Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AFkwFvANtUSCBVJLmTDBCoJSCcodKssoaAL24gzmS5qk/0/3139312e3234312e3137372e302f32342d3234203d3e20323633363736.roa
File:                     3139312e3234312e3137372e302f32342d3234203d3e20323633363736.roa (raw, json)
Hash identifier:          jnQHK5eaETbEfqDBraayylf/p8pbD5ZITJ0gXzjfAaE=
Subject key identifier:   18:26:AC:C4:A2:EE:FB:00:43:F5:BB:C1:B8:A8:23:93:97:02:CB:B2
Certificate issuer:       /CN=1E25984D718583699E6F98027D46C4F064FED1A8
Certificate serial:       4CE213A29088763C3D53EA9E8CD5CD41748A84E2
Authority key identifier: 1E:25:98:4D:71:85:83:69:9E:6F:98:02:7D:46:C4:F0:64:FE:D1:A8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1E25984D718583699E6F98027D46C4F064FED1A8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AFkwFvANtUSCBVJLmTDBCoJSCcodKssoaAL24gzmS5qk/0/3139312e3234312e3137372e302f32342d3234203d3e20323633363736.roa
Signing time:             Tue 12 Nov 2024 04:02:57 +0000
ROA not before:           Tue 12 Nov 2024 03:57:57 +0000
ROA not after:            Tue 11 Nov 2025 04:02:57 +0000
asID:                     263676
IP address blocks:        191.241.177.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AFkwFvANtUSCBVJLmTDBCoJSCcodKssoaAL24gzmS5qk/0/1E25984D718583699E6F98027D46C4F064FED1A8.crl
                          rsync://rpki-repo.registro.br/repo/AFkwFvANtUSCBVJLmTDBCoJSCcodKssoaAL24gzmS5qk/0/1E25984D718583699E6F98027D46C4F064FED1A8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1E25984D718583699E6F98027D46C4F064FED1A8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 05:04:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:e2:13:a2:90:88:76:3c:3d:53:ea:9e:8c:d5:cd:41:74:8a:84:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1E25984D718583699E6F98027D46C4F064FED1A8
        Validity
            Not Before: Nov 12 03:57:57 2024 GMT
            Not After : Nov 11 04:02:57 2025 GMT
        Subject: CN=1826ACC4A2EEFB0043F5BBC1B8A823939702CBB2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:66:b7:46:7e:01:ef:1e:a7:81:09:d0:a2:07:
                    d4:18:70:8d:5c:d0:9c:4f:2a:6e:88:82:6b:12:c2:
                    73:0e:0d:4a:5d:7c:71:c5:d5:9d:19:76:fa:4f:74:
                    42:f2:fe:2e:ad:4a:4c:f9:f9:24:9b:c2:03:e2:0d:
                    d4:9c:60:31:9f:b2:dc:df:8a:ba:65:1b:3b:21:38:
                    8e:af:15:7c:24:c0:33:6b:57:fe:c7:44:ca:68:c5:
                    e7:03:15:c2:08:68:6f:00:11:57:31:ff:a0:58:64:
                    2f:2f:a3:95:93:8e:55:dc:13:22:ad:1e:f4:9c:d8:
                    38:79:d5:42:a8:cc:18:88:f5:04:ad:93:5b:46:6a:
                    7a:69:23:83:4c:3f:e5:36:55:fa:1b:b0:8d:c1:a7:
                    fb:3c:87:5b:b9:60:85:5b:7e:63:1c:d0:75:0e:9e:
                    21:91:9d:be:29:c1:26:84:53:e6:56:94:7d:ff:e7:
                    42:a0:9d:2d:ca:7b:71:84:37:e4:af:97:2a:77:67:
                    b9:f8:9a:1e:12:30:9a:5b:40:d5:a4:c7:da:e7:b2:
                    53:3d:86:d3:29:b4:b0:e7:02:61:bf:4e:01:9e:93:
                    ce:dd:8b:24:3a:a8:3e:11:80:86:51:57:d6:16:a0:
                    f5:2a:fc:e4:dc:e3:31:90:e2:a1:9c:52:0e:2f:5c:
                    f0:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:26:AC:C4:A2:EE:FB:00:43:F5:BB:C1:B8:A8:23:93:97:02:CB:B2
            X509v3 Authority Key Identifier:
                keyid:1E:25:98:4D:71:85:83:69:9E:6F:98:02:7D:46:C4:F0:64:FE:D1:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AFkwFvANtUSCBVJLmTDBCoJSCcodKssoaAL24gzmS5qk/0/1E25984D718583699E6F98027D46C4F064FED1A8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1E25984D718583699E6F98027D46C4F064FED1A8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AFkwFvANtUSCBVJLmTDBCoJSCcodKssoaAL24gzmS5qk/0/3139312e3234312e3137372e302f32342d3234203d3e20323633363736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.241.177.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d3:2d:ad:4a:4f:df:5e:04:c4:77:d9:16:48:1b:1c:8a:9d:f3:
         58:94:f2:86:63:52:e0:64:ad:21:b0:9a:22:c8:9d:6b:2d:5c:
         08:73:22:69:3e:9a:e4:1c:e2:a9:e6:d9:86:3f:80:48:6b:ef:
         ea:8e:a0:62:bf:44:97:d4:cc:76:1f:67:29:9f:a4:93:3a:34:
         97:84:8e:dd:f3:b5:99:7f:eb:68:55:2c:b2:06:e0:f2:d6:c8:
         a8:e1:7a:3f:af:94:48:f3:ff:9d:67:9a:80:7a:d9:18:51:ad:
         21:a0:66:22:d3:2d:6c:01:53:b5:d3:77:71:95:42:a6:1f:ab:
         65:17:cd:c6:0e:4b:63:4c:1c:87:c1:6e:d9:e7:0d:14:0a:b6:
         48:15:db:b4:f0:c5:8c:5f:47:01:f9:e9:50:35:d5:fc:c9:6b:
         04:7d:de:4a:d7:5c:dc:e5:91:07:c2:68:ef:fd:90:95:93:48:
         aa:0e:cb:4d:fb:c6:1d:85:80:f0:f5:14:98:02:1c:74:e8:7e:
         b7:d5:f8:75:28:f8:ae:5f:e1:fc:ef:a5:0f:3e:54:0f:29:e0:
         4f:97:e6:97:ef:ca:c5:25:46:b6:30:b8:92:75:28:3f:2d:02:
         82:fb:7e:ee:6b:14:c6:65:1b:0c:de:86:46:84:21:29:d4:c8:
         a5:d6:31:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 06:11:13 2024 by rpki-client on console-ams.rpki-client.org