Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Avp9w8ghYcbVeDefvMDCChbYTGoepuXEnkYMqeQZP1PD/0/3139312e33362e3138372e302f32342d3234203d3e20323633333338.roa
File:                     3139312e33362e3138372e302f32342d3234203d3e20323633333338.roa (raw, json)
Hash identifier:          NyIrvkYxNxEk/j7WGEmSF18mCSLoIt282KYWMi9ap1g=
Subject key identifier:   82:DF:61:1C:81:93:ED:19:60:35:DE:19:70:0A:F2:4F:F6:30:13:CA
Certificate issuer:       /CN=7B463853EA4AC012BD9F3194CFA33AF32591DF0B
Certificate serial:       29A78EC885B4873A5DB2BD65DC5AD325AE803A8C
Authority key identifier: 7B:46:38:53:EA:4A:C0:12:BD:9F:31:94:CF:A3:3A:F3:25:91:DF:0B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7B463853EA4AC012BD9F3194CFA33AF32591DF0B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Avp9w8ghYcbVeDefvMDCChbYTGoepuXEnkYMqeQZP1PD/0/3139312e33362e3138372e302f32342d3234203d3e20323633333338.roa
Signing time:             Fri 18 Oct 2024 11:51:35 +0000
ROA not before:           Fri 18 Oct 2024 11:46:35 +0000
ROA not after:            Fri 17 Oct 2025 11:51:35 +0000
asID:                     263338
IP address blocks:        191.36.187.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Avp9w8ghYcbVeDefvMDCChbYTGoepuXEnkYMqeQZP1PD/0/7B463853EA4AC012BD9F3194CFA33AF32591DF0B.crl
                          rsync://rpki-repo.registro.br/repo/Avp9w8ghYcbVeDefvMDCChbYTGoepuXEnkYMqeQZP1PD/0/7B463853EA4AC012BD9F3194CFA33AF32591DF0B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7B463853EA4AC012BD9F3194CFA33AF32591DF0B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 02:45:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:a7:8e:c8:85:b4:87:3a:5d:b2:bd:65:dc:5a:d3:25:ae:80:3a:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7B463853EA4AC012BD9F3194CFA33AF32591DF0B
        Validity
            Not Before: Oct 18 11:46:35 2024 GMT
            Not After : Oct 17 11:51:35 2025 GMT
        Subject: CN=82DF611C8193ED196035DE19700AF24FF63013CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:0f:a5:50:76:52:12:f0:1f:29:70:67:43:b4:
                    ec:9a:db:fc:d4:7d:53:83:b6:03:da:3c:e4:61:09:
                    e0:ca:6e:c8:98:ad:46:cf:05:87:d5:31:a6:cf:f2:
                    f0:0f:5b:57:06:7b:0b:da:3a:1a:cc:b5:1b:fb:b0:
                    2c:79:ba:67:da:33:66:4c:a7:c9:e6:b5:90:7f:77:
                    cb:4f:4a:90:62:b6:18:c0:2b:7b:09:22:c8:63:75:
                    37:ee:eb:ad:4c:fc:e6:e6:33:70:11:b3:ab:1e:99:
                    bb:a8:0a:e9:01:d8:61:a4:e7:92:0d:61:53:4e:fb:
                    33:73:84:8e:d8:e5:66:a3:af:d4:32:54:a5:e0:4c:
                    87:a5:f3:e0:d2:1c:b0:c9:c6:3d:e9:7e:5f:f5:39:
                    d1:4f:83:b4:69:2e:e0:a3:76:75:66:eb:05:b6:9b:
                    15:15:9a:bc:b9:66:25:ce:4f:3e:a3:3d:5a:83:28:
                    98:fa:c4:25:84:a8:6a:b9:36:46:02:21:4f:0b:42:
                    84:bd:ee:97:f5:9c:1f:78:d3:d1:d0:b9:ad:dc:2b:
                    1f:bc:1a:a3:ec:75:1c:29:67:4b:65:4f:bc:35:b4:
                    7e:c6:87:f0:6f:51:52:d4:e5:b7:8b:9f:06:d1:f5:
                    51:ce:c1:e1:be:b8:4e:01:d7:1c:c7:77:79:36:85:
                    18:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:DF:61:1C:81:93:ED:19:60:35:DE:19:70:0A:F2:4F:F6:30:13:CA
            X509v3 Authority Key Identifier:
                keyid:7B:46:38:53:EA:4A:C0:12:BD:9F:31:94:CF:A3:3A:F3:25:91:DF:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Avp9w8ghYcbVeDefvMDCChbYTGoepuXEnkYMqeQZP1PD/0/7B463853EA4AC012BD9F3194CFA33AF32591DF0B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7B463853EA4AC012BD9F3194CFA33AF32591DF0B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Avp9w8ghYcbVeDefvMDCChbYTGoepuXEnkYMqeQZP1PD/0/3139312e33362e3138372e302f32342d3234203d3e20323633333338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.36.187.0/24

    Signature Algorithm: sha256WithRSAEncryption
         01:24:c2:d7:32:b2:cc:42:6a:2e:55:63:20:35:fa:b9:55:ee:
         d0:b3:73:48:e5:85:2a:4d:13:83:55:04:00:d4:72:86:b7:2b:
         9c:54:a4:9f:91:1c:b6:c9:b1:5f:91:84:7e:80:34:1d:07:76:
         60:ae:23:fa:2d:ee:b8:72:db:f6:f3:20:af:47:bd:05:8b:ba:
         68:87:7d:99:46:83:34:04:a6:67:15:53:57:2c:3b:a2:28:24:
         41:ae:29:ed:fd:9d:1c:05:fc:9d:1e:1b:8e:35:6d:aa:37:86:
         9e:f4:ab:f6:4a:1e:7b:3d:b2:64:3d:1b:d9:8b:52:ea:58:14:
         e8:6f:0f:91:2f:d5:a1:1b:7f:f7:cb:4a:2f:95:68:fb:b8:a3:
         73:bc:ee:27:c8:83:88:ce:12:94:83:a6:26:51:f1:63:79:ad:
         02:07:ac:73:2b:58:11:44:96:90:e6:f9:4f:cc:5c:82:f6:45:
         33:1d:d1:76:16:25:25:5e:bb:a4:85:9b:03:50:32:33:93:c2:
         6e:45:d6:c6:6f:5d:e0:6b:da:3d:9f:15:f1:4b:f2:90:cc:e2:
         74:06:9e:77:3c:12:f5:b8:f3:fb:ff:eb:95:6f:2d:c5:ea:17:
         0c:ff:b6:80:74:ee:88:56:ac:94:48:80:fb:83:d9:7f:f6:65:
         38:ab:a4:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 03:51:20 2024 by rpki-client on console-fra.rpki-client.org