Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7BdUY17MpNAnZ9YgRF6kEuTuJLwF7QbZorFj4XseZQV7/0/3139322e3134312e3139322e302f32322d3234203d3e20323637343735.roa
File:                     3139322e3134312e3139322e302f32322d3234203d3e20323637343735.roa (raw, json)
Hash identifier:          MwY2HrWRPGT8zb9BBqlKYlkSZ8Y1TpkUgFrSaQMI8h0=
Subject key identifier:   F2:D2:3E:37:71:A4:4D:39:27:52:A2:8F:79:D8:3E:B9:FC:B2:C4:F1
Certificate issuer:       /CN=27431F298D6DFE8179639FE397D34A2A47E96D15
Certificate serial:       73013D1ED13974CF166BE7016282AD0F9A8203FC
Authority key identifier: 27:43:1F:29:8D:6D:FE:81:79:63:9F:E3:97:D3:4A:2A:47:E9:6D:15
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/27431F298D6DFE8179639FE397D34A2A47E96D15.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7BdUY17MpNAnZ9YgRF6kEuTuJLwF7QbZorFj4XseZQV7/0/3139322e3134312e3139322e302f32322d3234203d3e20323637343735.roa
Signing time:             Mon 01 Jul 2024 14:06:05 +0000
ROA not before:           Mon 01 Jul 2024 14:01:05 +0000
ROA not after:            Mon 30 Jun 2025 14:06:05 +0000
asID:                     267475
IP address blocks:        192.141.192.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7BdUY17MpNAnZ9YgRF6kEuTuJLwF7QbZorFj4XseZQV7/0/27431F298D6DFE8179639FE397D34A2A47E96D15.crl
                          rsync://rpki-repo.registro.br/repo/7BdUY17MpNAnZ9YgRF6kEuTuJLwF7QbZorFj4XseZQV7/0/27431F298D6DFE8179639FE397D34A2A47E96D15.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/27431F298D6DFE8179639FE397D34A2A47E96D15.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 07:57:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:01:3d:1e:d1:39:74:cf:16:6b:e7:01:62:82:ad:0f:9a:82:03:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27431F298D6DFE8179639FE397D34A2A47E96D15
        Validity
            Not Before: Jul  1 14:01:05 2024 GMT
            Not After : Jun 30 14:06:05 2025 GMT
        Subject: CN=F2D23E3771A44D392752A28F79D83EB9FCB2C4F1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:14:bb:e8:c8:1e:4b:13:64:5e:5a:4c:51:ab:
                    0c:a6:e9:2c:f5:7b:10:e8:4d:ad:f4:8a:74:1f:48:
                    12:19:bb:c3:27:03:95:c5:d1:75:77:7a:25:03:a1:
                    5e:c6:2e:65:a7:74:c8:bc:85:3e:f3:49:8e:4a:8f:
                    e1:cb:b2:b6:64:16:82:9a:66:ca:e9:5c:40:f1:59:
                    17:a9:e2:55:d9:1d:58:37:21:0b:94:bd:d7:33:26:
                    6e:95:0b:f4:06:0c:96:d6:09:61:1f:a2:f0:94:61:
                    89:b9:97:e8:8e:14:98:5c:29:4b:66:c3:62:51:df:
                    96:28:e4:de:d6:84:cf:35:89:ae:4c:9d:84:69:f8:
                    ab:17:2e:12:fa:e9:33:61:7e:25:6a:c1:87:30:f5:
                    07:c5:20:ab:dc:ee:72:3f:4a:6e:bf:2a:7e:62:27:
                    a8:6d:b2:1d:c5:31:6d:9a:4c:05:40:7c:90:02:d8:
                    e5:70:9d:6b:f4:0a:e9:a3:48:64:ba:eb:41:53:cb:
                    55:12:60:b4:11:b8:7a:63:f3:c4:8d:7b:d9:da:86:
                    06:90:e7:d6:1c:a4:01:c0:73:4e:04:54:1d:77:f2:
                    d2:ad:f3:64:83:56:ba:bb:91:28:1e:32:95:23:62:
                    10:9a:bb:be:6a:b2:af:4e:14:db:0c:d1:9b:2d:3e:
                    c1:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:D2:3E:37:71:A4:4D:39:27:52:A2:8F:79:D8:3E:B9:FC:B2:C4:F1
            X509v3 Authority Key Identifier:
                keyid:27:43:1F:29:8D:6D:FE:81:79:63:9F:E3:97:D3:4A:2A:47:E9:6D:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7BdUY17MpNAnZ9YgRF6kEuTuJLwF7QbZorFj4XseZQV7/0/27431F298D6DFE8179639FE397D34A2A47E96D15.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/27431F298D6DFE8179639FE397D34A2A47E96D15.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7BdUY17MpNAnZ9YgRF6kEuTuJLwF7QbZorFj4XseZQV7/0/3139322e3134312e3139322e302f32322d3234203d3e20323637343735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.141.192.0/22

    Signature Algorithm: sha256WithRSAEncryption
         02:ec:80:6b:03:39:ab:71:88:43:dc:2f:ca:51:a1:5e:87:ad:
         23:88:87:b0:54:3d:18:01:74:fb:3a:53:c0:7d:22:96:28:14:
         5e:4d:30:0b:58:af:02:5c:a7:f3:d4:88:d4:8d:40:fc:19:ba:
         69:64:21:df:86:f8:6d:d7:69:02:2f:38:63:76:01:cc:f2:ee:
         d8:5e:25:1d:f2:28:7f:09:2c:24:1b:a7:ae:94:5b:fd:e2:1d:
         f1:2a:77:21:ec:d2:ba:3c:a3:e3:f9:db:38:6f:e6:99:e5:bc:
         2a:f1:13:81:e5:a8:83:09:d5:10:8c:a4:21:1c:95:e2:35:60:
         aa:f1:92:7d:28:21:58:48:bc:f2:ff:16:0a:53:35:48:33:97:
         17:0b:5c:c8:f9:3e:a5:08:91:65:bd:9f:40:e9:bd:53:99:21:
         a0:35:49:9b:a1:0a:5b:59:c9:bb:ea:54:52:1c:65:83:0c:5b:
         05:24:7c:92:69:50:a4:de:b3:a1:6f:5c:93:a1:fd:7a:28:d0:
         47:b6:45:3b:c5:98:3b:95:40:bd:e3:1c:c1:58:59:e7:b3:66:
         3b:59:b1:ee:49:f4:41:09:46:ed:33:0b:85:ec:9a:17:4a:da:
         16:29:0e:b2:5a:3c:d9:68:0b:f6:6e:2d:60:07:78:71:d5:45:
         c2:8b:c8:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 08:30:12 2024 by rpki-client on console-ams.rpki-client.org