Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AFkwFvANtUSCBVJLmTDBCoJSCcodKssoaAL24gzmS5qk/0/3139312e3234312e3137362e302f32342d3234203d3e20323633363736.roa
File:                     3139312e3234312e3137362e302f32342d3234203d3e20323633363736.roa (raw, json)
Hash identifier:          ZQuOqmSPO1Z4mmNALn8RBddeUr/1hKPuVrOnogxijU0=
Subject key identifier:   01:53:73:6E:4A:3E:62:3F:2F:54:06:31:20:FE:18:B5:C1:77:1E:2F
Certificate issuer:       /CN=1E25984D718583699E6F98027D46C4F064FED1A8
Certificate serial:       4AC812EED52EB29CC26F865C3ADAA5BD75FC69D3
Authority key identifier: 1E:25:98:4D:71:85:83:69:9E:6F:98:02:7D:46:C4:F0:64:FE:D1:A8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1E25984D718583699E6F98027D46C4F064FED1A8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AFkwFvANtUSCBVJLmTDBCoJSCcodKssoaAL24gzmS5qk/0/3139312e3234312e3137362e302f32342d3234203d3e20323633363736.roa
Signing time:             Fri 31 May 2024 18:52:23 +0000
ROA not before:           Fri 31 May 2024 18:47:23 +0000
ROA not after:            Fri 30 May 2025 18:52:23 +0000
asID:                     263676
IP address blocks:        191.241.176.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AFkwFvANtUSCBVJLmTDBCoJSCcodKssoaAL24gzmS5qk/0/1E25984D718583699E6F98027D46C4F064FED1A8.crl
                          rsync://rpki-repo.registro.br/repo/AFkwFvANtUSCBVJLmTDBCoJSCcodKssoaAL24gzmS5qk/0/1E25984D718583699E6F98027D46C4F064FED1A8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1E25984D718583699E6F98027D46C4F064FED1A8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 05:04:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:c8:12:ee:d5:2e:b2:9c:c2:6f:86:5c:3a:da:a5:bd:75:fc:69:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1E25984D718583699E6F98027D46C4F064FED1A8
        Validity
            Not Before: May 31 18:47:23 2024 GMT
            Not After : May 30 18:52:23 2025 GMT
        Subject: CN=0153736E4A3E623F2F54063120FE18B5C1771E2F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:20:d2:a4:65:0d:c2:93:1a:b3:a5:a3:c0:a2:
                    9b:eb:bc:c8:70:97:25:d9:77:9b:bf:b5:e9:57:25:
                    eb:e3:24:a3:22:18:e8:cb:cb:17:79:4b:24:4e:37:
                    a1:c0:a2:22:84:58:8f:35:a5:01:93:14:36:ef:77:
                    17:d1:67:64:d1:d6:8f:b5:33:1d:f2:85:17:b1:49:
                    51:f9:57:e0:e3:14:a2:a3:6e:7c:6f:38:55:56:44:
                    88:b4:74:b2:71:c3:d9:b2:11:20:03:e0:d3:64:df:
                    a3:12:af:b3:14:30:60:ae:88:6d:c5:73:47:66:2f:
                    2f:22:f7:72:04:88:0c:47:6b:6b:12:35:11:72:7b:
                    fb:3c:a1:55:bc:c7:9a:97:8a:8a:d9:3e:eb:2b:19:
                    9c:32:87:76:e8:ca:6e:e6:31:53:10:75:14:a1:91:
                    08:7b:3b:a2:31:0f:3c:15:fc:32:c5:a9:b1:b0:a7:
                    9a:8d:e1:41:62:8c:de:d5:b9:c1:05:b7:b7:17:8f:
                    3b:11:05:f7:6f:92:1a:cf:ce:bf:32:6b:5b:8a:f3:
                    2c:79:c3:43:cd:b6:7a:48:12:88:d4:cc:c2:fa:fc:
                    15:0d:cd:e9:bc:e4:74:8f:4b:fb:32:6e:67:4c:7a:
                    09:0e:42:58:ae:73:fd:a5:89:1a:ac:52:fe:fe:94:
                    da:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:53:73:6E:4A:3E:62:3F:2F:54:06:31:20:FE:18:B5:C1:77:1E:2F
            X509v3 Authority Key Identifier:
                keyid:1E:25:98:4D:71:85:83:69:9E:6F:98:02:7D:46:C4:F0:64:FE:D1:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AFkwFvANtUSCBVJLmTDBCoJSCcodKssoaAL24gzmS5qk/0/1E25984D718583699E6F98027D46C4F064FED1A8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1E25984D718583699E6F98027D46C4F064FED1A8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AFkwFvANtUSCBVJLmTDBCoJSCcodKssoaAL24gzmS5qk/0/3139312e3234312e3137362e302f32342d3234203d3e20323633363736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.241.176.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6a:23:bc:9a:34:c7:3b:65:9c:d3:b6:ba:91:55:1d:03:b7:60:
         3b:34:03:01:09:6c:d8:1a:c3:f7:15:c9:ff:b2:c6:4e:48:9b:
         39:87:88:f4:0c:38:5d:eb:31:4c:dc:19:b7:56:d1:3b:4b:84:
         da:ad:98:07:00:1f:ac:a8:ac:30:12:4e:28:b1:0d:e3:06:b4:
         77:19:24:73:4d:e1:6e:cf:a8:a8:5f:a1:13:16:66:b3:a5:74:
         09:06:88:4f:51:1e:f7:e8:3c:d4:e8:a9:e0:d2:80:c9:3d:e9:
         72:ae:b4:3a:10:c3:82:6e:8c:60:d7:7f:e6:8d:79:4b:5d:b2:
         fc:d4:4f:ef:9d:8e:bc:23:8f:00:72:2f:10:1f:16:f8:23:c0:
         37:e2:c2:96:4f:11:96:e0:d0:d0:3b:e5:50:fe:ae:ad:6b:fd:
         04:57:42:21:4e:3a:7b:cf:12:36:27:d7:29:30:af:25:9f:5f:
         1a:c4:9a:85:a3:64:45:78:52:ce:0e:0a:f0:b3:72:bc:bf:f0:
         61:a7:de:01:8d:60:cc:b8:06:1a:64:d6:90:f3:be:06:59:18:
         00:98:75:1b:bd:fa:a2:e8:aa:a5:60:2c:73:bf:81:af:07:c4:
         ab:5c:ad:2b:6c:5f:34:41:97:39:32:7d:c6:74:58:5c:f3:7c:
         75:ed:ba:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 06:11:13 2024 by rpki-client on console-ams.rpki-client.org