Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9zM9rzhoLidYtwUsTGwwXLy2F3aFQeYFsDH49YLpkNuC/0/3137372e39312e3136302e302f32332d3233203d3e20323633343434.roa
File:                     3137372e39312e3136302e302f32332d3233203d3e20323633343434.roa (raw, json)
Hash identifier:          Mz8sII+dL4aoC/LtQk5R2PhO7su/YmC7jtbvq6EZpB0=
Subject key identifier:   36:C6:B9:FA:31:21:9C:B5:4D:8F:11:7C:69:D9:DE:EC:0F:9E:90:DE
Certificate issuer:       /CN=414013A25F77129C74B069C1772DF23C085FA9FC
Certificate serial:       5F6032B59F22B916D866577F472A23B7DA95C76E
Authority key identifier: 41:40:13:A2:5F:77:12:9C:74:B0:69:C1:77:2D:F2:3C:08:5F:A9:FC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/414013A25F77129C74B069C1772DF23C085FA9FC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9zM9rzhoLidYtwUsTGwwXLy2F3aFQeYFsDH49YLpkNuC/0/3137372e39312e3136302e302f32332d3233203d3e20323633343434.roa
Signing time:             Thu 07 Nov 2024 01:23:52 +0000
ROA not before:           Thu 07 Nov 2024 01:18:52 +0000
ROA not after:            Thu 06 Nov 2025 01:23:52 +0000
asID:                     263444
IP address blocks:        177.91.160.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9zM9rzhoLidYtwUsTGwwXLy2F3aFQeYFsDH49YLpkNuC/0/414013A25F77129C74B069C1772DF23C085FA9FC.crl
                          rsync://rpki-repo.registro.br/repo/9zM9rzhoLidYtwUsTGwwXLy2F3aFQeYFsDH49YLpkNuC/0/414013A25F77129C74B069C1772DF23C085FA9FC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/414013A25F77129C74B069C1772DF23C085FA9FC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 02:45:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:60:32:b5:9f:22:b9:16:d8:66:57:7f:47:2a:23:b7:da:95:c7:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=414013A25F77129C74B069C1772DF23C085FA9FC
        Validity
            Not Before: Nov  7 01:18:52 2024 GMT
            Not After : Nov  6 01:23:52 2025 GMT
        Subject: CN=36C6B9FA31219CB54D8F117C69D9DEEC0F9E90DE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:94:b7:d8:ba:da:b6:8a:fa:d0:26:ab:25:b1:
                    6c:55:64:62:ec:c3:0f:2e:c5:76:d3:40:30:07:fd:
                    6b:be:7b:8c:89:84:25:eb:ab:b8:5d:e2:dc:e6:41:
                    f3:2a:b0:4c:92:64:d2:a3:ba:96:7a:80:06:0f:77:
                    d2:7f:81:29:15:e6:88:49:34:ff:3e:d1:90:a1:65:
                    83:1b:34:3e:fd:79:c1:69:82:12:1e:ff:f9:98:6b:
                    42:26:a9:a5:7b:9b:3c:c0:80:b6:f9:42:b0:06:01:
                    d6:e0:70:9f:f1:f9:24:19:0c:e8:cd:56:5f:ec:e0:
                    0d:16:f6:ec:b8:e8:d4:4a:fd:0c:a6:02:dc:d0:79:
                    d2:a8:ae:8c:1c:e8:07:0f:f5:e1:9f:0c:fd:5f:d0:
                    3e:27:f4:da:ee:9a:61:70:bd:32:26:30:6c:04:1e:
                    de:33:3c:4c:2a:b9:88:cd:8c:dc:c6:45:65:a1:bf:
                    df:0e:cf:4f:fa:54:25:93:4d:82:a7:b4:de:29:02:
                    83:9f:6b:04:98:4c:01:24:d4:4e:03:ed:ac:de:55:
                    34:a4:c5:84:05:b7:89:d5:57:3f:a2:42:d2:35:95:
                    d9:6a:ae:6f:26:8a:b7:f4:6f:85:d3:25:79:50:12:
                    2d:b0:f0:a7:eb:ce:46:d7:73:43:d9:33:45:56:33:
                    53:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:C6:B9:FA:31:21:9C:B5:4D:8F:11:7C:69:D9:DE:EC:0F:9E:90:DE
            X509v3 Authority Key Identifier:
                keyid:41:40:13:A2:5F:77:12:9C:74:B0:69:C1:77:2D:F2:3C:08:5F:A9:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9zM9rzhoLidYtwUsTGwwXLy2F3aFQeYFsDH49YLpkNuC/0/414013A25F77129C74B069C1772DF23C085FA9FC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/414013A25F77129C74B069C1772DF23C085FA9FC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9zM9rzhoLidYtwUsTGwwXLy2F3aFQeYFsDH49YLpkNuC/0/3137372e39312e3136302e302f32332d3233203d3e20323633343434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.91.160.0/23

    Signature Algorithm: sha256WithRSAEncryption
         87:13:11:eb:0d:da:66:ee:ca:03:62:c5:81:99:f4:22:71:12:
         b2:cb:73:02:a8:14:3b:be:35:a1:65:90:1e:27:84:f7:7c:8f:
         9a:69:bf:ae:f5:f8:cf:38:fd:1d:03:4d:c4:04:eb:13:bf:3f:
         ea:b0:43:02:95:e4:30:ad:3c:05:39:e9:67:4b:6a:9c:e5:be:
         22:9c:2b:df:9b:fe:b6:06:d0:0a:c4:e9:1a:f2:f3:c1:90:1a:
         b4:fe:1c:9e:05:92:4a:cb:3a:b4:78:6b:d1:da:19:e1:33:9e:
         f5:55:6d:b8:10:ae:2e:2c:54:b7:a7:46:e4:3d:4f:66:c7:e9:
         d8:95:31:a6:78:63:4a:0b:35:6b:5c:24:d1:ab:aa:7d:b2:a3:
         cc:46:ee:65:fe:fa:c7:07:40:48:b9:cc:a5:3b:da:da:02:92:
         f4:f5:85:be:c9:7d:60:85:c2:4c:52:44:06:be:bf:e0:58:91:
         92:c0:a7:a3:81:c0:fb:18:22:11:dc:df:df:18:e8:c4:80:e7:
         97:a6:ef:44:c9:19:e4:55:ed:77:98:98:99:cf:b6:2f:05:85:
         25:b8:71:c7:4f:b9:b6:5f:46:d3:2c:30:48:68:21:90:76:d2:
         08:ea:1a:20:a0:c3:8b:c4:ce:6a:87:c3:7a:e5:d5:b6:63:92:
         c2:fc:3f:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 03:51:20 2024 by rpki-client on console-fra.rpki-client.org