Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9rZrzyrf4ksRs5pyrvkusLNBb811r8fpPhmwcdZBmn6H/1/3139312e3234332e35322e302f32322d3332203d3e20323633343938.roa
File:                     3139312e3234332e35322e302f32322d3332203d3e20323633343938.roa (raw, json)
Hash identifier:          KJrqh2sNzA4ClDwmORLdNXfo1NG3Jm0cKeZwSNU7Etw=
Subject key identifier:   42:5A:50:13:6D:E0:C6:0B:A1:F9:45:F1:68:BC:E2:4B:FC:66:F9:09
Certificate issuer:       /CN=D6926C4B4ACDBFFD6EE3F10B702553ECA27D773A
Certificate serial:       F79FB58467E9C3E1C898AAD30E0E74BBB4090C
Authority key identifier: D6:92:6C:4B:4A:CD:BF:FD:6E:E3:F1:0B:70:25:53:EC:A2:7D:77:3A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D6926C4B4ACDBFFD6EE3F10B702553ECA27D773A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9rZrzyrf4ksRs5pyrvkusLNBb811r8fpPhmwcdZBmn6H/1/3139312e3234332e35322e302f32322d3332203d3e20323633343938.roa
Signing time:             Wed 03 Apr 2024 20:20:55 +0000
ROA not before:           Wed 03 Apr 2024 20:15:55 +0000
ROA not after:            Wed 02 Apr 2025 20:20:55 +0000
asID:                     263498
IP address blocks:        191.243.52.0/22 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9rZrzyrf4ksRs5pyrvkusLNBb811r8fpPhmwcdZBmn6H/1/D6926C4B4ACDBFFD6EE3F10B702553ECA27D773A.crl
                          rsync://rpki-repo.registro.br/repo/9rZrzyrf4ksRs5pyrvkusLNBb811r8fpPhmwcdZBmn6H/1/D6926C4B4ACDBFFD6EE3F10B702553ECA27D773A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D6926C4B4ACDBFFD6EE3F10B702553ECA27D773A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 22:22:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            f7:9f:b5:84:67:e9:c3:e1:c8:98:aa:d3:0e:0e:74:bb:b4:09:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D6926C4B4ACDBFFD6EE3F10B702553ECA27D773A
        Validity
            Not Before: Apr  3 20:15:55 2024 GMT
            Not After : Apr  2 20:20:55 2025 GMT
        Subject: CN=425A50136DE0C60BA1F945F168BCE24BFC66F909
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:d2:83:ab:9c:21:a8:63:a8:2a:00:30:88:57:
                    42:ee:b1:26:6e:21:b2:37:ce:29:31:dd:51:ba:3e:
                    d1:fa:c8:24:06:8b:7f:c9:46:81:cc:58:9b:4f:8f:
                    93:14:4d:21:d8:94:38:35:46:6a:d7:67:aa:a8:3e:
                    8f:c4:ef:1d:0a:88:2f:94:d8:f2:6b:69:27:57:00:
                    85:03:3d:92:1c:0e:15:b0:7b:22:d8:4c:60:e2:04:
                    b0:1f:b5:75:45:6f:b3:60:86:50:73:78:0e:5a:6a:
                    38:a5:44:d1:ac:7f:00:b4:6b:73:2e:0e:7b:40:a5:
                    96:8f:08:e9:80:ad:6a:42:1a:45:bd:ea:76:e9:a5:
                    87:d4:e7:fb:d0:b8:52:04:0e:05:08:33:43:10:da:
                    cd:4e:9c:32:92:25:b7:95:b7:32:60:a4:40:13:bd:
                    05:29:1d:80:5f:d0:93:31:0b:49:2b:fc:80:17:de:
                    2b:95:63:1d:2d:18:ea:13:38:50:49:b7:60:5d:7c:
                    1d:bc:ff:6f:b6:78:65:ea:1e:c8:cc:5f:82:43:92:
                    b5:b4:75:7a:fe:dc:24:65:6e:d0:a7:6b:cf:94:13:
                    f5:86:c6:2e:b3:77:60:33:27:33:9e:57:81:c5:c2:
                    d6:91:b2:1b:82:61:1d:44:ea:e8:45:3e:9e:71:36:
                    bf:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:5A:50:13:6D:E0:C6:0B:A1:F9:45:F1:68:BC:E2:4B:FC:66:F9:09
            X509v3 Authority Key Identifier:
                keyid:D6:92:6C:4B:4A:CD:BF:FD:6E:E3:F1:0B:70:25:53:EC:A2:7D:77:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9rZrzyrf4ksRs5pyrvkusLNBb811r8fpPhmwcdZBmn6H/1/D6926C4B4ACDBFFD6EE3F10B702553ECA27D773A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D6926C4B4ACDBFFD6EE3F10B702553ECA27D773A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9rZrzyrf4ksRs5pyrvkusLNBb811r8fpPhmwcdZBmn6H/1/3139312e3234332e35322e302f32322d3332203d3e20323633343938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.243.52.0/22

    Signature Algorithm: sha256WithRSAEncryption
         05:58:0a:f2:7b:a7:b4:61:43:7b:63:8c:08:18:32:46:d9:b4:
         63:f0:c5:81:e1:5a:10:16:2c:67:1b:62:51:11:4f:3f:11:11:
         08:c0:61:43:1f:7a:a5:a3:c5:17:fc:6e:c4:29:8c:34:02:8a:
         9d:0b:5b:be:67:e1:e1:e0:f9:3f:f4:80:3d:8c:17:41:a9:8f:
         ea:63:84:79:ba:5f:18:14:d9:8c:7e:34:2d:74:39:7f:2c:d0:
         7c:ca:c8:03:7a:07:49:42:92:9a:6e:bb:58:18:30:24:63:e3:
         0e:52:73:bb:25:58:ff:d4:ee:87:22:52:9b:95:95:46:61:f0:
         a8:70:14:88:c0:b3:41:6f:3c:f8:b4:6b:f0:05:51:81:98:7e:
         1b:9c:10:47:12:b4:e8:9b:04:0b:8f:02:0d:33:55:0f:bf:6d:
         c2:9f:a1:2b:e2:68:77:f7:f8:ea:7a:83:92:92:12:1c:8a:28:
         38:a4:e1:32:93:5c:c5:c3:74:80:a3:a7:df:20:29:02:d4:a6:
         b8:3d:02:dd:d9:79:c6:e1:0f:a3:61:00:a1:79:22:36:44:79:
         21:fc:d7:ca:2f:77:bc:1e:81:80:28:99:31:29:28:29:52:e5:
         44:b9:80:f1:00:51:3c:2b:c6:89:54:2b:4c:a9:cd:91:82:e8:
         b7:5b:6d:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 29 00:20:52 2024 by rpki-client on console-ams.rpki-client.org