Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Avp9w8ghYcbVeDefvMDCChbYTGoepuXEnkYMqeQZP1PD/0/3139312e33362e3138362e302f32332d3233203d3e20323633333338.roa
File:                     3139312e33362e3138362e302f32332d3233203d3e20323633333338.roa (raw, json)
Hash identifier:          Ar8dLP0QVKysPpO61ysPJORrP2NtY++tdSIt7cwNO3U=
Subject key identifier:   5C:34:E3:69:9E:1A:2B:BF:7C:27:7B:E1:E3:F3:6E:66:45:28:6E:72
Certificate issuer:       /CN=7B463853EA4AC012BD9F3194CFA33AF32591DF0B
Certificate serial:       4D3B30EF645323A548A9024C8D28CCB3C8212423
Authority key identifier: 7B:46:38:53:EA:4A:C0:12:BD:9F:31:94:CF:A3:3A:F3:25:91:DF:0B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7B463853EA4AC012BD9F3194CFA33AF32591DF0B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Avp9w8ghYcbVeDefvMDCChbYTGoepuXEnkYMqeQZP1PD/0/3139312e33362e3138362e302f32332d3233203d3e20323633333338.roa
Signing time:             Wed 22 May 2024 18:28:22 +0000
ROA not before:           Wed 22 May 2024 18:23:22 +0000
ROA not after:            Wed 21 May 2025 18:28:22 +0000
asID:                     263338
IP address blocks:        191.36.186.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Avp9w8ghYcbVeDefvMDCChbYTGoepuXEnkYMqeQZP1PD/0/7B463853EA4AC012BD9F3194CFA33AF32591DF0B.crl
                          rsync://rpki-repo.registro.br/repo/Avp9w8ghYcbVeDefvMDCChbYTGoepuXEnkYMqeQZP1PD/0/7B463853EA4AC012BD9F3194CFA33AF32591DF0B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7B463853EA4AC012BD9F3194CFA33AF32591DF0B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 02:45:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:3b:30:ef:64:53:23:a5:48:a9:02:4c:8d:28:cc:b3:c8:21:24:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7B463853EA4AC012BD9F3194CFA33AF32591DF0B
        Validity
            Not Before: May 22 18:23:22 2024 GMT
            Not After : May 21 18:28:22 2025 GMT
        Subject: CN=5C34E3699E1A2BBF7C277BE1E3F36E6645286E72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:14:42:5c:4d:31:d5:1b:a8:66:05:08:0b:4a:
                    20:2a:f5:fb:78:ee:57:b6:d8:ba:a7:cc:57:fa:f1:
                    26:88:0a:7b:bf:16:68:84:e9:2e:4c:08:fc:84:b3:
                    8f:0b:5b:4c:bd:7b:bb:e2:26:91:60:75:4d:0f:f9:
                    5f:d2:dd:d8:31:0d:9c:f4:45:f7:32:34:be:c3:f3:
                    2e:e8:c2:48:2e:88:c2:15:d3:f5:f8:9d:13:00:60:
                    d4:f9:c7:98:f5:d5:ea:f6:1f:05:c8:4b:70:31:33:
                    44:d2:30:65:04:26:1f:6f:db:5b:a5:73:03:0e:ea:
                    b0:04:17:98:84:42:de:19:b9:7f:17:60:fd:bc:54:
                    f7:08:2c:4c:11:ad:03:0c:56:18:d9:3b:c8:4b:4b:
                    e0:c8:8d:af:dd:5c:33:0a:ed:4e:a6:7b:f2:34:07:
                    a3:fb:83:08:be:08:39:a0:5e:9c:1e:ea:d4:d8:ea:
                    fe:7c:ee:62:85:db:ca:b8:c8:88:cf:b5:45:cd:27:
                    24:4d:98:aa:4f:0e:cf:a9:f8:bc:d2:53:6b:0f:40:
                    62:1b:d0:f0:8e:e0:f5:bc:84:3a:d2:6d:6c:25:e6:
                    87:6a:f4:65:7a:5a:6a:1f:4c:37:26:37:23:bf:1c:
                    4d:57:67:f3:2c:7c:eb:fa:e1:2c:72:0a:7a:76:12:
                    9d:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:34:E3:69:9E:1A:2B:BF:7C:27:7B:E1:E3:F3:6E:66:45:28:6E:72
            X509v3 Authority Key Identifier:
                keyid:7B:46:38:53:EA:4A:C0:12:BD:9F:31:94:CF:A3:3A:F3:25:91:DF:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Avp9w8ghYcbVeDefvMDCChbYTGoepuXEnkYMqeQZP1PD/0/7B463853EA4AC012BD9F3194CFA33AF32591DF0B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7B463853EA4AC012BD9F3194CFA33AF32591DF0B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Avp9w8ghYcbVeDefvMDCChbYTGoepuXEnkYMqeQZP1PD/0/3139312e33362e3138362e302f32332d3233203d3e20323633333338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.36.186.0/23

    Signature Algorithm: sha256WithRSAEncryption
         84:fd:66:6e:e7:91:eb:c7:b5:91:db:dc:3a:9c:8f:72:0c:7f:
         c4:c7:78:2f:e8:43:55:80:91:99:e1:98:5e:39:15:85:e3:89:
         c6:44:c5:d6:bf:7d:26:60:cc:25:f7:dd:2c:b2:20:ae:02:97:
         e2:42:06:c0:f3:93:5d:b5:33:a8:97:de:d0:1a:73:fc:fa:15:
         4b:e4:d4:55:c5:13:bf:ec:59:28:0b:ec:24:46:e1:4f:2c:6a:
         1a:d4:ff:72:5a:f1:b1:9c:f4:91:6c:39:00:24:ca:fa:c4:d2:
         2f:9a:0f:cf:01:9a:72:e8:69:08:c4:d1:67:f5:41:7f:93:e0:
         46:8a:0c:08:28:59:05:f0:6d:78:08:29:0d:5a:a2:34:38:a1:
         b5:02:ff:2e:8d:3d:25:39:05:cc:7f:2c:c9:f6:16:2d:1a:b9:
         f3:c4:85:c5:51:27:5a:cf:df:e2:0e:93:2a:d4:00:d8:ce:59:
         ff:88:d2:95:8b:13:52:bc:e6:06:ab:15:6e:d4:08:fb:2a:5a:
         16:43:ad:41:53:29:b3:5f:f0:c3:54:2c:6e:87:4e:1f:bf:50:
         b2:d9:ab:1d:0e:22:73:90:c8:cd:6f:0e:55:39:b0:41:14:26:
         e5:ff:50:e5:c7:ad:47:5e:f7:74:ac:d1:4d:01:19:f2:91:4a:
         f4:71:52:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:00:26 2024 by rpki-client on console-ams.rpki-client.org