Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AFkwFvANtUSCBVJLmTDBCoJSCcodKssoaAL24gzmS5qk/0/3139312e3234312e3138322e302f32342d3234203d3e20323633363736.roa
File:                     3139312e3234312e3138322e302f32342d3234203d3e20323633363736.roa (raw, json)
Hash identifier:          SW59/nU117nkyp85mwzVKAKriUnEekb/rdyJGUOAI3Y=
Subject key identifier:   FB:3C:24:23:BD:92:50:C5:71:0D:97:8B:26:7B:E2:70:FF:26:B0:E9
Certificate issuer:       /CN=1E25984D718583699E6F98027D46C4F064FED1A8
Certificate serial:       447F5D5F7958D44FADB8AAF70645426B3614DDED
Authority key identifier: 1E:25:98:4D:71:85:83:69:9E:6F:98:02:7D:46:C4:F0:64:FE:D1:A8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1E25984D718583699E6F98027D46C4F064FED1A8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AFkwFvANtUSCBVJLmTDBCoJSCcodKssoaAL24gzmS5qk/0/3139312e3234312e3138322e302f32342d3234203d3e20323633363736.roa
Signing time:             Thu 16 May 2024 18:05:06 +0000
ROA not before:           Thu 16 May 2024 18:00:06 +0000
ROA not after:            Thu 15 May 2025 18:05:06 +0000
asID:                     263676
IP address blocks:        191.241.182.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AFkwFvANtUSCBVJLmTDBCoJSCcodKssoaAL24gzmS5qk/0/1E25984D718583699E6F98027D46C4F064FED1A8.crl
                          rsync://rpki-repo.registro.br/repo/AFkwFvANtUSCBVJLmTDBCoJSCcodKssoaAL24gzmS5qk/0/1E25984D718583699E6F98027D46C4F064FED1A8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1E25984D718583699E6F98027D46C4F064FED1A8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 05:04:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:7f:5d:5f:79:58:d4:4f:ad:b8:aa:f7:06:45:42:6b:36:14:dd:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1E25984D718583699E6F98027D46C4F064FED1A8
        Validity
            Not Before: May 16 18:00:06 2024 GMT
            Not After : May 15 18:05:06 2025 GMT
        Subject: CN=FB3C2423BD9250C5710D978B267BE270FF26B0E9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:58:e9:c5:43:d3:a3:91:05:07:42:b5:1f:97:
                    43:f6:83:a4:0b:c4:30:a6:53:1d:21:cd:c2:22:4e:
                    b4:95:85:db:32:ba:4a:91:68:a4:b4:a8:3d:ae:e5:
                    9f:39:13:9e:da:6c:91:cd:47:72:ed:a3:7a:86:00:
                    77:bb:b6:45:65:de:5e:c7:ff:85:0f:61:59:96:d4:
                    14:33:48:47:e2:65:93:7f:0e:d8:98:16:25:0e:96:
                    e9:54:f9:be:76:27:5a:cc:85:be:89:1c:0b:f9:b1:
                    9e:3a:80:fe:1f:e4:51:ec:a7:74:77:f6:f0:64:fd:
                    bf:3b:25:fe:3a:2b:de:b5:80:a6:37:92:d6:17:35:
                    17:90:1d:3c:22:c0:98:f8:9c:58:ff:0c:1b:1f:7a:
                    56:ab:17:ca:cf:4f:56:9a:13:ae:ec:4b:fa:86:6c:
                    4b:54:82:f1:60:82:e2:8d:71:7e:38:a5:72:96:18:
                    a7:41:d5:55:62:1e:af:56:c6:ae:70:a4:fa:f7:3d:
                    90:b9:ea:75:6e:bc:1b:2b:82:b9:9e:17:3a:16:f2:
                    da:fb:10:70:6a:c8:79:2f:41:46:44:c8:dc:1d:43:
                    45:86:ad:66:dd:b0:84:f7:da:87:f5:f3:e4:01:a1:
                    75:f7:8e:8d:59:fb:00:b2:12:b6:64:09:38:3e:64:
                    44:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:3C:24:23:BD:92:50:C5:71:0D:97:8B:26:7B:E2:70:FF:26:B0:E9
            X509v3 Authority Key Identifier:
                keyid:1E:25:98:4D:71:85:83:69:9E:6F:98:02:7D:46:C4:F0:64:FE:D1:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AFkwFvANtUSCBVJLmTDBCoJSCcodKssoaAL24gzmS5qk/0/1E25984D718583699E6F98027D46C4F064FED1A8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1E25984D718583699E6F98027D46C4F064FED1A8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AFkwFvANtUSCBVJLmTDBCoJSCcodKssoaAL24gzmS5qk/0/3139312e3234312e3138322e302f32342d3234203d3e20323633363736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.241.182.0/24

    Signature Algorithm: sha256WithRSAEncryption
         51:8a:0c:57:57:d8:73:f7:7e:7f:e3:c4:6d:a8:1f:e4:94:b2:
         8e:65:64:36:c0:c7:39:0e:64:6c:6c:91:00:11:4e:c3:53:d8:
         af:a2:dd:04:a3:04:1b:d8:a8:b9:92:9d:fc:d7:c0:05:f1:0f:
         37:2f:f5:b6:12:00:6f:36:f7:37:39:72:48:88:c3:57:89:8b:
         79:1e:55:57:ed:e8:19:1d:0d:2e:02:29:cc:65:7c:ec:a6:b4:
         06:7d:03:65:80:da:23:03:1c:c3:41:af:7e:22:30:92:a5:08:
         07:58:ac:f4:61:ee:89:93:ac:c3:18:4c:a7:16:1d:8e:bf:ec:
         83:60:da:2a:44:d7:29:00:e1:95:47:52:86:52:99:09:5d:63:
         bd:61:1f:91:5d:b8:93:9d:59:8a:bb:89:69:eb:30:b8:78:cc:
         bb:56:8d:b7:11:b1:af:f7:14:d7:9d:11:62:b5:1a:55:63:59:
         e2:80:61:bf:b6:3b:72:24:1f:08:cb:2b:ff:e3:50:60:82:77:
         fd:00:15:b8:e8:c8:0a:ec:2e:c0:55:d8:3d:72:4f:53:9b:99:
         b8:de:d5:4d:7a:2b:e2:e8:98:da:cf:d6:ef:2e:83:cd:c5:7f:
         f2:68:b5:10:c9:42:f5:e4:9d:d9:28:1c:f3:fe:cc:28:43:c8:
         13:d1:93:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 06:11:13 2024 by rpki-client on console-ams.rpki-client.org