Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/728Km9tFo8j9Ln615Ykkkg6T8rBnbgPgwshb3ghsPjHq/1/3139312e372e3133362e302f32312d3234203d3e20323633333231.roa
File:                     3139312e372e3133362e302f32312d3234203d3e20323633333231.roa (raw, json)
Hash identifier:          8ET9ORcZBS0FKh0FoaKXCUb59aLqg3cC0E9To6mTtTc=
Subject key identifier:   C4:0F:4B:1F:59:03:69:09:86:AA:17:ED:7C:19:2D:9B:AE:08:9E:39
Certificate issuer:       /CN=B8BF0367B559121777A21A84D953A717D6E82AEA
Certificate serial:       0E785955B6D076EBBEF7617D2D6D3EF323A46D53
Authority key identifier: B8:BF:03:67:B5:59:12:17:77:A2:1A:84:D9:53:A7:17:D6:E8:2A:EA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B8BF0367B559121777A21A84D953A717D6E82AEA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/728Km9tFo8j9Ln615Ykkkg6T8rBnbgPgwshb3ghsPjHq/1/3139312e372e3133362e302f32312d3234203d3e20323633333231.roa
Signing time:             Thu 04 Apr 2024 05:23:24 +0000
ROA not before:           Thu 04 Apr 2024 05:18:24 +0000
ROA not after:            Thu 03 Apr 2025 05:23:24 +0000
asID:                     263321
IP address blocks:        191.7.136.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/728Km9tFo8j9Ln615Ykkkg6T8rBnbgPgwshb3ghsPjHq/1/B8BF0367B559121777A21A84D953A717D6E82AEA.crl
                          rsync://rpki-repo.registro.br/repo/728Km9tFo8j9Ln615Ykkkg6T8rBnbgPgwshb3ghsPjHq/1/B8BF0367B559121777A21A84D953A717D6E82AEA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B8BF0367B559121777A21A84D953A717D6E82AEA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 13:43:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:78:59:55:b6:d0:76:eb:be:f7:61:7d:2d:6d:3e:f3:23:a4:6d:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B8BF0367B559121777A21A84D953A717D6E82AEA
        Validity
            Not Before: Apr  4 05:18:24 2024 GMT
            Not After : Apr  3 05:23:24 2025 GMT
        Subject: CN=C40F4B1F5903690986AA17ED7C192D9BAE089E39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:a9:c8:b8:f4:b3:3d:38:03:72:fd:d5:21:89:
                    93:42:5d:fb:f5:f8:60:49:92:54:eb:d5:7d:a5:17:
                    61:10:0f:51:97:46:77:32:1d:81:b9:a9:75:b1:84:
                    cb:57:7d:34:c9:50:cb:c8:35:52:79:a2:0e:90:67:
                    aa:53:05:29:4e:5f:18:a7:51:1a:ee:1e:fb:43:ac:
                    0c:cd:0b:75:93:b4:2a:c4:bf:09:db:21:76:a3:85:
                    72:e9:b3:4c:6e:ca:70:e1:c3:e2:bd:44:19:8e:4a:
                    98:89:3a:21:2e:62:d0:6e:a6:de:14:df:a1:41:59:
                    06:d8:7e:c2:c5:e5:bd:93:13:a5:51:b2:41:44:65:
                    39:b5:3f:79:31:c6:e6:c2:9e:9b:b8:af:c6:6e:f2:
                    e5:35:41:b3:6d:5c:f6:eb:ec:9f:fe:d0:92:89:50:
                    e3:e5:14:e7:e5:7a:c5:06:0f:41:d7:57:bd:a0:c7:
                    a3:08:37:4d:ba:75:9c:ee:d4:e1:62:72:ea:ce:94:
                    a2:15:72:c5:be:63:f8:71:45:2a:66:b9:6c:6a:e6:
                    f4:a9:32:c8:fa:03:69:c1:7b:00:07:e6:6a:04:f6:
                    bf:d1:af:8d:37:ec:28:93:b0:e5:aa:08:94:e7:7b:
                    1f:df:d4:87:5c:70:94:e8:83:24:45:32:d0:7e:79:
                    28:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:0F:4B:1F:59:03:69:09:86:AA:17:ED:7C:19:2D:9B:AE:08:9E:39
            X509v3 Authority Key Identifier:
                keyid:B8:BF:03:67:B5:59:12:17:77:A2:1A:84:D9:53:A7:17:D6:E8:2A:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/728Km9tFo8j9Ln615Ykkkg6T8rBnbgPgwshb3ghsPjHq/1/B8BF0367B559121777A21A84D953A717D6E82AEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B8BF0367B559121777A21A84D953A717D6E82AEA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/728Km9tFo8j9Ln615Ykkkg6T8rBnbgPgwshb3ghsPjHq/1/3139312e372e3133362e302f32312d3234203d3e20323633333231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.7.136.0/21

    Signature Algorithm: sha256WithRSAEncryption
         93:94:46:e7:16:2a:b0:a6:f6:70:d1:bd:02:0a:ad:d8:19:fc:
         68:ad:bd:a6:54:a7:c0:53:7a:aa:e0:70:cd:6e:4b:c7:8d:85:
         3e:40:c2:e4:a0:72:e5:cb:ba:92:de:ee:a3:e9:b1:4a:1d:e6:
         0c:40:99:c9:61:19:0f:c1:f6:ce:6d:45:25:10:e8:54:2b:f3:
         56:01:60:0c:02:2f:15:ca:1e:15:81:73:51:49:ac:2f:32:70:
         ad:1d:e8:48:8d:db:c5:33:c4:6e:4f:4c:5f:5c:36:97:c8:2c:
         30:4e:3d:87:0a:97:aa:e5:06:55:b2:39:1d:70:ba:c1:83:28:
         07:d4:0d:ba:27:09:24:5f:7a:a4:9e:fa:70:20:b4:66:8a:47:
         b0:e7:ef:41:4c:d6:59:a3:b9:c5:74:0e:ea:f3:36:20:96:4a:
         b8:c0:b0:68:26:b3:8f:80:7b:05:2d:01:5e:17:30:8c:66:3c:
         58:d9:88:f1:fb:61:30:e7:99:23:0f:38:ee:2a:3b:74:fe:87:
         03:63:3d:0e:c7:b8:01:8f:a4:8b:66:22:52:0a:1b:8e:7a:ea:
         7f:92:bd:5e:55:e7:a3:84:17:84:43:50:91:55:b9:ad:13:64:
         d3:28:08:16:99:f2:ac:5f:85:b4:e1:0e:07:c5:4e:b7:09:38:
         86:d8:ed:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 13:31:52 2024 by rpki-client on console-fra.rpki-client.org