Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8pJ3ozxZHgTtWtXMJYEFh95fF7tzp1SDGui2KaDMhfEy/1/3139312e33372e3133372e302f32342d3234203d3e20323633333630.roa
File:                     3139312e33372e3133372e302f32342d3234203d3e20323633333630.roa (raw, json)
Hash identifier:          SRgrP8n7rsNl99fyPnIm5XGLq9XyLwhei08pLxQomCk=
Subject key identifier:   14:EC:89:34:D9:AE:89:5A:D3:EB:93:FA:27:FE:7A:85:23:A2:6C:43
Certificate issuer:       /CN=A5B954E52CA1BBED8E8ADFB002AA379ABF8B3739
Certificate serial:       72BE640C23867BF89F46DBA26B5AA390C620C43B
Authority key identifier: A5:B9:54:E5:2C:A1:BB:ED:8E:8A:DF:B0:02:AA:37:9A:BF:8B:37:39
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A5B954E52CA1BBED8E8ADFB002AA379ABF8B3739.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8pJ3ozxZHgTtWtXMJYEFh95fF7tzp1SDGui2KaDMhfEy/1/3139312e33372e3133372e302f32342d3234203d3e20323633333630.roa
Signing time:             Thu 04 Apr 2024 02:25:07 +0000
ROA not before:           Thu 04 Apr 2024 02:20:07 +0000
ROA not after:            Thu 03 Apr 2025 02:25:07 +0000
asID:                     263360
IP address blocks:        191.37.137.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8pJ3ozxZHgTtWtXMJYEFh95fF7tzp1SDGui2KaDMhfEy/1/A5B954E52CA1BBED8E8ADFB002AA379ABF8B3739.crl
                          rsync://rpki-repo.registro.br/repo/8pJ3ozxZHgTtWtXMJYEFh95fF7tzp1SDGui2KaDMhfEy/1/A5B954E52CA1BBED8E8ADFB002AA379ABF8B3739.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A5B954E52CA1BBED8E8ADFB002AA379ABF8B3739.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 22:33:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:be:64:0c:23:86:7b:f8:9f:46:db:a2:6b:5a:a3:90:c6:20:c4:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A5B954E52CA1BBED8E8ADFB002AA379ABF8B3739
        Validity
            Not Before: Apr  4 02:20:07 2024 GMT
            Not After : Apr  3 02:25:07 2025 GMT
        Subject: CN=14EC8934D9AE895AD3EB93FA27FE7A8523A26C43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:51:22:91:cf:d0:5a:d0:02:d9:cd:f3:6a:44:
                    61:d7:19:1b:a1:81:29:9d:34:a6:a7:b0:e2:85:c6:
                    1e:51:e4:62:8c:8e:60:c1:d0:96:fe:c4:c5:8b:5e:
                    ac:2d:e4:9f:cf:60:9d:f2:64:d2:8b:67:a5:f7:28:
                    f5:a7:ac:4a:9e:e1:63:76:0e:00:a6:9f:e4:7e:5d:
                    94:06:81:97:b1:47:53:0c:10:ac:47:24:61:71:45:
                    9c:05:2a:1e:28:d0:f7:e2:8e:c5:94:13:3c:cc:2f:
                    3f:af:98:f6:45:93:e3:55:52:ca:07:44:46:b8:e2:
                    6c:c1:11:2c:26:91:4a:ab:68:bc:b4:c6:68:c8:2e:
                    d2:7b:3c:a2:d9:02:42:08:fd:7a:5c:3f:1e:82:7d:
                    96:64:a4:9d:2b:14:d9:95:07:cf:b1:b7:db:0e:1a:
                    89:8f:78:8b:58:d3:06:03:09:e5:be:a5:53:b4:fc:
                    00:8c:60:25:cc:86:1c:b2:45:35:1d:7b:2c:bc:1a:
                    a9:c2:eb:2c:e1:6a:15:b1:bc:88:02:11:00:7d:de:
                    63:53:d8:f4:eb:b2:1b:9e:2e:fc:53:da:b3:ec:00:
                    26:f6:c6:18:36:95:f5:4d:d7:4d:18:dd:9b:98:31:
                    68:be:46:5e:68:f1:33:e3:fb:db:4c:9a:62:c7:76:
                    a2:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:EC:89:34:D9:AE:89:5A:D3:EB:93:FA:27:FE:7A:85:23:A2:6C:43
            X509v3 Authority Key Identifier:
                keyid:A5:B9:54:E5:2C:A1:BB:ED:8E:8A:DF:B0:02:AA:37:9A:BF:8B:37:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8pJ3ozxZHgTtWtXMJYEFh95fF7tzp1SDGui2KaDMhfEy/1/A5B954E52CA1BBED8E8ADFB002AA379ABF8B3739.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A5B954E52CA1BBED8E8ADFB002AA379ABF8B3739.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8pJ3ozxZHgTtWtXMJYEFh95fF7tzp1SDGui2KaDMhfEy/1/3139312e33372e3133372e302f32342d3234203d3e20323633333630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.37.137.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4b:b9:f9:91:29:03:7d:12:4f:9e:ec:61:59:fe:7d:25:2e:ff:
         dd:9a:f7:bf:ee:53:95:b8:bc:8e:6e:90:9e:34:f5:15:da:d8:
         06:f4:61:ff:21:38:3f:49:b6:39:cb:8d:ed:97:bf:68:0f:38:
         c0:ba:c8:c4:ea:51:43:6c:92:b5:b6:e2:b5:97:cd:00:3a:7c:
         bf:b8:6a:65:e9:09:ba:74:bd:0e:c5:4c:e7:e3:91:b7:ec:b1:
         59:3f:ee:26:9c:5c:07:53:9b:e6:ce:b4:b6:8e:52:6a:a1:3c:
         a8:7c:4d:b9:0d:7e:2a:19:7a:41:f5:5a:a2:8b:97:3b:71:ec:
         f9:c2:da:60:bf:ae:25:f9:b3:3b:bb:e8:b4:42:46:f0:74:fa:
         67:6a:58:0e:f1:52:f6:1d:56:05:68:b9:c8:42:d5:90:2d:22:
         b0:55:3c:7d:ea:1d:ce:ab:18:c4:34:d5:28:c1:53:80:34:c1:
         a9:00:8d:52:5e:0c:95:14:26:e5:d3:f5:47:8d:61:62:11:80:
         59:cf:be:3e:9a:e2:25:b3:cd:50:2b:3d:ad:7f:98:dc:87:bb:
         df:ee:9c:60:0b:8f:eb:1b:5c:38:ae:0e:44:f0:fa:c7:c7:c9:
         71:71:1f:a8:36:64:7c:34:4b:e9:8f:7a:b7:53:31:ff:bc:a0:
         11:bf:0d:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 22:02:53 2024 by rpki-client on console-fra.rpki-client.org