Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9zM9rzhoLidYtwUsTGwwXLy2F3aFQeYFsDH49YLpkNuC/0/3137372e39312e3136302e302f32342d3234203d3e20323633343434.roa
File:                     3137372e39312e3136302e302f32342d3234203d3e20323633343434.roa (raw, json)
Hash identifier:          5Oqn4Wofz3neGqsXFha1gepL12Ji6xYt6XbQDCkhRNs=
Subject key identifier:   80:88:19:31:84:57:A3:F5:01:31:59:69:53:FB:8C:9C:0C:95:92:EA
Certificate issuer:       /CN=414013A25F77129C74B069C1772DF23C085FA9FC
Certificate serial:       4E36073281C14D6161A1C476F2179F2EA2278AC9
Authority key identifier: 41:40:13:A2:5F:77:12:9C:74:B0:69:C1:77:2D:F2:3C:08:5F:A9:FC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/414013A25F77129C74B069C1772DF23C085FA9FC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9zM9rzhoLidYtwUsTGwwXLy2F3aFQeYFsDH49YLpkNuC/0/3137372e39312e3136302e302f32342d3234203d3e20323633343434.roa
Signing time:             Thu 07 Nov 2024 01:23:52 +0000
ROA not before:           Thu 07 Nov 2024 01:18:52 +0000
ROA not after:            Thu 06 Nov 2025 01:23:52 +0000
asID:                     263444
IP address blocks:        177.91.160.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9zM9rzhoLidYtwUsTGwwXLy2F3aFQeYFsDH49YLpkNuC/0/414013A25F77129C74B069C1772DF23C085FA9FC.crl
                          rsync://rpki-repo.registro.br/repo/9zM9rzhoLidYtwUsTGwwXLy2F3aFQeYFsDH49YLpkNuC/0/414013A25F77129C74B069C1772DF23C085FA9FC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/414013A25F77129C74B069C1772DF23C085FA9FC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 20:33:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:36:07:32:81:c1:4d:61:61:a1:c4:76:f2:17:9f:2e:a2:27:8a:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=414013A25F77129C74B069C1772DF23C085FA9FC
        Validity
            Not Before: Nov  7 01:18:52 2024 GMT
            Not After : Nov  6 01:23:52 2025 GMT
        Subject: CN=808819318457A3F50131596953FB8C9C0C9592EA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:84:46:15:23:d9:31:6d:1c:8d:79:4e:7d:31:
                    10:4c:dc:5e:13:a8:84:4e:bc:fd:05:c0:05:57:e4:
                    ab:9f:6a:71:c6:6e:99:13:69:7b:1f:cb:88:1a:f1:
                    ab:23:cb:68:cd:55:6e:07:90:f0:d5:b6:7c:47:5c:
                    e8:17:84:f7:d0:e3:42:63:95:b7:86:ec:ba:d0:3e:
                    60:4d:33:eb:4a:b6:b0:20:28:30:29:1f:2c:4e:eb:
                    9b:d3:43:8f:5b:0a:45:d8:f9:de:05:d4:f5:0c:ba:
                    70:2b:86:7f:9c:29:85:4f:60:5e:bc:c7:e7:e2:6d:
                    85:f4:a2:86:38:f9:91:f0:49:89:7a:2d:ad:e5:b9:
                    c6:5a:ad:16:2b:4c:00:fa:b6:78:f1:c8:fb:bf:44:
                    42:f6:02:37:1f:57:0b:8b:35:31:aa:69:d6:a3:70:
                    fd:0a:c2:c4:5b:01:8e:c7:23:d2:2b:fe:43:d9:ca:
                    a7:65:34:92:ef:16:42:c6:36:36:2f:b3:f9:85:ab:
                    3b:fa:aa:a5:4c:d4:63:2a:41:db:d5:e6:7f:5b:c1:
                    d7:cd:97:84:cc:2e:a5:ec:02:6a:ea:9d:21:1f:cc:
                    8e:2a:32:c4:fc:03:3f:80:cc:ea:aa:66:24:3d:c4:
                    8e:42:f0:71:ff:aa:fb:c8:9c:17:c0:15:58:0d:05:
                    96:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:88:19:31:84:57:A3:F5:01:31:59:69:53:FB:8C:9C:0C:95:92:EA
            X509v3 Authority Key Identifier:
                keyid:41:40:13:A2:5F:77:12:9C:74:B0:69:C1:77:2D:F2:3C:08:5F:A9:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9zM9rzhoLidYtwUsTGwwXLy2F3aFQeYFsDH49YLpkNuC/0/414013A25F77129C74B069C1772DF23C085FA9FC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/414013A25F77129C74B069C1772DF23C085FA9FC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9zM9rzhoLidYtwUsTGwwXLy2F3aFQeYFsDH49YLpkNuC/0/3137372e39312e3136302e302f32342d3234203d3e20323633343434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.91.160.0/24

    Signature Algorithm: sha256WithRSAEncryption
         97:c8:ec:fc:48:5c:13:5b:8e:59:c3:13:7c:aa:7d:b1:db:2e:
         21:79:24:1f:b7:a4:0c:5d:2a:b2:af:d8:2d:2a:ea:c7:70:0f:
         d4:33:e0:53:0d:0e:1e:31:05:5d:27:f1:0c:ef:71:24:44:de:
         a9:2a:9e:8b:04:2b:ae:db:38:ac:5a:a4:9f:4a:b1:3b:fa:7f:
         9c:32:33:55:7a:4e:38:a2:f7:ab:3e:be:f9:bf:05:4e:51:4c:
         e3:21:96:64:57:01:98:c6:38:bf:bd:27:58:26:90:5c:8a:d3:
         8f:09:c8:d3:3c:cb:fd:e5:5e:4d:e4:cb:8a:27:d2:a2:93:a8:
         cd:87:b2:05:ee:10:05:e1:b0:d4:0a:5d:6b:f7:29:7f:9d:68:
         38:13:77:12:d6:53:85:8a:2e:d8:50:26:32:1a:54:65:f6:27:
         40:95:17:03:96:04:91:5d:59:17:cf:84:6f:e7:b8:7d:d9:a0:
         23:32:b4:39:d5:1c:21:f0:91:92:58:c1:60:aa:79:fe:64:60:
         af:c6:c2:4a:56:4e:cb:a6:e9:09:77:86:26:25:cc:aa:ec:14:
         48:f0:a6:bd:df:e3:d0:bf:93:44:8e:0d:e3:25:83:ab:8b:a1:
         55:85:31:86:b2:47:33:d7:11:76:36:9e:91:98:e5:30:07:59:
         e3:ce:a3:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 21:31:40 2024 by rpki-client on console-ams.rpki-client.org