Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Avp9w8ghYcbVeDefvMDCChbYTGoepuXEnkYMqeQZP1PD/0/3139312e33362e3138342e302f32332d3233203d3e20323633333338.roa
File:                     3139312e33362e3138342e302f32332d3233203d3e20323633333338.roa (raw, json)
Hash identifier:          AWCEFeeMl0C0L/EqR+VRKNxbMdq9T0T9Jnstb+Ji/Vo=
Subject key identifier:   35:4A:F5:E2:4A:CD:4A:BD:7D:1D:CD:67:CE:7C:CA:F2:81:57:0B:FC
Certificate issuer:       /CN=7B463853EA4AC012BD9F3194CFA33AF32591DF0B
Certificate serial:       31FE875F8CE97772EE76883CD49F4F5EEFB8154F
Authority key identifier: 7B:46:38:53:EA:4A:C0:12:BD:9F:31:94:CF:A3:3A:F3:25:91:DF:0B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7B463853EA4AC012BD9F3194CFA33AF32591DF0B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Avp9w8ghYcbVeDefvMDCChbYTGoepuXEnkYMqeQZP1PD/0/3139312e33362e3138342e302f32332d3233203d3e20323633333338.roa
Signing time:             Wed 22 May 2024 18:26:14 +0000
ROA not before:           Wed 22 May 2024 18:21:14 +0000
ROA not after:            Wed 21 May 2025 18:26:14 +0000
asID:                     263338
IP address blocks:        191.36.184.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Avp9w8ghYcbVeDefvMDCChbYTGoepuXEnkYMqeQZP1PD/0/7B463853EA4AC012BD9F3194CFA33AF32591DF0B.crl
                          rsync://rpki-repo.registro.br/repo/Avp9w8ghYcbVeDefvMDCChbYTGoepuXEnkYMqeQZP1PD/0/7B463853EA4AC012BD9F3194CFA33AF32591DF0B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7B463853EA4AC012BD9F3194CFA33AF32591DF0B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 19:43:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:fe:87:5f:8c:e9:77:72:ee:76:88:3c:d4:9f:4f:5e:ef:b8:15:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7B463853EA4AC012BD9F3194CFA33AF32591DF0B
        Validity
            Not Before: May 22 18:21:14 2024 GMT
            Not After : May 21 18:26:14 2025 GMT
        Subject: CN=354AF5E24ACD4ABD7D1DCD67CE7CCAF281570BFC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:17:94:17:6c:11:a2:82:40:82:68:f9:b3:e9:
                    a0:d3:31:98:b3:33:62:43:79:a0:98:2f:43:0b:80:
                    80:76:9b:59:a7:46:e5:80:fb:b8:d9:fa:3d:2f:1f:
                    b2:35:16:9c:81:66:bc:5b:4d:42:0d:39:24:af:e5:
                    f7:26:6f:be:e8:3e:64:41:8e:7a:ca:0c:63:92:92:
                    df:f9:92:13:be:6f:1e:2d:86:f9:9c:f5:50:5e:40:
                    85:0e:a4:0d:b0:9c:a9:98:c6:f5:44:24:b3:9b:f4:
                    46:1a:8c:cf:da:2b:66:bb:7f:31:dd:a9:6b:aa:23:
                    aa:2e:fa:3d:d5:d6:98:56:14:10:83:a3:39:a7:49:
                    92:77:60:57:52:bd:83:2c:1f:cb:a9:d9:01:57:27:
                    b1:eb:8c:53:8e:00:76:e0:d9:94:3a:db:58:48:79:
                    20:84:f0:37:b6:7f:cd:c5:f6:d2:47:cc:e3:8e:f9:
                    b4:d2:34:1b:fb:c6:54:ce:b3:88:9e:2b:ae:78:ec:
                    b1:2e:8b:b1:b9:1f:ac:39:10:32:55:69:b2:63:21:
                    fe:87:75:ca:5c:51:d1:b3:6d:37:b7:ff:e8:83:77:
                    83:3c:47:30:79:53:ff:6d:51:ce:d9:fd:7e:33:ae:
                    fa:ac:94:a7:08:9b:88:68:f7:9c:94:22:63:06:98:
                    6a:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:4A:F5:E2:4A:CD:4A:BD:7D:1D:CD:67:CE:7C:CA:F2:81:57:0B:FC
            X509v3 Authority Key Identifier:
                keyid:7B:46:38:53:EA:4A:C0:12:BD:9F:31:94:CF:A3:3A:F3:25:91:DF:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Avp9w8ghYcbVeDefvMDCChbYTGoepuXEnkYMqeQZP1PD/0/7B463853EA4AC012BD9F3194CFA33AF32591DF0B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7B463853EA4AC012BD9F3194CFA33AF32591DF0B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Avp9w8ghYcbVeDefvMDCChbYTGoepuXEnkYMqeQZP1PD/0/3139312e33362e3138342e302f32332d3233203d3e20323633333338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.36.184.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9c:50:1c:92:a3:8a:89:76:ca:c1:43:d2:81:a7:80:9b:46:d6:
         63:86:2a:13:38:b1:f4:75:39:56:b6:09:9c:f3:bf:55:75:b8:
         1a:93:8f:65:8e:6f:a2:1e:26:81:cf:c9:c4:ac:ac:8e:8c:55:
         e3:75:e3:b3:5e:33:6c:ef:a7:01:8b:73:18:db:48:54:33:ec:
         92:b4:7a:a1:97:fa:f2:10:01:5e:fb:d6:45:7d:3f:90:62:08:
         c4:d1:62:51:18:95:4d:23:61:b1:06:c9:8f:03:dc:a3:71:3e:
         c0:50:c7:78:96:da:61:ef:39:c1:6f:f4:43:f3:6c:9e:51:58:
         93:61:fe:ce:96:54:2f:af:7f:ab:18:b1:7c:37:c2:63:d9:fb:
         28:82:8d:80:aa:b8:bf:6d:77:0e:80:94:b5:b9:0d:7d:6f:a6:
         20:cb:84:cd:2d:09:30:fb:6e:9c:00:a5:bd:23:40:ec:2f:93:
         5e:6f:c9:d3:14:7f:d0:a8:c8:e6:41:eb:e0:3a:f4:2d:28:81:
         44:3b:4d:35:6a:8d:76:05:ac:fc:3f:b7:36:70:61:b7:d1:b6:
         9c:e0:b0:b6:7f:a0:88:5c:51:a1:c1:5d:dc:e5:40:94:40:bc:
         27:b2:1c:ca:8f:45:37:83:01:c9:d3:4f:3e:82:2b:39:68:1e:
         5f:25:12:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 17:55:42 2024 by rpki-client on console-fra.rpki-client.org