Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9qLRr6NxcxuSfWiL2yWVnXcRNN1e43t8b26z32h7dyvC/1/3139312e352e36342e302f32322d3234203d3e203631393031.roa
File:                     3139312e352e36342e302f32322d3234203d3e203631393031.roa (raw, json)
Hash identifier:          JDc8nksjLKnGadBAmRtB8X8w0gf2cKOKM6P66kkKYCE=
Subject key identifier:   D1:C7:C4:EB:56:43:34:33:88:1F:98:39:5D:34:79:8F:C4:6E:CD:8B
Certificate issuer:       /CN=4FEB85108E86A307A90034950C74C7A6630768F6
Certificate serial:       0596B23C7765E86A3C760D2EA63A8D26DEB822F8
Authority key identifier: 4F:EB:85:10:8E:86:A3:07:A9:00:34:95:0C:74:C7:A6:63:07:68:F6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4FEB85108E86A307A90034950C74C7A6630768F6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9qLRr6NxcxuSfWiL2yWVnXcRNN1e43t8b26z32h7dyvC/1/3139312e352e36342e302f32322d3234203d3e203631393031.roa
Signing time:             Thu 04 Apr 2024 16:38:52 +0000
ROA not before:           Thu 04 Apr 2024 16:33:52 +0000
ROA not after:            Thu 03 Apr 2025 16:38:52 +0000
asID:                     61901
IP address blocks:        191.5.64.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9qLRr6NxcxuSfWiL2yWVnXcRNN1e43t8b26z32h7dyvC/1/4FEB85108E86A307A90034950C74C7A6630768F6.crl
                          rsync://rpki-repo.registro.br/repo/9qLRr6NxcxuSfWiL2yWVnXcRNN1e43t8b26z32h7dyvC/1/4FEB85108E86A307A90034950C74C7A6630768F6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4FEB85108E86A307A90034950C74C7A6630768F6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 19:19:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:96:b2:3c:77:65:e8:6a:3c:76:0d:2e:a6:3a:8d:26:de:b8:22:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4FEB85108E86A307A90034950C74C7A6630768F6
        Validity
            Not Before: Apr  4 16:33:52 2024 GMT
            Not After : Apr  3 16:38:52 2025 GMT
        Subject: CN=D1C7C4EB56433433881F98395D34798FC46ECD8B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:71:58:23:2b:fd:91:86:ad:84:47:15:a0:6b:
                    3e:5e:c7:fc:be:48:a2:be:a2:d8:66:1c:33:07:df:
                    42:27:13:a4:cc:06:c6:74:4b:9a:e1:46:ba:0f:ef:
                    a5:51:8c:06:5e:1c:6d:ca:1d:01:49:de:4d:3d:50:
                    1b:65:e2:9b:16:af:59:bf:ea:f4:f0:bb:8c:ce:bf:
                    b5:97:d9:12:1a:68:9b:34:9f:2f:c2:65:eb:d9:30:
                    dd:11:40:63:e2:98:99:47:05:57:b6:95:11:49:21:
                    75:2b:64:5b:b1:aa:60:fb:f4:f6:8b:aa:c3:2e:22:
                    2d:c6:6c:42:f8:d4:17:f3:a0:cc:8b:74:4c:fd:75:
                    76:4c:69:72:b6:55:1c:30:b2:c2:34:da:bf:17:59:
                    ef:ba:c3:58:83:45:d1:e2:df:7b:f9:ae:e0:0b:ec:
                    e6:86:ed:d2:5c:d9:f6:85:c4:42:06:f3:80:55:fb:
                    5d:4f:11:8f:37:29:8d:68:12:86:1f:7c:a3:0c:86:
                    c4:c3:47:21:db:09:97:c9:be:17:21:90:e6:08:27:
                    43:99:49:86:77:0d:6d:90:03:cd:14:ca:b8:e7:ab:
                    1a:f9:cb:6c:1b:dc:99:57:31:d4:64:be:ed:7d:77:
                    fb:28:00:f1:bc:95:f9:43:db:87:f5:dc:6d:b1:df:
                    fa:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:C7:C4:EB:56:43:34:33:88:1F:98:39:5D:34:79:8F:C4:6E:CD:8B
            X509v3 Authority Key Identifier:
                keyid:4F:EB:85:10:8E:86:A3:07:A9:00:34:95:0C:74:C7:A6:63:07:68:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9qLRr6NxcxuSfWiL2yWVnXcRNN1e43t8b26z32h7dyvC/1/4FEB85108E86A307A90034950C74C7A6630768F6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4FEB85108E86A307A90034950C74C7A6630768F6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9qLRr6NxcxuSfWiL2yWVnXcRNN1e43t8b26z32h7dyvC/1/3139312e352e36342e302f32322d3234203d3e203631393031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.5.64.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9c:4b:dd:56:ed:ee:76:df:f8:1b:37:5d:ae:ed:c0:92:fb:48:
         83:05:b1:77:6f:0d:91:19:07:8d:c5:65:a0:3f:68:9a:cf:3e:
         85:6b:91:71:e9:ca:29:e5:86:3b:d7:fc:cc:cf:8c:60:b9:87:
         94:2b:f2:12:e7:ac:3e:19:5b:e6:b8:10:67:e9:7e:2f:db:f2:
         5c:c3:f0:2b:05:03:2f:d9:0e:07:55:63:78:67:47:bb:cb:51:
         49:7d:b6:78:a7:00:8f:c4:43:94:70:4c:a0:69:8f:5e:a3:bf:
         cc:fc:01:f5:2d:47:5f:40:20:55:24:a0:c4:08:ef:98:f9:80:
         24:65:25:05:69:75:3e:e5:d1:e2:45:7e:3a:82:d7:5c:2e:37:
         26:54:69:5b:9e:47:99:e4:31:58:9c:54:71:76:e2:5f:0f:b8:
         28:13:c9:26:0b:d5:f7:df:93:ff:e4:62:96:cb:0e:5e:b3:b6:
         b8:c9:64:12:8d:95:1e:92:ba:49:5f:4f:57:bb:78:b4:c9:35:
         3c:b3:66:12:fe:16:7b:24:5f:c3:69:a0:47:07:41:bd:27:99:
         fd:cd:4d:64:8b:ab:b8:e4:ca:cd:34:e1:dd:14:37:e4:1c:28:
         49:12:e2:94:e0:fe:11:45:9a:f6:e9:69:d6:ff:87:c6:b2:2b:
         2b:e8:8f:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:42:18 2024 by rpki-client on console-fra.rpki-client.org