Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/69UzC9meuhSgwRhPgyGY4vBJ7KYPeUjVxVuVvoPJDHoZ/2/3139312e3234302e3136302e302f32322d3232203d3e203532373030.roa
File:                     3139312e3234302e3136302e302f32322d3232203d3e203532373030.roa (raw, json)
Hash identifier:          5nE4j0Xb5A+hRCCCxGS78Ardb8P++ZCpc+tGozhjRXM=
Subject key identifier:   37:75:C8:D3:18:A3:14:D3:DA:CA:D3:7D:C7:F6:10:B8:6D:79:46:F7
Certificate issuer:       /CN=23B77CF7BD1F94F72A6C0808569C4F51A9BA389A
Certificate serial:       3107B0570C74F877E2CDC575A1055F71577159C6
Authority key identifier: 23:B7:7C:F7:BD:1F:94:F7:2A:6C:08:08:56:9C:4F:51:A9:BA:38:9A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/23B77CF7BD1F94F72A6C0808569C4F51A9BA389A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/69UzC9meuhSgwRhPgyGY4vBJ7KYPeUjVxVuVvoPJDHoZ/2/3139312e3234302e3136302e302f32322d3232203d3e203532373030.roa
Signing time:             Thu 07 Nov 2024 18:18:58 +0000
ROA not before:           Thu 07 Nov 2024 18:13:58 +0000
ROA not after:            Thu 06 Nov 2025 18:18:58 +0000
asID:                     52700
IP address blocks:        191.240.160.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/69UzC9meuhSgwRhPgyGY4vBJ7KYPeUjVxVuVvoPJDHoZ/2/23B77CF7BD1F94F72A6C0808569C4F51A9BA389A.crl
                          rsync://rpki-repo.registro.br/repo/69UzC9meuhSgwRhPgyGY4vBJ7KYPeUjVxVuVvoPJDHoZ/2/23B77CF7BD1F94F72A6C0808569C4F51A9BA389A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/23B77CF7BD1F94F72A6C0808569C4F51A9BA389A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 30 Nov 2024 08:04:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:07:b0:57:0c:74:f8:77:e2:cd:c5:75:a1:05:5f:71:57:71:59:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23B77CF7BD1F94F72A6C0808569C4F51A9BA389A
        Validity
            Not Before: Nov  7 18:13:58 2024 GMT
            Not After : Nov  6 18:18:58 2025 GMT
        Subject: CN=3775C8D318A314D3DACAD37DC7F610B86D7946F7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:79:4e:96:99:b6:30:5a:9c:18:16:46:26:d6:
                    40:89:f1:c8:1f:25:43:cb:c6:20:93:d6:11:9b:45:
                    54:80:d6:54:46:d6:1d:5d:e3:f3:e1:92:a6:97:de:
                    4e:ba:f9:c5:9e:f0:c9:9a:e5:2c:81:f4:6e:e3:7a:
                    60:bf:2f:df:ec:21:fa:98:08:8c:e8:09:5a:27:27:
                    ff:89:47:4e:38:1a:15:57:fe:c0:7d:e7:21:d2:05:
                    d6:b6:78:c5:72:cb:09:9d:36:53:49:e4:0b:e1:ac:
                    d5:5e:a2:db:1b:3d:cb:f5:01:51:93:bf:f0:35:f6:
                    9e:b3:cc:f6:f4:7b:b0:ad:c9:84:c5:02:36:d7:31:
                    ae:f5:ae:d2:9d:49:7f:7e:0f:c0:88:ae:c5:dd:89:
                    ac:3b:18:72:d8:50:f2:57:59:cc:93:99:32:f9:9e:
                    64:08:96:f6:f9:cc:ce:73:1d:0e:d5:05:63:c2:54:
                    e9:f5:4d:df:0e:73:7e:6e:d8:29:55:6c:d7:1a:d7:
                    ab:3b:49:eb:b9:bb:03:eb:e7:64:34:05:f8:42:7e:
                    e9:53:86:86:c3:9e:dc:bd:be:ec:d9:a6:2c:68:71:
                    65:aa:28:b1:b0:04:44:e0:5f:5d:f8:f1:35:91:52:
                    e8:40:51:5f:fc:79:fe:68:2e:9d:60:94:b0:ac:df:
                    4b:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:75:C8:D3:18:A3:14:D3:DA:CA:D3:7D:C7:F6:10:B8:6D:79:46:F7
            X509v3 Authority Key Identifier:
                keyid:23:B7:7C:F7:BD:1F:94:F7:2A:6C:08:08:56:9C:4F:51:A9:BA:38:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/69UzC9meuhSgwRhPgyGY4vBJ7KYPeUjVxVuVvoPJDHoZ/2/23B77CF7BD1F94F72A6C0808569C4F51A9BA389A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/23B77CF7BD1F94F72A6C0808569C4F51A9BA389A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/69UzC9meuhSgwRhPgyGY4vBJ7KYPeUjVxVuVvoPJDHoZ/2/3139312e3234302e3136302e302f32322d3232203d3e203532373030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.240.160.0/22

    Signature Algorithm: sha256WithRSAEncryption
         74:e1:76:7b:96:cf:ae:c9:a0:7d:3e:52:af:40:ba:66:f0:7d:
         df:be:1c:3a:18:20:a3:1f:af:79:a3:e0:52:bf:10:e6:be:84:
         f3:eb:f3:84:49:d6:e7:df:84:6c:c0:be:42:48:07:46:53:94:
         53:39:b1:42:14:a2:e8:57:b5:79:03:4e:3f:39:b1:03:ea:4a:
         5f:4f:9e:8b:da:e9:e8:a3:73:15:5b:f7:b2:f0:59:9d:28:ac:
         45:0b:b5:3e:63:0e:20:ec:31:34:bc:b2:a7:ad:a3:11:d0:78:
         b8:dd:39:6a:de:ec:b6:9e:26:7c:dc:11:23:54:65:14:d1:2c:
         c5:f1:c9:13:4e:41:e1:e4:e5:d4:61:39:6e:cb:10:d4:d7:62:
         7e:86:95:a3:d5:85:bf:9b:7d:3e:d1:48:62:3a:85:3b:5b:02:
         04:eb:2e:13:ef:0d:46:06:ed:e1:de:47:de:61:1c:82:3a:b2:
         5a:24:14:74:c9:2c:a8:0b:e5:4a:b8:24:45:ea:b3:38:c2:16:
         a1:af:e8:67:7f:f6:e7:57:27:45:da:0a:0c:ce:99:2b:96:68:
         59:d3:31:70:52:a7:72:e0:2c:af:36:2b:50:66:1a:1e:a2:92:
         ce:31:ec:a9:f9:50:9a:d3:7d:e2:c7:ee:66:7c:4c:eb:25:4b:
         79:03:65:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 29 08:55:31 2024 by rpki-client on console-ams.rpki-client.org