb:bf:79:5c:d7:5a:17:be:d5:a2:f0:
         93:06:c3:bd:6c:74:ee:1e:e3:29:89:ac:42:6a:00:19:df:a8:
         b0:05:16:8c:b6:8f:e8:40:00:2c:4c:a8:47:ac:18:bc:22:d9:
         e6:26:dd:58:aa:ff:12:8e:9a:97:3f:9d:1e:91:6f:6b:b1:99:
         bc:6f:1e:71:4d:24:eb:c2:7e:e9:c3:5c:51:c3:02:74:ea:08:
         81:43:84:16:c4:8b:49:49:4e:13:4d:5f:89:6a:ba:74:cc:8c:
         8a:3e:41:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 04:52:45 2024 by rpki-client on console-ams.rpki-client.org