Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9fqBdnWTUUP1rZpxpvnmbTsKBPEUNjz1fSMwVU98frNd/1/3139312e3234332e3230332e302f32342d3234203d3e20323633353132.roa
File:                     3139312e3234332e3230332e302f32342d3234203d3e20323633353132.roa (raw, json)
Hash identifier:          SYkiAaCx+qtTPzaQJ+kA4DX4SbSWwLA34vSZqxQPHOo=
Subject key identifier:   5B:9C:ED:EC:D5:27:C1:80:D1:E5:41:D1:99:A4:B9:29:67:A8:B0:A1
Certificate issuer:       /CN=280DBCE26C80C869FE8BD73477199ADD10E444A2
Certificate serial:       63D84636D8378104398FDF1C0473A56CEFE70827
Authority key identifier: 28:0D:BC:E2:6C:80:C8:69:FE:8B:D7:34:77:19:9A:DD:10:E4:44:A2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/280DBCE26C80C869FE8BD73477199ADD10E444A2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9fqBdnWTUUP1rZpxpvnmbTsKBPEUNjz1fSMwVU98frNd/1/3139312e3234332e3230332e302f32342d3234203d3e20323633353132.roa
Signing time:             Wed 03 Apr 2024 18:32:22 +0000
ROA not before:           Wed 03 Apr 2024 18:27:22 +0000
ROA not after:            Wed 02 Apr 2025 18:32:22 +0000
asID:                     263512
IP address blocks:        191.243.203.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9fqBdnWTUUP1rZpxpvnmbTsKBPEUNjz1fSMwVU98frNd/1/280DBCE26C80C869FE8BD73477199ADD10E444A2.crl
                          rsync://rpki-repo.registro.br/repo/9fqBdnWTUUP1rZpxpvnmbTsKBPEUNjz1fSMwVU98frNd/1/280DBCE26C80C869FE8BD73477199ADD10E444A2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/280DBCE26C80C869FE8BD73477199ADD10E444A2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 11:36:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:d8:46:36:d8:37:81:04:39:8f:df:1c:04:73:a5:6c:ef:e7:08:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=280DBCE26C80C869FE8BD73477199ADD10E444A2
        Validity
            Not Before: Apr  3 18:27:22 2024 GMT
            Not After : Apr  2 18:32:22 2025 GMT
        Subject: CN=5B9CEDECD527C180D1E541D199A4B92967A8B0A1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:0a:44:fc:7e:8b:2f:f1:f4:77:1f:a1:08:56:
                    e1:83:37:f5:17:d5:54:7c:db:61:f6:3e:af:d7:34:
                    d6:14:52:37:c3:48:3e:ad:e4:11:5c:4d:a0:d1:c2:
                    cb:04:1a:58:0d:20:8f:b0:55:aa:22:d0:17:16:bf:
                    8b:dd:63:8c:1a:f4:f2:90:9d:06:73:32:12:20:38:
                    aa:f1:61:01:68:66:19:5c:27:df:0d:9f:99:3c:76:
                    ff:28:ce:db:2f:ae:e9:eb:13:c5:48:df:10:59:ab:
                    c0:26:5b:b5:ca:d8:57:83:a2:41:80:bc:c1:c5:5e:
                    9e:ce:cf:6c:08:f1:1e:28:f7:6e:6a:96:1c:d0:24:
                    d0:8a:dd:08:d9:9d:6d:a5:a7:8d:fc:fb:23:7f:5f:
                    71:c9:5f:1a:df:53:35:a7:20:89:6e:9f:13:18:f0:
                    58:d9:50:3a:f5:2b:eb:bc:60:cd:58:21:c6:72:a4:
                    0f:7c:8c:07:57:21:54:e3:9a:d0:dc:3c:27:c7:0c:
                    91:e8:ca:69:13:c6:07:64:de:de:54:af:35:7c:a6:
                    f8:b8:60:fe:b0:5b:fa:cd:94:3f:37:f4:71:ce:c6:
                    6a:f7:e0:a0:20:10:7b:3a:2e:99:99:ce:a8:76:ef:
                    c0:c3:16:46:fa:12:9f:0b:44:f5:a7:9f:a0:72:ed:
                    10:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:9C:ED:EC:D5:27:C1:80:D1:E5:41:D1:99:A4:B9:29:67:A8:B0:A1
            X509v3 Authority Key Identifier:
                keyid:28:0D:BC:E2:6C:80:C8:69:FE:8B:D7:34:77:19:9A:DD:10:E4:44:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9fqBdnWTUUP1rZpxpvnmbTsKBPEUNjz1fSMwVU98frNd/1/280DBCE26C80C869FE8BD73477199ADD10E444A2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/280DBCE26C80C869FE8BD73477199ADD10E444A2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9fqBdnWTUUP1rZpxpvnmbTsKBPEUNjz1fSMwVU98frNd/1/3139312e3234332e3230332e302f32342d3234203d3e20323633353132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.243.203.0/24

    Signature Algorithm: sha256WithRSAEncryption
         21:6a:89:ff:83:38:4d:2f:48:45:51:0b:d6:14:35:65:d5:82:
         b0:08:69:6d:cf:f5:79:7b:28:29:82:a6:94:5f:b0:b3:15:7d:
         2d:b1:c9:57:56:ba:3f:d5:e4:7c:9a:0c:98:9d:85:fd:a7:95:
         f7:de:d4:b9:5e:6d:a5:ff:06:a5:03:7f:e8:39:a0:c9:0d:f3:
         c0:59:5e:6e:0f:c7:06:23:ee:36:b0:1b:bf:1e:ac:e9:2f:7d:
         0d:9a:6b:20:36:5c:cb:a4:a8:ce:5a:5a:e6:ea:93:88:ff:65:
         e5:4a:16:54:ce:7d:1c:9b:e0:d7:f4:ff:e8:dd:bb:9c:56:31:
         b0:8f:68:8e:83:03:64:aa:03:38:da:69:8b:35:68:17:f1:4b:
         8e:77:2c:a6:87:12:a8:25:56:12:a7:ae:63:c0:de:e2:38:7f:
         e0:61:be:e8:bc:cb:e6:59:d9:05:6e:35:1f:a2:e9:30:c0:d1:
         a3:a5:1c:5e:97:d5:58:a8:ed:ab:ee:72:a8:07:76:aa:df:fd:
         6e:15:5b:1a:a4:a8:54:55:03:99:08:bb:59:42:cd:83:d4:1b:
         7d:43:d8:07:2c:b8:79:88:4f:f3:a9:ce:82:de:58:a8:97:e0:
         d9:f2:6f:34:bc:2b:f8:59:a4:ac:a1:af:7e:93:3b:20:5b:67:
         75:21:e7:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:44:12 2024 by rpki-client on console-ams.rpki-client.org