Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8DfB8DWutwgPismr2ct2NLRYSqxsoAHBrKAZeLRhhmSw/0/3139312e33372e36382e302f32322d3232203d3e20323633333535.roa
File:                     3139312e33372e36382e302f32322d3232203d3e20323633333535.roa (raw, json)
Hash identifier:          RcjsR+Z6W7jbF2mc90at7cYnSeS2rxpPaJj/pXApKdk=
Subject key identifier:   23:4C:05:94:5C:43:7E:55:B8:92:36:9A:66:CD:5E:DD:ED:3D:4E:0F
Certificate issuer:       /CN=2A6676986C812A17B00635484B147B51B75ADD4B
Certificate serial:       637E071934C554EAB87D55B49728D924C2C3A100
Authority key identifier: 2A:66:76:98:6C:81:2A:17:B0:06:35:48:4B:14:7B:51:B7:5A:DD:4B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A6676986C812A17B00635484B147B51B75ADD4B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8DfB8DWutwgPismr2ct2NLRYSqxsoAHBrKAZeLRhhmSw/0/3139312e33372e36382e302f32322d3232203d3e20323633333535.roa
Signing time:             Tue 22 Oct 2024 17:52:14 +0000
ROA not before:           Tue 22 Oct 2024 17:47:14 +0000
ROA not after:            Tue 21 Oct 2025 17:52:14 +0000
asID:                     263355
IP address blocks:        191.37.68.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8DfB8DWutwgPismr2ct2NLRYSqxsoAHBrKAZeLRhhmSw/0/2A6676986C812A17B00635484B147B51B75ADD4B.crl
                          rsync://rpki-repo.registro.br/repo/8DfB8DWutwgPismr2ct2NLRYSqxsoAHBrKAZeLRhhmSw/0/2A6676986C812A17B00635484B147B51B75ADD4B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A6676986C812A17B00635484B147B51B75ADD4B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:7e:07:19:34:c5:54:ea:b8:7d:55:b4:97:28:d9:24:c2:c3:a1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A6676986C812A17B00635484B147B51B75ADD4B
        Validity
            Not Before: Oct 22 17:47:14 2024 GMT
            Not After : Oct 21 17:52:14 2025 GMT
        Subject: CN=234C05945C437E55B892369A66CD5EDDED3D4E0F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:c0:e2:d0:98:20:89:41:1f:84:8b:db:6a:fc:
                    b6:2a:32:ad:66:d0:1c:af:e3:60:cb:9b:08:b9:63:
                    c0:c8:1a:5e:d3:8f:ec:a4:6d:2e:f1:1f:a7:18:cf:
                    4f:ba:51:6c:f4:03:f0:e8:cd:1b:49:1a:2d:4a:4c:
                    a6:7f:4e:2a:82:39:3d:94:98:74:9e:4c:1c:52:1a:
                    0f:6a:25:48:32:56:e1:1e:5c:22:8d:27:2e:69:c0:
                    96:e8:d3:45:59:b3:a4:e8:3b:6e:72:03:53:e5:89:
                    76:c9:19:cc:b7:97:4e:25:35:da:bd:23:87:87:33:
                    76:d7:fc:ed:84:54:a2:88:c7:35:0a:75:7f:33:a4:
                    db:3e:15:ef:b4:e4:6f:2e:8e:a0:01:e6:ee:6b:18:
                    1e:aa:1c:aa:a0:a8:dc:d9:b9:52:87:b2:f1:8f:69:
                    0a:40:b5:64:59:dd:90:4c:22:eb:56:b9:c5:4f:71:
                    69:d9:d0:49:a1:66:d8:ff:3b:f4:6d:92:72:54:a9:
                    7d:1a:26:1e:15:32:5a:ae:bd:a9:5f:df:b5:bb:d0:
                    17:c1:21:34:0b:87:d5:5b:a2:35:90:89:f2:ec:b2:
                    ca:53:7d:92:db:3b:aa:f4:ec:f2:fc:9f:44:1d:51:
                    be:0c:9a:7b:f6:bb:ff:b1:f7:f7:c4:82:a5:e2:18:
                    de:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:4C:05:94:5C:43:7E:55:B8:92:36:9A:66:CD:5E:DD:ED:3D:4E:0F
            X509v3 Authority Key Identifier:
                keyid:2A:66:76:98:6C:81:2A:17:B0:06:35:48:4B:14:7B:51:B7:5A:DD:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8DfB8DWutwgPismr2ct2NLRYSqxsoAHBrKAZeLRhhmSw/0/2A6676986C812A17B00635484B147B51B75ADD4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A6676986C812A17B00635484B147B51B75ADD4B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8DfB8DWutwgPismr2ct2NLRYSqxsoAHBrKAZeLRhhmSw/0/3139312e33372e36382e302f32322d3232203d3e20323633333535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.37.68.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9a:8b:83:3a:36:05:94:46:60:47:0b:b1:4f:23:0e:02:fc:43:
         9b:e8:ff:aa:97:46:95:eb:90:4a:56:40:ef:a3:7c:51:24:60:
         7c:b7:9d:53:f9:5f:c2:2c:de:c1:19:25:3d:58:fa:ca:d5:02:
         f4:92:8a:9c:fe:33:bc:f9:8f:f7:5d:89:a2:61:a3:dd:7d:db:
         fd:f7:77:45:75:7f:c8:7b:1c:de:24:f0:78:05:8e:62:cf:17:
         07:97:7e:59:43:40:25:de:f4:c7:5b:67:0e:1c:fd:f6:e3:ac:
         95:1a:62:c6:f5:b3:66:0c:a6:57:fd:d7:db:a4:65:03:c0:e2:
         79:e4:2d:2d:5d:c4:ff:ae:2b:33:5f:b7:75:b7:88:be:a5:72:
         09:41:58:34:32:71:d4:73:d0:b6:2b:69:1b:d5:dc:13:99:eb:
         cb:8b:a5:8d:82:5c:17:73:ac:16:88:14:7c:b3:bc:07:89:ce:
         77:06:71:5a:34:b2:49:7a:80:5f:a3:32:45:bb:1e:37:c2:09:
         5b:8f:23:f4:cb:6e:cb:37:bf:72:9b:bf:80:46:f0:84:17:3a:
         1b:ea:c8:25:71:ca:8f:94:0a:ae:e5:8a:4b:f6:45:d6:60:a6:
         3a:8e:7a:e9:a5:72:7d:de:1e:ee:ac:b6:64:eb:62:80:f2:7a:
         c9:fe:89:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 11:32:49 2024 by rpki-client on console-fra.rpki-client.org