Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/69UzC9meuhSgwRhPgyGY4vBJ7KYPeUjVxVuVvoPJDHoZ/2/3139312e3234302e3136322e302f32332d3233203d3e203532373030.roa
File:                     3139312e3234302e3136322e302f32332d3233203d3e203532373030.roa (raw, json)
Hash identifier:          /IdHVTdkUKsYsKjEw/m2qe3tdxU1uPCcbIdCD+4UhVI=
Subject key identifier:   11:B2:58:EF:56:7B:12:8D:11:3B:9B:FD:26:82:98:C3:E6:E3:C9:D9
Certificate issuer:       /CN=23B77CF7BD1F94F72A6C0808569C4F51A9BA389A
Certificate serial:       5D83628D81C7CD3356D09739A3DF1CEC66F7526D
Authority key identifier: 23:B7:7C:F7:BD:1F:94:F7:2A:6C:08:08:56:9C:4F:51:A9:BA:38:9A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/23B77CF7BD1F94F72A6C0808569C4F51A9BA389A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/69UzC9meuhSgwRhPgyGY4vBJ7KYPeUjVxVuVvoPJDHoZ/2/3139312e3234302e3136322e302f32332d3233203d3e203532373030.roa
Signing time:             Thu 07 Nov 2024 18:18:58 +0000
ROA not before:           Thu 07 Nov 2024 18:13:58 +0000
ROA not after:            Thu 06 Nov 2025 18:18:58 +0000
asID:                     52700
IP address blocks:        191.240.162.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/69UzC9meuhSgwRhPgyGY4vBJ7KYPeUjVxVuVvoPJDHoZ/2/23B77CF7BD1F94F72A6C0808569C4F51A9BA389A.crl
                          rsync://rpki-repo.registro.br/repo/69UzC9meuhSgwRhPgyGY4vBJ7KYPeUjVxVuVvoPJDHoZ/2/23B77CF7BD1F94F72A6C0808569C4F51A9BA389A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/23B77CF7BD1F94F72A6C0808569C4F51A9BA389A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 19 Feb 2025 09:49:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:83:62:8d:81:c7:cd:33:56:d0:97:39:a3:df:1c:ec:66:f7:52:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23B77CF7BD1F94F72A6C0808569C4F51A9BA389A
        Validity
            Not Before: Nov  7 18:13:58 2024 GMT
            Not After : Nov  6 18:18:58 2025 GMT
        Subject: CN=11B258EF567B128D113B9BFD268298C3E6E3C9D9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:2d:e9:8f:13:15:c8:13:13:50:df:f1:45:80:
                    44:ac:41:89:10:dd:36:eb:74:fe:6e:6e:42:c6:ac:
                    3a:8d:c1:2d:e6:10:2d:2a:c3:8b:02:0b:91:f3:b7:
                    1a:32:07:52:56:6f:c0:80:f6:f8:95:30:a4:22:3a:
                    70:c8:c7:36:be:ef:3e:7f:58:0c:cb:e4:75:e0:09:
                    0d:a8:7c:7e:57:09:1b:12:75:78:60:d1:91:53:fd:
                    52:da:85:70:28:c5:2b:48:c1:f4:eb:b7:36:e1:3e:
                    78:79:f5:51:63:1a:89:b6:ae:00:6f:ac:42:10:fb:
                    a1:6f:9d:59:28:50:69:7c:f0:93:33:e6:fd:a7:eb:
                    ca:8c:9d:47:1b:de:f8:f0:c1:f1:79:95:9b:75:a8:
                    52:a6:f2:29:d9:51:0f:9b:0f:b1:01:d8:6b:03:b7:
                    aa:b9:ee:09:28:5f:d7:6e:aa:cd:ce:d2:71:1c:a6:
                    1d:62:33:c3:01:63:41:4d:e8:a0:3f:c9:1f:0a:49:
                    17:c2:0f:6a:90:14:0b:03:97:40:5e:86:b5:96:f7:
                    9f:1b:cf:77:c7:bb:b3:d4:db:a5:02:bc:ac:72:0c:
                    ef:33:b4:77:f2:e0:49:4c:07:cb:f2:da:cf:04:30:
                    f7:e0:aa:5e:ba:bf:b6:c8:fa:37:bf:e1:ad:e2:5c:
                    b8:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:B2:58:EF:56:7B:12:8D:11:3B:9B:FD:26:82:98:C3:E6:E3:C9:D9
            X509v3 Authority Key Identifier:
                keyid:23:B7:7C:F7:BD:1F:94:F7:2A:6C:08:08:56:9C:4F:51:A9:BA:38:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/69UzC9meuhSgwRhPgyGY4vBJ7KYPeUjVxVuVvoPJDHoZ/2/23B77CF7BD1F94F72A6C0808569C4F51A9BA389A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/23B77CF7BD1F94F72A6C0808569C4F51A9BA389A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/69UzC9meuhSgwRhPgyGY4vBJ7KYPeUjVxVuVvoPJDHoZ/2/3139312e3234302e3136322e302f32332d3233203d3e203532373030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.240.162.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4c:62:74:c6:ad:01:f9:a0:d7:08:b2:1b:ac:a2:11:ed:db:99:
         f4:04:95:50:bb:c2:14:e7:9a:3b:33:a0:45:90:59:54:28:d7:
         48:2c:9a:07:07:67:e8:e9:01:fa:09:10:b6:92:3c:83:78:41:
         e7:18:9e:db:bb:3e:fe:3a:e6:3a:6a:b7:5e:69:2e:21:dc:4e:
         26:05:60:b8:60:60:af:b8:15:6b:9d:3e:b6:4c:a1:02:82:f3:
         5c:30:10:54:dd:6f:6e:e3:4f:1f:bf:3d:ce:a5:9d:a3:44:a4:
         d6:57:5c:a7:b0:d7:f5:20:ee:c0:df:03:21:62:56:06:ef:66:
         12:c9:27:2b:1b:bf:2e:73:50:29:df:2a:d7:53:49:e0:b8:45:
         af:aa:63:e2:a1:c6:37:b0:24:18:97:49:6b:66:68:81:d6:1b:
         44:ad:39:30:20:76:46:09:8d:97:d0:4b:40:63:08:43:36:a8:
         9e:45:18:f2:81:c7:44:30:77:2a:38:5a:01:0b:39:3b:b0:9b:
         da:12:62:fe:44:1a:f6:56:fe:56:b0:01:24:9c:d9:6d:d9:57:
         33:cf:50:c5:e3:5d:0a:eb:33:0d:91:da:39:1c:71:fb:29:04:
         b6:e4:58:29:a8:6b:76:74:8e:42:ca:55:95:ae:50:bb:0b:81:
         95:b0:05:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:38:15 2025 by rpki-client