Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AsFirMsKYkNhFDbnVru1zhhrRvGEgq95xZcNkHp4CvYR/0/3139312e3234322e3233342e302f32342d3234203d3e20323633343834.roa
File:                     3139312e3234322e3233342e302f32342d3234203d3e20323633343834.roa (raw, json)
Hash identifier:          0c9+nsgHIEJ7DagrPsWoruCkkmaUe5m7VZzkb6VPB2Q=
Subject key identifier:   E2:FD:4B:04:F1:CF:4D:F4:5B:CA:5B:58:DB:1D:27:BF:77:F2:F8:96
Certificate issuer:       /CN=02A1DAD3EFC0EE0ED47E89C11A1CA45151F68C16
Certificate serial:       1E21EB6C9CC724E8FEC031C07B20A30FF78F05B8
Authority key identifier: 02:A1:DA:D3:EF:C0:EE:0E:D4:7E:89:C1:1A:1C:A4:51:51:F6:8C:16
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/02A1DAD3EFC0EE0ED47E89C11A1CA45151F68C16.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AsFirMsKYkNhFDbnVru1zhhrRvGEgq95xZcNkHp4CvYR/0/3139312e3234322e3233342e302f32342d3234203d3e20323633343834.roa
Signing time:             Fri 01 Nov 2024 13:45:23 +0000
ROA not before:           Fri 01 Nov 2024 13:40:23 +0000
ROA not after:            Fri 31 Oct 2025 13:45:23 +0000
asID:                     263484
IP address blocks:        191.242.234.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AsFirMsKYkNhFDbnVru1zhhrRvGEgq95xZcNkHp4CvYR/0/02A1DAD3EFC0EE0ED47E89C11A1CA45151F68C16.crl
                          rsync://rpki-repo.registro.br/repo/AsFirMsKYkNhFDbnVru1zhhrRvGEgq95xZcNkHp4CvYR/0/02A1DAD3EFC0EE0ED47E89C11A1CA45151F68C16.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/02A1DAD3EFC0EE0ED47E89C11A1CA45151F68C16.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 18:14:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:21:eb:6c:9c:c7:24:e8:fe:c0:31:c0:7b:20:a3:0f:f7:8f:05:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02A1DAD3EFC0EE0ED47E89C11A1CA45151F68C16
        Validity
            Not Before: Nov  1 13:40:23 2024 GMT
            Not After : Oct 31 13:45:23 2025 GMT
        Subject: CN=E2FD4B04F1CF4DF45BCA5B58DB1D27BF77F2F896
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:52:42:8b:05:42:9a:da:27:cc:28:84:1c:cd:
                    60:e3:cd:05:a6:b4:00:2e:87:19:0e:d1:a0:e5:31:
                    8c:0f:1d:5f:6c:2e:75:9e:c2:07:fc:48:ce:fe:c2:
                    45:29:f1:57:30:17:f7:75:74:66:a1:8b:51:81:72:
                    a7:49:49:11:95:2e:3c:cc:89:fb:81:53:50:4b:fe:
                    41:37:f7:92:66:bc:0d:13:8b:82:45:de:8f:a1:88:
                    94:ac:20:1d:7c:6d:64:f0:94:16:5e:83:b7:ea:91:
                    ff:22:b2:60:67:88:fa:42:a1:b5:93:e4:51:d4:04:
                    90:2f:f7:4d:15:32:38:f7:2d:6d:3c:4c:b5:48:d5:
                    63:40:03:34:08:e9:44:6f:7b:6b:64:f5:f5:de:a6:
                    1d:bd:c1:3a:1b:f5:5d:be:98:bb:8a:88:cf:51:59:
                    f5:4e:81:df:73:05:70:76:52:f6:09:45:17:ec:a6:
                    08:16:71:d0:13:4e:5b:f8:ea:9e:b0:51:30:34:5d:
                    ce:e0:00:a2:4e:aa:3d:c6:c5:2d:86:d9:25:2e:84:
                    7f:0e:a0:66:27:5b:aa:db:2f:93:78:71:62:d5:8f:
                    90:2e:77:23:c3:ab:08:d6:46:3e:3d:6d:bb:a9:01:
                    04:d9:27:39:50:8c:40:7a:e6:72:1c:66:db:d6:45:
                    2b:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:FD:4B:04:F1:CF:4D:F4:5B:CA:5B:58:DB:1D:27:BF:77:F2:F8:96
            X509v3 Authority Key Identifier:
                keyid:02:A1:DA:D3:EF:C0:EE:0E:D4:7E:89:C1:1A:1C:A4:51:51:F6:8C:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AsFirMsKYkNhFDbnVru1zhhrRvGEgq95xZcNkHp4CvYR/0/02A1DAD3EFC0EE0ED47E89C11A1CA45151F68C16.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/02A1DAD3EFC0EE0ED47E89C11A1CA45151F68C16.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AsFirMsKYkNhFDbnVru1zhhrRvGEgq95xZcNkHp4CvYR/0/3139312e3234322e3233342e302f32342d3234203d3e20323633343834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.242.234.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a6:44:7a:54:fa:82:1d:f8:14:fb:6a:e3:cd:ec:57:db:ee:ca:
         fd:0f:37:e2:47:fb:4b:7f:7a:c6:72:d4:76:26:64:e8:2c:fc:
         88:e3:cd:12:e6:01:37:b0:ee:cf:8f:f7:0a:b9:0c:c3:29:e0:
         d1:08:2e:ab:46:29:61:09:4f:37:92:ae:f0:8c:63:57:8c:cf:
         c7:4c:88:5b:af:bf:3c:ba:7d:48:b3:58:99:39:62:db:60:75:
         49:ea:79:44:23:b7:c8:f3:7d:93:26:5c:50:97:40:68:1c:fe:
         ae:a3:7c:ed:71:12:78:34:63:de:7a:77:14:4a:f6:81:e3:6d:
         95:a7:aa:37:1a:63:16:03:59:39:7c:a2:48:19:56:af:ae:ee:
         90:1d:4c:41:c0:16:45:73:4f:ed:d2:4a:f4:33:34:6f:5d:db:
         dc:a1:46:10:f9:b5:5d:ae:28:1f:ea:d9:ec:c1:03:59:c5:85:
         34:c6:00:85:60:7b:b5:81:36:15:49:b8:ae:dd:b0:26:44:62:
         59:31:9c:07:a6:16:ff:29:45:8f:1c:5a:53:13:50:c3:be:99:
         34:31:a7:ae:73:a4:69:78:76:e4:45:a8:37:8c:64:81:71:54:
         a5:8a:01:e1:2d:b9:48:51:c4:6e:cf:ce:f2:33:fa:20:92:ba:
         08:89:90:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 17:31:55 2024 by rpki-client on console-fra.rpki-client.org