Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7KovFZax5Uh9W9j4a7jFnAe34hGrofN5oZ6CxAsAhbzN/1/3139312e3234322e37352e302f32342d3234203d3e20323633343734.roa
File:                     3139312e3234322e37352e302f32342d3234203d3e20323633343734.roa (raw, json)
Hash identifier:          Jm+8HUtL3tcoNTm8p7JMQVxfcdqv7vTmLHDDTKhftfE=
Subject key identifier:   68:A5:2C:D0:9D:62:E2:5C:1E:9D:C6:C2:B6:EF:28:18:01:C8:D2:48
Certificate issuer:       /CN=E564227F0F27852AEEA76948A118D38F01D7645E
Certificate serial:       1CAA26A95E866D09D3D56A7721E21EBD38945661
Authority key identifier: E5:64:22:7F:0F:27:85:2A:EE:A7:69:48:A1:18:D3:8F:01:D7:64:5E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E564227F0F27852AEEA76948A118D38F01D7645E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7KovFZax5Uh9W9j4a7jFnAe34hGrofN5oZ6CxAsAhbzN/1/3139312e3234322e37352e302f32342d3234203d3e20323633343734.roa
Signing time:             Thu 04 Apr 2024 06:00:33 +0000
ROA not before:           Thu 04 Apr 2024 05:55:33 +0000
ROA not after:            Thu 03 Apr 2025 06:00:33 +0000
asID:                     263474
IP address blocks:        191.242.75.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7KovFZax5Uh9W9j4a7jFnAe34hGrofN5oZ6CxAsAhbzN/1/E564227F0F27852AEEA76948A118D38F01D7645E.crl
                          rsync://rpki-repo.registro.br/repo/7KovFZax5Uh9W9j4a7jFnAe34hGrofN5oZ6CxAsAhbzN/1/E564227F0F27852AEEA76948A118D38F01D7645E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E564227F0F27852AEEA76948A118D38F01D7645E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 12:08:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:aa:26:a9:5e:86:6d:09:d3:d5:6a:77:21:e2:1e:bd:38:94:56:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E564227F0F27852AEEA76948A118D38F01D7645E
        Validity
            Not Before: Apr  4 05:55:33 2024 GMT
            Not After : Apr  3 06:00:33 2025 GMT
        Subject: CN=68A52CD09D62E25C1E9DC6C2B6EF281801C8D248
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:6f:2f:9c:00:d6:d9:ff:70:36:8f:d2:12:a5:
                    c9:99:ef:fd:2f:3a:95:89:2e:a4:be:06:50:3d:87:
                    7d:13:56:5e:f1:e3:d4:f4:4f:21:43:37:b4:53:8f:
                    8f:fc:e0:d9:21:00:ed:59:f2:08:00:c4:7c:07:05:
                    71:b3:72:88:65:9a:7c:a9:5a:c2:60:03:79:8f:cf:
                    1a:0f:4a:08:be:3b:9f:fc:8c:06:d5:f8:0d:4b:97:
                    65:8e:dc:d5:1b:98:40:d9:39:4d:6a:97:50:0a:1c:
                    e5:d0:50:16:dc:b1:b2:12:9c:71:fb:2b:4e:8c:65:
                    60:5d:2b:86:9a:ae:a2:56:6d:e9:59:62:98:32:6b:
                    98:60:14:53:bc:77:b5:d0:61:a7:69:1e:b3:26:8d:
                    6a:cd:0a:51:90:d0:99:a8:82:24:c1:1a:d7:7e:15:
                    dc:66:39:ef:49:d8:7e:f4:8a:f9:1b:d9:f2:2a:32:
                    35:57:55:78:a0:a1:bb:54:fe:25:8c:e2:e7:f3:e6:
                    38:8b:f7:78:a4:74:00:02:ee:95:24:cb:22:65:30:
                    12:16:c1:30:62:86:9e:7b:eb:3b:42:ac:7a:7f:55:
                    b3:e8:16:3b:b0:cb:dd:8d:41:90:13:4e:e7:27:f3:
                    23:58:2f:65:af:48:9e:47:de:6d:61:82:54:4e:98:
                    9c:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:A5:2C:D0:9D:62:E2:5C:1E:9D:C6:C2:B6:EF:28:18:01:C8:D2:48
            X509v3 Authority Key Identifier:
                keyid:E5:64:22:7F:0F:27:85:2A:EE:A7:69:48:A1:18:D3:8F:01:D7:64:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7KovFZax5Uh9W9j4a7jFnAe34hGrofN5oZ6CxAsAhbzN/1/E564227F0F27852AEEA76948A118D38F01D7645E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E564227F0F27852AEEA76948A118D38F01D7645E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7KovFZax5Uh9W9j4a7jFnAe34hGrofN5oZ6CxAsAhbzN/1/3139312e3234322e37352e302f32342d3234203d3e20323633343734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.242.75.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2c:18:b3:14:55:65:16:d0:be:dc:27:f0:27:80:b3:8a:74:17:
         bc:bc:34:cf:16:78:0b:bd:32:89:78:13:ee:1c:8e:4a:30:8d:
         c3:71:31:28:75:d8:32:92:32:97:6c:83:e6:73:56:5b:c2:c2:
         f6:cf:f9:90:40:19:6d:a7:13:d8:85:a0:84:d7:c7:a2:78:63:
         36:12:14:08:69:8c:eb:a1:18:a5:85:f6:81:0a:0b:a8:b7:9d:
         3a:5c:a4:50:69:22:56:31:90:50:d7:75:dc:f8:a9:3b:a4:8e:
         1b:c8:dd:bc:56:1c:ee:f6:d5:bc:8f:52:a9:b1:44:33:d5:48:
         62:48:89:25:ca:3e:9b:d8:4c:30:45:89:a3:c5:c5:e4:b6:c3:
         06:0d:dd:b7:18:22:8f:3d:cb:20:c6:d1:09:fc:c2:bc:82:bb:
         55:4e:ed:e8:17:7a:2e:41:4a:41:49:34:e1:6b:8d:43:f6:1e:
         9f:76:2c:b7:d3:4f:0a:3c:41:2c:cb:b6:cc:d0:b2:24:54:a4:
         c5:9a:29:15:e4:df:6c:54:9a:30:74:47:e5:8f:99:66:45:58:
         b1:65:21:b3:cf:43:dc:93:39:5d:12:26:b4:a7:06:58:78:29:
         63:81:cb:e5:a0:3f:b4:8c:a6:3f:64:f4:4b:2a:e3:e3:d7:8e:
         90:e1:e6:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:44:11 2024 by rpki-client on console-ams.rpki-client.org