Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7JcUsaEFkztyNquaETnt6ky4NsFTihgL5539qVcGrmWy/0/3139312e352e3233362e302f32322d3239203d3e20323633353433.roa
File:                     3139312e352e3233362e302f32322d3239203d3e20323633353433.roa (raw, json)
Hash identifier:          W8xbYb/TsHzwOaPb3fvUAV6VzezZEO/l88p60qlnxMs=
Subject key identifier:   E3:8B:4B:AC:39:5E:9C:BB:72:A7:09:58:AE:FB:50:78:38:E6:D7:17
Certificate issuer:       /CN=B3C0ECC43363690F72F949D611EE62DCF8942568
Certificate serial:       66D54D8EFAD269396BC095E7EF1E3D3B326D2E28
Authority key identifier: B3:C0:EC:C4:33:63:69:0F:72:F9:49:D6:11:EE:62:DC:F8:94:25:68
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B3C0ECC43363690F72F949D611EE62DCF8942568.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7JcUsaEFkztyNquaETnt6ky4NsFTihgL5539qVcGrmWy/0/3139312e352e3233362e302f32322d3239203d3e20323633353433.roa
Signing time:             Wed 30 Oct 2024 13:54:19 +0000
ROA not before:           Wed 30 Oct 2024 13:49:19 +0000
ROA not after:            Wed 29 Oct 2025 13:54:19 +0000
asID:                     263543
IP address blocks:        191.5.236.0/22 maxlen: 29
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7JcUsaEFkztyNquaETnt6ky4NsFTihgL5539qVcGrmWy/0/B3C0ECC43363690F72F949D611EE62DCF8942568.crl
                          rsync://rpki-repo.registro.br/repo/7JcUsaEFkztyNquaETnt6ky4NsFTihgL5539qVcGrmWy/0/B3C0ECC43363690F72F949D611EE62DCF8942568.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B3C0ECC43363690F72F949D611EE62DCF8942568.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 17 Feb 2025 10:26:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:d5:4d:8e:fa:d2:69:39:6b:c0:95:e7:ef:1e:3d:3b:32:6d:2e:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B3C0ECC43363690F72F949D611EE62DCF8942568
        Validity
            Not Before: Oct 30 13:49:19 2024 GMT
            Not After : Oct 29 13:54:19 2025 GMT
        Subject: CN=E38B4BAC395E9CBB72A70958AEFB507838E6D717
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:0e:46:5b:65:0e:86:42:87:78:3d:d7:9a:74:
                    4b:7e:5e:ee:de:a8:b4:ee:61:fc:4c:a1:de:ca:ea:
                    7d:9e:09:34:73:4f:80:d7:8f:b4:8e:39:6d:aa:53:
                    0b:bb:76:05:8a:32:9e:cb:13:f5:2b:24:de:f5:23:
                    9f:55:96:5c:cf:be:46:dc:28:e1:89:73:8e:ec:d6:
                    67:9c:3c:d6:ab:49:96:55:40:f8:17:b5:fa:f3:2e:
                    34:c3:d5:d8:e2:b8:5f:40:73:d5:a0:52:b1:43:e5:
                    4b:30:74:bc:f9:de:ad:0b:23:92:6c:88:03:64:da:
                    60:d6:2b:b5:32:19:1c:ae:2f:27:0c:48:01:1b:f7:
                    65:18:a5:63:a4:ce:c2:38:3b:2f:8f:4f:9a:92:d0:
                    b3:e0:b3:e0:70:39:fa:2d:d3:66:fb:da:76:94:e1:
                    0f:01:4e:7d:eb:46:f9:e7:8e:06:1d:28:67:77:84:
                    b5:fa:f8:10:ea:a2:97:f7:40:70:6a:4a:ba:e3:c4:
                    e8:64:c8:49:f6:3e:ad:6a:52:50:35:ce:35:3c:9e:
                    2e:5f:88:6f:e0:06:98:94:8a:36:48:4f:a3:7a:21:
                    26:c6:be:1d:5a:20:d9:7e:41:bf:a7:7e:0b:7e:b3:
                    bd:b2:0e:94:69:26:62:47:83:77:e2:b6:20:aa:fc:
                    ef:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:8B:4B:AC:39:5E:9C:BB:72:A7:09:58:AE:FB:50:78:38:E6:D7:17
            X509v3 Authority Key Identifier:
                keyid:B3:C0:EC:C4:33:63:69:0F:72:F9:49:D6:11:EE:62:DC:F8:94:25:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7JcUsaEFkztyNquaETnt6ky4NsFTihgL5539qVcGrmWy/0/B3C0ECC43363690F72F949D611EE62DCF8942568.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B3C0ECC43363690F72F949D611EE62DCF8942568.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7JcUsaEFkztyNquaETnt6ky4NsFTihgL5539qVcGrmWy/0/3139312e352e3233362e302f32322d3239203d3e20323633353433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.5.236.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9f:c1:37:ff:60:00:6a:9d:ce:da:ba:25:94:d8:1d:da:5e:aa:
         83:3f:2e:c8:cd:6a:b3:85:4b:21:a3:21:c7:95:f8:bd:93:fe:
         28:d1:d7:45:b4:8f:6d:46:cc:83:14:90:19:fa:1d:a5:db:6a:
         17:ca:ea:51:27:5c:04:1f:e4:3c:00:fd:71:9a:6f:81:c6:3d:
         d0:2c:ae:80:ed:cd:5a:41:94:61:f5:cd:19:53:70:25:64:df:
         9f:35:f7:6c:88:b9:f9:88:f3:53:0a:a0:c6:c6:9a:b9:fb:98:
         c2:67:62:d6:38:1a:9d:c6:87:c7:27:db:81:90:fb:c2:6c:72:
         4d:5e:6e:96:d5:95:15:b5:93:e6:49:63:5f:b3:1e:d0:50:15:
         56:81:6e:51:63:ff:b0:bc:bf:bf:3d:7d:92:44:7f:59:f2:42:
         5a:b9:d2:c8:3b:26:42:d6:db:b8:74:f4:73:1a:e3:87:ea:56:
         36:f3:4a:6d:69:e4:08:5f:85:1d:9f:64:08:11:52:2c:57:91:
         a4:30:66:df:4a:f0:9f:82:fa:09:4f:51:e6:92:7b:3e:bf:fa:
         89:49:6f:65:87:23:53:35:2f:17:4b:e6:b3:95:50:71:b0:7f:
         d8:8b:24:d4:64:51:91:b3:af:8c:2f:02:74:2c:51:3c:51:05:
         2a:8e:c3:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:05:36 2025 by rpki-client