Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AsFirMsKYkNhFDbnVru1zhhrRvGEgq95xZcNkHp4CvYR/0/3139312e3234322e3233362e302f32322d3232203d3e20323633343834.roa
File:                     3139312e3234322e3233362e302f32322d3232203d3e20323633343834.roa (raw, json)
Hash identifier:          ZtKh7yo9Hvam5F4Byj7A56Ymh7zM4x6V0NdGAQViJ/g=
Subject key identifier:   D1:6D:05:97:6C:FC:1E:64:92:13:00:44:B2:68:BB:DC:C5:CC:4F:31
Certificate issuer:       /CN=02A1DAD3EFC0EE0ED47E89C11A1CA45151F68C16
Certificate serial:       03360D4044E16A21616649F6A008D10E432B654C
Authority key identifier: 02:A1:DA:D3:EF:C0:EE:0E:D4:7E:89:C1:1A:1C:A4:51:51:F6:8C:16
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/02A1DAD3EFC0EE0ED47E89C11A1CA45151F68C16.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AsFirMsKYkNhFDbnVru1zhhrRvGEgq95xZcNkHp4CvYR/0/3139312e3234322e3233362e302f32322d3232203d3e20323633343834.roa
Signing time:             Fri 01 Nov 2024 13:45:31 +0000
ROA not before:           Fri 01 Nov 2024 13:40:31 +0000
ROA not after:            Fri 31 Oct 2025 13:45:31 +0000
asID:                     263484
IP address blocks:        191.242.236.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AsFirMsKYkNhFDbnVru1zhhrRvGEgq95xZcNkHp4CvYR/0/02A1DAD3EFC0EE0ED47E89C11A1CA45151F68C16.crl
                          rsync://rpki-repo.registro.br/repo/AsFirMsKYkNhFDbnVru1zhhrRvGEgq95xZcNkHp4CvYR/0/02A1DAD3EFC0EE0ED47E89C11A1CA45151F68C16.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/02A1DAD3EFC0EE0ED47E89C11A1CA45151F68C16.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 18:14:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:36:0d:40:44:e1:6a:21:61:66:49:f6:a0:08:d1:0e:43:2b:65:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02A1DAD3EFC0EE0ED47E89C11A1CA45151F68C16
        Validity
            Not Before: Nov  1 13:40:31 2024 GMT
            Not After : Oct 31 13:45:31 2025 GMT
        Subject: CN=D16D05976CFC1E6492130044B268BBDCC5CC4F31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:81:68:9c:05:7b:29:13:d1:81:81:fe:a0:47:
                    47:78:a5:03:70:9b:4b:25:34:4a:43:b6:9b:01:90:
                    da:b3:01:5b:ec:14:bc:41:ca:29:38:fd:17:ad:93:
                    94:82:d5:5a:d5:e5:b7:aa:85:3a:b6:09:96:e0:c2:
                    6d:76:1e:29:ea:76:82:f1:2c:37:84:82:ed:2c:87:
                    36:35:9a:26:78:85:3b:71:cc:ef:e8:fb:5a:1e:3b:
                    43:d4:04:82:80:54:f1:6f:e1:9e:34:3a:ed:23:d8:
                    4f:29:e9:a3:99:cc:7d:5f:99:3b:72:0c:7e:16:e4:
                    83:a9:06:fd:28:ed:bd:ae:1e:57:f3:e1:87:a7:ff:
                    d9:be:2b:e7:0f:72:94:03:95:dd:b9:3e:8a:3b:c5:
                    bd:10:66:78:04:e5:14:68:b1:00:92:3e:ce:81:87:
                    a3:a4:d6:26:71:0c:bd:7b:36:04:b8:ad:79:92:8c:
                    a1:25:e0:6a:c0:9b:22:02:99:9e:eb:1d:07:41:4b:
                    9f:9b:53:8c:60:93:75:aa:13:69:67:33:33:ad:95:
                    08:f3:88:84:cd:da:5c:82:29:5d:1f:e3:47:64:35:
                    98:e6:89:47:72:70:e8:4f:73:68:0a:b9:27:5e:b9:
                    42:8b:df:87:a9:fe:17:b3:f4:3f:28:68:43:ce:73:
                    ca:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:6D:05:97:6C:FC:1E:64:92:13:00:44:B2:68:BB:DC:C5:CC:4F:31
            X509v3 Authority Key Identifier:
                keyid:02:A1:DA:D3:EF:C0:EE:0E:D4:7E:89:C1:1A:1C:A4:51:51:F6:8C:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AsFirMsKYkNhFDbnVru1zhhrRvGEgq95xZcNkHp4CvYR/0/02A1DAD3EFC0EE0ED47E89C11A1CA45151F68C16.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/02A1DAD3EFC0EE0ED47E89C11A1CA45151F68C16.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AsFirMsKYkNhFDbnVru1zhhrRvGEgq95xZcNkHp4CvYR/0/3139312e3234322e3233362e302f32322d3232203d3e20323633343834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.242.236.0/22

    Signature Algorithm: sha256WithRSAEncryption
         48:e0:cb:cb:f4:14:98:31:f1:b3:23:59:b3:8b:c8:c7:0f:50:
         bd:b3:00:9c:66:b9:19:3a:c4:34:62:c4:1b:16:97:3a:a4:c3:
         43:f9:70:06:cc:4a:9e:8b:70:8b:62:2a:b8:f6:21:b7:bc:7b:
         11:57:b2:2b:31:8b:b3:14:3d:1f:39:15:6c:bd:f5:1b:90:e2:
         46:98:cd:53:50:0c:dc:f5:b4:e7:2c:7c:15:6f:7d:1c:a2:d3:
         a9:e3:03:16:cf:33:48:eb:7c:5c:23:8f:3f:f5:ba:77:cb:6a:
         60:55:46:48:bc:48:c8:49:22:2e:9f:e6:75:94:5e:a2:b5:42:
         b3:02:3e:55:4e:e0:32:34:26:8a:18:21:ab:9d:1f:1e:04:5a:
         cc:46:18:d7:da:01:41:88:c3:69:02:4f:a3:6a:bd:d0:4b:53:
         16:17:ac:12:45:0b:24:82:e2:ff:bc:4d:c0:54:65:4f:54:69:
         50:66:c5:e0:11:ee:e8:6b:00:d7:a8:4c:49:6f:c9:46:6a:6a:
         dc:99:80:0c:2f:a1:58:04:a8:a3:a0:d1:a4:c5:5a:04:ea:f6:
         9d:af:be:3f:5c:be:52:bf:ff:7b:8c:18:4a:4b:b4:1f:2f:7e:
         f8:a0:08:7f:18:2e:05:d8:e3:c9:22:cd:38:49:af:a8:ab:e2:
         57:d7:ae:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 17:31:55 2024 by rpki-client on console-fra.rpki-client.org