Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9M7ZQLUzyNKv3ySE3FCNJCKumwKNCtczSTYpF7H8Mgrf/0/3139312e3234312e33322e302f32312d3231203d3e20323633363635.roa
File:                     3139312e3234312e33322e302f32312d3231203d3e20323633363635.roa (raw, json)
Hash identifier:          DBZMwTvhNI4pi9JZ+quvwu0oiEJ1tC1/2b0Cxcl0Feo=
Subject key identifier:   DB:6E:0C:8D:E7:57:50:1D:D9:61:F9:D3:C2:F7:F3:B5:DB:95:9A:08
Certificate issuer:       /CN=DDF75D11A85F5023747B20E973994EC53D23A68E
Certificate serial:       35EF6369470FA56CD325E5D94465E8B1E023C772
Authority key identifier: DD:F7:5D:11:A8:5F:50:23:74:7B:20:E9:73:99:4E:C5:3D:23:A6:8E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DDF75D11A85F5023747B20E973994EC53D23A68E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9M7ZQLUzyNKv3ySE3FCNJCKumwKNCtczSTYpF7H8Mgrf/0/3139312e3234312e33322e302f32312d3231203d3e20323633363635.roa
Signing time:             Thu 07 Nov 2024 20:54:50 +0000
ROA not before:           Thu 07 Nov 2024 20:49:50 +0000
ROA not after:            Thu 06 Nov 2025 20:54:50 +0000
asID:                     263665
IP address blocks:        191.241.32.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9M7ZQLUzyNKv3ySE3FCNJCKumwKNCtczSTYpF7H8Mgrf/0/DDF75D11A85F5023747B20E973994EC53D23A68E.crl
                          rsync://rpki-repo.registro.br/repo/9M7ZQLUzyNKv3ySE3FCNJCKumwKNCtczSTYpF7H8Mgrf/0/DDF75D11A85F5023747B20E973994EC53D23A68E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DDF75D11A85F5023747B20E973994EC53D23A68E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 19:40:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:ef:63:69:47:0f:a5:6c:d3:25:e5:d9:44:65:e8:b1:e0:23:c7:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DDF75D11A85F5023747B20E973994EC53D23A68E
        Validity
            Not Before: Nov  7 20:49:50 2024 GMT
            Not After : Nov  6 20:54:50 2025 GMT
        Subject: CN=DB6E0C8DE757501DD961F9D3C2F7F3B5DB959A08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:8f:9a:38:86:a2:c6:f8:c0:8f:23:ae:ff:a1:
                    53:4d:9a:15:8c:20:ee:f0:71:3e:f3:20:53:50:63:
                    27:ca:b4:e2:78:bd:b1:88:b3:45:8b:55:e0:d7:7e:
                    ee:21:e9:c0:d4:97:87:00:f8:0f:c1:94:35:67:bc:
                    44:19:3e:6b:56:9f:20:bb:93:ba:7b:e9:be:d2:21:
                    64:ab:a9:6c:16:1e:7b:64:59:e2:83:e9:c8:db:46:
                    a8:3a:8f:50:30:f3:06:93:8e:f6:50:32:35:79:c4:
                    c2:75:b4:be:41:72:8b:89:a2:84:eb:d2:0c:2d:62:
                    62:d1:62:1f:b7:de:4c:16:36:b6:67:03:a6:05:84:
                    1d:79:22:55:f2:10:6c:73:ab:a2:4b:f4:d4:9e:b2:
                    54:da:f7:5e:f7:19:3c:54:70:be:ea:0e:08:d6:97:
                    aa:5f:7a:4a:4d:f9:11:55:04:27:32:1b:53:df:e7:
                    4e:cc:a2:b6:23:cd:82:43:79:af:5f:43:d4:b0:2e:
                    a8:de:76:77:9f:3f:e6:6e:aa:86:8d:9c:b4:e6:1c:
                    b4:03:a7:85:2d:e5:9a:1b:e0:73:e3:5a:43:17:f2:
                    22:f9:1b:63:e6:03:ff:2c:0e:41:68:c9:3e:ec:20:
                    7b:19:b5:05:2d:ff:47:f5:2f:2d:38:1f:d0:24:6f:
                    f8:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:6E:0C:8D:E7:57:50:1D:D9:61:F9:D3:C2:F7:F3:B5:DB:95:9A:08
            X509v3 Authority Key Identifier:
                keyid:DD:F7:5D:11:A8:5F:50:23:74:7B:20:E9:73:99:4E:C5:3D:23:A6:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9M7ZQLUzyNKv3ySE3FCNJCKumwKNCtczSTYpF7H8Mgrf/0/DDF75D11A85F5023747B20E973994EC53D23A68E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DDF75D11A85F5023747B20E973994EC53D23A68E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9M7ZQLUzyNKv3ySE3FCNJCKumwKNCtczSTYpF7H8Mgrf/0/3139312e3234312e33322e302f32312d3231203d3e20323633363635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.241.32.0/21

    Signature Algorithm: sha256WithRSAEncryption
         7e:ac:3a:74:4e:db:47:b8:46:c3:60:c3:db:9d:5c:d9:31:6c:
         8b:37:26:35:27:76:1e:fa:81:ae:15:1f:70:dd:9c:82:fb:47:
         db:7d:94:84:ed:65:7f:38:b8:08:a6:cb:b8:d8:2f:2b:df:0f:
         cd:67:7e:58:1b:94:48:e0:8c:27:fd:95:e0:0c:a3:5b:e3:3d:
         93:d2:d5:1e:46:ce:45:f2:f2:ba:66:7e:f9:43:b8:62:4b:bf:
         a2:92:c5:37:f9:44:51:f8:28:ec:08:ee:78:bd:07:0e:f7:c2:
         16:7b:41:64:4e:53:e5:38:50:88:af:30:64:79:af:5e:2b:87:
         92:be:11:9b:0e:84:15:cf:29:09:41:e6:d0:23:af:f2:55:00:
         56:62:d5:8f:45:e7:4d:fc:8a:bc:dc:a7:a1:f8:51:87:89:ea:
         75:12:58:73:16:aa:6a:7b:25:3c:53:03:cc:89:13:d2:58:ad:
         cb:69:cd:54:68:76:76:c6:38:18:8a:23:c3:ab:99:41:1f:5f:
         69:31:3a:8a:3f:b6:a2:57:15:67:3d:3c:0b:28:e7:84:d9:03:
         9f:9c:c0:86:c0:3c:ad:13:5c:59:46:31:6b:58:8c:d5:8b:26:
         da:f2:d7:dc:b4:a0:26:59:98:6e:88:72:b0:de:d2:09:ad:0b:
         81:33:55:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:42:17 2024 by rpki-client on console-fra.rpki-client.org