Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8ij5ND3UcVTY5pXNd8AjxtH8VTqqSmsBM6Pa4H81RaeM/1/3139312e3235332e36382e302f32322d3234203d3e20323633353330.roa
File:                     3139312e3235332e36382e302f32322d3234203d3e20323633353330.roa (raw, json)
Hash identifier:          7eMek3Oao92I0EicE6g/Pj07C43XFFzp9ZkOZ6kUQps=
Subject key identifier:   C0:58:0D:7F:80:3F:11:40:16:6E:3D:14:5C:5C:DD:15:64:E6:36:62
Certificate issuer:       /CN=F7C4DEB12240FF8688C32C67939C04C380824025
Certificate serial:       212C07EEFBA9FABD9F7635A77958AB17C67F3D29
Authority key identifier: F7:C4:DE:B1:22:40:FF:86:88:C3:2C:67:93:9C:04:C3:80:82:40:25
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F7C4DEB12240FF8688C32C67939C04C380824025.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8ij5ND3UcVTY5pXNd8AjxtH8VTqqSmsBM6Pa4H81RaeM/1/3139312e3235332e36382e302f32322d3234203d3e20323633353330.roa
Signing time:             Wed 03 Apr 2024 18:31:55 +0000
ROA not before:           Wed 03 Apr 2024 18:26:55 +0000
ROA not after:            Wed 02 Apr 2025 18:31:55 +0000
asID:                     263530
IP address blocks:        191.253.68.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8ij5ND3UcVTY5pXNd8AjxtH8VTqqSmsBM6Pa4H81RaeM/1/F7C4DEB12240FF8688C32C67939C04C380824025.crl
                          rsync://rpki-repo.registro.br/repo/8ij5ND3UcVTY5pXNd8AjxtH8VTqqSmsBM6Pa4H81RaeM/1/F7C4DEB12240FF8688C32C67939C04C380824025.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F7C4DEB12240FF8688C32C67939C04C380824025.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:2c:07:ee:fb:a9:fa:bd:9f:76:35:a7:79:58:ab:17:c6:7f:3d:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F7C4DEB12240FF8688C32C67939C04C380824025
        Validity
            Not Before: Apr  3 18:26:55 2024 GMT
            Not After : Apr  2 18:31:55 2025 GMT
        Subject: CN=3082010A0282010100C512135735FF3B7351CE2D982D628DE72CAA8B03BA1785F3B52CD212AF9488D999B7B207542F1F83DF0563A9AC919F143F066AADAF8FC3906A361670F7C8352A1ECC047C5B1195DAF4CAF2F6859581EC270F01237FCC5041E7344B87112DFF6B7F0E1D05F8F91FE17B5059E043483F39263B9047373B64A21BEB85EE4FC494214004D1624173850CD5958AD7197064363B98AFEEF3510FE210D406DC47C6F0C9A631A923E78F0A337A3968313A3AC695FF8D3F707CF60F55F974C8E7F8775EE597DA6540EEB1187BE822A98C9B612183DAF3DE1899325F6E62A4A568BEA580FF872048426CD87160352CF00E28FD177D55592BCB5B215A9E05D0A06D7FC1490B0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:12:13:57:35:ff:3b:73:51:ce:2d:98:2d:62:
                    8d:e7:2c:aa:8b:03:ba:17:85:f3:b5:2c:d2:12:af:
                    94:88:d9:99:b7:b2:07:54:2f:1f:83:df:05:63:a9:
                    ac:91:9f:14:3f:06:6a:ad:af:8f:c3:90:6a:36:16:
                    70:f7:c8:35:2a:1e:cc:04:7c:5b:11:95:da:f4:ca:
                    f2:f6:85:95:81:ec:27:0f:01:23:7f:cc:50:41:e7:
                    34:4b:87:11:2d:ff:6b:7f:0e:1d:05:f8:f9:1f:e1:
                    7b:50:59:e0:43:48:3f:39:26:3b:90:47:37:3b:64:
                    a2:1b:eb:85:ee:4f:c4:94:21:40:04:d1:62:41:73:
                    85:0c:d5:95:8a:d7:19:70:64:36:3b:98:af:ee:f3:
                    51:0f:e2:10:d4:06:dc:47:c6:f0:c9:a6:31:a9:23:
                    e7:8f:0a:33:7a:39:68:31:3a:3a:c6:95:ff:8d:3f:
                    70:7c:f6:0f:55:f9:74:c8:e7:f8:77:5e:e5:97:da:
                    65:40:ee:b1:18:7b:e8:22:a9:8c:9b:61:21:83:da:
                    f3:de:18:99:32:5f:6e:62:a4:a5:68:be:a5:80:ff:
                    87:20:48:42:6c:d8:71:60:35:2c:f0:0e:28:fd:17:
                    7d:55:59:2b:cb:5b:21:5a:9e:05:d0:a0:6d:7f:c1:
                    49:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:58:0D:7F:80:3F:11:40:16:6E:3D:14:5C:5C:DD:15:64:E6:36:62
            X509v3 Authority Key Identifier:
                keyid:F7:C4:DE:B1:22:40:FF:86:88:C3:2C:67:93:9C:04:C3:80:82:40:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8ij5ND3UcVTY5pXNd8AjxtH8VTqqSmsBM6Pa4H81RaeM/1/F7C4DEB12240FF8688C32C67939C04C380824025.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F7C4DEB12240FF8688C32C67939C04C380824025.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8ij5ND3UcVTY5pXNd8AjxtH8VTqqSmsBM6Pa4H81RaeM/1/3139312e3235332e36382e302f32322d3234203d3e20323633353330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.253.68.0/22

    Signature Algorithm: sha256WithRSAEncryption
         18:ae:f6:c5:f4:f7:b4:60:dc:42:5b:4d:4a:23:30:ef:e5:81:
         26:fb:d3:94:fa:7f:4c:4c:6a:99:3f:4d:e1:51:af:24:fc:b5:
         92:72:10:15:20:85:37:3e:c7:98:c4:4a:20:ae:64:05:fb:83:
         e8:a4:c2:39:03:93:ba:0c:cb:08:43:39:34:49:95:f6:4f:0a:
         44:20:bf:69:3d:61:7c:9e:f2:36:db:bd:15:21:62:49:a4:64:
         7d:5e:2a:30:b2:48:d2:e2:44:9e:fe:7d:dd:25:11:de:d1:fc:
         3a:f0:cc:af:5f:1e:02:a6:e5:72:1f:34:ae:e2:82:0f:37:72:
         38:a0:08:c5:c9:e5:fe:84:95:4b:c2:0e:80:aa:9d:f4:fe:cf:
         3b:22:29:cb:b8:fb:0b:f7:6d:e5:4d:92:c4:46:54:67:59:aa:
         b8:4a:4d:07:e8:e7:c8:53:fe:05:e2:4e:df:b3:ea:18:f6:00:
         9d:4b:bd:14:f1:49:04:3a:51:7a:1e:ad:94:8f:da:da:fd:85:
         9d:01:bb:61:61:18:a8:b3:48:eb:46:dc:d6:f1:2c:b2:8e:61:
         8a:16:b5:5e:fe:1a:d1:e3:ad:b5:d7:1b:d4:21:36:ea:4f:56:
         59:7e:23:d7:68:6f:17:94:99:53:6d:e3:97:cf:a2:0d:54:32:
         7b:24:3b:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 13:31:54 2024 by rpki-client on console-fra.rpki-client.org