Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AsFirMsKYkNhFDbnVru1zhhrRvGEgq95xZcNkHp4CvYR/0/3139312e3234322e3233352e302f32342d3234203d3e20323633343834.roa
File:                     3139312e3234322e3233352e302f32342d3234203d3e20323633343834.roa (raw, json)
Hash identifier:          aZ99T/qIylzSCkAgTmHifpbbKIt5EPxO4bc5ttPGIts=
Subject key identifier:   F4:07:07:25:82:44:F0:36:4A:72:86:6A:85:64:57:C5:34:F9:14:3B
Certificate issuer:       /CN=02A1DAD3EFC0EE0ED47E89C11A1CA45151F68C16
Certificate serial:       604C73AC76434D05402DF5BFCB92EBDA6A7A4F29
Authority key identifier: 02:A1:DA:D3:EF:C0:EE:0E:D4:7E:89:C1:1A:1C:A4:51:51:F6:8C:16
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/02A1DAD3EFC0EE0ED47E89C11A1CA45151F68C16.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AsFirMsKYkNhFDbnVru1zhhrRvGEgq95xZcNkHp4CvYR/0/3139312e3234322e3233352e302f32342d3234203d3e20323633343834.roa
Signing time:             Fri 01 Nov 2024 13:45:27 +0000
ROA not before:           Fri 01 Nov 2024 13:40:27 +0000
ROA not after:            Fri 31 Oct 2025 13:45:27 +0000
asID:                     263484
IP address blocks:        191.242.235.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AsFirMsKYkNhFDbnVru1zhhrRvGEgq95xZcNkHp4CvYR/0/02A1DAD3EFC0EE0ED47E89C11A1CA45151F68C16.crl
                          rsync://rpki-repo.registro.br/repo/AsFirMsKYkNhFDbnVru1zhhrRvGEgq95xZcNkHp4CvYR/0/02A1DAD3EFC0EE0ED47E89C11A1CA45151F68C16.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/02A1DAD3EFC0EE0ED47E89C11A1CA45151F68C16.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 18:14:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:4c:73:ac:76:43:4d:05:40:2d:f5:bf:cb:92:eb:da:6a:7a:4f:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02A1DAD3EFC0EE0ED47E89C11A1CA45151F68C16
        Validity
            Not Before: Nov  1 13:40:27 2024 GMT
            Not After : Oct 31 13:45:27 2025 GMT
        Subject: CN=F40707258244F0364A72866A856457C534F9143B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:eb:15:be:12:25:a0:5b:9d:97:bc:c0:1c:76:
                    ef:8e:7b:e9:cf:72:15:66:79:af:c2:2b:c2:ef:a9:
                    b7:6e:c7:b8:2d:53:3b:17:c9:53:4f:49:36:63:6a:
                    93:7c:72:3c:32:5b:de:7a:0d:73:4b:2c:87:a3:1c:
                    1b:48:8a:68:3a:52:f1:96:be:d7:80:64:e9:5f:0c:
                    ea:e5:b7:ee:f2:96:bf:20:6c:10:a7:63:03:b7:6c:
                    eb:33:09:cf:a7:b5:fe:c6:2c:c8:4d:f8:92:79:01:
                    9b:ad:3f:2a:f3:23:9f:2f:ff:b1:55:9d:78:08:45:
                    6e:72:ee:58:45:a1:d0:80:32:c0:a0:ff:11:c3:d1:
                    cb:45:0e:e7:d4:a8:59:54:ef:54:66:13:4c:3a:15:
                    1f:85:df:91:8e:a5:ae:98:c7:42:08:08:52:40:5b:
                    9e:cc:40:67:d1:c6:f6:a1:bc:8c:ad:cd:0e:3c:18:
                    11:52:30:ad:84:ae:07:ed:89:7d:c8:9a:ec:01:d2:
                    c9:08:87:5f:e3:ef:24:b0:a1:41:3f:fc:80:5c:d0:
                    ad:bc:e2:72:06:fd:13:41:e7:ac:82:65:75:f6:2a:
                    1f:5c:47:5c:c6:91:f1:d1:30:a3:8f:53:9c:90:70:
                    7c:39:fd:23:c8:e6:71:a7:0c:f5:e0:17:e9:d2:31:
                    05:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:07:07:25:82:44:F0:36:4A:72:86:6A:85:64:57:C5:34:F9:14:3B
            X509v3 Authority Key Identifier:
                keyid:02:A1:DA:D3:EF:C0:EE:0E:D4:7E:89:C1:1A:1C:A4:51:51:F6:8C:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AsFirMsKYkNhFDbnVru1zhhrRvGEgq95xZcNkHp4CvYR/0/02A1DAD3EFC0EE0ED47E89C11A1CA45151F68C16.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/02A1DAD3EFC0EE0ED47E89C11A1CA45151F68C16.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AsFirMsKYkNhFDbnVru1zhhrRvGEgq95xZcNkHp4CvYR/0/3139312e3234322e3233352e302f32342d3234203d3e20323633343834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.242.235.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2d:ce:e6:0d:fc:dc:3e:8d:10:ce:bb:aa:a4:1f:cb:3c:7e:ee:
         ae:5d:e3:04:d3:02:51:6d:b1:9f:34:7e:40:18:df:2d:4d:ff:
         bb:74:ff:da:82:5a:9e:31:a5:44:58:2e:f6:6b:62:66:0a:e9:
         de:d9:19:75:36:83:eb:ce:e8:94:3c:42:00:e1:7e:73:0d:20:
         64:69:1a:f6:8f:b0:40:51:b3:18:e8:ac:a6:56:82:1a:cb:55:
         fa:30:4b:02:0d:3c:bf:03:33:d1:91:d1:10:b6:b8:6b:01:eb:
         f0:f5:d9:3e:c2:f5:22:b6:f6:45:bb:8c:60:4a:0d:c5:60:7c:
         76:5f:43:52:32:29:00:fa:a7:47:8f:f6:2b:c0:df:e5:57:10:
         5a:f6:07:09:b0:ed:39:f4:55:fa:dc:3f:18:77:22:8f:48:07:
         a9:5c:7d:ec:8c:80:24:73:47:85:85:1d:54:fa:e5:5c:b1:ae:
         27:8c:02:a1:6c:88:78:b3:c2:a1:56:12:8d:84:7b:25:2e:8c:
         42:11:13:6b:cb:31:a8:46:6c:b6:e5:9c:1a:8d:f5:30:5f:60:
         53:dc:e2:b6:f4:7d:68:2b:bd:9d:ca:c7:d5:93:bb:07:9d:59:
         65:52:f6:e0:11:45:3d:6c:d8:c4:93:39:53:0e:5a:56:d0:c7:
         01:8d:5d:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 17:31:55 2024 by rpki-client on console-fra.rpki-client.org