Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/818kYEcyWohxS9KaatwzkdU5HHzeY6Rp4C87vpB33SmQ/1/3139312e33372e3137382e302f32342d3234203d3e20323633333639.roa
File:                     3139312e33372e3137382e302f32342d3234203d3e20323633333639.roa (raw, json)
Hash identifier:          hZHieGhFRB8mh7FXK9FaIKChNHT5cKRydC96jXWKPw4=
Subject key identifier:   A1:B0:27:66:9B:03:4F:D5:75:E7:1E:77:6F:A3:27:F8:11:93:EF:F8
Certificate issuer:       /CN=7F9FA1F28DCA0698B3EC18364A64EE88284031A3
Certificate serial:       4024958DFA1E8DB386B5144AC40792C2D4529B0C
Authority key identifier: 7F:9F:A1:F2:8D:CA:06:98:B3:EC:18:36:4A:64:EE:88:28:40:31:A3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7F9FA1F28DCA0698B3EC18364A64EE88284031A3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/818kYEcyWohxS9KaatwzkdU5HHzeY6Rp4C87vpB33SmQ/1/3139312e33372e3137382e302f32342d3234203d3e20323633333639.roa
Signing time:             Thu 04 Apr 2024 02:17:49 +0000
ROA not before:           Thu 04 Apr 2024 02:12:49 +0000
ROA not after:            Thu 03 Apr 2025 02:17:49 +0000
asID:                     263369
IP address blocks:        191.37.178.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/818kYEcyWohxS9KaatwzkdU5HHzeY6Rp4C87vpB33SmQ/1/7F9FA1F28DCA0698B3EC18364A64EE88284031A3.crl
                          rsync://rpki-repo.registro.br/repo/818kYEcyWohxS9KaatwzkdU5HHzeY6Rp4C87vpB33SmQ/1/7F9FA1F28DCA0698B3EC18364A64EE88284031A3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7F9FA1F28DCA0698B3EC18364A64EE88284031A3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:17:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:24:95:8d:fa:1e:8d:b3:86:b5:14:4a:c4:07:92:c2:d4:52:9b:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7F9FA1F28DCA0698B3EC18364A64EE88284031A3
        Validity
            Not Before: Apr  4 02:12:49 2024 GMT
            Not After : Apr  3 02:17:49 2025 GMT
        Subject: CN=A1B027669B034FD575E71E776FA327F81193EFF8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:41:ea:97:cc:d5:14:ef:2f:12:03:f1:fe:ef:
                    84:25:3a:a7:b3:7b:62:39:04:23:60:6e:37:08:5b:
                    08:fa:ba:91:64:5d:61:25:a7:43:64:c7:4a:8a:0c:
                    a8:f2:40:8c:df:54:bd:af:a7:83:0a:9a:3e:a7:97:
                    89:a9:29:bc:f8:c1:36:ca:3c:0b:bc:3e:35:3f:46:
                    21:46:3d:17:16:3a:be:7b:16:45:90:f8:eb:17:c0:
                    e8:36:3a:52:05:03:70:de:77:bd:4a:60:67:28:be:
                    d7:16:fd:fb:ff:61:11:6f:92:4c:cd:66:82:c5:2c:
                    d4:cd:c7:b4:f2:69:db:b4:9a:ea:1a:2a:e5:0d:ce:
                    5a:fd:c8:83:fa:06:4a:a1:e0:91:71:78:5c:32:8e:
                    48:9e:ed:7c:08:5a:a9:d5:08:14:15:f8:bb:32:77:
                    89:52:53:41:fc:f9:92:c1:b5:e0:71:e1:bb:2d:9a:
                    24:66:96:47:89:6e:8c:07:87:ba:9c:64:46:5a:7e:
                    f5:31:7c:27:9f:3d:05:d0:d0:08:33:a7:e9:ec:38:
                    e3:d7:71:eb:94:c3:c3:82:a1:36:c4:84:d4:7f:4d:
                    4e:c3:b3:3c:20:31:00:5b:01:47:1f:46:e1:12:fb:
                    86:85:43:b3:94:23:63:a9:16:95:9d:8b:fc:a4:ad:
                    3a:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:B0:27:66:9B:03:4F:D5:75:E7:1E:77:6F:A3:27:F8:11:93:EF:F8
            X509v3 Authority Key Identifier:
                keyid:7F:9F:A1:F2:8D:CA:06:98:B3:EC:18:36:4A:64:EE:88:28:40:31:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/818kYEcyWohxS9KaatwzkdU5HHzeY6Rp4C87vpB33SmQ/1/7F9FA1F28DCA0698B3EC18364A64EE88284031A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7F9FA1F28DCA0698B3EC18364A64EE88284031A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/818kYEcyWohxS9KaatwzkdU5HHzeY6Rp4C87vpB33SmQ/1/3139312e33372e3137382e302f32342d3234203d3e20323633333639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.37.178.0/24

    Signature Algorithm: sha256WithRSAEncryption
         34:05:e4:42:91:cd:1b:ba:84:7c:12:46:97:10:63:b5:83:6e:
         34:9b:c4:86:2a:27:20:3a:cf:67:72:19:08:e8:91:b6:7e:63:
         fd:35:fc:57:bd:15:da:48:6b:4f:84:03:2b:6f:9f:82:78:a1:
         b7:87:55:2b:d7:be:f9:fa:78:0e:cb:53:4a:a3:87:d6:26:5d:
         dd:43:5f:e4:49:36:67:77:b1:28:eb:28:ea:08:b7:27:c6:28:
         df:a1:28:9c:c7:bd:63:99:fb:fd:de:27:bd:fa:ec:89:76:35:
         94:ff:96:ee:1a:f5:e9:aa:d7:32:bf:f9:fc:74:6c:cc:2e:9f:
         d3:b2:fb:44:99:7a:be:20:71:dc:43:ab:ed:01:02:14:02:90:
         e9:be:4f:0b:0f:03:5f:87:aa:22:a4:2f:f5:72:28:7d:e5:70:
         bc:71:52:8b:3d:aa:27:6e:52:67:e7:47:95:2c:44:9b:64:6f:
         12:3b:05:72:65:a1:91:c9:7e:86:98:b3:32:31:98:e5:85:61:
         54:84:9f:91:74:a6:9d:35:3e:d5:4f:38:e8:0e:a2:c2:bc:db:
         dc:22:aa:aa:cd:6a:a5:04:05:a4:00:dc:17:b1:09:7a:8e:ca:
         89:ae:f8:8d:30:d4:90:dd:78:e5:c1:12:38:ec:3e:81:40:38:
         f3:9e:ad:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:10:03 2024 by rpki-client on console-ams.rpki-client.org