Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7ztPn7zcS9DeHykiXPDeRa8M6MEZ6P3x25tsZyVD5CVn/0/3139312e3234332e3136332e302f32342d3234203d3e20323633353038.roa
File:                     3139312e3234332e3136332e302f32342d3234203d3e20323633353038.roa (raw, json)
Hash identifier:          Z3vZV3uiA3jm2B5HzQ1SywekYoTT7FtqtTHVf6N3In0=
Subject key identifier:   D2:09:9A:7A:E4:07:C5:D1:59:F0:C7:AE:01:CE:47:CE:1C:52:CA:1F
Certificate issuer:       /CN=028CDE0E764AA87F51C83E2608B8562B72B4E204
Certificate serial:       5CF021E210D49E26D30A96EF4BDA8631C9B6E70A
Authority key identifier: 02:8C:DE:0E:76:4A:A8:7F:51:C8:3E:26:08:B8:56:2B:72:B4:E2:04
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/028CDE0E764AA87F51C83E2608B8562B72B4E204.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7ztPn7zcS9DeHykiXPDeRa8M6MEZ6P3x25tsZyVD5CVn/0/3139312e3234332e3136332e302f32342d3234203d3e20323633353038.roa
Signing time:             Thu 29 Aug 2024 19:00:50 +0000
ROA not before:           Thu 29 Aug 2024 18:55:50 +0000
ROA not after:            Thu 28 Aug 2025 19:00:50 +0000
asID:                     263508
IP address blocks:        191.243.163.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7ztPn7zcS9DeHykiXPDeRa8M6MEZ6P3x25tsZyVD5CVn/0/028CDE0E764AA87F51C83E2608B8562B72B4E204.crl
                          rsync://rpki-repo.registro.br/repo/7ztPn7zcS9DeHykiXPDeRa8M6MEZ6P3x25tsZyVD5CVn/0/028CDE0E764AA87F51C83E2608B8562B72B4E204.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/028CDE0E764AA87F51C83E2608B8562B72B4E204.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 03:30:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:f0:21:e2:10:d4:9e:26:d3:0a:96:ef:4b:da:86:31:c9:b6:e7:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=028CDE0E764AA87F51C83E2608B8562B72B4E204
        Validity
            Not Before: Aug 29 18:55:50 2024 GMT
            Not After : Aug 28 19:00:50 2025 GMT
        Subject: CN=D2099A7AE407C5D159F0C7AE01CE47CE1C52CA1F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:98:27:34:dd:00:d5:2f:61:7e:61:16:94:4d:
                    74:c9:69:0a:89:69:00:13:f7:4f:eb:64:d8:d7:9a:
                    dd:d5:db:28:21:dc:d4:a4:fa:aa:8f:b1:d0:56:7f:
                    43:c2:51:6e:ae:bb:82:c6:2b:4d:8c:a5:0b:8d:e2:
                    c1:dc:96:ac:a1:56:aa:3a:29:88:a3:db:1d:99:9c:
                    cc:b6:a8:87:b2:70:ca:a7:5d:2d:15:01:61:a6:84:
                    28:6c:68:7f:df:68:2d:d2:ca:30:f3:df:18:6a:f0:
                    b5:bb:83:f3:b3:77:ce:6f:3f:dc:e6:dd:c3:5a:69:
                    6c:08:f6:64:57:62:0c:81:54:57:0d:48:35:b2:f5:
                    24:ab:38:fc:ed:10:9e:3b:21:c1:79:b1:ef:32:cf:
                    c8:6c:2e:ca:30:c1:33:2b:55:b6:18:f4:cc:bf:d5:
                    db:e0:35:40:50:80:c0:62:6f:e6:55:34:5e:27:cd:
                    e2:9c:b4:f7:0d:d9:4e:ac:bf:e8:96:6a:e7:2e:a8:
                    de:8d:86:b3:66:a2:97:41:51:db:9b:fc:35:4a:44:
                    28:14:86:6c:d2:53:b9:61:15:b7:ef:07:52:76:4b:
                    16:6f:3f:c8:b4:8c:9c:2a:9e:96:a7:5c:9e:62:a7:
                    58:5f:0c:ae:e9:5c:19:59:bd:55:fb:2d:9c:cb:1f:
                    28:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:09:9A:7A:E4:07:C5:D1:59:F0:C7:AE:01:CE:47:CE:1C:52:CA:1F
            X509v3 Authority Key Identifier:
                keyid:02:8C:DE:0E:76:4A:A8:7F:51:C8:3E:26:08:B8:56:2B:72:B4:E2:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7ztPn7zcS9DeHykiXPDeRa8M6MEZ6P3x25tsZyVD5CVn/0/028CDE0E764AA87F51C83E2608B8562B72B4E204.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/028CDE0E764AA87F51C83E2608B8562B72B4E204.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7ztPn7zcS9DeHykiXPDeRa8M6MEZ6P3x25tsZyVD5CVn/0/3139312e3234332e3136332e302f32342d3234203d3e20323633353038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.243.163.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3c:b8:1f:65:9e:f3:93:24:16:6a:d7:a7:44:b1:16:8d:6f:09:
         c7:39:a9:3b:66:fc:7f:ad:c5:43:e1:e5:8d:1b:5f:1c:28:f0:
         4d:00:a7:fe:d7:7a:7a:83:6e:b6:4e:c0:24:5a:10:ef:1d:f4:
         79:86:23:9f:83:cf:97:f0:d1:69:55:7b:d6:4c:e3:0c:2d:f2:
         9a:86:e7:88:a7:0b:0b:75:9c:db:0f:35:7d:f3:91:21:b3:31:
         ce:67:fc:36:6b:6a:83:80:38:fe:c1:f7:a4:0b:b4:b5:60:94:
         87:ef:c0:93:a2:c1:9a:71:aa:01:56:6d:64:4c:2e:14:c6:c5:
         e2:7a:4c:89:8a:26:f3:57:36:c6:f0:d7:27:ae:97:18:ff:b1:
         1f:47:c8:45:39:ce:9e:f5:fc:df:c0:ef:f0:d4:e3:87:1a:bb:
         11:a1:e8:61:c9:cc:e2:69:12:94:53:19:7c:0f:c3:14:cf:56:
         a5:ad:cb:1e:bd:74:b1:a8:0c:f2:42:49:4a:d6:d9:a7:b3:c4:
         ad:93:0f:14:c9:52:50:dc:08:a9:0d:bc:ec:4a:de:c4:b7:1d:
         77:49:1d:ed:d2:fc:48:19:5e:70:ec:4c:3d:f1:16:db:9a:82:
         4d:d8:b1:88:4a:2e:64:38:d8:b4:ad:22:c7:8c:b0:99:fa:3d:
         ab:bd:a5:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 05:00:56 2024 by rpki-client on console-fra.rpki-client.org