Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9fqBdnWTUUP1rZpxpvnmbTsKBPEUNjz1fSMwVU98frNd/1/3139312e3234332e3230372e302f32342d3234203d3e20323633353132.roa
File:                     3139312e3234332e3230372e302f32342d3234203d3e20323633353132.roa (raw, json)
Hash identifier:          M6rOpJX/v2m3vw/GulIIXc8woRAAnSOo+WIK65+xPIU=
Subject key identifier:   B3:A0:34:D4:6D:A7:20:9F:DB:27:E1:2B:4B:39:3B:72:EC:DE:6D:B5
Certificate issuer:       /CN=280DBCE26C80C869FE8BD73477199ADD10E444A2
Certificate serial:       06F01F30C5719B68F97D9E4A9B29EF1C67199B03
Authority key identifier: 28:0D:BC:E2:6C:80:C8:69:FE:8B:D7:34:77:19:9A:DD:10:E4:44:A2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/280DBCE26C80C869FE8BD73477199ADD10E444A2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9fqBdnWTUUP1rZpxpvnmbTsKBPEUNjz1fSMwVU98frNd/1/3139312e3234332e3230372e302f32342d3234203d3e20323633353132.roa
Signing time:             Wed 03 Apr 2024 18:32:23 +0000
ROA not before:           Wed 03 Apr 2024 18:27:23 +0000
ROA not after:            Wed 02 Apr 2025 18:32:23 +0000
asID:                     263512
IP address blocks:        191.243.207.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9fqBdnWTUUP1rZpxpvnmbTsKBPEUNjz1fSMwVU98frNd/1/280DBCE26C80C869FE8BD73477199ADD10E444A2.crl
                          rsync://rpki-repo.registro.br/repo/9fqBdnWTUUP1rZpxpvnmbTsKBPEUNjz1fSMwVU98frNd/1/280DBCE26C80C869FE8BD73477199ADD10E444A2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/280DBCE26C80C869FE8BD73477199ADD10E444A2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 11:36:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:f0:1f:30:c5:71:9b:68:f9:7d:9e:4a:9b:29:ef:1c:67:19:9b:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=280DBCE26C80C869FE8BD73477199ADD10E444A2
        Validity
            Not Before: Apr  3 18:27:23 2024 GMT
            Not After : Apr  2 18:32:23 2025 GMT
        Subject: CN=B3A034D46DA7209FDB27E12B4B393B72ECDE6DB5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:29:d1:e2:d7:44:27:85:c4:14:a8:4a:43:a9:
                    93:fc:c7:2b:3a:6b:72:aa:21:a7:e9:80:6e:fe:53:
                    07:5a:25:ca:15:7b:52:b4:d9:e0:ff:15:5c:93:54:
                    a7:03:83:1d:b0:60:a2:af:a2:d7:41:95:93:a5:36:
                    0e:b7:e4:5b:48:f8:04:15:dc:bb:57:8a:92:fb:90:
                    c9:99:46:69:59:d4:36:0a:e7:7d:71:96:6d:9e:c8:
                    5b:b0:a0:0a:31:f0:dc:3f:a1:61:0b:4a:bb:1d:24:
                    22:10:23:5e:eb:82:24:14:a2:14:4a:09:0c:ad:13:
                    2e:2b:72:64:fd:0c:6d:39:4a:68:7f:c1:ed:6e:6a:
                    b5:1b:1d:72:dd:ab:58:12:a7:12:f6:1a:be:6e:5a:
                    50:6c:d6:f7:56:b4:47:9e:62:5f:0a:d2:71:2b:f3:
                    b5:68:15:1c:26:f0:8e:c5:83:c9:7e:ce:ea:bb:11:
                    0c:1a:d6:db:cd:6c:30:0f:1c:98:a9:f2:93:2d:83:
                    8f:43:73:c6:34:86:6c:96:3a:c0:a6:83:32:70:25:
                    97:e4:b3:f2:77:38:2f:45:96:1b:85:17:cc:f2:36:
                    9a:a2:73:df:9b:00:23:08:30:10:10:c6:cc:2a:07:
                    99:19:f4:5d:60:21:61:26:4f:f1:02:51:85:ca:8c:
                    15:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:A0:34:D4:6D:A7:20:9F:DB:27:E1:2B:4B:39:3B:72:EC:DE:6D:B5
            X509v3 Authority Key Identifier:
                keyid:28:0D:BC:E2:6C:80:C8:69:FE:8B:D7:34:77:19:9A:DD:10:E4:44:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9fqBdnWTUUP1rZpxpvnmbTsKBPEUNjz1fSMwVU98frNd/1/280DBCE26C80C869FE8BD73477199ADD10E444A2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/280DBCE26C80C869FE8BD73477199ADD10E444A2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9fqBdnWTUUP1rZpxpvnmbTsKBPEUNjz1fSMwVU98frNd/1/3139312e3234332e3230372e302f32342d3234203d3e20323633353132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.243.207.0/24

    Signature Algorithm: sha256WithRSAEncryption
         54:15:c9:c7:08:69:76:a1:ce:55:75:07:e8:0d:4e:75:b0:67:
         f6:a8:cc:37:65:27:e1:79:7b:7c:a4:e9:08:a9:ef:cf:fa:60:
         35:6b:78:bc:71:5d:3f:58:c2:9d:56:cd:45:84:bb:d5:3d:a1:
         cc:26:b6:2f:10:2b:97:46:13:04:55:fe:4b:24:d2:ed:9c:17:
         05:68:68:b6:aa:3e:97:0f:16:ec:0f:3b:7f:bf:54:c3:0c:06:
         e2:ac:19:60:6f:02:fc:60:ac:6e:e3:8c:bf:b0:c6:1e:3c:95:
         c7:42:d2:21:4d:bd:df:2c:f8:a2:2f:d5:64:be:22:ae:f6:75:
         5e:8f:bf:cd:84:e2:c9:4f:fb:3b:06:a8:32:66:64:56:bc:2c:
         e9:26:ac:63:fa:06:8f:a9:af:f1:0f:f2:60:3a:a0:49:01:cc:
         5d:c9:c5:1b:a5:14:cb:f4:c2:e3:f2:a8:b1:b9:75:78:3c:13:
         b6:b6:95:c4:af:c9:f4:69:25:7a:72:9b:d3:b1:f7:19:9b:93:
         ea:0d:3f:5b:fc:8c:a9:31:87:d1:9c:0c:ba:f7:0a:bb:10:81:
         ab:ca:18:1e:97:c2:14:99:b5:94:c2:06:76:c0:bb:33:f7:a9:
         65:ed:4e:c7:70:90:99:82:fb:a3:b9:fa:2b:a9:aa:f1:c9:0d:
         6d:8c:4b:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 13:31:55 2024 by rpki-client on console-fra.rpki-client.org