Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C2QrZbQL8vmDvr2Gf1NNqSYDXJ8oAqCwgBa1231HneSM/1/3139312e362e3134342e302f32312d3234203d3e20323633303731.roa
File:                     3139312e362e3134342e302f32312d3234203d3e20323633303731.roa (raw, json)
Hash identifier:          xw23G2ziE8X2dEYVdkwbJuEApkVHyPbqxxNDtHsfqVk=
Subject key identifier:   7B:F2:A1:2C:1C:3C:27:C0:91:C9:A9:3F:C5:76:B5:7F:8C:B5:20:4E
Certificate issuer:       /CN=D63086E42E9BABA028DCD8D65CFF50CEEFBD78DC
Certificate serial:       0F4900318483DFC1A960A2575C1FD70A422BFDA7
Authority key identifier: D6:30:86:E4:2E:9B:AB:A0:28:DC:D8:D6:5C:FF:50:CE:EF:BD:78:DC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D63086E42E9BABA028DCD8D65CFF50CEEFBD78DC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C2QrZbQL8vmDvr2Gf1NNqSYDXJ8oAqCwgBa1231HneSM/1/3139312e362e3134342e302f32312d3234203d3e20323633303731.roa
Signing time:             Thu 04 Apr 2024 10:09:03 +0000
ROA not before:           Thu 04 Apr 2024 10:04:03 +0000
ROA not after:            Thu 03 Apr 2025 10:09:03 +0000
asID:                     263071
IP address blocks:        191.6.144.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/C2QrZbQL8vmDvr2Gf1NNqSYDXJ8oAqCwgBa1231HneSM/1/D63086E42E9BABA028DCD8D65CFF50CEEFBD78DC.crl
                          rsync://rpki-repo.registro.br/repo/C2QrZbQL8vmDvr2Gf1NNqSYDXJ8oAqCwgBa1231HneSM/1/D63086E42E9BABA028DCD8D65CFF50CEEFBD78DC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D63086E42E9BABA028DCD8D65CFF50CEEFBD78DC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 20:17:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:49:00:31:84:83:df:c1:a9:60:a2:57:5c:1f:d7:0a:42:2b:fd:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D63086E42E9BABA028DCD8D65CFF50CEEFBD78DC
        Validity
            Not Before: Apr  4 10:04:03 2024 GMT
            Not After : Apr  3 10:09:03 2025 GMT
        Subject: CN=7BF2A12C1C3C27C091C9A93FC576B57F8CB5204E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:96:da:96:35:99:29:04:4c:6b:83:9e:cd:32:
                    4c:70:73:2c:22:01:67:09:90:f8:c8:22:49:a3:bd:
                    ee:6e:ac:e3:2f:19:22:c2:fe:cf:96:e5:09:10:be:
                    9b:c2:2f:0a:13:0c:16:95:d5:4c:95:f7:1d:20:fa:
                    59:46:b3:0e:6e:e4:7d:e0:67:ce:b3:0a:eb:8c:62:
                    5d:5b:f2:6e:af:2e:50:f5:78:9b:3c:ff:66:4e:d9:
                    ec:a3:90:7e:8d:8d:bf:44:dc:9d:f1:95:b3:8e:02:
                    61:19:a1:b5:1a:0d:95:ef:dc:7a:ad:4d:94:77:94:
                    e6:1d:9a:07:9c:93:29:1b:55:b2:86:ad:57:ae:85:
                    08:b2:54:0d:d9:dc:7a:b8:7a:83:a9:06:1e:58:1e:
                    cd:aa:a2:5d:90:5a:2f:a0:d9:1c:69:85:2b:23:bb:
                    11:38:e4:fc:dd:44:98:e2:96:33:d1:be:7b:f3:95:
                    ef:cd:2b:01:e1:64:86:0b:7c:1d:21:9c:9a:3c:e6:
                    65:03:1f:41:42:c7:5c:d1:89:27:18:8c:b7:5b:3e:
                    0e:b3:b8:a2:55:47:20:28:62:9b:82:9a:ae:f6:39:
                    32:ff:25:95:d4:25:7e:b7:b4:b4:35:33:e4:4f:54:
                    1b:4b:2b:2f:d6:42:25:10:96:58:43:8e:15:2d:0f:
                    89:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:F2:A1:2C:1C:3C:27:C0:91:C9:A9:3F:C5:76:B5:7F:8C:B5:20:4E
            X509v3 Authority Key Identifier:
                keyid:D6:30:86:E4:2E:9B:AB:A0:28:DC:D8:D6:5C:FF:50:CE:EF:BD:78:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C2QrZbQL8vmDvr2Gf1NNqSYDXJ8oAqCwgBa1231HneSM/1/D63086E42E9BABA028DCD8D65CFF50CEEFBD78DC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D63086E42E9BABA028DCD8D65CFF50CEEFBD78DC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C2QrZbQL8vmDvr2Gf1NNqSYDXJ8oAqCwgBa1231HneSM/1/3139312e362e3134342e302f32312d3234203d3e20323633303731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.6.144.0/21

    Signature Algorithm: sha256WithRSAEncryption
         3d:41:8a:04:46:b8:dc:26:fd:e9:4e:30:c1:31:34:56:c4:eb:
         03:61:30:dd:95:47:7b:c5:70:78:20:8d:69:08:e6:eb:36:ca:
         9f:08:4a:3f:89:d0:07:3d:56:ef:2c:5d:9e:a4:1d:84:be:c4:
         98:53:7a:c6:ce:d3:aa:96:a9:64:fc:72:7d:d6:3d:c2:2b:0f:
         f1:68:84:41:ba:8c:20:4f:e4:55:51:aa:41:5b:00:0c:89:0d:
         c4:00:2e:7a:af:57:d6:78:2b:16:ea:88:1d:2b:d2:a6:e3:fc:
         1a:55:b3:82:76:fb:43:95:9a:36:ec:d5:06:8e:af:3f:45:5f:
         62:e6:83:c5:3c:d5:d9:22:b3:21:27:a6:3a:38:4f:e9:96:01:
         29:d8:bf:7f:d5:aa:1b:d0:3a:25:d0:ff:b4:92:dd:97:55:47:
         d6:dd:53:0b:e4:cd:f4:40:ae:ff:cf:e2:e1:6c:25:81:95:5e:
         e9:ed:13:dd:55:45:c8:81:32:4c:a2:d3:da:7c:c1:3d:c7:f3:
         c2:d7:5b:19:3d:ba:80:ce:4c:69:db:36:69:11:60:8a:be:81:
         1f:b2:ac:2b:52:36:50:70:89:c8:2a:b7:6b:98:64:ff:15:ec:
         04:c9:57:9d:23:df:77:7e:42:67:ad:08:31:d3:cd:8d:a8:9c:
         39:79:3e:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 18:35:34 2024 by rpki-client on console-fra.rpki-client.org