Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7KovFZax5Uh9W9j4a7jFnAe34hGrofN5oZ6CxAsAhbzN/1/3139312e3234322e37322e302f32322d3232203d3e20323633343734.roa
File:                     3139312e3234322e37322e302f32322d3232203d3e20323633343734.roa (raw, json)
Hash identifier:          eOxJZzuz1yysjQll4JEgcr2bJanixP1rAJLfLoe1zzk=
Subject key identifier:   77:97:E1:37:6A:6A:90:3D:6D:EE:6F:9E:16:09:37:A0:B5:8A:A4:83
Certificate issuer:       /CN=E564227F0F27852AEEA76948A118D38F01D7645E
Certificate serial:       5A63E4086B727224773B631FE2920E42EC1185D5
Authority key identifier: E5:64:22:7F:0F:27:85:2A:EE:A7:69:48:A1:18:D3:8F:01:D7:64:5E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E564227F0F27852AEEA76948A118D38F01D7645E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7KovFZax5Uh9W9j4a7jFnAe34hGrofN5oZ6CxAsAhbzN/1/3139312e3234322e37322e302f32322d3232203d3e20323633343734.roa
Signing time:             Thu 04 Apr 2024 06:00:34 +0000
ROA not before:           Thu 04 Apr 2024 05:55:34 +0000
ROA not after:            Thu 03 Apr 2025 06:00:34 +0000
asID:                     263474
IP address blocks:        191.242.72.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7KovFZax5Uh9W9j4a7jFnAe34hGrofN5oZ6CxAsAhbzN/1/E564227F0F27852AEEA76948A118D38F01D7645E.crl
                          rsync://rpki-repo.registro.br/repo/7KovFZax5Uh9W9j4a7jFnAe34hGrofN5oZ6CxAsAhbzN/1/E564227F0F27852AEEA76948A118D38F01D7645E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E564227F0F27852AEEA76948A118D38F01D7645E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 12:08:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:63:e4:08:6b:72:72:24:77:3b:63:1f:e2:92:0e:42:ec:11:85:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E564227F0F27852AEEA76948A118D38F01D7645E
        Validity
            Not Before: Apr  4 05:55:34 2024 GMT
            Not After : Apr  3 06:00:34 2025 GMT
        Subject: CN=7797E1376A6A903D6DEE6F9E160937A0B58AA483
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:28:ae:dc:66:06:ff:78:e4:ee:81:b3:0b:97:
                    e8:63:77:81:d0:ac:76:65:fd:51:d9:b1:28:a0:2c:
                    af:d5:d7:18:8c:7f:ac:8a:ee:94:80:36:cc:51:3d:
                    5a:0c:d8:5a:ab:10:c3:05:ed:f4:5d:e7:2f:f1:9f:
                    e7:05:5c:88:93:44:14:d7:42:ed:3b:9d:a9:97:03:
                    d9:0d:53:f1:ee:13:a7:76:cb:66:88:32:30:ed:08:
                    7b:b9:ef:0a:8b:e6:88:da:97:62:b4:bb:5a:18:97:
                    f2:e7:db:6b:2c:1d:78:36:01:f2:1c:86:ea:84:7e:
                    ce:c2:90:6a:13:eb:45:6f:ad:75:57:12:67:8f:19:
                    04:4c:a8:f8:27:04:f7:15:16:4d:17:33:98:eb:91:
                    e2:b8:02:30:2e:55:da:aa:68:ee:50:2b:1f:9b:d3:
                    38:81:ea:17:56:ee:ef:4e:46:f6:55:2a:0d:f5:10:
                    2a:8f:05:05:14:5e:fe:a6:3e:be:dc:f5:44:fd:7b:
                    6d:1a:8e:8b:5f:02:d8:aa:dc:53:15:9c:47:cd:20:
                    59:fe:12:34:56:56:56:45:a2:f1:c2:6e:c4:74:6f:
                    d7:6c:f3:94:5b:a0:f9:1c:9b:d8:3d:43:c2:c9:94:
                    bc:6a:d1:94:62:b7:27:d4:a6:14:a7:78:41:15:e2:
                    54:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:97:E1:37:6A:6A:90:3D:6D:EE:6F:9E:16:09:37:A0:B5:8A:A4:83
            X509v3 Authority Key Identifier:
                keyid:E5:64:22:7F:0F:27:85:2A:EE:A7:69:48:A1:18:D3:8F:01:D7:64:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7KovFZax5Uh9W9j4a7jFnAe34hGrofN5oZ6CxAsAhbzN/1/E564227F0F27852AEEA76948A118D38F01D7645E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E564227F0F27852AEEA76948A118D38F01D7645E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7KovFZax5Uh9W9j4a7jFnAe34hGrofN5oZ6CxAsAhbzN/1/3139312e3234322e37322e302f32322d3232203d3e20323633343734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.242.72.0/22

    Signature Algorithm: sha256WithRSAEncryption
         24:15:8b:e9:9a:22:6c:0a:63:c2:70:d1:b8:34:05:ea:b0:5c:
         55:8a:44:d2:a4:9b:f7:31:e5:63:a3:a5:9e:98:e5:39:15:2a:
         4e:1b:e5:07:58:7a:7e:d7:4e:33:24:26:0a:82:9a:cd:4f:ed:
         00:cf:b8:09:e9:be:64:17:de:b9:f7:74:68:13:7d:35:e2:06:
         52:6c:de:2a:44:32:0b:60:82:31:89:b4:b5:04:f1:b9:0d:bb:
         19:c8:55:96:c2:cf:10:09:9a:7f:43:e9:fd:90:08:e0:7f:3a:
         e5:91:7a:ba:0a:85:78:13:37:cd:55:78:73:dd:9e:43:f8:93:
         8d:8e:76:c2:06:3a:a9:f1:90:8c:21:56:a5:04:da:ae:c8:e0:
         6b:13:36:b8:90:a4:30:c5:1a:15:53:6d:bc:b7:7d:13:4d:66:
         f7:09:32:32:89:72:be:68:fb:15:ba:d5:9a:5e:fe:45:1c:1c:
         ad:07:8b:cd:66:62:17:af:5c:8a:d5:9c:b2:03:77:99:57:77:
         a8:4b:65:c3:cf:db:a6:5a:7f:3e:ef:57:17:5f:9b:f0:80:09:
         1b:ef:72:ec:45:67:41:2d:be:af:47:42:c2:3c:7e:8e:c9:7a:
         d1:04:df:0f:59:5b:52:9f:d5:38:3c:14:94:ab:85:38:71:e4:
         31:f9:da:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:14:45 2024 by rpki-client on console-fra.rpki-client.org