Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/1/3139312e3234332e39312e302f32342d3234203d3e203238323130.roa
File:                     3139312e3234332e39312e302f32342d3234203d3e203238323130.roa (raw, json)
Hash identifier:          GRGCEH2hYoFbyD4bJO2HlNV/HOaE7IxyCYe9XeUI9Xw=
Subject key identifier:   65:40:62:E6:33:6E:27:7C:71:C1:48:84:17:E1:40:15:0D:69:ED:DE
Certificate issuer:       /CN=A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA
Certificate serial:       53ED786E5045FCCDBD5A97CF1BC5E6D924B0B722
Authority key identifier: A6:1C:AB:65:BA:DA:D7:5F:F4:9C:F8:CE:54:AE:75:73:71:D1:C4:AA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/1/3139312e3234332e39312e302f32342d3234203d3e203238323130.roa
Signing time:             Thu 04 Apr 2024 04:37:48 +0000
ROA not before:           Thu 04 Apr 2024 04:32:48 +0000
ROA not after:            Thu 03 Apr 2025 04:37:48 +0000
asID:                     28210
IP address blocks:        191.243.91.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/1/A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA.crl
                          rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/1/A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 11:26:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:ed:78:6e:50:45:fc:cd:bd:5a:97:cf:1b:c5:e6:d9:24:b0:b7:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA
        Validity
            Not Before: Apr  4 04:32:48 2024 GMT
            Not After : Apr  3 04:37:48 2025 GMT
        Subject: CN=654062E6336E277C71C1488417E140150D69EDDE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:49:aa:b3:ec:b6:69:c8:64:1f:4c:bf:71:a2:
                    5d:34:58:ab:28:be:41:b0:49:92:0d:7b:dd:a8:3d:
                    c1:39:a9:cc:c2:72:a8:2c:4f:e1:de:11:bc:43:b3:
                    51:d3:a0:ae:53:d4:45:d5:08:a4:a5:30:d9:6c:1d:
                    74:63:64:93:ef:01:d9:41:0f:6f:00:28:c4:ea:a3:
                    08:e3:21:a6:91:b1:e3:58:55:b4:ce:cb:95:b3:10:
                    04:73:4d:ee:81:b6:0b:47:37:d1:96:24:75:86:ec:
                    98:c4:b1:e7:c7:c4:80:32:2c:9b:8d:95:c3:e6:aa:
                    cc:61:05:67:0b:f1:d2:75:52:46:b1:30:7a:b1:06:
                    2b:8e:53:4b:cb:cd:a7:e2:8e:2f:b8:24:49:a3:70:
                    1c:de:06:80:a0:d6:48:54:5f:43:b2:76:3c:b6:da:
                    03:25:c1:52:93:3c:19:03:2a:df:89:12:5d:bf:1a:
                    4d:11:5f:7d:6d:51:e2:b7:fd:77:ad:8b:98:16:78:
                    dd:21:3f:5f:b5:ce:19:d6:dc:4b:fe:31:84:6b:2c:
                    da:89:6d:c2:1b:b1:a9:d7:e1:ae:50:76:6a:68:3f:
                    9f:08:c0:10:23:1f:04:57:28:ba:a0:3c:ff:4a:3a:
                    3d:39:1d:aa:fd:d7:2f:c6:fb:d1:e5:17:8f:ce:c1:
                    7b:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:40:62:E6:33:6E:27:7C:71:C1:48:84:17:E1:40:15:0D:69:ED:DE
            X509v3 Authority Key Identifier:
                keyid:A6:1C:AB:65:BA:DA:D7:5F:F4:9C:F8:CE:54:AE:75:73:71:D1:C4:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/1/A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/1/3139312e3234332e39312e302f32342d3234203d3e203238323130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.243.91.0/24

    Signature Algorithm: sha256WithRSAEncryption
         16:ad:4d:40:99:c7:f5:a1:4e:1f:f4:3b:a6:40:59:74:49:0b:
         9b:73:cc:c7:1a:be:8a:a1:46:47:a5:83:8f:0e:0a:66:4d:43:
         bd:87:7f:b5:f6:d8:61:0a:1b:8e:57:33:ad:2f:df:9d:37:6a:
         6b:32:c1:59:9f:a8:73:2b:48:a6:eb:92:42:4f:13:c0:d5:04:
         a1:32:3a:98:80:27:26:b1:8b:89:0e:bb:dd:be:c2:a5:1b:0b:
         d6:9e:57:ee:c9:d2:74:bf:7d:3c:98:ab:e7:60:4b:c1:85:64:
         76:dd:02:38:f6:f0:dd:f4:0d:fc:0f:83:24:67:35:f8:33:1b:
         90:38:13:9f:8a:ca:ce:7a:bf:1a:07:71:bb:91:fa:8c:44:85:
         ed:9b:40:64:df:2a:96:7a:66:2f:e7:56:59:c9:06:db:ec:cb:
         f3:66:18:b6:30:2a:5a:8c:90:fc:9f:a6:2b:ec:a1:59:91:fb:
         8a:a6:a9:8c:cf:e0:c0:51:4e:3f:19:67:32:b8:d3:f1:3a:ce:
         86:39:ca:24:88:3b:43:17:95:59:88:48:5f:c7:87:3b:47:e6:
         9b:b5:48:6f:64:f5:3e:49:d6:98:6a:ab:33:a7:8d:2c:3d:85:
         fe:ca:93:77:fe:08:e4:8a:43:fc:c8:13:dc:86:9c:b2:fa:1e:
         79:80:3c:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:30:09 2024 by rpki-client on console-fra.rpki-client.org