Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/818kYEcyWohxS9KaatwzkdU5HHzeY6Rp4C87vpB33SmQ/1/3139312e33372e3137392e302f32342d3234203d3e20323633333639.roa
File:                     3139312e33372e3137392e302f32342d3234203d3e20323633333639.roa (raw, json)
Hash identifier:          0w0lzqCWWKwpnCTkRtzA7+OPY+dSJbvhZjbIum09vg0=
Subject key identifier:   A5:9D:FB:08:56:EA:38:76:7C:63:91:3D:34:13:59:D4:C5:2E:3C:AD
Certificate issuer:       /CN=7F9FA1F28DCA0698B3EC18364A64EE88284031A3
Certificate serial:       6EC4EBE765BD707A530D4BAFB90D1CC8B5302E27
Authority key identifier: 7F:9F:A1:F2:8D:CA:06:98:B3:EC:18:36:4A:64:EE:88:28:40:31:A3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7F9FA1F28DCA0698B3EC18364A64EE88284031A3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/818kYEcyWohxS9KaatwzkdU5HHzeY6Rp4C87vpB33SmQ/1/3139312e33372e3137392e302f32342d3234203d3e20323633333639.roa
Signing time:             Thu 04 Apr 2024 02:17:49 +0000
ROA not before:           Thu 04 Apr 2024 02:12:49 +0000
ROA not after:            Thu 03 Apr 2025 02:17:49 +0000
asID:                     263369
IP address blocks:        191.37.179.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/818kYEcyWohxS9KaatwzkdU5HHzeY6Rp4C87vpB33SmQ/1/7F9FA1F28DCA0698B3EC18364A64EE88284031A3.crl
                          rsync://rpki-repo.registro.br/repo/818kYEcyWohxS9KaatwzkdU5HHzeY6Rp4C87vpB33SmQ/1/7F9FA1F28DCA0698B3EC18364A64EE88284031A3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7F9FA1F28DCA0698B3EC18364A64EE88284031A3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:17:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:c4:eb:e7:65:bd:70:7a:53:0d:4b:af:b9:0d:1c:c8:b5:30:2e:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7F9FA1F28DCA0698B3EC18364A64EE88284031A3
        Validity
            Not Before: Apr  4 02:12:49 2024 GMT
            Not After : Apr  3 02:17:49 2025 GMT
        Subject: CN=A59DFB0856EA38767C63913D341359D4C52E3CAD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:64:ac:8b:3e:80:fe:f7:f9:64:ce:a0:0f:bb:
                    96:47:c3:8d:2e:2a:5a:c9:2c:6e:2c:11:85:d4:1a:
                    3c:22:5a:54:d7:9d:24:98:87:8c:6d:49:f7:0d:7c:
                    9d:4b:1d:d5:3a:4a:47:32:13:7d:3c:03:c3:32:f6:
                    50:f9:e4:b2:2f:f2:e3:17:c9:57:eb:0d:14:c8:59:
                    d8:ea:b1:4e:f5:8c:3f:2c:44:fc:61:95:e1:3d:91:
                    d7:04:5a:5c:56:4e:87:8b:d0:4a:7b:40:a7:ea:02:
                    c2:6c:95:78:e4:46:6f:b8:d7:a7:70:99:ab:b1:39:
                    21:7d:82:08:48:48:fd:36:ed:e3:3d:11:85:49:22:
                    3a:87:45:40:d8:0c:b3:9a:f9:d9:24:8b:fe:ed:cb:
                    3c:21:d4:97:53:b5:f1:15:1b:6f:df:46:bb:fe:3b:
                    f0:81:a8:14:ed:6a:0b:a4:f9:b2:0f:74:ed:42:3d:
                    ea:8f:4d:9e:4a:18:c3:d2:1f:16:c8:7e:d0:3f:9f:
                    73:5b:db:54:33:97:90:8d:67:3f:27:13:3a:dc:63:
                    19:13:81:2b:f7:ac:dc:06:99:2e:1a:76:7b:be:85:
                    2a:39:d1:64:ed:45:62:aa:10:1a:25:ac:ef:c6:9f:
                    3b:29:e7:18:be:ac:12:5d:c2:ca:72:e8:60:0b:2e:
                    c7:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:9D:FB:08:56:EA:38:76:7C:63:91:3D:34:13:59:D4:C5:2E:3C:AD
            X509v3 Authority Key Identifier:
                keyid:7F:9F:A1:F2:8D:CA:06:98:B3:EC:18:36:4A:64:EE:88:28:40:31:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/818kYEcyWohxS9KaatwzkdU5HHzeY6Rp4C87vpB33SmQ/1/7F9FA1F28DCA0698B3EC18364A64EE88284031A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7F9FA1F28DCA0698B3EC18364A64EE88284031A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/818kYEcyWohxS9KaatwzkdU5HHzeY6Rp4C87vpB33SmQ/1/3139312e33372e3137392e302f32342d3234203d3e20323633333639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.37.179.0/24

    Signature Algorithm: sha256WithRSAEncryption
         25:58:69:9c:53:01:d3:63:ac:2e:8b:60:34:bb:73:0c:12:de:
         ad:83:88:a4:8d:95:6b:24:1d:02:35:68:46:70:16:d7:65:21:
         36:6d:25:b3:db:b1:3f:37:e3:4a:11:32:5a:83:60:39:57:78:
         05:57:05:1e:77:d2:8b:98:34:fd:fb:66:8c:1e:f9:fd:60:7e:
         55:b2:b3:66:26:77:e2:0f:9f:cf:12:4e:fb:29:6e:ec:bb:97:
         7d:07:dd:57:99:5a:67:ee:5d:09:a0:7e:48:33:86:83:ea:85:
         7e:4c:31:01:aa:0b:31:32:7a:6d:98:14:a8:15:64:54:4b:75:
         bb:d2:43:8a:3d:33:04:7c:58:ef:b5:29:10:f4:75:85:78:40:
         a8:af:c7:e0:90:dc:b3:64:71:f5:63:84:3f:b5:67:12:2c:9e:
         ff:41:aa:72:8f:3d:64:66:3c:77:fc:9f:a3:6a:c0:07:93:69:
         97:87:46:02:70:1f:36:0c:d7:8d:9e:e4:8b:7f:15:79:ad:e2:
         28:b9:78:48:bb:82:d6:7b:9d:ab:5c:67:1d:4b:96:15:9a:fd:
         5f:50:4e:f6:56:47:c5:43:fb:bf:7a:5d:ae:0c:f5:ad:28:3f:
         0b:05:0e:05:b8:fc:ea:ae:53:df:d5:31:62:c6:a8:96:bb:f8:
         65:34:e7:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:21:07 2024 by rpki-client on console-fra.rpki-client.org