Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7KovFZax5Uh9W9j4a7jFnAe34hGrofN5oZ6CxAsAhbzN/1/3139312e3234322e37332e302f32342d3234203d3e20323633343734.roa
File:                     3139312e3234322e37332e302f32342d3234203d3e20323633343734.roa (raw, json)
Hash identifier:          9ZfwMykNuzvgePHxIVvf4nDD3saETkB95W8DPIskZCI=
Subject key identifier:   75:30:4D:14:BE:88:2B:11:34:06:BC:B0:57:73:51:9C:14:10:41:25
Certificate issuer:       /CN=E564227F0F27852AEEA76948A118D38F01D7645E
Certificate serial:       428C80D9CED331C9F3A479AD29A7F1DE36868CAB
Authority key identifier: E5:64:22:7F:0F:27:85:2A:EE:A7:69:48:A1:18:D3:8F:01:D7:64:5E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E564227F0F27852AEEA76948A118D38F01D7645E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7KovFZax5Uh9W9j4a7jFnAe34hGrofN5oZ6CxAsAhbzN/1/3139312e3234322e37332e302f32342d3234203d3e20323633343734.roa
Signing time:             Thu 04 Apr 2024 06:00:33 +0000
ROA not before:           Thu 04 Apr 2024 05:55:33 +0000
ROA not after:            Thu 03 Apr 2025 06:00:33 +0000
asID:                     263474
IP address blocks:        191.242.73.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7KovFZax5Uh9W9j4a7jFnAe34hGrofN5oZ6CxAsAhbzN/1/E564227F0F27852AEEA76948A118D38F01D7645E.crl
                          rsync://rpki-repo.registro.br/repo/7KovFZax5Uh9W9j4a7jFnAe34hGrofN5oZ6CxAsAhbzN/1/E564227F0F27852AEEA76948A118D38F01D7645E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E564227F0F27852AEEA76948A118D38F01D7645E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 12:08:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:8c:80:d9:ce:d3:31:c9:f3:a4:79:ad:29:a7:f1:de:36:86:8c:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E564227F0F27852AEEA76948A118D38F01D7645E
        Validity
            Not Before: Apr  4 05:55:33 2024 GMT
            Not After : Apr  3 06:00:33 2025 GMT
        Subject: CN=75304D14BE882B113406BCB05773519C14104125
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:7c:4c:bc:a5:71:4a:5a:66:6f:b3:56:e5:5e:
                    f1:1d:98:be:ec:52:47:98:80:dc:48:8a:28:02:19:
                    5d:9c:66:95:be:c6:de:6e:f5:62:01:b3:08:f0:19:
                    bf:f6:f1:f9:75:a4:9c:42:97:9f:a7:cd:8e:90:ed:
                    bb:26:2d:78:da:bf:a8:1a:f9:f5:bd:a0:9c:25:47:
                    88:0b:91:d4:8f:06:38:98:c8:1e:93:d3:41:49:cd:
                    bc:64:7a:8e:f5:9f:d2:3f:38:0e:57:b6:6a:58:ea:
                    b4:06:53:97:99:e2:58:f0:95:ef:ed:0d:27:4a:97:
                    83:47:f5:b2:2f:ce:41:12:ae:1f:f3:25:ad:05:58:
                    8b:fa:88:a9:45:82:49:d0:7b:35:56:32:a2:01:c6:
                    4a:e6:26:ef:de:e4:b2:36:bf:b6:e0:0a:f6:15:18:
                    dd:96:15:c5:f9:74:80:ed:e0:13:f6:60:df:c3:96:
                    1c:c1:a7:b1:7f:bd:f9:b1:e3:da:f8:1b:35:8a:f6:
                    aa:e8:b3:94:6b:66:27:32:0e:ad:28:8a:5a:43:46:
                    6b:e7:6a:bd:70:e1:1a:17:e4:4e:75:27:6f:73:5b:
                    1f:42:9b:83:77:32:d4:6e:d6:62:a0:71:3f:84:d0:
                    9a:16:b2:58:a3:9b:36:50:fb:49:5a:84:be:d7:3c:
                    be:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:30:4D:14:BE:88:2B:11:34:06:BC:B0:57:73:51:9C:14:10:41:25
            X509v3 Authority Key Identifier:
                keyid:E5:64:22:7F:0F:27:85:2A:EE:A7:69:48:A1:18:D3:8F:01:D7:64:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7KovFZax5Uh9W9j4a7jFnAe34hGrofN5oZ6CxAsAhbzN/1/E564227F0F27852AEEA76948A118D38F01D7645E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E564227F0F27852AEEA76948A118D38F01D7645E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7KovFZax5Uh9W9j4a7jFnAe34hGrofN5oZ6CxAsAhbzN/1/3139312e3234322e37332e302f32342d3234203d3e20323633343734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.242.73.0/24

    Signature Algorithm: sha256WithRSAEncryption
         13:5f:bb:35:b1:c9:4f:00:50:22:eb:7c:5f:dc:61:ac:d2:4d:
         e6:b1:f0:8b:b4:00:32:8b:15:ae:2e:35:a5:2b:15:66:e7:b2:
         f6:64:95:dd:c9:7b:ab:6e:8a:f8:87:42:33:13:78:1f:9b:7f:
         d6:8d:6e:41:3f:b6:35:7b:67:3b:ef:d4:60:3a:00:40:4a:28:
         1d:b3:38:5d:07:bd:31:1a:7e:c8:c0:52:ad:3a:e1:59:04:c8:
         9f:38:b6:cd:b3:90:d0:d9:cd:5a:a4:f9:ad:7b:d6:2c:e5:86:
         7a:12:c5:be:47:9b:59:47:e7:68:38:16:71:a1:2e:12:21:2b:
         d5:f2:f6:d6:ed:ed:a3:d1:1e:1f:b4:79:a5:e4:b4:7c:fd:de:
         3b:38:a8:2d:ea:8e:01:3e:2a:03:ea:0c:f0:33:b9:44:11:c5:
         1f:fa:1b:2b:d8:7c:ae:3d:53:f5:f1:33:18:ef:bc:bd:20:47:
         00:84:4b:20:a4:8c:3b:94:5e:46:88:28:11:8f:62:72:1f:87:
         4b:0e:ca:53:d3:1b:63:60:86:2c:70:07:43:e2:f7:6a:2e:4b:
         25:19:fb:39:cd:06:f3:55:13:80:a8:45:f7:ac:f8:7b:71:0c:
         bf:a2:10:89:1c:e5:39:8c:3e:89:fb:62:cd:44:44:6c:80:e8:
         ea:59:e6:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:14:45 2024 by rpki-client on console-fra.rpki-client.org