Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8AFqhP3zRz2xR69YHoMrtYnWs15vs6eX3LFkDy25RGWx/0/3139312e352e3234302e302f32302d3332203d3e20323633353434.roa
File:                     3139312e352e3234302e302f32302d3332203d3e20323633353434.roa (raw, json)
Hash identifier:          PgInR8OKKnVX2YuoEbiptlpxXrDRrteTIAuSzAxNdiU=
Subject key identifier:   49:9C:3C:A2:80:2E:AC:73:5A:B5:B0:FE:36:82:70:F8:F4:F6:47:C5
Certificate issuer:       /CN=9741D1A029B32962563B5C5BA3B3C73B198E65B4
Certificate serial:       587547A49F800E4FA620D42C0FBF4435AB8B7853
Authority key identifier: 97:41:D1:A0:29:B3:29:62:56:3B:5C:5B:A3:B3:C7:3B:19:8E:65:B4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9741D1A029B32962563B5C5BA3B3C73B198E65B4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8AFqhP3zRz2xR69YHoMrtYnWs15vs6eX3LFkDy25RGWx/0/3139312e352e3234302e302f32302d3332203d3e20323633353434.roa
Signing time:             Wed 03 Jul 2024 14:11:05 +0000
ROA not before:           Wed 03 Jul 2024 14:06:05 +0000
ROA not after:            Wed 02 Jul 2025 14:11:05 +0000
asID:                     263544
IP address blocks:        191.5.240.0/20 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8AFqhP3zRz2xR69YHoMrtYnWs15vs6eX3LFkDy25RGWx/0/9741D1A029B32962563B5C5BA3B3C73B198E65B4.crl
                          rsync://rpki-repo.registro.br/repo/8AFqhP3zRz2xR69YHoMrtYnWs15vs6eX3LFkDy25RGWx/0/9741D1A029B32962563B5C5BA3B3C73B198E65B4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9741D1A029B32962563B5C5BA3B3C73B198E65B4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 16:46:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:75:47:a4:9f:80:0e:4f:a6:20:d4:2c:0f:bf:44:35:ab:8b:78:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9741D1A029B32962563B5C5BA3B3C73B198E65B4
        Validity
            Not Before: Jul  3 14:06:05 2024 GMT
            Not After : Jul  2 14:11:05 2025 GMT
        Subject: CN=499C3CA2802EAC735AB5B0FE368270F8F4F647C5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:69:e6:a5:c7:ef:1e:9c:47:a7:10:75:8a:2b:
                    d8:74:0a:d2:3a:84:af:3d:68:f7:77:93:6c:96:57:
                    e2:26:37:32:52:81:5b:35:5c:f0:76:90:9d:6e:4f:
                    89:b6:6f:dc:49:44:07:e1:4d:0b:7b:fa:9e:af:3a:
                    f3:02:61:95:47:01:c7:49:ec:b9:07:55:5c:06:d2:
                    99:da:4e:45:98:11:53:76:12:63:08:bf:05:b1:b8:
                    49:90:87:ca:db:f7:14:74:5f:2b:f7:7f:bd:98:80:
                    aa:9a:0c:61:87:3a:3f:8f:fc:b3:9a:61:23:13:9d:
                    7b:ad:85:6d:f9:2d:b2:96:0c:43:05:2e:5c:90:04:
                    d5:3b:41:3f:e8:16:ff:72:a9:d8:35:6b:8f:66:08:
                    98:75:67:9e:68:37:19:ac:56:8c:0b:65:16:c7:3a:
                    74:f5:87:70:0c:0b:d7:df:e7:4a:9e:c4:be:88:09:
                    61:d6:35:f4:b4:71:df:9c:d2:7d:eb:e7:29:91:55:
                    d3:fb:d4:29:30:cd:f1:02:4d:ec:87:62:74:49:11:
                    b4:eb:17:18:08:8a:c2:d8:d1:31:77:1a:be:6c:fe:
                    fa:b0:e4:5e:c1:5c:7c:03:d1:73:5f:88:a3:33:e4:
                    b0:3e:8f:43:64:d3:f5:26:9d:91:92:88:dd:2b:2e:
                    f7:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:9C:3C:A2:80:2E:AC:73:5A:B5:B0:FE:36:82:70:F8:F4:F6:47:C5
            X509v3 Authority Key Identifier:
                keyid:97:41:D1:A0:29:B3:29:62:56:3B:5C:5B:A3:B3:C7:3B:19:8E:65:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8AFqhP3zRz2xR69YHoMrtYnWs15vs6eX3LFkDy25RGWx/0/9741D1A029B32962563B5C5BA3B3C73B198E65B4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9741D1A029B32962563B5C5BA3B3C73B198E65B4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8AFqhP3zRz2xR69YHoMrtYnWs15vs6eX3LFkDy25RGWx/0/3139312e352e3234302e302f32302d3332203d3e20323633353434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.5.240.0/20

    Signature Algorithm: sha256WithRSAEncryption
         48:53:a9:6f:b7:d3:0e:6c:6a:d7:89:80:d3:04:aa:fe:a2:2d:
         d6:b1:7b:c3:51:57:75:cc:6c:f6:a1:69:e5:8f:08:9a:a8:9e:
         17:72:d5:26:86:81:e1:e2:64:0a:80:83:58:b1:7c:25:84:1d:
         a9:3b:76:6b:43:b7:fd:0e:c0:38:5e:66:9f:fd:9b:eb:44:eb:
         f9:97:95:47:95:ad:43:af:e2:bf:9b:54:3b:8b:4f:fc:08:5e:
         68:22:88:af:94:8f:06:c2:8a:c3:03:6d:6f:fe:4b:72:bd:ed:
         6c:47:8c:66:48:c8:e0:2b:4f:8b:34:ca:c0:2f:b3:3d:e8:fd:
         77:9e:30:e7:32:50:4c:4c:13:24:38:d9:00:f5:75:1f:17:96:
         cb:bf:56:8a:c3:82:14:f0:0d:73:46:ed:31:cf:b2:f5:f8:39:
         95:ef:00:ec:e7:85:08:07:9d:2b:ba:a7:3d:a5:01:3c:c8:48:
         7b:91:b0:2e:6d:4c:c2:8e:dc:86:1d:fc:44:ce:3c:e7:a6:7f:
         db:b6:51:f1:be:e2:97:02:ce:c8:b2:7c:98:c5:53:eb:c6:fe:
         5d:6d:41:a1:bc:f0:4b:5b:71:97:c1:7d:cb:72:f2:1a:3d:0f:
         2f:cc:0b:a6:16:b7:8d:d8:81:86:41:c7:cc:ff:04:48:4f:a4:
         fb:81:8d:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 15:49:52 2024 by rpki-client on console-ams.rpki-client.org