Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7bZnWd6Y35ctc3aXdxWUxvfA51rT1Cj8D5zHtuK72t9c/1/3139312e3234312e3232322e302f32332d3233203d3e203533303631.roa
File:                     3139312e3234312e3232322e302f32332d3233203d3e203533303631.roa (raw, json)
Hash identifier:          AelAZtYfkf06Nuo+axtvduqJhk+iuIZ5r7IZc+IyiUo=
Subject key identifier:   69:0C:8F:70:FA:03:CD:17:3B:A4:50:BD:DE:92:54:3D:F0:69:50:96
Certificate issuer:       /CN=F4350D0F7940D2C9E193A27C0A14B651396141D6
Certificate serial:       3307CCDD6620E025226BEA487B93631D6D967969
Authority key identifier: F4:35:0D:0F:79:40:D2:C9:E1:93:A2:7C:0A:14:B6:51:39:61:41:D6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F4350D0F7940D2C9E193A27C0A14B651396141D6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7bZnWd6Y35ctc3aXdxWUxvfA51rT1Cj8D5zHtuK72t9c/1/3139312e3234312e3232322e302f32332d3233203d3e203533303631.roa
Signing time:             Thu 04 Apr 2024 19:52:53 +0000
ROA not before:           Thu 04 Apr 2024 19:47:53 +0000
ROA not after:            Thu 03 Apr 2025 19:52:53 +0000
asID:                     53061
IP address blocks:        191.241.222.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7bZnWd6Y35ctc3aXdxWUxvfA51rT1Cj8D5zHtuK72t9c/1/F4350D0F7940D2C9E193A27C0A14B651396141D6.crl
                          rsync://rpki-repo.registro.br/repo/7bZnWd6Y35ctc3aXdxWUxvfA51rT1Cj8D5zHtuK72t9c/1/F4350D0F7940D2C9E193A27C0A14B651396141D6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F4350D0F7940D2C9E193A27C0A14B651396141D6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 19:18:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:07:cc:dd:66:20:e0:25:22:6b:ea:48:7b:93:63:1d:6d:96:79:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F4350D0F7940D2C9E193A27C0A14B651396141D6
        Validity
            Not Before: Apr  4 19:47:53 2024 GMT
            Not After : Apr  3 19:52:53 2025 GMT
        Subject: CN=690C8F70FA03CD173BA450BDDE92543DF0695096
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:b9:d9:ea:35:68:70:34:16:bf:40:84:5c:bd:
                    dd:38:af:09:69:ba:8f:7f:7f:97:75:e9:68:5a:cb:
                    09:6f:55:f9:62:58:1b:8b:a5:b7:81:fd:97:90:dd:
                    b7:f3:13:25:b9:bb:0a:95:05:6c:65:6d:ef:d8:a5:
                    68:14:b7:e9:94:79:53:de:a2:b8:5c:a3:ee:2b:e0:
                    c2:52:75:17:2f:57:54:81:cf:b2:4b:77:66:dc:1b:
                    62:b9:ea:5e:4c:15:59:6f:73:92:15:2d:eb:3f:07:
                    62:fb:3d:62:35:5f:aa:df:04:d1:08:93:8e:4f:13:
                    8f:0b:a8:46:34:35:78:e9:cb:bc:33:d4:46:fc:f5:
                    81:3c:30:2b:b4:c8:59:95:4b:71:9e:f4:d6:f3:a6:
                    69:79:e1:36:81:24:4b:4f:a7:de:ec:cb:85:ea:dc:
                    6d:fb:68:d6:93:a2:82:02:40:21:7a:d6:e0:92:f9:
                    7a:4b:3e:fa:32:51:2e:db:10:9a:84:42:f2:f4:1f:
                    02:b7:41:f3:82:7b:e7:4f:bd:0f:a4:fb:ab:3c:a3:
                    6e:7b:35:4e:13:87:09:4e:ff:69:57:4d:1c:9a:19:
                    ce:3a:ad:40:02:80:8b:2c:a3:02:55:c7:90:29:cb:
                    7a:11:01:8d:a4:8b:53:e7:22:75:89:3c:d6:38:00:
                    39:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:0C:8F:70:FA:03:CD:17:3B:A4:50:BD:DE:92:54:3D:F0:69:50:96
            X509v3 Authority Key Identifier:
                keyid:F4:35:0D:0F:79:40:D2:C9:E1:93:A2:7C:0A:14:B6:51:39:61:41:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7bZnWd6Y35ctc3aXdxWUxvfA51rT1Cj8D5zHtuK72t9c/1/F4350D0F7940D2C9E193A27C0A14B651396141D6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F4350D0F7940D2C9E193A27C0A14B651396141D6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7bZnWd6Y35ctc3aXdxWUxvfA51rT1Cj8D5zHtuK72t9c/1/3139312e3234312e3232322e302f32332d3233203d3e203533303631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.241.222.0/23

    Signature Algorithm: sha256WithRSAEncryption
         97:7b:39:80:5b:96:6f:43:c1:fb:2f:94:27:0f:cc:03:7d:20:
         3d:55:3d:3b:88:2e:0b:1a:ee:f9:5c:fd:05:50:64:7a:94:11:
         60:92:ea:3b:01:0b:27:28:c5:82:d6:ac:ab:84:11:66:48:7d:
         09:ed:eb:ad:7d:e1:b7:ba:79:b8:ca:08:3e:fd:2a:5c:ba:dd:
         4a:fb:03:79:67:92:25:fa:c2:71:1b:68:56:8d:c8:8e:2d:77:
         6f:7e:cc:10:59:08:32:8a:ce:7e:01:45:78:76:3a:00:57:c2:
         34:4a:16:ab:5a:b6:7d:63:36:18:0b:92:78:c2:4f:15:c0:ec:
         f8:93:53:13:99:e9:28:e5:d2:c3:93:c1:57:00:fa:d4:b6:43:
         4e:10:3f:45:7d:a1:43:cc:e0:e7:fe:42:17:79:5b:6b:5c:d2:
         a5:b7:bd:0a:51:90:28:cc:87:df:26:58:f2:c8:2e:2c:7c:13:
         50:4a:b7:51:0a:97:e8:74:6a:26:52:58:4b:d3:be:2c:cb:a6:
         4a:f1:ed:31:c0:70:1b:51:9f:e0:f5:59:e3:a1:ef:4a:e5:f2:
         a3:62:bf:e0:d8:e6:51:bf:6d:50:69:55:ce:be:73:34:bc:4f:
         fc:7f:8f:90:68:c6:f4:ff:69:0a:35:55:a0:7b:e4:d9:27:ed:
         03:2f:65:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 19:18:02 2024 by rpki-client on console-fra.rpki-client.org