Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/79nHiD4ipzr73U8L5SQHMaKRBkS1Gs5ahA4ct9RC3w8A/1/3139322e3134312e302e302f32342d3234203d3e20323637343430.roa
File:                     3139322e3134312e302e302f32342d3234203d3e20323637343430.roa (raw, json)
Hash identifier:          52xyNC1o6UZ8bOgtlsW914+vacb9FTCnKPxCwGs1RZE=
Subject key identifier:   71:EF:7D:87:02:48:59:05:3D:18:C5:BB:3F:A8:56:86:C7:44:47:28
Certificate issuer:       /CN=33E0AB84CEF869E76435D17DB5E5566182625773
Certificate serial:       1A51BD7CE214739058249636D4B1D887241A11D1
Authority key identifier: 33:E0:AB:84:CE:F8:69:E7:64:35:D1:7D:B5:E5:56:61:82:62:57:73
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/33E0AB84CEF869E76435D17DB5E5566182625773.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/79nHiD4ipzr73U8L5SQHMaKRBkS1Gs5ahA4ct9RC3w8A/1/3139322e3134312e302e302f32342d3234203d3e20323637343430.roa
Signing time:             Wed 03 Apr 2024 23:02:52 +0000
ROA not before:           Wed 03 Apr 2024 22:57:52 +0000
ROA not after:            Wed 02 Apr 2025 23:02:52 +0000
asID:                     267440
IP address blocks:        192.141.0.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/79nHiD4ipzr73U8L5SQHMaKRBkS1Gs5ahA4ct9RC3w8A/1/33E0AB84CEF869E76435D17DB5E5566182625773.crl
                          rsync://rpki-repo.registro.br/repo/79nHiD4ipzr73U8L5SQHMaKRBkS1Gs5ahA4ct9RC3w8A/1/33E0AB84CEF869E76435D17DB5E5566182625773.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/33E0AB84CEF869E76435D17DB5E5566182625773.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 15:32:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:51:bd:7c:e2:14:73:90:58:24:96:36:d4:b1:d8:87:24:1a:11:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33E0AB84CEF869E76435D17DB5E5566182625773
        Validity
            Not Before: Apr  3 22:57:52 2024 GMT
            Not After : Apr  2 23:02:52 2025 GMT
        Subject: CN=71EF7D87024859053D18C5BB3FA85686C7444728
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:7c:33:f3:2c:6d:6e:d0:fa:dc:33:60:76:59:
                    6a:81:12:6c:8c:be:c1:6d:0c:0b:5a:15:07:0d:93:
                    f9:7c:29:05:b2:4f:04:f9:b2:6e:e1:5b:22:d7:18:
                    20:25:99:11:57:f9:17:2c:45:85:15:09:f6:43:a8:
                    e9:fb:96:4a:c0:00:26:36:9c:b3:c2:29:51:d0:16:
                    31:ca:aa:b5:62:13:5b:e8:ad:b3:ca:d7:bd:27:16:
                    cb:fe:5e:b6:a7:09:ba:88:45:92:dd:fd:f9:c5:d9:
                    a5:72:83:cc:ef:73:c4:99:89:f3:84:66:a5:4e:ee:
                    d0:20:35:17:7e:88:dd:38:3d:c5:f9:7c:a3:50:b7:
                    fa:85:1a:1e:ca:b1:37:5b:b7:4e:c0:bc:fe:2e:49:
                    8d:3f:10:bb:60:aa:7d:9d:b7:0d:3b:02:26:db:50:
                    92:89:96:0e:a4:bc:25:78:db:e6:f7:4c:85:1b:74:
                    94:5f:94:f9:bf:bd:e1:20:46:79:18:58:3f:87:c3:
                    b5:78:4b:ea:24:21:91:c9:b1:3c:bd:50:d4:71:51:
                    52:60:87:51:20:5b:1a:3c:f1:90:9a:f5:80:16:b3:
                    e6:e6:b8:c1:e4:12:3a:d6:fd:e5:ab:19:93:ef:17:
                    9e:55:96:b8:5e:f8:5b:e6:56:f3:cc:8e:fb:62:6e:
                    cb:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:EF:7D:87:02:48:59:05:3D:18:C5:BB:3F:A8:56:86:C7:44:47:28
            X509v3 Authority Key Identifier:
                keyid:33:E0:AB:84:CE:F8:69:E7:64:35:D1:7D:B5:E5:56:61:82:62:57:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/79nHiD4ipzr73U8L5SQHMaKRBkS1Gs5ahA4ct9RC3w8A/1/33E0AB84CEF869E76435D17DB5E5566182625773.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/33E0AB84CEF869E76435D17DB5E5566182625773.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/79nHiD4ipzr73U8L5SQHMaKRBkS1Gs5ahA4ct9RC3w8A/1/3139322e3134312e302e302f32342d3234203d3e20323637343430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.141.0.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4f:31:b9:5e:1c:6e:98:8b:de:4e:13:3e:54:eb:15:82:1f:f6:
         3d:a4:fd:9f:55:37:27:64:ce:57:11:c4:46:e2:db:15:b8:d6:
         cb:80:51:79:da:95:40:58:5b:64:f4:3f:08:ae:38:0c:e4:42:
         11:10:76:28:38:b0:c0:68:9e:bb:5e:aa:c7:37:c8:9c:62:7e:
         c0:3e:8c:45:36:af:b0:66:ca:4c:88:78:35:4f:04:eb:bd:df:
         59:3a:cc:a0:b1:48:d1:35:07:2d:4e:cf:d6:ee:cf:75:48:eb:
         97:b4:7b:bc:71:35:f2:63:ab:4e:5f:d9:40:1e:bd:ed:db:ef:
         62:99:0d:60:41:1b:e7:3c:14:86:aa:a2:9a:6d:7a:ba:a7:15:
         6e:bf:5a:16:f6:d6:5d:fc:63:b3:c0:ff:e8:2c:e4:52:7b:9a:
         1d:c0:46:c7:d0:62:a9:fa:7f:4a:d7:3f:84:81:bc:78:82:d9:
         f3:3f:d5:d2:1d:4f:c6:a6:b1:a5:02:4d:0f:ee:8a:c1:90:c2:
         12:22:8c:68:5d:4e:5b:e0:e9:e3:c3:ba:6a:36:b7:c1:50:27:
         d4:82:9d:0c:eb:4b:c0:e3:98:39:9f:da:f7:ec:b7:20:72:39:
         3f:e5:a6:87:8c:4e:15:d4:ec:eb:b7:8a:52:d0:44:bf:6c:96:
         7b:28:cb:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:43:58 2024 by rpki-client on console-ams.rpki-client.org