Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9M7ZQLUzyNKv3ySE3FCNJCKumwKNCtczSTYpF7H8Mgrf/0/3139312e3234312e33322e302f32312d3231203d3e20323633363635.roa
File:                     3139312e3234312e33322e302f32312d3231203d3e20323633363635.roa (raw, json)
Hash identifier:          TQ3OUTkWPlVV4w6Z6PUNTvVSo0/kraqe6pIIVtEcOoM=
Subject key identifier:   9A:B4:57:FC:73:59:BF:65:03:45:6D:81:44:3A:E0:57:76:71:0C:EB
Certificate issuer:       /CN=6D04B94711843374D5B7AF8D2AC7E27FF40C6792
Certificate serial:       4C4EC9F8619B1A920AF4050260FF0BBB814B8E52
Authority key identifier: 6D:04:B9:47:11:84:33:74:D5:B7:AF:8D:2A:C7:E2:7F:F4:0C:67:92
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6D04B94711843374D5B7AF8D2AC7E27FF40C6792.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9M7ZQLUzyNKv3ySE3FCNJCKumwKNCtczSTYpF7H8Mgrf/0/3139312e3234312e33322e302f32312d3231203d3e20323633363635.roa
Signing time:             Mon 08 Apr 2024 20:11:29 +0000
ROA not before:           Mon 08 Apr 2024 20:06:29 +0000
ROA not after:            Mon 07 Apr 2025 20:11:29 +0000
asID:                     263665
IP address blocks:        191.241.32.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9M7ZQLUzyNKv3ySE3FCNJCKumwKNCtczSTYpF7H8Mgrf/0/6D04B94711843374D5B7AF8D2AC7E27FF40C6792.crl
                          rsync://rpki-repo.registro.br/repo/9M7ZQLUzyNKv3ySE3FCNJCKumwKNCtczSTYpF7H8Mgrf/0/6D04B94711843374D5B7AF8D2AC7E27FF40C6792.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6D04B94711843374D5B7AF8D2AC7E27FF40C6792.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 06:13:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:4e:c9:f8:61:9b:1a:92:0a:f4:05:02:60:ff:0b:bb:81:4b:8e:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6D04B94711843374D5B7AF8D2AC7E27FF40C6792
        Validity
            Not Before: Apr  8 20:06:29 2024 GMT
            Not After : Apr  7 20:11:29 2025 GMT
        Subject: CN=9AB457FC7359BF6503456D81443AE05776710CEB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:62:50:0a:7e:03:1e:4f:62:bf:07:09:71:11:
                    44:0e:ef:56:9d:35:a7:8a:17:61:ea:d4:a8:2a:4a:
                    67:62:85:bf:20:9b:4a:23:4d:9f:e8:22:5e:b8:25:
                    c3:db:82:51:c4:b2:4b:be:2c:db:47:8b:a9:d0:00:
                    58:de:4c:e5:a9:ab:b7:b8:4b:64:39:dd:d1:a6:f9:
                    09:90:f5:59:1e:0a:34:1c:eb:75:eb:57:cb:b8:2f:
                    61:b2:76:ff:16:b1:05:77:5e:39:c1:ae:4e:7f:03:
                    dc:f7:26:46:cb:92:47:99:38:d7:62:46:ae:08:2a:
                    ef:90:3d:97:ef:48:e2:ab:6b:65:af:d9:ef:cb:16:
                    57:01:24:de:c1:5b:fe:60:08:b1:20:98:d2:5e:d9:
                    6a:cb:94:04:5d:1a:67:b5:ff:79:ad:1b:62:28:4a:
                    d1:8c:ad:80:ad:d3:41:1c:82:5e:1d:4e:55:4b:e0:
                    e4:ed:09:b2:c3:f6:6c:46:91:fa:38:c7:64:b1:de:
                    3a:13:87:bb:b1:2d:ca:55:fc:4f:c9:5d:a1:85:df:
                    0a:4b:07:b4:90:cc:9d:a8:94:3b:20:9c:a6:0c:e6:
                    84:18:46:24:2c:41:5f:cf:99:eb:75:ca:aa:60:83:
                    f7:e5:f4:d2:3e:f7:41:ef:d7:db:7c:d8:95:97:c6:
                    79:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:B4:57:FC:73:59:BF:65:03:45:6D:81:44:3A:E0:57:76:71:0C:EB
            X509v3 Authority Key Identifier:
                keyid:6D:04:B9:47:11:84:33:74:D5:B7:AF:8D:2A:C7:E2:7F:F4:0C:67:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9M7ZQLUzyNKv3ySE3FCNJCKumwKNCtczSTYpF7H8Mgrf/0/6D04B94711843374D5B7AF8D2AC7E27FF40C6792.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6D04B94711843374D5B7AF8D2AC7E27FF40C6792.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9M7ZQLUzyNKv3ySE3FCNJCKumwKNCtczSTYpF7H8Mgrf/0/3139312e3234312e33322e302f32312d3231203d3e20323633363635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.241.32.0/21

    Signature Algorithm: sha256WithRSAEncryption
         1e:08:87:fe:42:bc:9b:f1:e2:8a:a6:d0:fd:cd:da:4d:8f:3b:
         0c:f8:99:f1:93:0b:77:e1:93:1e:06:f0:57:b9:e9:7a:e4:1f:
         75:1f:35:c1:75:63:38:a6:ec:42:bb:f5:35:b6:48:a9:41:07:
         6d:1b:c6:26:ad:57:ae:46:50:0e:44:4f:80:1e:ed:23:e3:d3:
         f7:17:cd:c2:d0:34:35:72:3b:38:b2:74:9c:2e:61:cf:16:b9:
         ca:c1:88:83:b6:5f:d9:26:01:a8:f6:b0:18:93:c2:72:84:8d:
         06:bc:aa:97:dd:f3:74:4c:42:a0:55:ee:74:b4:f1:07:e4:fd:
         56:86:19:1c:6c:65:3a:5f:e7:fa:fa:60:dc:6b:e6:16:2c:ae:
         d7:b5:b3:31:bc:30:f6:be:4f:a7:e7:97:1f:9e:07:16:0b:43:
         a2:04:dc:5a:1b:ba:97:81:d3:ce:59:4f:d1:e8:85:04:46:f8:
         e2:93:73:96:92:26:ed:0a:86:8e:43:fe:ac:28:87:90:83:65:
         dc:04:a8:58:a6:84:09:dd:86:f3:c9:b8:f9:64:ce:dc:5c:1e:
         e7:a7:39:3c:59:e3:0f:11:19:98:78:c1:3d:b6:67:c9:c0:ed:
         3c:bc:03:a6:87:25:0e:0e:55:63:a2:42:d6:05:21:16:a5:b9:
         a6:1f:2b:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 06:40:40 2024 by rpki-client on console-ams.rpki-client.org