Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/818kYEcyWohxS9KaatwzkdU5HHzeY6Rp4C87vpB33SmQ/1/3139312e33372e3138312e302f32342d3234203d3e20323633333639.roa
File:                     3139312e33372e3138312e302f32342d3234203d3e20323633333639.roa (raw, json)
Hash identifier:          vI0w1mM/GNhXt43ssrIsmhCP3968lBopa56fz9zQLW8=
Subject key identifier:   91:B9:FA:EE:D9:B6:EB:64:F2:00:5F:72:2D:04:6E:0D:27:90:C7:24
Certificate issuer:       /CN=7F9FA1F28DCA0698B3EC18364A64EE88284031A3
Certificate serial:       3B75D4752226058D0301C22097856FB5737BC394
Authority key identifier: 7F:9F:A1:F2:8D:CA:06:98:B3:EC:18:36:4A:64:EE:88:28:40:31:A3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7F9FA1F28DCA0698B3EC18364A64EE88284031A3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/818kYEcyWohxS9KaatwzkdU5HHzeY6Rp4C87vpB33SmQ/1/3139312e33372e3138312e302f32342d3234203d3e20323633333639.roa
Signing time:             Thu 04 Apr 2024 02:17:49 +0000
ROA not before:           Thu 04 Apr 2024 02:12:49 +0000
ROA not after:            Thu 03 Apr 2025 02:17:49 +0000
asID:                     263369
IP address blocks:        191.37.181.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/818kYEcyWohxS9KaatwzkdU5HHzeY6Rp4C87vpB33SmQ/1/7F9FA1F28DCA0698B3EC18364A64EE88284031A3.crl
                          rsync://rpki-repo.registro.br/repo/818kYEcyWohxS9KaatwzkdU5HHzeY6Rp4C87vpB33SmQ/1/7F9FA1F28DCA0698B3EC18364A64EE88284031A3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7F9FA1F28DCA0698B3EC18364A64EE88284031A3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 28 Jun 2024 21:35:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:75:d4:75:22:26:05:8d:03:01:c2:20:97:85:6f:b5:73:7b:c3:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7F9FA1F28DCA0698B3EC18364A64EE88284031A3
        Validity
            Not Before: Apr  4 02:12:49 2024 GMT
            Not After : Apr  3 02:17:49 2025 GMT
        Subject: CN=91B9FAEED9B6EB64F2005F722D046E0D2790C724
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:58:16:63:d8:71:ae:4f:59:70:bf:3c:cb:59:
                    18:e2:5d:d1:98:bf:30:c3:55:bb:cc:08:6c:9b:22:
                    7a:5b:3f:e7:33:30:18:d1:fe:79:48:93:a8:a6:78:
                    1b:08:27:0f:67:3a:a6:09:31:11:fd:fb:b9:1d:d9:
                    52:d0:33:e9:ea:05:16:e4:60:d0:64:ee:d0:5a:ed:
                    a1:74:f4:95:b0:35:f4:96:10:6c:61:a1:5a:7b:b1:
                    18:ec:ab:58:13:73:04:6a:49:b3:f6:1a:50:ce:87:
                    02:9c:d3:a0:8a:e9:d2:76:cf:34:ef:2b:09:86:32:
                    0d:b6:a5:aa:4d:56:9a:b2:80:c0:48:58:59:f2:5a:
                    bc:8c:9b:51:ff:77:48:4c:1d:a1:6e:84:3b:5c:32:
                    36:cb:90:1b:ae:9a:37:3b:15:d6:b9:49:e7:07:9b:
                    a6:44:58:d5:10:20:21:3c:48:7a:42:06:8d:b9:9a:
                    6c:56:d5:4d:9f:69:d3:ce:d8:f0:65:42:ad:06:40:
                    a2:6e:54:f9:ae:40:a1:c1:2a:6d:04:c8:1f:e5:23:
                    b2:d2:a0:ea:87:61:0a:59:8e:70:a0:b4:8d:db:6a:
                    bd:01:6b:67:b8:94:af:a2:a4:45:69:87:92:cc:cb:
                    4a:ee:07:4f:4b:d0:ce:2e:71:09:b6:81:a4:02:f5:
                    97:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:B9:FA:EE:D9:B6:EB:64:F2:00:5F:72:2D:04:6E:0D:27:90:C7:24
            X509v3 Authority Key Identifier:
                keyid:7F:9F:A1:F2:8D:CA:06:98:B3:EC:18:36:4A:64:EE:88:28:40:31:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/818kYEcyWohxS9KaatwzkdU5HHzeY6Rp4C87vpB33SmQ/1/7F9FA1F28DCA0698B3EC18364A64EE88284031A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7F9FA1F28DCA0698B3EC18364A64EE88284031A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/818kYEcyWohxS9KaatwzkdU5HHzeY6Rp4C87vpB33SmQ/1/3139312e33372e3138312e302f32342d3234203d3e20323633333639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.37.181.0/24

    Signature Algorithm: sha256WithRSAEncryption
         54:c6:2b:88:f0:9e:b4:26:56:4e:bb:c1:b0:eb:e3:f9:2e:f7:
         57:6a:42:aa:cc:f4:d9:ca:9a:5e:0c:db:b2:0c:8f:df:d8:62:
         5f:73:8b:46:98:b0:53:48:bc:c0:13:30:95:84:41:55:47:c2:
         ad:6d:e1:c8:c7:96:0d:5f:cb:44:8d:b6:9d:f0:49:0a:16:53:
         71:07:b6:bd:43:e0:e2:a3:b4:19:6a:2b:fd:82:42:01:c7:85:
         6b:5f:6b:7f:72:fa:e7:35:0f:f5:67:dc:6e:09:f4:a7:b3:6c:
         ee:45:cb:46:52:2a:71:95:96:1c:26:c5:9b:e9:ca:53:26:1b:
         83:6b:c3:fa:19:41:9c:c1:1d:27:2b:46:4a:07:07:f1:5c:3b:
         63:81:09:a6:df:62:93:dc:ff:a1:ee:80:4a:23:de:9e:d6:e3:
         62:ed:ae:90:b9:92:4c:fb:47:14:45:3c:69:f4:bf:70:65:84:
         9c:4c:b2:2f:d8:50:65:97:12:8f:64:30:70:6c:55:86:fc:7b:
         65:fe:54:7f:4d:e9:8e:59:46:bc:69:52:c8:34:43:1c:6b:45:
         90:6f:33:8d:ab:c1:0a:87:bf:de:a8:91:08:47:82:79:f6:ed:
         46:d1:c2:9d:12:65:b8:b7:8c:16:03:3a:4a:0c:43:35:a6:46:
         0a:eb:fc:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 27 21:50:16 2024 by rpki-client on console-ams.rpki-client.org