Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8pJ3ozxZHgTtWtXMJYEFh95fF7tzp1SDGui2KaDMhfEy/1/3139312e33372e3133362e302f32322d3232203d3e20323633333630.roa
File:                     3139312e33372e3133362e302f32322d3232203d3e20323633333630.roa (raw, json)
Hash identifier:          W3Xrhm0vLfjYg030YEydsnZePB/O5DK6KKwLo+jMX30=
Subject key identifier:   7A:25:FE:82:23:31:4F:42:6D:FB:7A:18:BE:1A:64:17:D5:E3:11:83
Certificate issuer:       /CN=A5B954E52CA1BBED8E8ADFB002AA379ABF8B3739
Certificate serial:       281672223AC7009484E72885B68CAD96B6843E6A
Authority key identifier: A5:B9:54:E5:2C:A1:BB:ED:8E:8A:DF:B0:02:AA:37:9A:BF:8B:37:39
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A5B954E52CA1BBED8E8ADFB002AA379ABF8B3739.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8pJ3ozxZHgTtWtXMJYEFh95fF7tzp1SDGui2KaDMhfEy/1/3139312e33372e3133362e302f32322d3232203d3e20323633333630.roa
Signing time:             Thu 04 Apr 2024 02:25:08 +0000
ROA not before:           Thu 04 Apr 2024 02:20:08 +0000
ROA not after:            Thu 03 Apr 2025 02:25:08 +0000
asID:                     263360
IP address blocks:        191.37.136.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8pJ3ozxZHgTtWtXMJYEFh95fF7tzp1SDGui2KaDMhfEy/1/A5B954E52CA1BBED8E8ADFB002AA379ABF8B3739.crl
                          rsync://rpki-repo.registro.br/repo/8pJ3ozxZHgTtWtXMJYEFh95fF7tzp1SDGui2KaDMhfEy/1/A5B954E52CA1BBED8E8ADFB002AA379ABF8B3739.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A5B954E52CA1BBED8E8ADFB002AA379ABF8B3739.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 23:40:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:16:72:22:3a:c7:00:94:84:e7:28:85:b6:8c:ad:96:b6:84:3e:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A5B954E52CA1BBED8E8ADFB002AA379ABF8B3739
        Validity
            Not Before: Apr  4 02:20:08 2024 GMT
            Not After : Apr  3 02:25:08 2025 GMT
        Subject: CN=7A25FE8223314F426DFB7A18BE1A6417D5E31183
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:4a:eb:6d:85:b6:3a:f0:9c:dc:d5:ee:dd:e3:
                    33:19:91:bc:8e:8d:45:76:3d:a1:a7:b3:c5:4a:35:
                    36:e5:ea:a6:7e:7b:8f:4d:43:a0:e4:2c:bc:40:35:
                    c4:6d:90:ca:42:cf:3e:fb:92:8d:ad:1c:52:97:d8:
                    d2:6f:63:5a:47:96:4e:e9:38:e9:91:53:ad:cd:7f:
                    c7:ab:60:4d:46:6e:a0:1f:03:44:65:52:40:76:41:
                    68:ad:ee:f1:70:ec:40:e1:47:89:04:62:6c:c3:00:
                    9c:2d:49:33:72:4d:2b:ad:1a:91:74:37:67:af:b0:
                    99:18:8e:ad:40:ac:6c:7a:ff:61:75:f4:e7:8d:23:
                    c5:1e:4d:3c:f0:b0:bf:9e:60:63:44:a3:34:87:46:
                    fe:df:8e:7b:24:c2:6d:72:7d:5d:80:ff:a8:29:fb:
                    72:62:eb:bb:d4:5d:ab:e3:ba:5a:06:6a:f6:45:ad:
                    23:6b:92:c2:f6:be:1b:f9:5a:66:22:6f:db:ac:ba:
                    3e:b6:6e:53:9d:02:8e:25:6b:63:87:9b:f9:55:84:
                    73:29:53:04:96:a6:93:51:30:f1:b9:b8:44:86:96:
                    3b:65:38:99:24:b4:5d:ce:4c:df:a9:49:33:1d:10:
                    ff:7f:be:84:25:a5:1e:01:a2:eb:12:0c:10:ff:dc:
                    9a:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:25:FE:82:23:31:4F:42:6D:FB:7A:18:BE:1A:64:17:D5:E3:11:83
            X509v3 Authority Key Identifier:
                keyid:A5:B9:54:E5:2C:A1:BB:ED:8E:8A:DF:B0:02:AA:37:9A:BF:8B:37:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8pJ3ozxZHgTtWtXMJYEFh95fF7tzp1SDGui2KaDMhfEy/1/A5B954E52CA1BBED8E8ADFB002AA379ABF8B3739.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A5B954E52CA1BBED8E8ADFB002AA379ABF8B3739.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8pJ3ozxZHgTtWtXMJYEFh95fF7tzp1SDGui2KaDMhfEy/1/3139312e33372e3133362e302f32322d3232203d3e20323633333630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.37.136.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4c:12:d7:ad:5f:66:6f:8a:89:cb:20:9e:8d:e2:98:5f:8c:ee:
         07:c6:ca:92:6a:e3:29:ef:ca:bd:40:ce:74:60:fb:93:d1:ee:
         13:61:db:66:33:d4:fb:7f:24:6c:92:4d:9b:48:ed:5c:5f:ba:
         d8:c5:d6:a7:63:55:6e:51:aa:0f:b0:a6:58:55:58:30:db:3a:
         db:7e:cf:49:e7:1d:af:5d:39:31:4f:63:5b:ac:c5:2c:49:f1:
         13:00:77:b4:67:9e:c3:05:6a:33:92:c9:3f:e5:14:70:e1:42:
         e1:17:23:57:97:1e:1d:8e:7e:f6:61:ef:e4:7b:f8:90:5d:87:
         fa:16:b9:94:b5:91:7f:2d:61:ff:83:2e:91:8c:ee:1e:4e:ae:
         b9:d0:e3:a2:ca:b7:82:a8:5a:31:fb:b3:b4:ff:d5:3f:f1:52:
         6b:a4:29:26:cf:e4:0c:8e:3f:60:8a:98:a6:29:fc:f5:38:69:
         2d:7b:44:a1:3e:d6:12:fc:be:c7:27:3e:f8:02:8c:5f:eb:08:
         e9:ad:31:09:4a:22:b5:6a:38:a3:af:a7:4c:04:d1:65:4f:ad:
         b0:a5:d3:b7:b2:ad:11:b1:fa:6e:ae:d9:da:28:be:66:14:84:
         f4:db:6f:5d:b2:25:a8:27:90:7c:a0:86:7d:37:b1:c4:bd:79:
         84:fd:e4:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 23:37:33 2024 by rpki-client on console-fra.rpki-client.org