Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8DfB8DWutwgPismr2ct2NLRYSqxsoAHBrKAZeLRhhmSw/0/3139312e33372e36392e302f32342d3234203d3e20323633333535.roa
File:                     3139312e33372e36392e302f32342d3234203d3e20323633333535.roa (raw, json)
Hash identifier:          SmMebKRcyHa6p9eKioGhEwyWFJq3G3pcpnUWxzfwuLY=
Subject key identifier:   A4:E7:31:10:2B:89:E1:9A:D7:4C:73:75:AE:1E:14:70:5D:3A:12:F6
Certificate issuer:       /CN=2A6676986C812A17B00635484B147B51B75ADD4B
Certificate serial:       2EA90A5E19E01781C2AD76DF4F00694385627FF8
Authority key identifier: 2A:66:76:98:6C:81:2A:17:B0:06:35:48:4B:14:7B:51:B7:5A:DD:4B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A6676986C812A17B00635484B147B51B75ADD4B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8DfB8DWutwgPismr2ct2NLRYSqxsoAHBrKAZeLRhhmSw/0/3139312e33372e36392e302f32342d3234203d3e20323633333535.roa
Signing time:             Tue 22 Oct 2024 17:52:13 +0000
ROA not before:           Tue 22 Oct 2024 17:47:13 +0000
ROA not after:            Tue 21 Oct 2025 17:52:13 +0000
asID:                     263355
IP address blocks:        191.37.69.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8DfB8DWutwgPismr2ct2NLRYSqxsoAHBrKAZeLRhhmSw/0/2A6676986C812A17B00635484B147B51B75ADD4B.crl
                          rsync://rpki-repo.registro.br/repo/8DfB8DWutwgPismr2ct2NLRYSqxsoAHBrKAZeLRhhmSw/0/2A6676986C812A17B00635484B147B51B75ADD4B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A6676986C812A17B00635484B147B51B75ADD4B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:a9:0a:5e:19:e0:17:81:c2:ad:76:df:4f:00:69:43:85:62:7f:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A6676986C812A17B00635484B147B51B75ADD4B
        Validity
            Not Before: Oct 22 17:47:13 2024 GMT
            Not After : Oct 21 17:52:13 2025 GMT
        Subject: CN=A4E731102B89E19AD74C7375AE1E14705D3A12F6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:90:e8:c1:19:18:63:d4:6c:27:c9:b3:5b:a8:
                    f4:8f:ef:3c:ae:a9:34:a2:e0:8c:b8:66:5b:fe:cb:
                    37:a1:b9:48:4d:7f:52:2e:10:19:af:e7:5a:80:a5:
                    8a:10:b4:be:f4:b8:55:b9:9c:df:62:75:63:fd:68:
                    3d:74:a4:88:34:b0:87:0b:ba:81:66:29:63:73:ab:
                    35:41:c4:a6:f4:ba:b9:97:74:37:05:3a:f7:43:18:
                    98:69:24:af:d7:ce:dc:b9:fb:76:28:79:5c:3b:15:
                    f2:f1:48:c6:50:7c:e4:d7:86:ef:fa:40:2a:9d:cd:
                    cc:23:c2:8c:5a:a0:58:05:52:c6:2a:a3:fd:95:17:
                    d7:5f:e4:61:d3:bd:65:45:76:30:34:b4:c2:36:4a:
                    40:07:e9:23:61:d9:69:34:04:27:e0:29:b2:6c:42:
                    68:5b:4d:3a:62:60:ec:a7:d9:42:a8:38:cc:f9:fe:
                    23:d8:2e:89:35:6e:ad:43:a1:95:7a:87:1e:52:6c:
                    a0:4c:62:73:92:08:1a:5a:28:cd:2b:5a:60:e1:60:
                    48:c0:40:46:69:dc:38:ff:d3:b1:66:db:b4:6f:e0:
                    fd:9d:8a:e9:c6:01:dd:47:0c:b6:fa:80:e4:1e:04:
                    2d:71:42:f5:21:63:aa:b3:3a:87:e6:47:a5:a8:30:
                    29:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:E7:31:10:2B:89:E1:9A:D7:4C:73:75:AE:1E:14:70:5D:3A:12:F6
            X509v3 Authority Key Identifier:
                keyid:2A:66:76:98:6C:81:2A:17:B0:06:35:48:4B:14:7B:51:B7:5A:DD:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8DfB8DWutwgPismr2ct2NLRYSqxsoAHBrKAZeLRhhmSw/0/2A6676986C812A17B00635484B147B51B75ADD4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A6676986C812A17B00635484B147B51B75ADD4B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8DfB8DWutwgPismr2ct2NLRYSqxsoAHBrKAZeLRhhmSw/0/3139312e33372e36392e302f32342d3234203d3e20323633333535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.37.69.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a8:96:e0:f9:60:eb:ac:10:70:e7:8e:70:b4:3b:69:1d:ad:3e:
         ef:49:b1:bd:38:6f:36:94:0c:f2:20:19:3b:fc:f5:94:b2:08:
         62:63:44:aa:33:01:da:d3:2e:cb:4c:0e:b5:c3:a3:b3:7e:9b:
         98:bc:6c:57:eb:91:06:47:10:56:8a:24:ab:a9:36:14:e8:36:
         6a:9f:93:ee:37:f0:94:f2:eb:fb:e8:a5:4c:35:8c:4d:00:49:
         4d:c7:65:69:95:cf:f9:eb:45:da:ac:bc:00:f9:d7:35:f1:ca:
         68:38:d7:43:13:3b:28:79:3b:28:c9:db:cb:ac:d5:c2:cb:ca:
         73:65:ab:1d:2b:0d:83:a8:c4:5a:ae:8f:a4:dd:87:b2:3c:61:
         e4:37:f9:b4:bf:f1:b1:04:c1:c9:b8:eb:95:26:71:25:d1:93:
         a3:57:ca:3a:39:c1:9d:a4:46:a2:8d:7d:98:0f:f7:f9:79:01:
         a9:8f:52:9c:d1:89:25:fc:f2:c1:38:31:02:7a:27:37:b8:66:
         d1:ab:b7:56:8e:fd:65:95:9d:50:d1:32:7e:d0:cd:c9:50:dc:
         fa:05:01:f5:ef:99:d2:a9:e3:31:81:86:78:ff:1d:63:52:46:
         d5:de:e4:a9:02:d1:6b:fe:d5:72:a5:d4:ea:36:fc:fc:9c:ab:
         10:68:b1:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 12:36:33 2024 by rpki-client on console-ams.rpki-client.org