Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9fqBdnWTUUP1rZpxpvnmbTsKBPEUNjz1fSMwVU98frNd/1/3139312e3234332e3230312e302f32342d3234203d3e20323633353132.roa
File:                     3139312e3234332e3230312e302f32342d3234203d3e20323633353132.roa (raw, json)
Hash identifier:          MynkPhKVsKfRU/It7OzrzdQsSTzKqTEqXd98Et3SEp4=
Subject key identifier:   82:FD:C9:37:86:FD:E3:94:20:54:DF:E6:81:11:A7:2C:D5:84:FE:E3
Certificate issuer:       /CN=280DBCE26C80C869FE8BD73477199ADD10E444A2
Certificate serial:       62E00D2A98863E8C46D0FF25568C15A609390F4F
Authority key identifier: 28:0D:BC:E2:6C:80:C8:69:FE:8B:D7:34:77:19:9A:DD:10:E4:44:A2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/280DBCE26C80C869FE8BD73477199ADD10E444A2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9fqBdnWTUUP1rZpxpvnmbTsKBPEUNjz1fSMwVU98frNd/1/3139312e3234332e3230312e302f32342d3234203d3e20323633353132.roa
Signing time:             Wed 03 Apr 2024 18:32:24 +0000
ROA not before:           Wed 03 Apr 2024 18:27:24 +0000
ROA not after:            Wed 02 Apr 2025 18:32:24 +0000
asID:                     263512
IP address blocks:        191.243.201.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9fqBdnWTUUP1rZpxpvnmbTsKBPEUNjz1fSMwVU98frNd/1/280DBCE26C80C869FE8BD73477199ADD10E444A2.crl
                          rsync://rpki-repo.registro.br/repo/9fqBdnWTUUP1rZpxpvnmbTsKBPEUNjz1fSMwVU98frNd/1/280DBCE26C80C869FE8BD73477199ADD10E444A2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/280DBCE26C80C869FE8BD73477199ADD10E444A2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 11:36:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:e0:0d:2a:98:86:3e:8c:46:d0:ff:25:56:8c:15:a6:09:39:0f:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=280DBCE26C80C869FE8BD73477199ADD10E444A2
        Validity
            Not Before: Apr  3 18:27:24 2024 GMT
            Not After : Apr  2 18:32:24 2025 GMT
        Subject: CN=82FDC93786FDE3942054DFE68111A72CD584FEE3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:69:81:0e:17:93:97:c4:33:45:87:4c:b4:e9:
                    79:59:e3:7a:da:8a:d3:a7:b8:6e:20:94:c3:1a:3a:
                    46:c8:2b:ef:15:ed:f6:fc:7d:2d:cb:03:81:24:91:
                    51:67:23:6f:8f:dc:25:5a:72:0b:76:f4:c1:80:c3:
                    ea:49:2f:ca:b6:e9:23:a1:9a:8f:36:f4:19:dd:f2:
                    2e:45:dc:f8:87:e8:70:4c:be:68:40:7e:71:74:a6:
                    03:f7:92:82:ba:44:0a:71:6e:e4:e2:db:dc:16:51:
                    96:b8:37:a9:35:5a:a3:ca:65:2c:be:53:e1:f6:0f:
                    c1:fa:72:7f:cf:8e:b1:4f:d1:6a:86:cd:0e:67:ad:
                    7a:48:95:5b:bb:a1:6a:08:c2:29:9e:92:a2:c7:c1:
                    c3:01:42:fc:7c:f4:d6:82:59:b3:5f:12:21:3c:82:
                    99:cc:f2:7d:f6:c9:52:75:30:ce:40:c0:fd:7d:83:
                    2a:1a:2c:e4:ec:93:cc:6d:75:1b:72:9e:c9:86:08:
                    53:6f:18:d5:ec:24:5f:a3:81:a1:7d:3b:40:b9:95:
                    56:78:91:ec:53:d5:4a:63:e2:f0:10:67:40:16:e6:
                    93:91:87:56:ab:4b:7e:6a:3d:cd:f4:d2:40:81:4d:
                    73:7a:11:fe:af:34:ae:a9:7c:f1:ae:68:7e:b2:25:
                    6f:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:FD:C9:37:86:FD:E3:94:20:54:DF:E6:81:11:A7:2C:D5:84:FE:E3
            X509v3 Authority Key Identifier:
                keyid:28:0D:BC:E2:6C:80:C8:69:FE:8B:D7:34:77:19:9A:DD:10:E4:44:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9fqBdnWTUUP1rZpxpvnmbTsKBPEUNjz1fSMwVU98frNd/1/280DBCE26C80C869FE8BD73477199ADD10E444A2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/280DBCE26C80C869FE8BD73477199ADD10E444A2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9fqBdnWTUUP1rZpxpvnmbTsKBPEUNjz1fSMwVU98frNd/1/3139312e3234332e3230312e302f32342d3234203d3e20323633353132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.243.201.0/24

    Signature Algorithm: sha256WithRSAEncryption
         56:46:30:62:6d:23:b9:dd:d5:36:00:56:13:d1:25:a0:d0:6e:
         8a:81:f3:be:c8:de:ed:eb:00:35:da:dd:2d:d5:c0:7a:fc:7d:
         7f:57:ec:93:48:b4:ba:5f:1e:42:54:fd:0e:6e:cd:18:cf:25:
         fe:3c:c4:51:85:1f:52:97:8c:47:42:01:87:4b:79:4f:38:46:
         0a:c3:6c:3c:c8:81:a2:22:20:15:81:65:06:fc:33:a5:c3:ab:
         bb:1e:77:4b:b7:84:7a:10:0b:e4:c4:53:a7:1f:3b:6b:e0:53:
         44:4f:c4:d5:c5:e5:9a:cd:45:52:28:5b:01:74:bd:fb:db:1b:
         d3:20:10:2a:14:2a:18:7f:c7:2b:b8:1a:22:8d:ec:57:e5:c4:
         3e:fc:b2:c7:a5:ff:96:a2:b6:5c:2b:1a:8c:76:ba:33:94:43:
         a2:d5:dc:b4:ba:4d:4a:5a:17:a4:a4:78:8e:5a:56:83:f7:d0:
         e9:91:c6:58:03:d2:25:68:31:67:bc:9b:a9:f7:2a:01:63:32:
         55:b7:11:3b:c9:0c:8d:36:b3:c0:a8:86:30:09:c8:d0:7f:65:
         00:bc:65:1b:bc:a6:53:51:64:9b:9a:ed:8e:93:16:cd:69:40:
         66:56:ca:20:cc:c1:7d:3f:01:f1:f3:28:7b:fa:b0:78:ac:cc:
         78:7c:0c:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:44:12 2024 by rpki-client on console-ams.rpki-client.org