Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7KovFZax5Uh9W9j4a7jFnAe34hGrofN5oZ6CxAsAhbzN/1/3139312e3234322e37372e302f32342d3234203d3e20323633343734.roa
File:                     3139312e3234322e37372e302f32342d3234203d3e20323633343734.roa (raw, json)
Hash identifier:          pnEFJrLKo5kGs+/NO4MonEDezgQlrPAXAw6E5RhGlDo=
Subject key identifier:   DC:6B:11:D0:94:28:25:F2:FC:57:69:4E:DC:3E:30:1F:4D:9C:FE:F3
Certificate issuer:       /CN=E564227F0F27852AEEA76948A118D38F01D7645E
Certificate serial:       618BF1A72615AC69D5A4F8155C6171ADF1D06AC1
Authority key identifier: E5:64:22:7F:0F:27:85:2A:EE:A7:69:48:A1:18:D3:8F:01:D7:64:5E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E564227F0F27852AEEA76948A118D38F01D7645E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7KovFZax5Uh9W9j4a7jFnAe34hGrofN5oZ6CxAsAhbzN/1/3139312e3234322e37372e302f32342d3234203d3e20323633343734.roa
Signing time:             Thu 04 Apr 2024 06:00:32 +0000
ROA not before:           Thu 04 Apr 2024 05:55:32 +0000
ROA not after:            Thu 03 Apr 2025 06:00:32 +0000
asID:                     263474
IP address blocks:        191.242.77.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7KovFZax5Uh9W9j4a7jFnAe34hGrofN5oZ6CxAsAhbzN/1/E564227F0F27852AEEA76948A118D38F01D7645E.crl
                          rsync://rpki-repo.registro.br/repo/7KovFZax5Uh9W9j4a7jFnAe34hGrofN5oZ6CxAsAhbzN/1/E564227F0F27852AEEA76948A118D38F01D7645E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E564227F0F27852AEEA76948A118D38F01D7645E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 12:08:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:8b:f1:a7:26:15:ac:69:d5:a4:f8:15:5c:61:71:ad:f1:d0:6a:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E564227F0F27852AEEA76948A118D38F01D7645E
        Validity
            Not Before: Apr  4 05:55:32 2024 GMT
            Not After : Apr  3 06:00:32 2025 GMT
        Subject: CN=DC6B11D0942825F2FC57694EDC3E301F4D9CFEF3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:91:b2:f1:79:8b:60:15:27:97:9f:23:98:da:
                    f0:03:bb:13:20:9a:77:aa:64:1c:45:b1:f0:83:4e:
                    12:76:6b:d8:55:0a:b1:67:1d:58:00:80:94:41:71:
                    ea:51:02:54:83:3e:0a:8c:80:ba:ed:db:2a:4c:df:
                    b7:dc:cc:34:99:14:58:a4:b9:43:46:04:99:9e:c4:
                    e6:10:c2:23:89:69:86:a7:77:ef:70:69:b3:1a:c6:
                    23:d4:c9:34:2e:7a:22:fc:37:9c:80:87:4c:59:ae:
                    e5:87:6b:81:3b:b3:80:53:5c:9c:11:b4:dc:fd:8e:
                    8a:25:17:5c:b6:c1:70:50:d2:0a:d2:e5:06:58:50:
                    3e:8c:2c:e7:52:fa:43:a1:de:d0:09:1f:20:32:72:
                    b4:42:f4:5c:5d:c1:3d:7f:8d:4a:1c:47:30:36:6a:
                    97:35:78:3a:a7:80:b9:cf:30:7b:b5:72:a4:6d:c4:
                    30:73:f1:c5:9e:76:1b:26:93:6d:5a:05:05:21:fb:
                    2f:48:aa:af:4e:5a:f8:75:a4:18:4f:bb:2f:0b:1b:
                    a9:11:fd:f4:64:3a:cd:b6:a3:0f:80:c0:c2:68:67:
                    ef:73:3c:e9:2a:82:bf:72:9d:56:81:7e:80:cb:ce:
                    7c:ba:64:73:dd:3a:91:09:cf:e8:be:7c:b9:8a:05:
                    bb:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:6B:11:D0:94:28:25:F2:FC:57:69:4E:DC:3E:30:1F:4D:9C:FE:F3
            X509v3 Authority Key Identifier:
                keyid:E5:64:22:7F:0F:27:85:2A:EE:A7:69:48:A1:18:D3:8F:01:D7:64:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7KovFZax5Uh9W9j4a7jFnAe34hGrofN5oZ6CxAsAhbzN/1/E564227F0F27852AEEA76948A118D38F01D7645E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E564227F0F27852AEEA76948A118D38F01D7645E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7KovFZax5Uh9W9j4a7jFnAe34hGrofN5oZ6CxAsAhbzN/1/3139312e3234322e37372e302f32342d3234203d3e20323633343734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.242.77.0/24

    Signature Algorithm: sha256WithRSAEncryption
         43:2f:76:f5:56:f2:49:9d:f7:c7:ca:81:96:b8:d9:15:11:be:
         db:a0:91:3d:7a:cf:83:69:ee:9b:a4:b9:6b:b1:e9:25:03:cb:
         fb:0e:fd:59:18:40:c0:fd:19:50:19:31:f7:8f:45:0a:81:8e:
         d2:0a:e5:af:24:46:b1:b2:d2:25:cc:66:37:4b:e1:e0:d1:4d:
         97:ce:63:7a:8c:af:55:99:9a:b0:50:15:26:f8:a6:a3:1e:cd:
         66:de:1a:e9:47:3d:ba:b3:c4:0e:be:76:c7:ae:d0:f3:c3:dc:
         cb:14:70:6a:5e:0d:9f:fc:e0:c8:11:38:ff:8b:53:3a:7a:c2:
         f4:7a:f5:f4:da:3d:2f:5a:76:81:7a:39:6e:28:b6:39:ec:63:
         8f:b6:bf:b7:11:ea:72:df:90:d5:81:9e:81:82:10:54:ba:4a:
         01:14:9f:be:9e:5f:58:eb:5f:60:13:87:69:39:67:01:44:bf:
         90:0a:ef:1c:45:a2:2d:09:b2:6c:40:4d:5b:1a:5b:b5:92:25:
         cc:05:51:1f:98:1d:88:69:23:2c:2e:34:44:b8:18:8b:34:5c:
         64:39:81:7e:a7:ae:c1:c7:e0:e2:bf:f8:31:8d:58:eb:87:77:
         1d:2c:45:b3:f1:c2:ee:f2:c6:d8:38:bd:04:e2:cf:cd:44:ea:
         98:2c:b5:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:44:11 2024 by rpki-client on console-ams.rpki-client.org