Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7KovFZax5Uh9W9j4a7jFnAe34hGrofN5oZ6CxAsAhbzN/1/3139312e3234322e37322e302f32332d3233203d3e20323633343734.roa
File:                     3139312e3234322e37322e302f32332d3233203d3e20323633343734.roa (raw, json)
Hash identifier:          K6RUBpuhShvTT9QNRJxOFd3cQFdhQ3wQ8Nqoj+LeV5E=
Subject key identifier:   94:36:AB:B1:8E:DD:22:08:1D:40:DC:8C:D5:92:81:F3:10:7C:19:76
Certificate issuer:       /CN=E564227F0F27852AEEA76948A118D38F01D7645E
Certificate serial:       3200820C38AAC2C2C6638D39E4A61B69FD23B3EA
Authority key identifier: E5:64:22:7F:0F:27:85:2A:EE:A7:69:48:A1:18:D3:8F:01:D7:64:5E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E564227F0F27852AEEA76948A118D38F01D7645E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7KovFZax5Uh9W9j4a7jFnAe34hGrofN5oZ6CxAsAhbzN/1/3139312e3234322e37322e302f32332d3233203d3e20323633343734.roa
Signing time:             Thu 04 Apr 2024 06:00:34 +0000
ROA not before:           Thu 04 Apr 2024 05:55:34 +0000
ROA not after:            Thu 03 Apr 2025 06:00:34 +0000
asID:                     263474
IP address blocks:        191.242.72.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7KovFZax5Uh9W9j4a7jFnAe34hGrofN5oZ6CxAsAhbzN/1/E564227F0F27852AEEA76948A118D38F01D7645E.crl
                          rsync://rpki-repo.registro.br/repo/7KovFZax5Uh9W9j4a7jFnAe34hGrofN5oZ6CxAsAhbzN/1/E564227F0F27852AEEA76948A118D38F01D7645E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E564227F0F27852AEEA76948A118D38F01D7645E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 12:08:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:00:82:0c:38:aa:c2:c2:c6:63:8d:39:e4:a6:1b:69:fd:23:b3:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E564227F0F27852AEEA76948A118D38F01D7645E
        Validity
            Not Before: Apr  4 05:55:34 2024 GMT
            Not After : Apr  3 06:00:34 2025 GMT
        Subject: CN=9436ABB18EDD22081D40DC8CD59281F3107C1976
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:14:c6:90:50:50:33:0a:a4:d7:73:31:c1:f7:
                    ba:68:07:c1:6a:8f:db:c9:4e:87:c9:52:a5:50:b9:
                    05:30:b9:eb:e9:67:78:78:51:28:ba:e9:bf:a2:69:
                    71:71:ce:af:f8:81:2f:65:14:f6:37:0a:65:2d:6a:
                    07:bd:06:43:4c:04:27:bd:8b:12:2e:53:b5:48:b4:
                    84:a2:59:9b:eb:e1:d8:35:80:0e:27:25:d6:a3:e5:
                    42:a8:06:03:a3:4e:db:52:ef:c9:ef:aa:9a:77:9e:
                    c2:3d:13:f1:3b:03:7c:17:4d:17:19:64:f5:3b:18:
                    4e:08:5e:cd:07:72:42:95:f7:9c:fa:bf:c8:e4:2c:
                    53:e0:28:32:2c:f6:c7:83:13:96:85:10:34:b0:71:
                    f8:f9:bd:18:62:3e:1f:df:f3:31:bb:53:06:15:ee:
                    4c:18:b1:17:15:25:e8:01:6b:6d:bd:76:8d:3d:7d:
                    94:94:40:4c:bb:82:fe:c1:97:02:ed:b5:a1:d6:75:
                    19:56:b9:95:eb:b1:69:48:67:6a:39:ef:e0:56:13:
                    66:b0:b9:e2:5e:ff:c0:93:23:c6:5f:1a:8f:a5:21:
                    3f:f3:df:66:3c:aa:fd:db:26:54:08:b5:ba:87:58:
                    91:21:a5:1a:74:ee:0d:e2:b0:18:a1:04:db:2b:4a:
                    f4:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:36:AB:B1:8E:DD:22:08:1D:40:DC:8C:D5:92:81:F3:10:7C:19:76
            X509v3 Authority Key Identifier:
                keyid:E5:64:22:7F:0F:27:85:2A:EE:A7:69:48:A1:18:D3:8F:01:D7:64:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7KovFZax5Uh9W9j4a7jFnAe34hGrofN5oZ6CxAsAhbzN/1/E564227F0F27852AEEA76948A118D38F01D7645E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E564227F0F27852AEEA76948A118D38F01D7645E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7KovFZax5Uh9W9j4a7jFnAe34hGrofN5oZ6CxAsAhbzN/1/3139312e3234322e37322e302f32332d3233203d3e20323633343734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.242.72.0/23

    Signature Algorithm: sha256WithRSAEncryption
         ad:17:b2:4f:3c:e7:f0:84:48:cb:96:c9:77:12:50:ff:9e:a0:
         ce:27:cd:29:32:de:b9:23:9a:7b:52:c8:41:6c:d0:07:81:db:
         a4:4b:11:5d:0f:72:ae:a1:64:3d:c4:f5:d7:29:5c:cb:c1:30:
         21:60:3f:39:86:cb:fd:10:5e:e9:7f:c9:99:48:ba:a9:88:2a:
         7a:49:1e:5b:eb:f9:3f:37:12:22:3d:34:30:3e:91:d7:57:35:
         04:f2:31:0c:34:bf:df:e6:f4:9d:47:6e:2e:5d:2d:28:9c:4e:
         dc:e4:1c:28:1d:ef:cd:f2:f9:cb:b7:24:d6:c0:aa:09:2a:c7:
         5c:57:6d:45:60:a1:fc:81:fa:93:b3:f5:f1:bb:cf:42:7e:ee:
         d0:32:e4:9e:31:66:c1:f6:93:1b:6b:3c:45:84:f8:c4:a8:08:
         b0:65:c9:13:29:2d:ad:54:5d:32:64:f3:ff:65:98:0f:e4:0e:
         ff:09:1b:09:cd:25:b4:94:6a:51:2f:fa:86:2e:b1:ad:22:de:
         a0:f1:31:d7:8f:2b:9e:0a:99:8a:ad:31:b8:48:58:6a:6e:b2:
         81:0c:73:14:5d:26:4c:c5:5e:e6:78:dc:90:b8:4e:90:44:98:
         a9:36:6f:e0:18:ca:63:0b:45:09:62:08:f3:50:cc:e2:de:aa:
         6c:c5:6f:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:44:11 2024 by rpki-client on console-ams.rpki-client.org