Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AFkwFvANtUSCBVJLmTDBCoJSCcodKssoaAL24gzmS5qk/0/3139312e3234312e3137392e302f32342d3234203d3e20323633363736.roa
File:                     3139312e3234312e3137392e302f32342d3234203d3e20323633363736.roa (raw, json)
Hash identifier:          d1lgbz36Ca6FYVPglp/Enh8qADv2fj4zbJT131RAreo=
Subject key identifier:   DA:AE:33:D8:CB:5C:B4:20:E5:47:9D:7F:89:6F:19:99:48:99:67:1B
Certificate issuer:       /CN=1E25984D718583699E6F98027D46C4F064FED1A8
Certificate serial:       64F7B9783900D09938891B52E05BA4BB0BA2110C
Authority key identifier: 1E:25:98:4D:71:85:83:69:9E:6F:98:02:7D:46:C4:F0:64:FE:D1:A8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1E25984D718583699E6F98027D46C4F064FED1A8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AFkwFvANtUSCBVJLmTDBCoJSCcodKssoaAL24gzmS5qk/0/3139312e3234312e3137392e302f32342d3234203d3e20323633363736.roa
Signing time:             Fri 31 May 2024 13:44:24 +0000
ROA not before:           Fri 31 May 2024 13:39:24 +0000
ROA not after:            Fri 30 May 2025 13:44:24 +0000
asID:                     263676
IP address blocks:        191.241.179.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AFkwFvANtUSCBVJLmTDBCoJSCcodKssoaAL24gzmS5qk/0/1E25984D718583699E6F98027D46C4F064FED1A8.crl
                          rsync://rpki-repo.registro.br/repo/AFkwFvANtUSCBVJLmTDBCoJSCcodKssoaAL24gzmS5qk/0/1E25984D718583699E6F98027D46C4F064FED1A8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1E25984D718583699E6F98027D46C4F064FED1A8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 05:04:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:f7:b9:78:39:00:d0:99:38:89:1b:52:e0:5b:a4:bb:0b:a2:11:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1E25984D718583699E6F98027D46C4F064FED1A8
        Validity
            Not Before: May 31 13:39:24 2024 GMT
            Not After : May 30 13:44:24 2025 GMT
        Subject: CN=DAAE33D8CB5CB420E5479D7F896F19994899671B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:ea:04:13:28:ae:9d:cf:87:9d:bc:c3:cf:74:
                    6c:b3:10:6a:7b:ee:29:c7:75:94:07:ac:23:2a:7c:
                    49:41:08:97:64:73:8f:c9:8b:24:7d:29:c2:8d:75:
                    13:6b:c2:e5:8c:7a:85:46:d8:ab:26:8a:04:ee:1e:
                    cb:54:fa:42:6f:ad:c9:f7:6e:3e:51:0d:5f:9a:77:
                    ee:7a:1f:e7:9d:aa:77:99:4f:36:76:f9:bb:1a:bc:
                    b5:4d:72:cf:82:39:2b:cd:71:37:7f:c8:9e:8c:19:
                    1d:b1:98:92:42:77:d0:ed:d2:c1:fb:98:6b:35:06:
                    d1:75:96:1a:ea:e6:ff:0d:32:b4:39:2c:36:7c:f7:
                    93:26:90:17:59:1b:f7:9b:b8:f3:aa:a8:37:fe:03:
                    b2:32:40:b9:f1:fd:7f:ff:ee:b3:2d:b4:e3:79:1c:
                    21:1c:96:4f:98:96:27:6e:b4:3b:4c:cc:f9:85:18:
                    4b:12:89:5a:12:ec:32:8f:17:08:15:2b:8b:3a:99:
                    14:5f:04:21:4e:2f:1a:db:9b:9b:f0:ac:bc:db:72:
                    b3:d3:47:33:65:a9:8a:16:8e:80:f0:fe:97:e0:28:
                    28:1b:63:16:fe:86:6b:98:cd:31:a3:52:8a:0c:70:
                    b8:23:e4:f1:0b:66:9c:d4:35:65:d6:cc:fc:6e:68:
                    df:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:AE:33:D8:CB:5C:B4:20:E5:47:9D:7F:89:6F:19:99:48:99:67:1B
            X509v3 Authority Key Identifier:
                keyid:1E:25:98:4D:71:85:83:69:9E:6F:98:02:7D:46:C4:F0:64:FE:D1:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AFkwFvANtUSCBVJLmTDBCoJSCcodKssoaAL24gzmS5qk/0/1E25984D718583699E6F98027D46C4F064FED1A8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1E25984D718583699E6F98027D46C4F064FED1A8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AFkwFvANtUSCBVJLmTDBCoJSCcodKssoaAL24gzmS5qk/0/3139312e3234312e3137392e302f32342d3234203d3e20323633363736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.241.179.0/24

    Signature Algorithm: sha256WithRSAEncryption
         60:9f:87:d5:2c:85:1e:2e:1a:be:14:95:73:a8:04:e1:6d:d8:
         19:53:0b:3d:f8:c4:e1:64:eb:5f:1c:54:3c:d5:27:b6:f6:55:
         e9:ed:51:b3:d1:9a:1d:81:58:0e:4c:0b:07:45:d7:fd:45:58:
         83:16:51:ab:d2:e9:4e:9f:95:b9:98:5a:8b:e0:e0:39:39:84:
         c3:93:8b:c8:e2:5b:9e:a7:74:52:bc:77:19:f5:6e:10:12:2f:
         00:04:98:6b:b7:7c:ff:c1:62:92:8a:58:f8:2b:a0:3a:28:c3:
         d7:aa:c0:6d:6a:0d:9b:12:2b:2a:08:55:ad:0f:df:29:a7:d9:
         0c:ca:b0:19:4d:a5:98:a2:b3:b8:20:8e:8b:24:ae:79:33:b9:
         6a:78:d0:dd:86:0c:29:a8:42:d9:51:02:e4:09:a3:ad:9b:d4:
         fb:47:a8:84:27:e8:bd:bb:2e:aa:7a:04:5a:c7:e1:6e:34:61:
         5d:94:de:42:ba:e8:76:f4:c3:4d:b8:13:ca:fc:6f:fb:50:e2:
         96:90:90:00:28:4c:79:fa:dd:59:c8:65:cc:97:41:b0:13:a4:
         5e:16:c0:72:11:1f:ea:5f:dd:85:9a:e9:f5:06:c0:e1:92:de:
         f4:4c:7c:94:04:f4:87:53:46:e7:2f:fb:0f:5f:20:8e:fa:22:
         1c:0f:16:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 06:11:13 2024 by rpki-client on console-ams.rpki-client.org