Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8DfB8DWutwgPismr2ct2NLRYSqxsoAHBrKAZeLRhhmSw/0/3139312e33372e37302e302f32342d3234203d3e20323633333535.roa
File:                     3139312e33372e37302e302f32342d3234203d3e20323633333535.roa (raw, json)
Hash identifier:          LuHqE50fm91ddl74wzBm2grZHD8SJ6HWw/qSrxN21LY=
Subject key identifier:   AC:FD:4B:53:E4:6C:54:58:52:4A:CC:28:CD:E1:9A:21:9F:6E:2E:BD
Certificate issuer:       /CN=2A6676986C812A17B00635484B147B51B75ADD4B
Certificate serial:       4BA33F08FDBAEB11E9BA63834A672676C1E248FE
Authority key identifier: 2A:66:76:98:6C:81:2A:17:B0:06:35:48:4B:14:7B:51:B7:5A:DD:4B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A6676986C812A17B00635484B147B51B75ADD4B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8DfB8DWutwgPismr2ct2NLRYSqxsoAHBrKAZeLRhhmSw/0/3139312e33372e37302e302f32342d3234203d3e20323633333535.roa
Signing time:             Tue 22 Oct 2024 17:52:14 +0000
ROA not before:           Tue 22 Oct 2024 17:47:14 +0000
ROA not after:            Tue 21 Oct 2025 17:52:14 +0000
asID:                     263355
IP address blocks:        191.37.70.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8DfB8DWutwgPismr2ct2NLRYSqxsoAHBrKAZeLRhhmSw/0/2A6676986C812A17B00635484B147B51B75ADD4B.crl
                          rsync://rpki-repo.registro.br/repo/8DfB8DWutwgPismr2ct2NLRYSqxsoAHBrKAZeLRhhmSw/0/2A6676986C812A17B00635484B147B51B75ADD4B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A6676986C812A17B00635484B147B51B75ADD4B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:a3:3f:08:fd:ba:eb:11:e9:ba:63:83:4a:67:26:76:c1:e2:48:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A6676986C812A17B00635484B147B51B75ADD4B
        Validity
            Not Before: Oct 22 17:47:14 2024 GMT
            Not After : Oct 21 17:52:14 2025 GMT
        Subject: CN=ACFD4B53E46C5458524ACC28CDE19A219F6E2EBD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:d7:6e:c2:75:98:ee:86:45:25:98:e1:6c:11:
                    0f:4e:a7:9b:c8:85:59:36:34:c6:c3:aa:6a:aa:a8:
                    6e:21:fa:df:99:bd:8c:67:71:45:1e:69:13:24:92:
                    ea:25:a4:23:d0:2c:f0:c8:b0:92:55:81:73:7b:8d:
                    fb:1e:a7:2a:63:ae:8e:84:e5:70:25:66:45:44:61:
                    0d:b8:f4:45:2d:6f:57:45:e9:f3:7c:73:4b:fa:bb:
                    9c:82:27:e1:1f:84:24:c6:20:a5:2b:de:3c:66:2e:
                    15:03:9c:73:df:04:46:b8:64:39:9f:bb:06:da:04:
                    76:38:2a:67:1e:5d:9f:4c:e9:5e:ac:c3:a6:53:3e:
                    88:83:1b:15:ae:bd:03:e0:e7:15:60:14:6e:ce:dd:
                    e3:a7:9c:69:cc:a6:44:0a:10:2d:c1:99:ad:64:2a:
                    31:22:dd:28:a4:e1:3d:05:41:71:c9:0e:79:02:ba:
                    dd:c4:a6:ae:9c:86:44:6c:9e:8b:a8:8a:96:29:94:
                    c7:b3:1a:3c:a8:79:82:c9:2e:48:e9:93:be:f1:6c:
                    5a:16:a0:b5:32:ce:25:38:b7:d6:3f:16:d3:1d:7c:
                    75:38:62:17:26:97:df:3b:45:83:65:c6:3f:67:b9:
                    d5:65:c5:2b:4d:d5:b6:44:6d:a7:9e:44:94:0b:cb:
                    ae:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:FD:4B:53:E4:6C:54:58:52:4A:CC:28:CD:E1:9A:21:9F:6E:2E:BD
            X509v3 Authority Key Identifier:
                keyid:2A:66:76:98:6C:81:2A:17:B0:06:35:48:4B:14:7B:51:B7:5A:DD:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8DfB8DWutwgPismr2ct2NLRYSqxsoAHBrKAZeLRhhmSw/0/2A6676986C812A17B00635484B147B51B75ADD4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A6676986C812A17B00635484B147B51B75ADD4B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8DfB8DWutwgPismr2ct2NLRYSqxsoAHBrKAZeLRhhmSw/0/3139312e33372e37302e302f32342d3234203d3e20323633333535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.37.70.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0c:57:e8:86:a4:14:21:d1:e1:d1:e9:4f:09:70:0e:09:86:8a:
         51:b9:33:d7:a0:73:1b:a0:fb:b8:c8:74:7f:99:b8:4f:01:c2:
         dd:26:8f:8f:72:85:26:79:21:c1:62:ee:94:d9:81:9d:93:d8:
         97:b6:23:b8:c9:d3:35:83:2a:12:fb:64:1c:64:26:30:72:f3:
         62:e8:59:e7:8c:1f:1b:42:8c:a7:2c:51:44:3b:c5:f9:21:88:
         2a:b7:78:7e:4a:30:0b:78:bf:ce:8c:00:55:c7:d4:63:15:a7:
         7f:a4:86:06:49:d0:56:cf:2c:b3:77:10:c0:1e:e8:44:c4:32:
         08:d3:f9:3a:0b:46:7e:68:7e:f8:6b:77:f4:6d:e5:d7:1c:07:
         9e:10:a4:94:2d:07:10:f7:f2:a1:d9:ab:5c:5e:26:90:d8:93:
         6f:56:36:62:c3:41:77:c3:6e:e8:5a:d0:20:f9:0f:b4:8e:7b:
         34:0b:7c:aa:a3:31:23:a5:e7:35:66:21:07:24:46:39:44:2e:
         9d:7d:9d:7e:ea:eb:0d:20:7d:24:16:bf:18:d1:94:ac:19:39:
         69:59:7c:7e:e6:58:0c:c2:5f:19:7b:fb:05:7e:e5:38:70:6b:
         1d:ce:51:df:ee:ac:11:63:fe:d9:cd:04:e1:b8:83:21:46:1d:
         7e:99:6c:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 11:32:49 2024 by rpki-client on console-fra.rpki-client.org