Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8DfB8DWutwgPismr2ct2NLRYSqxsoAHBrKAZeLRhhmSw/0/3139312e33372e37312e302f32342d3234203d3e20323633333535.roa
File:                     3139312e33372e37312e302f32342d3234203d3e20323633333535.roa (raw, json)
Hash identifier:          Qx1io1IG7j5EVr38I4fnOHV/B2KbQMY2C+T414bYQwQ=
Subject key identifier:   FE:8C:4C:A1:E9:C5:C0:AA:AD:40:FB:88:3B:BD:BC:BA:91:3D:AD:2B
Certificate issuer:       /CN=2A6676986C812A17B00635484B147B51B75ADD4B
Certificate serial:       5C9E98B32EB6273B160614E553918946424B9911
Authority key identifier: 2A:66:76:98:6C:81:2A:17:B0:06:35:48:4B:14:7B:51:B7:5A:DD:4B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A6676986C812A17B00635484B147B51B75ADD4B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8DfB8DWutwgPismr2ct2NLRYSqxsoAHBrKAZeLRhhmSw/0/3139312e33372e37312e302f32342d3234203d3e20323633333535.roa
Signing time:             Tue 22 Oct 2024 17:52:13 +0000
ROA not before:           Tue 22 Oct 2024 17:47:13 +0000
ROA not after:            Tue 21 Oct 2025 17:52:13 +0000
asID:                     263355
IP address blocks:        191.37.71.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8DfB8DWutwgPismr2ct2NLRYSqxsoAHBrKAZeLRhhmSw/0/2A6676986C812A17B00635484B147B51B75ADD4B.crl
                          rsync://rpki-repo.registro.br/repo/8DfB8DWutwgPismr2ct2NLRYSqxsoAHBrKAZeLRhhmSw/0/2A6676986C812A17B00635484B147B51B75ADD4B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A6676986C812A17B00635484B147B51B75ADD4B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:9e:98:b3:2e:b6:27:3b:16:06:14:e5:53:91:89:46:42:4b:99:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A6676986C812A17B00635484B147B51B75ADD4B
        Validity
            Not Before: Oct 22 17:47:13 2024 GMT
            Not After : Oct 21 17:52:13 2025 GMT
        Subject: CN=FE8C4CA1E9C5C0AAAD40FB883BBDBCBA913DAD2B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:78:33:a2:d9:a6:92:cb:81:7b:51:13:1e:a0:
                    43:4c:fa:ef:3b:c7:86:69:ce:8c:d8:a7:e6:70:64:
                    bf:44:7b:ee:84:75:b0:27:eb:44:10:68:87:88:1d:
                    cb:8e:1e:97:6f:de:39:07:09:a6:14:ad:f8:b8:45:
                    84:e4:ee:9b:8b:07:b7:e6:cf:9f:03:b4:5c:24:63:
                    b2:37:fd:e2:57:84:38:ec:c8:fe:1c:bf:2a:cb:a5:
                    32:0c:ca:66:36:41:32:dc:b2:14:f3:e3:b2:c6:35:
                    f9:dc:10:2a:a2:cc:30:f1:c4:7f:73:df:ff:72:d7:
                    71:34:ec:b2:00:78:f9:ce:7c:2a:2f:ec:87:3c:be:
                    94:f3:3e:d5:57:4b:be:90:1d:e7:a4:3c:4e:c4:18:
                    a1:4f:1f:8e:80:31:7c:af:65:fb:63:fe:76:37:4e:
                    45:cb:0e:57:3d:48:d1:33:fb:45:2a:c3:eb:e1:f0:
                    2e:19:11:3c:d6:a3:ec:b9:14:bc:41:94:39:3f:af:
                    fd:64:b4:c1:d3:c2:e8:f2:ff:e3:15:30:bf:c4:8f:
                    df:64:66:1a:af:6a:80:21:30:f5:38:60:ef:f4:ee:
                    50:2d:3d:b5:27:13:f0:85:d7:5c:49:48:18:bd:55:
                    ca:1b:0e:de:ac:7f:3c:61:a4:2e:eb:29:6c:94:12:
                    4d:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:8C:4C:A1:E9:C5:C0:AA:AD:40:FB:88:3B:BD:BC:BA:91:3D:AD:2B
            X509v3 Authority Key Identifier:
                keyid:2A:66:76:98:6C:81:2A:17:B0:06:35:48:4B:14:7B:51:B7:5A:DD:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8DfB8DWutwgPismr2ct2NLRYSqxsoAHBrKAZeLRhhmSw/0/2A6676986C812A17B00635484B147B51B75ADD4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A6676986C812A17B00635484B147B51B75ADD4B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8DfB8DWutwgPismr2ct2NLRYSqxsoAHBrKAZeLRhhmSw/0/3139312e33372e37312e302f32342d3234203d3e20323633333535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.37.71.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9a:ad:84:4f:68:f3:19:1d:3c:44:52:4f:38:6f:6e:37:dd:82:
         0d:8e:e0:ff:0b:8c:6e:b8:05:6f:25:b1:a1:d3:fc:1e:5d:68:
         fa:3a:2c:ad:f3:ea:82:fe:0a:41:d7:55:65:fd:7c:a6:fd:6a:
         d1:16:d2:2d:c3:0b:7d:39:50:0d:24:34:3b:b8:f4:c9:c7:82:
         b1:72:47:d9:1d:52:bc:e5:b9:d1:ed:e4:79:9a:68:d7:9e:a6:
         be:8f:9e:61:80:f7:25:95:da:68:93:c5:65:c2:63:89:7b:99:
         48:5e:76:0f:32:89:a2:ab:33:51:ec:53:b2:b9:f0:b8:63:ed:
         04:21:71:78:4d:57:ff:d0:ad:2b:27:2b:8d:50:24:02:24:93:
         32:0c:04:7f:c2:c9:27:b6:c1:cc:4d:ac:05:3b:4f:0d:b4:d7:
         9b:55:7d:34:27:11:f3:fe:3d:b1:db:d9:b3:7d:4e:df:9f:db:
         29:0f:e0:f7:1a:fd:6b:c3:a4:d5:e9:4f:f9:43:ee:aa:c9:68:
         59:21:fd:a9:cb:84:62:40:41:03:e4:7e:cd:b5:a2:bb:ab:58:
         c8:5f:fa:00:f9:27:80:3f:b5:96:3a:74:20:f7:97:7b:11:79:
         3a:1d:3f:bb:4f:75:9b:0c:59:6c:3d:32:5e:e1:72:69:a4:cd:
         00:20:14:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 11:32:49 2024 by rpki-client on console-fra.rpki-client.org