Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5uENiHDYwVy4DAAeQgxL4nLtsrqnHafPDVw3KYwuwJL5/1/3139312e3234312e3135332e302f32342d3234203d3e20323632373834.roa
File:                     3139312e3234312e3135332e302f32342d3234203d3e20323632373834.roa (raw, json)
Hash identifier:          yu4WTLzD025bJgDcAXNnpx+ogTYecfwdv9X1X7jtS/o=
Subject key identifier:   2D:D8:84:08:EE:A9:AE:EE:C8:F8:DA:8C:FF:D9:1D:5D:9D:35:12:6E
Certificate issuer:       /CN=8CD2E74C0B51414825F95C9D3D432ADD56896751
Certificate serial:       383B4777AC240CD8CBC61C949A9AAA31ECFC4728
Authority key identifier: 8C:D2:E7:4C:0B:51:41:48:25:F9:5C:9D:3D:43:2A:DD:56:89:67:51
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8CD2E74C0B51414825F95C9D3D432ADD56896751.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5uENiHDYwVy4DAAeQgxL4nLtsrqnHafPDVw3KYwuwJL5/1/3139312e3234312e3135332e302f32342d3234203d3e20323632373834.roa
Signing time:             Sat 20 Apr 2024 09:49:01 +0000
ROA not before:           Sat 20 Apr 2024 09:44:01 +0000
ROA not after:            Sat 19 Apr 2025 09:49:01 +0000
asID:                     262784
IP address blocks:        191.241.153.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5uENiHDYwVy4DAAeQgxL4nLtsrqnHafPDVw3KYwuwJL5/1/8CD2E74C0B51414825F95C9D3D432ADD56896751.crl
                          rsync://rpki-repo.registro.br/repo/5uENiHDYwVy4DAAeQgxL4nLtsrqnHafPDVw3KYwuwJL5/1/8CD2E74C0B51414825F95C9D3D432ADD56896751.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8CD2E74C0B51414825F95C9D3D432ADD56896751.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 11:43:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:3b:47:77:ac:24:0c:d8:cb:c6:1c:94:9a:9a:aa:31:ec:fc:47:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8CD2E74C0B51414825F95C9D3D432ADD56896751
        Validity
            Not Before: Apr 20 09:44:01 2024 GMT
            Not After : Apr 19 09:49:01 2025 GMT
        Subject: CN=2DD88408EEA9AEEEC8F8DA8CFFD91D5D9D35126E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:f9:36:1f:f7:be:70:1a:9b:46:13:5b:ef:10:
                    54:26:29:f3:de:2e:2e:20:65:11:a4:01:71:62:34:
                    35:97:14:d5:77:0e:3b:d8:c1:4d:bc:8b:d1:03:24:
                    82:44:82:0c:fe:97:fb:58:c2:21:76:73:c8:a6:8d:
                    05:16:31:ca:3a:df:c7:b9:a6:80:ed:28:65:a5:33:
                    52:d8:38:84:07:24:f5:c4:fe:30:9d:bd:e7:14:da:
                    3b:95:68:68:cf:fc:e2:d7:11:44:4c:23:2b:53:03:
                    39:37:d0:a6:a8:90:18:92:49:f0:59:ae:21:fe:c0:
                    33:7b:f2:5b:1c:22:aa:28:de:46:5a:52:de:ae:df:
                    d3:54:c8:b7:41:26:72:1b:6d:98:36:16:21:2e:ed:
                    7a:78:65:4d:fa:7e:a6:fe:4d:2b:97:69:53:a5:f7:
                    33:70:d5:9b:35:f4:4e:ed:48:99:c6:ed:dd:ab:b4:
                    d9:b9:4e:2d:6e:0f:95:b9:45:d5:40:04:2e:b3:34:
                    96:d0:67:59:1f:1d:4a:ed:2f:fa:ae:76:21:9e:58:
                    73:d8:08:10:26:ef:a0:7a:23:b9:8e:93:7d:9b:c9:
                    f4:96:22:c3:e0:5c:65:3b:80:75:fc:72:01:88:33:
                    64:05:f0:0b:22:b4:fd:df:0a:8f:3c:df:ac:12:60:
                    73:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:D8:84:08:EE:A9:AE:EE:C8:F8:DA:8C:FF:D9:1D:5D:9D:35:12:6E
            X509v3 Authority Key Identifier:
                keyid:8C:D2:E7:4C:0B:51:41:48:25:F9:5C:9D:3D:43:2A:DD:56:89:67:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5uENiHDYwVy4DAAeQgxL4nLtsrqnHafPDVw3KYwuwJL5/1/8CD2E74C0B51414825F95C9D3D432ADD56896751.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8CD2E74C0B51414825F95C9D3D432ADD56896751.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5uENiHDYwVy4DAAeQgxL4nLtsrqnHafPDVw3KYwuwJL5/1/3139312e3234312e3135332e302f32342d3234203d3e20323632373834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.241.153.0/24

    Signature Algorithm: sha256WithRSAEncryption
         df:22:2c:44:85:37:17:e5:57:f7:66:a0:9d:a3:fd:d3:78:f4:
         0f:01:36:ba:8c:bb:4e:e8:57:2d:46:e1:a1:70:fa:ef:d0:32:
         e0:d1:2f:59:82:bf:c4:21:d7:b3:68:f6:72:6c:85:99:03:e5:
         8d:ce:24:ee:1f:6f:4a:ca:16:fd:37:63:b4:51:8b:2e:16:c6:
         b4:61:4a:93:b9:6a:2d:15:9b:12:1b:f9:fb:d8:83:e0:e1:d4:
         9d:0d:a4:ed:ef:59:b1:77:5f:b1:59:7a:02:93:46:54:08:90:
         ac:ca:7f:07:bd:1c:c1:b4:6b:f6:a2:35:5c:7c:8b:2b:d0:c2:
         72:77:68:6f:6d:27:9d:e4:23:66:c8:7c:0c:c7:ca:10:29:cc:
         04:63:a8:da:48:b7:f8:22:c8:c7:da:5d:f3:5d:48:24:b4:02:
         ff:ae:3b:ad:3a:09:3b:3f:4b:4d:ae:15:22:fc:97:08:a2:f1:
         b1:06:ec:ee:c6:5b:ce:9f:06:53:f2:ce:a4:23:9d:08:a6:bd:
         e4:4a:c7:86:1a:9b:38:8a:e1:3b:2f:d7:83:9c:c9:8e:e0:ad:
         62:18:7a:3c:d2:1b:e9:28:79:90:42:9c:fe:8e:23:c5:ec:76:
         36:27:c3:c6:ef:6d:c1:df:c2:5a:7d:1c:ba:10:33:db:9a:64:
         fb:1f:3d:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:44:09 2024 by rpki-client on console-ams.rpki-client.org