Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Avp9w8ghYcbVeDefvMDCChbYTGoepuXEnkYMqeQZP1PD/0/3139312e33362e3138352e302f32342d3234203d3e20323633333338.roa
File:                     3139312e33362e3138352e302f32342d3234203d3e20323633333338.roa (raw, json)
Hash identifier:          3cXaYrl5BUtrQ77LGzNMZ3r1RvKeYqF8s60omy42k/Y=
Subject key identifier:   C7:EE:26:3E:A2:6C:2E:AD:71:83:68:F3:6B:35:85:37:B1:F5:49:E0
Certificate issuer:       /CN=7B463853EA4AC012BD9F3194CFA33AF32591DF0B
Certificate serial:       58457A7878C6A3F730357EA58532CF2FCA4841D5
Authority key identifier: 7B:46:38:53:EA:4A:C0:12:BD:9F:31:94:CF:A3:3A:F3:25:91:DF:0B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7B463853EA4AC012BD9F3194CFA33AF32591DF0B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Avp9w8ghYcbVeDefvMDCChbYTGoepuXEnkYMqeQZP1PD/0/3139312e33362e3138352e302f32342d3234203d3e20323633333338.roa
Signing time:             Fri 18 Oct 2024 11:50:59 +0000
ROA not before:           Fri 18 Oct 2024 11:45:59 +0000
ROA not after:            Fri 17 Oct 2025 11:50:59 +0000
asID:                     263338
IP address blocks:        191.36.185.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Avp9w8ghYcbVeDefvMDCChbYTGoepuXEnkYMqeQZP1PD/0/7B463853EA4AC012BD9F3194CFA33AF32591DF0B.crl
                          rsync://rpki-repo.registro.br/repo/Avp9w8ghYcbVeDefvMDCChbYTGoepuXEnkYMqeQZP1PD/0/7B463853EA4AC012BD9F3194CFA33AF32591DF0B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7B463853EA4AC012BD9F3194CFA33AF32591DF0B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 02:45:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:45:7a:78:78:c6:a3:f7:30:35:7e:a5:85:32:cf:2f:ca:48:41:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7B463853EA4AC012BD9F3194CFA33AF32591DF0B
        Validity
            Not Before: Oct 18 11:45:59 2024 GMT
            Not After : Oct 17 11:50:59 2025 GMT
        Subject: CN=C7EE263EA26C2EAD718368F36B358537B1F549E0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:48:64:50:dd:fa:bc:1a:29:d9:97:b1:57:44:
                    d5:7c:67:43:fa:9f:aa:59:fe:cb:83:f4:2b:09:96:
                    7d:c7:d8:62:67:18:ef:8c:f6:a1:24:ca:3f:b8:f5:
                    8b:1b:5b:19:7e:21:86:76:ef:4a:aa:fc:e6:00:12:
                    75:cb:6c:9b:45:6a:3f:f9:c9:5c:ec:99:36:db:ec:
                    63:6b:c4:f8:7c:db:8c:dc:70:17:31:46:da:36:4c:
                    51:bf:ea:fa:98:04:d4:be:4a:ba:76:18:7e:e4:57:
                    8d:75:28:0d:c1:9b:04:d2:f6:f2:fb:3c:20:c1:fb:
                    be:03:13:fc:5a:04:d4:62:69:4b:e5:bb:a5:5c:df:
                    1d:87:ca:23:f0:ca:fc:1b:0f:26:ea:c8:b0:2c:49:
                    10:86:e7:ae:8b:ea:8e:51:1c:13:99:86:a4:60:62:
                    1b:2f:62:8f:14:c6:f5:e0:a2:e5:d3:58:3e:6b:16:
                    cb:10:5c:34:04:d0:27:97:64:2e:a0:fa:89:ce:d3:
                    7c:82:e5:1a:d1:16:ed:59:95:7c:aa:28:d1:50:9c:
                    19:c7:7b:c9:ec:d0:72:da:6e:9b:a4:87:76:cb:52:
                    01:3d:33:0d:8b:ed:f7:7f:0c:2d:6f:67:0a:00:91:
                    31:d3:80:55:32:77:89:39:42:e0:99:04:30:ca:84:
                    21:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:EE:26:3E:A2:6C:2E:AD:71:83:68:F3:6B:35:85:37:B1:F5:49:E0
            X509v3 Authority Key Identifier:
                keyid:7B:46:38:53:EA:4A:C0:12:BD:9F:31:94:CF:A3:3A:F3:25:91:DF:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Avp9w8ghYcbVeDefvMDCChbYTGoepuXEnkYMqeQZP1PD/0/7B463853EA4AC012BD9F3194CFA33AF32591DF0B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7B463853EA4AC012BD9F3194CFA33AF32591DF0B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Avp9w8ghYcbVeDefvMDCChbYTGoepuXEnkYMqeQZP1PD/0/3139312e33362e3138352e302f32342d3234203d3e20323633333338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.36.185.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8f:37:08:c9:03:5c:a3:f7:0b:c6:c0:4c:12:77:fd:11:a9:47:
         24:b4:bb:38:d2:ca:d3:50:5b:6b:52:59:1a:7a:12:ad:75:c3:
         0a:2b:d7:ea:b8:8d:8d:92:a6:ef:36:81:16:ac:7e:44:bd:db:
         01:bc:ec:2f:27:2f:4e:49:74:6b:ea:40:e9:64:2b:3d:95:22:
         24:08:b3:36:02:6b:fd:f7:91:31:ce:e4:27:e8:fe:ab:6e:14:
         1a:65:ec:1a:9e:d4:c5:fd:4b:ab:6c:35:fb:e4:ca:75:2b:1e:
         67:dc:c6:d8:da:3a:f0:d4:f7:3b:7a:3d:a4:98:d4:a7:1e:0d:
         64:99:1b:cd:aa:34:bc:15:6e:b6:dd:26:71:4e:6a:87:cf:a3:
         55:ea:51:7d:a7:d7:f7:c9:a8:cb:e7:a5:b5:06:6d:b3:a5:39:
         77:c7:06:9a:42:60:6b:85:bc:13:90:47:16:a1:c4:0b:fc:73:
         33:98:a8:f8:ab:4a:8e:5e:79:57:48:57:e5:53:a2:33:86:28:
         8e:5e:9e:1c:b2:e1:47:7f:32:b1:fe:31:00:e4:14:71:c7:b1:
         76:4d:1f:a6:d2:09:90:96:20:ea:b3:b9:58:2e:7e:14:1a:51:
         c6:b8:78:9b:4e:91:14:f3:de:85:bf:9c:7e:d9:00:30:85:7f:
         db:2b:39:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:00:26 2024 by rpki-client on console-ams.rpki-client.org