Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/1/3139312e3234332e39302e302f32342d3234203d3e203238323130.roa
File:                     3139312e3234332e39302e302f32342d3234203d3e203238323130.roa (raw, json)
Hash identifier:          hFzfs2U2Odzuc4EqfIqeUIwDSmgOlIG0Ul3wt2uWhxc=
Subject key identifier:   EA:F6:3F:DC:6D:9F:34:EC:AA:94:24:72:67:8E:62:E8:43:F5:1A:90
Certificate issuer:       /CN=A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA
Certificate serial:       3C359289612E0F9DED83356922F55DB307BA0A61
Authority key identifier: A6:1C:AB:65:BA:DA:D7:5F:F4:9C:F8:CE:54:AE:75:73:71:D1:C4:AA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/1/3139312e3234332e39302e302f32342d3234203d3e203238323130.roa
Signing time:             Thu 04 Apr 2024 04:37:45 +0000
ROA not before:           Thu 04 Apr 2024 04:32:45 +0000
ROA not after:            Thu 03 Apr 2025 04:37:45 +0000
asID:                     28210
IP address blocks:        191.243.90.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/1/A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA.crl
                          rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/1/A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 11:26:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:35:92:89:61:2e:0f:9d:ed:83:35:69:22:f5:5d:b3:07:ba:0a:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA
        Validity
            Not Before: Apr  4 04:32:45 2024 GMT
            Not After : Apr  3 04:37:45 2025 GMT
        Subject: CN=EAF63FDC6D9F34ECAA942472678E62E843F51A90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:06:06:b3:16:f5:1b:64:0a:69:cd:6a:d6:45:
                    49:01:34:13:e4:4f:6c:a2:26:2d:19:f5:71:f6:88:
                    3a:16:f5:98:d3:62:06:43:52:a6:3d:3a:76:af:ea:
                    be:34:23:d4:05:96:e1:f6:b9:ce:d9:f6:92:b9:3e:
                    f0:7e:5b:92:99:5f:b2:51:41:12:18:63:6c:67:6c:
                    fe:19:96:4a:5d:05:97:68:02:84:67:74:57:c3:70:
                    94:b5:21:ae:be:76:38:b2:73:dc:ab:f2:ab:1c:4a:
                    d7:9d:69:4d:71:b4:6d:c1:45:c8:c8:61:ab:f7:a7:
                    54:0f:7b:b7:71:77:56:84:7e:76:93:02:e9:5c:94:
                    a2:03:68:42:8f:b1:e8:03:bd:7d:61:1e:4b:85:7f:
                    bb:93:86:77:44:0f:24:c4:fa:31:cd:4a:fe:6b:b0:
                    3a:91:dd:f5:3f:e9:96:f9:28:fd:d0:1d:a1:df:d3:
                    16:d2:8d:57:2c:fe:6e:4c:54:26:61:22:be:27:a6:
                    c0:94:63:54:ae:60:dc:97:b8:d6:9c:6c:7b:a6:bc:
                    cd:1c:33:b5:f4:35:41:86:77:83:63:4a:05:6f:ee:
                    97:96:50:5e:53:d4:bb:5b:ea:25:23:23:e8:16:f7:
                    28:ad:36:7a:8d:c3:8f:71:06:8d:bc:74:19:aa:10:
                    63:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:F6:3F:DC:6D:9F:34:EC:AA:94:24:72:67:8E:62:E8:43:F5:1A:90
            X509v3 Authority Key Identifier:
                keyid:A6:1C:AB:65:BA:DA:D7:5F:F4:9C:F8:CE:54:AE:75:73:71:D1:C4:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/1/A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/1/3139312e3234332e39302e302f32342d3234203d3e203238323130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.243.90.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9e:29:77:28:53:8d:e1:8f:7e:41:f4:37:42:b6:2d:85:a4:e0:
         ac:2a:bc:4a:80:d7:2a:33:46:c9:46:bf:6a:47:6f:a9:fb:72:
         31:d6:0d:00:e1:f9:1f:b4:b8:c0:14:0a:90:24:e0:cb:17:23:
         44:df:03:b8:b4:e8:49:ed:da:15:a7:f0:ea:33:6d:81:c3:ae:
         a2:77:8c:bc:ff:b8:a3:1f:cf:7c:df:9e:70:21:84:2e:c5:b2:
         b2:83:fd:7c:24:f1:bc:5f:33:38:bd:9e:32:0c:96:1c:76:55:
         39:e2:8b:97:21:c2:2c:cb:45:84:25:c1:e2:c2:5d:ec:67:ca:
         4e:57:c9:b9:f9:a7:ee:90:9b:c0:2e:ad:e3:96:cf:d3:45:3e:
         de:a9:95:0d:46:ce:3f:d1:63:c2:50:6a:bf:28:45:10:0c:0c:
         af:99:c8:bb:d6:7a:66:a5:d3:35:4f:28:a7:ac:69:4c:75:75:
         dd:84:2c:fd:08:87:d3:2f:8c:56:84:7c:98:22:90:7d:16:15:
         cc:ca:df:d1:58:8d:44:dc:a8:6a:56:b1:8f:03:72:a0:76:df:
         92:7b:5f:a0:b2:4e:7c:f2:35:c7:91:e4:62:f9:a0:4f:7c:78:
         c9:fa:d0:f2:81:9a:4f:9d:f6:2e:3c:ce:73:fc:57:0d:44:82:
         7f:06:46:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:39:21 2024 by rpki-client on console-ams.rpki-client.org