Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C1UfijZUrTzvC2AsesQSkVkF1zSvohG8Zq1MPqGByHTi/1/3139312e3234332e3137362e302f32302d3332203d3e20323633353039.roa
File:                     3139312e3234332e3137362e302f32302d3332203d3e20323633353039.roa (raw, json)
Hash identifier:          CawON+TJ7nPG6r5WFXWEPMNxaX4rAAFEdpnyF8qzONg=
Subject key identifier:   BD:CD:08:6B:88:29:23:D4:DF:15:8A:F9:5D:4E:A0:93:60:F6:DB:87
Certificate issuer:       /CN=DD85E9016462548924C73F398566FA23310FB32E
Certificate serial:       3F6FFDC5B2B4830F85EC708B9A65A8ADBE20FE94
Authority key identifier: DD:85:E9:01:64:62:54:89:24:C7:3F:39:85:66:FA:23:31:0F:B3:2E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DD85E9016462548924C73F398566FA23310FB32E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C1UfijZUrTzvC2AsesQSkVkF1zSvohG8Zq1MPqGByHTi/1/3139312e3234332e3137362e302f32302d3332203d3e20323633353039.roa
Signing time:             Thu 04 Apr 2024 04:15:04 +0000
ROA not before:           Thu 04 Apr 2024 04:10:04 +0000
ROA not after:            Thu 03 Apr 2025 04:15:04 +0000
asID:                     263509
IP address blocks:        191.243.176.0/20 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/C1UfijZUrTzvC2AsesQSkVkF1zSvohG8Zq1MPqGByHTi/1/DD85E9016462548924C73F398566FA23310FB32E.crl
                          rsync://rpki-repo.registro.br/repo/C1UfijZUrTzvC2AsesQSkVkF1zSvohG8Zq1MPqGByHTi/1/DD85E9016462548924C73F398566FA23310FB32E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DD85E9016462548924C73F398566FA23310FB32E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 19:40:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:6f:fd:c5:b2:b4:83:0f:85:ec:70:8b:9a:65:a8:ad:be:20:fe:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DD85E9016462548924C73F398566FA23310FB32E
        Validity
            Not Before: Apr  4 04:10:04 2024 GMT
            Not After : Apr  3 04:15:04 2025 GMT
        Subject: CN=BDCD086B882923D4DF158AF95D4EA09360F6DB87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:2d:fe:d4:94:9a:c9:29:41:66:e4:d6:bb:cc:
                    8a:58:1c:1d:3b:58:5d:b3:22:a4:bd:9c:37:0b:3f:
                    bf:17:6d:93:80:c7:f5:13:66:4b:28:3f:91:77:b0:
                    7c:6f:94:c7:90:73:48:e4:db:69:f2:4b:73:ec:e2:
                    06:a4:57:77:58:f7:e3:e5:54:6d:a4:19:58:86:e1:
                    d4:77:e5:1c:94:e6:e8:d0:0a:2c:f1:9d:b8:bd:ce:
                    c8:3b:25:be:04:b7:11:7b:54:ac:7b:cb:a5:1a:3e:
                    d0:70:8e:36:58:bf:63:19:0c:6c:f4:4f:7e:34:f0:
                    47:67:0b:03:48:3f:05:79:16:e7:06:b3:b5:18:b1:
                    23:2a:ad:be:eb:48:55:f1:e0:49:d0:a7:4f:ec:cb:
                    cd:60:f3:3a:9e:b9:7a:f9:1c:c5:b2:37:99:c3:d9:
                    ba:1f:06:f7:6d:da:56:28:a8:c4:e9:a3:df:33:46:
                    01:c9:10:0b:84:bc:af:30:19:d5:49:82:ab:a0:8b:
                    1a:eb:a8:2b:7c:e7:86:a1:29:fc:40:a1:e2:b7:9b:
                    a4:7d:0a:ec:08:c2:aa:e9:eb:24:49:f0:ad:cc:2d:
                    60:0b:cf:ce:60:88:63:80:b9:55:0d:67:29:3b:e8:
                    68:43:27:a9:68:74:c4:bb:d4:9b:6d:d3:40:62:8e:
                    7b:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:CD:08:6B:88:29:23:D4:DF:15:8A:F9:5D:4E:A0:93:60:F6:DB:87
            X509v3 Authority Key Identifier:
                keyid:DD:85:E9:01:64:62:54:89:24:C7:3F:39:85:66:FA:23:31:0F:B3:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C1UfijZUrTzvC2AsesQSkVkF1zSvohG8Zq1MPqGByHTi/1/DD85E9016462548924C73F398566FA23310FB32E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DD85E9016462548924C73F398566FA23310FB32E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C1UfijZUrTzvC2AsesQSkVkF1zSvohG8Zq1MPqGByHTi/1/3139312e3234332e3137362e302f32302d3332203d3e20323633353039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.243.176.0/20

    Signature Algorithm: sha256WithRSAEncryption
         b2:9e:e1:3e:d2:f0:5d:de:97:af:5c:e1:7f:d2:ad:8b:89:4e:
         72:09:81:78:19:77:2a:43:89:d8:56:6d:d7:a6:fa:94:cb:15:
         2b:28:4a:29:77:e9:81:88:a2:76:9f:39:2a:6b:d7:f0:5f:a1:
         63:72:e9:5e:98:9a:b4:10:3f:65:7a:50:0a:32:ae:84:68:0c:
         19:95:b8:fc:f1:1b:67:0c:a8:e6:5e:b0:5b:15:71:7d:67:28:
         bb:1c:c8:c5:86:e7:8d:05:dd:0a:eb:42:5c:6c:56:07:25:e1:
         c7:8b:10:aa:67:88:19:21:3f:32:ab:ad:8d:e9:2a:70:32:22:
         df:70:30:7d:b9:db:6d:e0:90:7f:e4:ae:39:aa:e0:c9:c9:1e:
         45:55:e5:0f:1c:d6:26:ae:56:e0:b2:7f:ae:3a:b9:61:4b:20:
         d5:51:4e:dc:82:e8:dd:db:70:d1:32:02:11:b5:02:ad:83:72:
         4e:48:e4:2b:a0:3a:9f:62:cc:b2:69:25:8c:75:37:80:04:f0:
         35:5c:b5:81:dd:3a:5a:62:7a:38:cc:eb:0f:81:87:aa:13:00:
         8b:ba:27:7b:c2:14:b5:e3:54:8a:93:ff:58:ce:d6:bb:b0:31:
         c5:f0:e4:5d:e7:db:1c:f8:92:59:e5:1b:f6:0e:22:9b:40:34:
         3e:33:07:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:44:24 2024 by rpki-client on console-ams.rpki-client.org