Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9MfHRzzSZ269cnQbozgyRbNpwp4gLnWBNWFPWZEmWGXs/1/3139322e3134302e34342e302f32322d3234203d3e20323632363435.roa
File:                     3139322e3134302e34342e302f32322d3234203d3e20323632363435.roa (raw, json)
Hash identifier:          ymsEPW4b9FSdSv0+U/rRpOwi40kv6lnyLXpSYH9idgs=
Subject key identifier:   BF:AB:D2:1C:15:0A:DD:6E:C2:94:37:6B:76:6E:CE:50:03:9C:23:64
Certificate issuer:       /CN=E09F2B81ED12D4B02A5B104DB200DEF0A03303AD
Certificate serial:       0C02C6D061540644BCFCB67D700A2A2BDB0F2166
Authority key identifier: E0:9F:2B:81:ED:12:D4:B0:2A:5B:10:4D:B2:00:DE:F0:A0:33:03:AD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E09F2B81ED12D4B02A5B104DB200DEF0A03303AD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9MfHRzzSZ269cnQbozgyRbNpwp4gLnWBNWFPWZEmWGXs/1/3139322e3134302e34342e302f32322d3234203d3e20323632363435.roa
Signing time:             Thu 04 Apr 2024 06:53:53 +0000
ROA not before:           Thu 04 Apr 2024 06:48:53 +0000
ROA not after:            Thu 03 Apr 2025 06:53:53 +0000
asID:                     262645
IP address blocks:        192.140.44.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9MfHRzzSZ269cnQbozgyRbNpwp4gLnWBNWFPWZEmWGXs/1/E09F2B81ED12D4B02A5B104DB200DEF0A03303AD.crl
                          rsync://rpki-repo.registro.br/repo/9MfHRzzSZ269cnQbozgyRbNpwp4gLnWBNWFPWZEmWGXs/1/E09F2B81ED12D4B02A5B104DB200DEF0A03303AD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E09F2B81ED12D4B02A5B104DB200DEF0A03303AD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 13:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:02:c6:d0:61:54:06:44:bc:fc:b6:7d:70:0a:2a:2b:db:0f:21:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E09F2B81ED12D4B02A5B104DB200DEF0A03303AD
        Validity
            Not Before: Apr  4 06:48:53 2024 GMT
            Not After : Apr  3 06:53:53 2025 GMT
        Subject: CN=BFABD21C150ADD6EC294376B766ECE50039C2364
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:8e:44:d4:c4:3d:7b:33:a0:c9:d6:8d:98:b8:
                    ea:ba:81:74:69:7c:3e:0a:16:53:97:be:bb:13:1d:
                    0a:36:6e:63:d1:fb:c3:74:cb:cb:1f:a4:fb:c6:c8:
                    c6:f1:11:0b:fb:d0:8e:15:28:1c:59:ef:cd:73:21:
                    f2:47:d5:c8:c1:34:71:a7:8e:8f:60:3a:bd:41:7c:
                    da:c8:44:cb:36:e6:e2:95:a3:41:6e:02:84:18:2e:
                    cc:ea:2a:ca:e4:a5:fd:b3:2f:08:37:fa:c7:43:7f:
                    43:63:ae:6e:39:8d:b7:e1:89:6d:4e:df:b4:ad:db:
                    51:13:23:75:74:7f:5e:57:a5:d9:a1:da:98:bf:30:
                    85:83:0c:49:8c:d0:e8:fe:fb:8d:c1:30:3f:77:4d:
                    82:f9:5e:05:b3:84:e4:91:c1:a2:54:8f:45:59:7b:
                    f0:1d:b7:15:fd:a9:cd:bb:8a:7d:b0:5e:6d:54:c8:
                    25:48:6a:08:49:7e:ca:31:b4:34:87:64:ff:a0:0e:
                    8c:1b:0a:a5:83:b0:7f:b6:7c:4d:07:34:1b:d1:20:
                    5d:e4:e0:14:4e:d1:9e:a7:a9:e7:08:aa:de:f6:ac:
                    10:4a:b4:07:d6:9b:a9:da:36:99:22:0b:fd:bc:ad:
                    a3:e9:bb:42:f1:18:de:33:52:b6:de:65:1f:92:2b:
                    ce:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:AB:D2:1C:15:0A:DD:6E:C2:94:37:6B:76:6E:CE:50:03:9C:23:64
            X509v3 Authority Key Identifier:
                keyid:E0:9F:2B:81:ED:12:D4:B0:2A:5B:10:4D:B2:00:DE:F0:A0:33:03:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9MfHRzzSZ269cnQbozgyRbNpwp4gLnWBNWFPWZEmWGXs/1/E09F2B81ED12D4B02A5B104DB200DEF0A03303AD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E09F2B81ED12D4B02A5B104DB200DEF0A03303AD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9MfHRzzSZ269cnQbozgyRbNpwp4gLnWBNWFPWZEmWGXs/1/3139322e3134302e34342e302f32322d3234203d3e20323632363435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.140.44.0/22

    Signature Algorithm: sha256WithRSAEncryption
         af:17:be:a5:a3:62:d5:fc:49:97:f3:e7:e2:5e:e8:42:ad:d4:
         98:d8:ce:3f:9b:42:9c:dd:24:f2:3e:7e:74:62:09:82:d2:43:
         19:20:12:11:2e:d5:cb:a6:d1:6f:1e:43:9f:6c:a4:a3:7f:80:
         56:8d:4d:f1:b5:54:2e:fb:73:38:3c:27:19:71:10:e4:f5:e2:
         da:3b:4e:bf:6e:3b:84:ad:ce:2b:b0:8e:32:ac:7b:2f:83:95:
         97:17:f0:a1:3a:03:ac:e7:b5:14:92:c1:d6:ff:a5:0f:27:cb:
         48:ca:b7:29:e3:52:eb:32:ac:db:ed:64:68:3f:9b:87:7c:cf:
         ff:31:c0:bf:fa:89:dc:64:c9:d4:0e:4e:4e:38:56:ff:66:73:
         75:34:52:39:3d:e3:ca:e3:61:76:c5:e2:6d:5d:56:30:df:96:
         1b:a8:90:76:7d:f8:2d:f1:a1:29:4d:aa:b7:2d:86:db:7b:91:
         0a:57:96:8b:6b:06:99:85:84:72:57:84:bc:41:25:bb:47:8c:
         5a:43:8c:b9:b9:1e:5e:e6:b2:f1:dd:2f:99:21:7a:59:b7:28:
         07:11:c4:7e:94:48:79:63:58:72:e7:72:68:93:5b:03:fc:e1:
         48:79:98:07:e5:b5:7d:cd:fa:c4:6e:ed:77:25:09:fd:d1:9f:
         57:f5:c0:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 13:03:44 2024 by rpki-client on console-fra.rpki-client.org