Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/818kYEcyWohxS9KaatwzkdU5HHzeY6Rp4C87vpB33SmQ/1/3139312e33372e3137372e302f32342d3234203d3e20323633333639.roa
File:                     3139312e33372e3137372e302f32342d3234203d3e20323633333639.roa (raw, json)
Hash identifier:          fi9KQEllsscn5JVHJP2T7+pgfjdF2nkkuofS3L/Eu/4=
Subject key identifier:   20:AF:FD:C3:BA:C0:CA:D7:0E:22:25:96:47:6F:DB:DE:E0:06:EA:AF
Certificate issuer:       /CN=7F9FA1F28DCA0698B3EC18364A64EE88284031A3
Certificate serial:       73CB51DDED07082DD3B629CD43D180FBC9E7C09B
Authority key identifier: 7F:9F:A1:F2:8D:CA:06:98:B3:EC:18:36:4A:64:EE:88:28:40:31:A3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7F9FA1F28DCA0698B3EC18364A64EE88284031A3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/818kYEcyWohxS9KaatwzkdU5HHzeY6Rp4C87vpB33SmQ/1/3139312e33372e3137372e302f32342d3234203d3e20323633333639.roa
Signing time:             Thu 04 Apr 2024 02:17:49 +0000
ROA not before:           Thu 04 Apr 2024 02:12:49 +0000
ROA not after:            Thu 03 Apr 2025 02:17:49 +0000
asID:                     263369
IP address blocks:        191.37.177.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/818kYEcyWohxS9KaatwzkdU5HHzeY6Rp4C87vpB33SmQ/1/7F9FA1F28DCA0698B3EC18364A64EE88284031A3.crl
                          rsync://rpki-repo.registro.br/repo/818kYEcyWohxS9KaatwzkdU5HHzeY6Rp4C87vpB33SmQ/1/7F9FA1F28DCA0698B3EC18364A64EE88284031A3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7F9FA1F28DCA0698B3EC18364A64EE88284031A3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:17:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:cb:51:dd:ed:07:08:2d:d3:b6:29:cd:43:d1:80:fb:c9:e7:c0:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7F9FA1F28DCA0698B3EC18364A64EE88284031A3
        Validity
            Not Before: Apr  4 02:12:49 2024 GMT
            Not After : Apr  3 02:17:49 2025 GMT
        Subject: CN=20AFFDC3BAC0CAD70E222596476FDBDEE006EAAF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:d1:a5:83:34:02:63:5e:fb:ed:ee:cd:78:1d:
                    85:87:ed:a5:62:bb:2d:4b:c3:f3:c6:2e:6d:b4:2a:
                    6a:b5:bd:00:4c:27:90:e7:63:ad:88:b6:d6:f8:fa:
                    b4:68:fc:00:5d:45:68:03:9b:ca:17:39:a6:32:33:
                    e5:5f:f5:6f:fc:a3:95:29:90:7a:d8:23:34:b2:87:
                    ca:e4:48:dc:42:bf:d6:2c:ec:b3:b8:b2:91:3b:d7:
                    e7:aa:60:95:51:ae:e2:fe:a4:30:71:c2:c7:4c:a1:
                    ff:17:73:42:d2:25:a8:83:aa:fe:c7:55:10:a6:01:
                    fb:8b:14:4c:9b:b8:68:9d:a4:3f:6e:7e:34:3b:a2:
                    c7:1a:76:43:ee:8b:37:44:5c:69:48:38:a4:ea:47:
                    05:3c:6a:9d:f3:37:01:5b:43:4e:7c:17:0f:71:37:
                    17:55:62:dc:b7:76:52:46:f2:cf:2a:f1:ac:5c:a1:
                    14:30:03:69:98:a2:68:cb:ea:79:9b:e4:6f:3e:63:
                    38:28:c8:de:99:c1:e8:30:1b:96:bb:9e:fd:86:f9:
                    5e:d1:ab:db:89:13:84:8a:e9:25:70:50:51:e7:97:
                    0f:08:0c:ec:ae:60:67:bc:df:f1:82:4d:f5:e7:65:
                    7f:42:04:ed:5f:b1:56:ec:4e:69:f6:aa:ec:0e:55:
                    fa:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:AF:FD:C3:BA:C0:CA:D7:0E:22:25:96:47:6F:DB:DE:E0:06:EA:AF
            X509v3 Authority Key Identifier:
                keyid:7F:9F:A1:F2:8D:CA:06:98:B3:EC:18:36:4A:64:EE:88:28:40:31:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/818kYEcyWohxS9KaatwzkdU5HHzeY6Rp4C87vpB33SmQ/1/7F9FA1F28DCA0698B3EC18364A64EE88284031A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7F9FA1F28DCA0698B3EC18364A64EE88284031A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/818kYEcyWohxS9KaatwzkdU5HHzeY6Rp4C87vpB33SmQ/1/3139312e33372e3137372e302f32342d3234203d3e20323633333639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.37.177.0/24

    Signature Algorithm: sha256WithRSAEncryption
         08:6e:15:e6:21:94:40:b1:95:27:20:b1:69:ec:bf:9c:0e:e2:
         b1:e8:d3:98:80:3a:5e:30:76:d3:2b:cd:67:c8:cd:3a:d5:db:
         45:9a:4a:7b:09:27:da:67:fc:14:df:3f:93:44:96:98:97:d2:
         61:ca:8f:44:a6:34:37:ff:b5:6c:0c:0f:eb:0f:45:32:82:f2:
         4d:51:ac:57:3e:2f:c8:a4:a4:48:02:77:45:52:e8:80:64:0a:
         07:d1:85:49:be:70:70:e3:3c:54:41:9e:e8:54:21:a8:fd:96:
         e8:8e:02:db:a0:eb:ff:4e:95:1d:76:fa:5d:02:07:65:ec:b2:
         01:32:5d:11:7f:e7:46:52:38:14:8e:b7:e0:3d:1c:e1:fb:01:
         39:3a:79:b6:a2:a0:83:57:75:fb:07:2b:98:3e:97:79:0b:6d:
         57:fe:da:40:52:a0:5e:2e:1c:b7:5a:9b:1e:95:f9:ee:4a:c8:
         4e:04:13:1a:f7:8a:92:4e:f2:d7:af:4e:9d:22:d7:8d:af:a8:
         79:5b:79:12:6a:31:a3:b8:7c:9c:19:10:5a:97:9a:52:a3:1e:
         e5:48:7a:08:17:06:5e:28:06:a5:11:84:8e:48:43:30:37:74:
         f4:55:75:7c:d5:97:8c:d1:4d:ac:4f:b4:e6:78:a5:3a:3f:d1:
         9c:0c:a4:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:10:03 2024 by rpki-client on console-ams.rpki-client.org