Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BfHJA72CBUa7YWcZ1sPGbJgQmtPDRvxFJ5eXDwW7i9K5/1/3139322e3134312e3130362e302f32342d3234203d3e20323637353335.roa
File:                     3139322e3134312e3130362e302f32342d3234203d3e20323637353335.roa (raw, json)
Hash identifier:          JQ2kX0MR5DgycJEZEt9voDqgybXwiqkBGlPqPfZNKpY=
Subject key identifier:   46:71:0D:91:5D:CA:62:D7:C2:A7:EF:05:BA:1D:0E:6A:24:E5:37:DB
Certificate issuer:       /CN=24B76CD87395C0B9E7F969993DB4701E0DFBE8E3
Certificate serial:       13AF6353E8065D5AE929DE02D8A40B1888FCFFF6
Authority key identifier: 24:B7:6C:D8:73:95:C0:B9:E7:F9:69:99:3D:B4:70:1E:0D:FB:E8:E3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/24B76CD87395C0B9E7F969993DB4701E0DFBE8E3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BfHJA72CBUa7YWcZ1sPGbJgQmtPDRvxFJ5eXDwW7i9K5/1/3139322e3134312e3130362e302f32342d3234203d3e20323637353335.roa
Signing time:             Thu 04 Apr 2024 08:57:55 +0000
ROA not before:           Thu 04 Apr 2024 08:52:55 +0000
ROA not after:            Thu 03 Apr 2025 08:57:55 +0000
asID:                     267535
IP address blocks:        192.141.106.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BfHJA72CBUa7YWcZ1sPGbJgQmtPDRvxFJ5eXDwW7i9K5/1/24B76CD87395C0B9E7F969993DB4701E0DFBE8E3.crl
                          rsync://rpki-repo.registro.br/repo/BfHJA72CBUa7YWcZ1sPGbJgQmtPDRvxFJ5eXDwW7i9K5/1/24B76CD87395C0B9E7F969993DB4701E0DFBE8E3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/24B76CD87395C0B9E7F969993DB4701E0DFBE8E3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 11:31:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:af:63:53:e8:06:5d:5a:e9:29:de:02:d8:a4:0b:18:88:fc:ff:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24B76CD87395C0B9E7F969993DB4701E0DFBE8E3
        Validity
            Not Before: Apr  4 08:52:55 2024 GMT
            Not After : Apr  3 08:57:55 2025 GMT
        Subject: CN=46710D915DCA62D7C2A7EF05BA1D0E6A24E537DB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:7c:eb:70:6e:6c:2a:71:eb:ff:59:d9:3b:48:
                    c6:02:07:bd:3c:9f:9f:e2:ab:a7:de:33:21:15:dc:
                    38:c6:76:72:4a:b4:13:71:d2:97:f6:c4:ad:21:c6:
                    47:ba:d1:da:8d:c5:b8:e4:83:31:f3:41:fb:5e:55:
                    71:e6:7b:e8:c6:65:0a:a6:f5:a8:16:c2:5c:89:98:
                    27:ea:d4:66:aa:77:83:26:fc:bc:cf:49:d4:63:76:
                    9c:96:1d:4a:a2:0f:d5:db:8f:a2:50:25:d3:6d:ed:
                    23:5d:c4:67:e6:ed:c8:ff:a1:01:6a:96:13:67:69:
                    27:ff:4e:eb:ab:e3:d1:a9:87:20:92:e2:45:cf:6b:
                    b7:f0:a1:6a:a0:b3:97:cb:9a:c5:77:1d:cb:ae:92:
                    26:77:9e:7b:65:6d:f6:17:03:0f:d5:4a:72:73:51:
                    35:b2:bd:fb:dd:52:37:a6:e1:54:dd:6c:97:65:47:
                    db:92:3a:7e:f0:3d:f3:5b:52:f4:65:b4:6b:0b:9b:
                    bc:db:bc:84:11:53:20:21:f6:41:52:ed:00:bd:1b:
                    ce:84:9c:c6:18:6c:a1:e9:dc:11:49:dc:10:4c:10:
                    15:fe:30:3b:1e:3d:86:ed:fd:78:b4:4d:01:36:5e:
                    ff:25:63:3e:0b:75:4f:0f:a1:af:05:a3:d3:f7:1a:
                    83:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:71:0D:91:5D:CA:62:D7:C2:A7:EF:05:BA:1D:0E:6A:24:E5:37:DB
            X509v3 Authority Key Identifier:
                keyid:24:B7:6C:D8:73:95:C0:B9:E7:F9:69:99:3D:B4:70:1E:0D:FB:E8:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BfHJA72CBUa7YWcZ1sPGbJgQmtPDRvxFJ5eXDwW7i9K5/1/24B76CD87395C0B9E7F969993DB4701E0DFBE8E3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/24B76CD87395C0B9E7F969993DB4701E0DFBE8E3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BfHJA72CBUa7YWcZ1sPGbJgQmtPDRvxFJ5eXDwW7i9K5/1/3139322e3134312e3130362e302f32342d3234203d3e20323637353335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.141.106.0/24

    Signature Algorithm: sha256WithRSAEncryption
         72:fb:41:6f:a8:20:d1:81:21:d1:9a:40:f3:0c:85:43:99:11:
         d6:dd:15:c9:e8:0f:73:33:eb:34:31:db:e2:6f:66:4e:10:1e:
         fa:b1:4b:e1:0f:e6:54:99:56:2c:9f:b6:5c:f5:e5:34:6c:e2:
         d2:f9:50:b6:7d:c2:6c:e6:e3:de:1a:11:5f:c9:39:e1:6d:ea:
         74:25:6f:fc:c7:41:1b:fc:25:36:f2:cb:29:32:97:8d:c5:7b:
         b7:59:bd:8b:2e:c0:dc:74:43:1f:0a:aa:d1:08:3e:83:cf:0d:
         b9:3d:8f:b5:94:33:19:ee:6a:18:43:d1:f4:ac:d9:63:23:a5:
         5f:71:37:51:b6:7e:40:51:4e:88:27:9f:ab:0d:59:d1:82:91:
         f1:8f:14:3e:59:8c:d8:39:32:51:ac:d1:58:55:7b:fb:82:52:
         1a:3a:a4:2c:d4:0b:c1:40:b9:46:77:17:63:e6:e0:66:99:38:
         81:de:92:7a:ae:61:2a:59:21:6f:4d:ab:85:a8:92:ed:60:1a:
         e5:9d:dd:1c:e4:2a:21:ff:d6:69:a3:2d:ce:40:31:1d:c6:dc:
         3e:3c:32:1f:f9:08:8f:6e:c5:12:ea:59:58:58:71:cd:62:a2:
         a7:5d:1d:f1:60:86:06:01:ec:e0:68:00:69:4b:c1:6c:0a:17:
         de:da:ca:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:14:49 2024 by rpki-client on console-fra.rpki-client.org