Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7KovFZax5Uh9W9j4a7jFnAe34hGrofN5oZ6CxAsAhbzN/1/3139312e3234322e37382e302f32342d3234203d3e20323633343734.roa
File:                     3139312e3234322e37382e302f32342d3234203d3e20323633343734.roa (raw, json)
Hash identifier:          CDcpGVD8WUNpTYfqDvnPSoyDWoknPcIWCpWeo2SiHJU=
Subject key identifier:   89:C5:25:EB:6E:61:BF:4B:AF:D9:42:EC:17:88:FD:CB:AF:BC:FD:05
Certificate issuer:       /CN=E564227F0F27852AEEA76948A118D38F01D7645E
Certificate serial:       2558C459DEC0366A5BD2A9B517417CA49FD0BCE9
Authority key identifier: E5:64:22:7F:0F:27:85:2A:EE:A7:69:48:A1:18:D3:8F:01:D7:64:5E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E564227F0F27852AEEA76948A118D38F01D7645E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7KovFZax5Uh9W9j4a7jFnAe34hGrofN5oZ6CxAsAhbzN/1/3139312e3234322e37382e302f32342d3234203d3e20323633343734.roa
Signing time:             Thu 04 Apr 2024 06:00:34 +0000
ROA not before:           Thu 04 Apr 2024 05:55:34 +0000
ROA not after:            Thu 03 Apr 2025 06:00:34 +0000
asID:                     263474
IP address blocks:        191.242.78.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7KovFZax5Uh9W9j4a7jFnAe34hGrofN5oZ6CxAsAhbzN/1/E564227F0F27852AEEA76948A118D38F01D7645E.crl
                          rsync://rpki-repo.registro.br/repo/7KovFZax5Uh9W9j4a7jFnAe34hGrofN5oZ6CxAsAhbzN/1/E564227F0F27852AEEA76948A118D38F01D7645E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E564227F0F27852AEEA76948A118D38F01D7645E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 07:46:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:58:c4:59:de:c0:36:6a:5b:d2:a9:b5:17:41:7c:a4:9f:d0:bc:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E564227F0F27852AEEA76948A118D38F01D7645E
        Validity
            Not Before: Apr  4 05:55:34 2024 GMT
            Not After : Apr  3 06:00:34 2025 GMT
        Subject: CN=89C525EB6E61BF4BAFD942EC1788FDCBAFBCFD05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:f9:89:37:a9:49:dc:2d:34:e9:47:7d:52:80:
                    61:b6:bd:1c:bd:3d:a3:30:16:39:5f:14:ba:1f:20:
                    d8:78:d7:cc:8d:a0:df:d2:3d:fb:dd:62:c0:aa:b8:
                    bf:2d:40:d2:2d:d5:13:6a:0a:63:78:d9:40:0f:29:
                    db:bd:e2:05:16:db:8a:da:b0:62:8b:26:e5:a8:e0:
                    01:e6:6b:0c:54:62:00:ff:ae:ad:ab:04:4f:80:38:
                    c7:6b:2d:6d:18:dd:91:9f:db:b1:b6:bd:39:21:63:
                    c3:d9:39:86:44:08:55:3f:58:a1:4f:f2:fa:59:f9:
                    bb:3e:45:b3:1d:63:73:23:bc:3c:6e:d2:f8:d0:4d:
                    2c:ce:5b:61:37:53:71:52:f7:ea:1b:14:96:65:95:
                    c5:9a:21:b7:e7:df:43:dd:39:66:89:55:0d:c3:56:
                    8e:4a:d0:39:5e:21:90:4b:b1:f1:9b:45:67:81:ac:
                    23:75:ba:0c:59:8f:d5:dd:1f:8f:ae:09:0b:08:d6:
                    fd:3b:df:53:9d:36:46:54:9a:d3:26:08:f1:c4:05:
                    6a:43:de:b5:b6:71:35:6e:b4:a1:71:df:e7:be:9f:
                    df:04:63:ae:c5:e3:38:dc:26:6d:2b:99:fd:24:07:
                    00:84:6c:ef:81:27:37:fb:00:49:90:5a:58:0d:6e:
                    88:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:C5:25:EB:6E:61:BF:4B:AF:D9:42:EC:17:88:FD:CB:AF:BC:FD:05
            X509v3 Authority Key Identifier:
                keyid:E5:64:22:7F:0F:27:85:2A:EE:A7:69:48:A1:18:D3:8F:01:D7:64:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7KovFZax5Uh9W9j4a7jFnAe34hGrofN5oZ6CxAsAhbzN/1/E564227F0F27852AEEA76948A118D38F01D7645E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E564227F0F27852AEEA76948A118D38F01D7645E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7KovFZax5Uh9W9j4a7jFnAe34hGrofN5oZ6CxAsAhbzN/1/3139312e3234322e37382e302f32342d3234203d3e20323633343734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.242.78.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b8:0d:41:07:ce:e2:19:e3:11:75:91:ea:44:bb:1b:37:c9:43:
         c3:ce:d8:ed:84:64:d6:46:24:b3:48:70:9f:7e:46:28:e2:80:
         42:3b:2a:e2:44:d0:6a:c5:d6:9c:81:e4:e4:ae:c7:78:ec:9d:
         c5:c6:22:3d:35:4b:d9:23:03:d2:ae:0c:93:39:74:9f:db:a8:
         87:59:d5:88:b1:ea:09:17:9b:81:46:a4:27:62:ce:da:38:06:
         7a:2e:29:11:b6:76:45:2d:c1:9c:a2:a7:0d:08:e1:52:c7:9d:
         06:ee:94:cc:3e:4b:55:e8:e7:e7:34:8d:1f:b7:2b:67:68:67:
         47:6b:48:c3:7e:7b:a3:34:f5:5d:da:ff:a5:fa:59:99:7b:d9:
         e7:50:37:87:6a:e7:49:67:22:3b:63:40:4d:6f:1c:50:e6:29:
         f3:6c:b8:3a:38:4d:ee:4b:7f:41:82:3b:4f:3b:a8:54:24:2a:
         48:0f:37:69:b9:dd:f2:e2:3e:49:bb:bb:10:6b:95:72:a3:42:
         96:e1:68:f7:02:a2:27:9a:25:73:33:b1:ff:78:05:38:93:e1:
         a3:f5:07:a5:b8:f4:7d:87:a9:96:a1:b2:36:4b:e3:9c:b6:04:
         9e:ac:0e:cf:a3:6e:d5:d6:4e:cb:6c:1c:3b:57:1c:0b:10:9d:
         da:76:02:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 07:01:34 2024 by rpki-client on console-ams.rpki-client.org