Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AsFirMsKYkNhFDbnVru1zhhrRvGEgq95xZcNkHp4CvYR/0/3139312e3234322e3233332e302f32342d3234203d3e20323633343834.roa
File:                     3139312e3234322e3233332e302f32342d3234203d3e20323633343834.roa (raw, json)
Hash identifier:          hhlyHiX02KBwX0upKJzhIH2VUXk2AZuGIbOL3S3okZk=
Subject key identifier:   2D:25:C1:1F:0C:AA:9D:BE:1D:A9:A3:2A:7E:F5:9F:6C:17:26:D5:34
Certificate issuer:       /CN=02A1DAD3EFC0EE0ED47E89C11A1CA45151F68C16
Certificate serial:       A8A80C54E95D4B8D13A6CEF6251AB2035B3D26
Authority key identifier: 02:A1:DA:D3:EF:C0:EE:0E:D4:7E:89:C1:1A:1C:A4:51:51:F6:8C:16
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/02A1DAD3EFC0EE0ED47E89C11A1CA45151F68C16.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AsFirMsKYkNhFDbnVru1zhhrRvGEgq95xZcNkHp4CvYR/0/3139312e3234322e3233332e302f32342d3234203d3e20323633343834.roa
Signing time:             Fri 01 Nov 2024 13:45:18 +0000
ROA not before:           Fri 01 Nov 2024 13:40:18 +0000
ROA not after:            Fri 31 Oct 2025 13:45:18 +0000
asID:                     263484
IP address blocks:        191.242.233.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AsFirMsKYkNhFDbnVru1zhhrRvGEgq95xZcNkHp4CvYR/0/02A1DAD3EFC0EE0ED47E89C11A1CA45151F68C16.crl
                          rsync://rpki-repo.registro.br/repo/AsFirMsKYkNhFDbnVru1zhhrRvGEgq95xZcNkHp4CvYR/0/02A1DAD3EFC0EE0ED47E89C11A1CA45151F68C16.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/02A1DAD3EFC0EE0ED47E89C11A1CA45151F68C16.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            a8:a8:0c:54:e9:5d:4b:8d:13:a6:ce:f6:25:1a:b2:03:5b:3d:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02A1DAD3EFC0EE0ED47E89C11A1CA45151F68C16
        Validity
            Not Before: Nov  1 13:40:18 2024 GMT
            Not After : Oct 31 13:45:18 2025 GMT
        Subject: CN=2D25C11F0CAA9DBE1DA9A32A7EF59F6C1726D534
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:78:96:fd:17:26:2d:ca:83:b1:1c:8a:eb:b5:
                    2e:58:15:61:38:ee:e2:b8:51:fc:fc:6f:a5:5a:2c:
                    b7:cd:95:67:26:85:75:1f:a6:11:4f:dd:08:08:42:
                    cb:16:fd:4c:85:0f:c7:63:6f:f6:6e:70:5a:14:33:
                    87:bb:1e:68:51:f1:41:5f:77:5c:e6:21:35:85:4c:
                    73:28:4a:81:d1:be:09:17:a0:0f:3f:12:d0:47:8a:
                    65:53:41:ed:8a:94:a5:09:93:85:24:ce:06:b2:ea:
                    5b:46:5f:e0:31:b8:52:e1:63:08:0f:84:f2:33:b9:
                    7b:b4:5f:6c:42:75:a8:bc:b5:38:46:64:eb:13:95:
                    8c:2f:03:f9:11:f1:37:fc:0e:aa:5e:46:63:40:fa:
                    0f:75:f0:a2:e2:07:3f:1c:ba:ca:29:5e:47:9f:24:
                    9a:cd:c8:5f:18:fe:35:c0:91:b2:ee:75:14:8e:dd:
                    32:32:39:cf:3a:fc:36:98:a8:f1:2e:a0:9a:b8:5b:
                    45:d5:ea:c2:ac:67:8c:59:df:ee:81:76:3a:9d:9e:
                    ca:31:ad:ab:44:43:2d:97:12:84:71:94:a1:ee:6b:
                    32:4b:b6:54:10:7b:fa:d6:42:ff:33:38:56:81:d8:
                    c1:a6:1a:0b:80:af:e4:37:03:63:8d:f2:59:9c:24:
                    8b:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:25:C1:1F:0C:AA:9D:BE:1D:A9:A3:2A:7E:F5:9F:6C:17:26:D5:34
            X509v3 Authority Key Identifier:
                keyid:02:A1:DA:D3:EF:C0:EE:0E:D4:7E:89:C1:1A:1C:A4:51:51:F6:8C:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AsFirMsKYkNhFDbnVru1zhhrRvGEgq95xZcNkHp4CvYR/0/02A1DAD3EFC0EE0ED47E89C11A1CA45151F68C16.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/02A1DAD3EFC0EE0ED47E89C11A1CA45151F68C16.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AsFirMsKYkNhFDbnVru1zhhrRvGEgq95xZcNkHp4CvYR/0/3139312e3234322e3233332e302f32342d3234203d3e20323633343834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.242.233.0/24

    Signature Algorithm: sha256WithRSAEncryption
         15:d1:fa:29:81:62:f1:ed:66:30:a9:e5:6c:ff:cb:be:ae:6b:
         0c:52:fd:98:1c:ab:b5:ba:1a:f3:fc:d3:5f:1f:e6:9c:db:ad:
         f2:4e:96:db:83:12:3e:98:a5:e9:d8:85:ac:8d:b8:77:52:44:
         14:c7:28:5f:aa:b2:a4:e8:36:89:d5:d9:8a:a4:29:71:9c:4a:
         06:a7:e1:d6:fd:00:16:87:7c:4b:22:95:cb:4a:0a:7b:db:8e:
         c1:60:0e:04:9c:63:04:14:32:7b:bd:6b:a0:f5:cf:6d:31:39:
         62:d6:96:61:57:83:6c:86:71:72:6d:eb:79:f7:a5:a0:4b:bf:
         cf:a0:b1:d3:6a:6f:72:4b:b1:09:cd:c1:e2:bd:05:46:19:c7:
         ee:bd:89:62:c8:fb:41:30:38:63:b5:34:b7:d8:8f:7a:ce:cd:
         6b:b7:0c:9d:73:85:46:d4:ae:f9:c5:59:f7:6e:a1:01:dd:35:
         95:5c:46:33:87:79:13:c0:31:30:7e:21:b9:51:53:82:ef:27:
         4a:04:56:91:7c:85:f7:c8:28:c5:3a:ba:96:8c:af:b6:69:36:
         41:f4:98:32:a2:d1:61:5a:72:e1:36:69:e0:1b:3d:7b:09:f2:
         e8:6e:25:81:d3:11:30:da:2a:ac:bf:ea:8c:65:5d:53:38:86:
         96:88:98:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 00:05:40 2024 by rpki-client on console-ams.rpki-client.org