Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5yD1eDx6qKxEcUj8rua8QMK8BfvvAjSnsWRQp3urPNXj/1/3139312e362e3233322e302f32312d3332203d3e203238363339.roa
File:                     3139312e362e3233322e302f32312d3332203d3e203238363339.roa (raw, json)
Hash identifier:          SdkhKkQaEhAsMgSuEvbkGfUbqwf3N1KF7mmmaGk9Jys=
Subject key identifier:   B5:0C:38:6C:D3:A5:17:4C:54:8F:99:C7:A6:8B:22:56:93:39:EF:63
Certificate issuer:       /CN=8E7316CA907F3D46929AFF6DDF5655DBB53ABDC4
Certificate serial:       4C083A5C1877A514A3DBC5C7C7D2E0601275A87B
Authority key identifier: 8E:73:16:CA:90:7F:3D:46:92:9A:FF:6D:DF:56:55:DB:B5:3A:BD:C4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E7316CA907F3D46929AFF6DDF5655DBB53ABDC4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5yD1eDx6qKxEcUj8rua8QMK8BfvvAjSnsWRQp3urPNXj/1/3139312e362e3233322e302f32312d3332203d3e203238363339.roa
Signing time:             Wed 03 Apr 2024 22:49:24 +0000
ROA not before:           Wed 03 Apr 2024 22:44:24 +0000
ROA not after:            Wed 02 Apr 2025 22:49:24 +0000
asID:                     28639
IP address blocks:        191.6.232.0/21 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5yD1eDx6qKxEcUj8rua8QMK8BfvvAjSnsWRQp3urPNXj/1/8E7316CA907F3D46929AFF6DDF5655DBB53ABDC4.crl
                          rsync://rpki-repo.registro.br/repo/5yD1eDx6qKxEcUj8rua8QMK8BfvvAjSnsWRQp3urPNXj/1/8E7316CA907F3D46929AFF6DDF5655DBB53ABDC4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E7316CA907F3D46929AFF6DDF5655DBB53ABDC4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 18:27:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:08:3a:5c:18:77:a5:14:a3:db:c5:c7:c7:d2:e0:60:12:75:a8:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8E7316CA907F3D46929AFF6DDF5655DBB53ABDC4
        Validity
            Not Before: Apr  3 22:44:24 2024 GMT
            Not After : Apr  2 22:49:24 2025 GMT
        Subject: CN=B50C386CD3A5174C548F99C7A68B22569339EF63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:32:82:b1:35:22:f0:4c:20:63:b6:70:a4:57:
                    9b:1d:3f:59:c1:d2:9a:8a:6f:35:86:2a:06:a3:59:
                    16:43:22:1c:ef:a7:00:7b:a7:74:79:2a:01:04:6f:
                    14:eb:9f:eb:fb:cf:52:3b:ef:41:ce:60:fe:cb:70:
                    39:51:7d:92:1e:fd:be:80:a2:36:af:cf:ab:55:15:
                    3c:71:52:4e:1b:f6:f0:84:0d:72:67:00:4e:31:78:
                    08:ca:95:da:97:b6:28:97:0e:d4:d8:a8:a0:3f:c7:
                    df:30:b4:f4:c7:14:0e:f2:04:ed:b9:83:f7:5f:63:
                    1d:6e:6f:29:19:e6:14:e6:33:6b:96:48:69:53:cf:
                    47:83:83:17:d7:54:9e:ec:7a:59:22:67:09:16:39:
                    ef:c7:ef:14:ce:7b:21:f7:c8:d2:83:20:78:dd:37:
                    2d:8a:d8:3d:9b:51:48:47:e2:cf:4b:91:47:0e:98:
                    aa:e0:20:b2:76:90:9d:64:bb:1d:8a:df:d8:44:ea:
                    09:4d:2b:ae:ea:02:83:7a:06:28:28:8b:73:2a:76:
                    24:42:86:90:98:30:df:2f:bb:a7:6f:a3:36:ee:a4:
                    eb:7d:5d:86:25:5a:ed:55:db:be:ed:93:b6:86:db:
                    33:15:fe:0f:f9:fb:7a:f2:84:e4:78:4a:1c:30:23:
                    e1:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:0C:38:6C:D3:A5:17:4C:54:8F:99:C7:A6:8B:22:56:93:39:EF:63
            X509v3 Authority Key Identifier:
                keyid:8E:73:16:CA:90:7F:3D:46:92:9A:FF:6D:DF:56:55:DB:B5:3A:BD:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5yD1eDx6qKxEcUj8rua8QMK8BfvvAjSnsWRQp3urPNXj/1/8E7316CA907F3D46929AFF6DDF5655DBB53ABDC4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E7316CA907F3D46929AFF6DDF5655DBB53ABDC4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5yD1eDx6qKxEcUj8rua8QMK8BfvvAjSnsWRQp3urPNXj/1/3139312e362e3233322e302f32312d3332203d3e203238363339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.6.232.0/21

    Signature Algorithm: sha256WithRSAEncryption
         63:ed:ca:da:08:b3:eb:b4:90:2f:36:25:31:d6:d2:31:c5:89:
         14:bb:4b:c2:e9:c9:bb:9e:13:8f:63:e9:fa:be:89:82:f9:50:
         6b:b2:b6:f9:9e:d4:e0:9b:78:a4:10:4f:d1:cc:0a:84:f8:e0:
         e0:98:66:05:6c:23:aa:25:3b:11:31:c0:c9:12:be:f5:f4:cb:
         a7:79:0b:4c:79:88:6b:39:9d:c9:4a:e7:cc:c3:9c:0f:cd:ec:
         b3:0c:fe:61:47:26:5c:e3:0c:b3:78:70:d9:fc:cb:4e:ae:cf:
         6f:68:a6:e6:a8:48:7e:05:37:e3:ad:6c:1b:5f:aa:2f:5b:c4:
         00:af:83:38:8e:e7:cc:30:5c:fc:2d:3c:4d:33:6c:0c:81:4b:
         15:32:85:9d:d3:35:73:9b:7b:50:34:d7:55:64:3d:82:09:e4:
         ce:6f:6d:b9:be:3e:35:6d:3c:c6:b1:00:97:e9:d5:66:e5:2e:
         45:ca:4f:e3:1b:1c:67:f0:c8:31:ca:3d:ac:ed:e3:6a:b2:99:
         0b:c8:e7:25:9b:45:63:ae:1a:41:7d:08:b9:c1:dd:94:6e:37:
         26:25:59:98:4d:5c:8f:3d:da:f9:d3:68:3b:21:8d:5e:61:01:
         24:67:5f:e8:6f:71:8a:c4:0c:2f:9d:c5:42:85:28:df:4d:48:
         e7:f2:ea:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 17:50:21 2024 by rpki-client on console-fra.rpki-client.org