Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CgguhGtMvE1hAVy2NvpzCv3FL2NkVbVHLycUiscsHpbN/0/3139312e362e3234382e302f32332d3233203d3e20323633333032.roa
File:                     3139312e362e3234382e302f32332d3233203d3e20323633333032.roa (raw, json)
Hash identifier:          E4OKyqckNMO7+I1m2d35qh5Q/rM6fg5aEbhHZqHEf2g=
Subject key identifier:   1C:2B:1A:DE:67:D7:70:A8:2C:D8:20:25:EB:63:F8:0A:6B:84:23:97
Certificate issuer:       /CN=443FAA41D08D0DC55D06C514471A6A595278B345
Certificate serial:       6689F8C022E6A5D7D566A9197480F9C0E40A2695
Authority key identifier: 44:3F:AA:41:D0:8D:0D:C5:5D:06:C5:14:47:1A:6A:59:52:78:B3:45
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/443FAA41D08D0DC55D06C514471A6A595278B345.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CgguhGtMvE1hAVy2NvpzCv3FL2NkVbVHLycUiscsHpbN/0/3139312e362e3234382e302f32332d3233203d3e20323633333032.roa
Signing time:             Tue 18 Jun 2024 18:29:32 +0000
ROA not before:           Tue 18 Jun 2024 18:24:32 +0000
ROA not after:            Tue 17 Jun 2025 18:29:32 +0000
asID:                     263302
IP address blocks:        191.6.248.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CgguhGtMvE1hAVy2NvpzCv3FL2NkVbVHLycUiscsHpbN/0/443FAA41D08D0DC55D06C514471A6A595278B345.crl
                          rsync://rpki-repo.registro.br/repo/CgguhGtMvE1hAVy2NvpzCv3FL2NkVbVHLycUiscsHpbN/0/443FAA41D08D0DC55D06C514471A6A595278B345.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/443FAA41D08D0DC55D06C514471A6A595278B345.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 30 Nov 2024 15:27:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:89:f8:c0:22:e6:a5:d7:d5:66:a9:19:74:80:f9:c0:e4:0a:26:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=443FAA41D08D0DC55D06C514471A6A595278B345
        Validity
            Not Before: Jun 18 18:24:32 2024 GMT
            Not After : Jun 17 18:29:32 2025 GMT
        Subject: CN=1C2B1ADE67D770A82CD82025EB63F80A6B842397
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:43:9d:2b:62:ac:13:59:c8:24:86:e3:25:22:
                    5a:43:c9:70:ce:8b:81:ef:7d:cb:5a:0c:db:27:1c:
                    2d:3d:98:19:e6:5b:ca:4e:36:54:fa:46:f0:0a:71:
                    d0:75:d5:23:ef:e5:46:eb:bf:02:75:14:87:9d:93:
                    19:42:03:c1:da:c9:76:ec:7d:40:7b:82:1e:95:19:
                    8c:21:b3:7a:3f:7e:c6:34:13:a0:06:92:3b:c4:e7:
                    84:43:c3:73:e6:2a:1c:b9:94:66:dd:90:ee:66:87:
                    a9:39:3e:ee:6e:00:db:01:41:ab:47:13:b0:c7:62:
                    9c:7f:aa:c0:d7:33:5d:24:52:f3:47:26:fc:ec:04:
                    9d:bd:04:c1:04:8b:da:ac:9f:a7:4b:bb:35:71:d4:
                    cc:2f:e9:f1:20:b0:29:3f:93:40:d4:50:b3:c2:55:
                    1c:07:b6:80:6f:1a:75:0e:24:90:86:fc:c0:5a:8a:
                    01:35:ce:39:69:73:1d:ca:04:34:6e:cb:75:46:d4:
                    b7:dc:9b:b2:e3:50:14:9e:3b:03:e4:2d:a3:f1:c7:
                    51:14:95:c0:e0:1a:7f:35:e9:33:d0:05:2f:d7:21:
                    c8:37:a2:7c:55:67:c8:a1:4c:3a:54:cb:35:63:1d:
                    6d:94:98:09:3b:16:2d:74:12:73:55:16:14:ee:d3:
                    b0:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:2B:1A:DE:67:D7:70:A8:2C:D8:20:25:EB:63:F8:0A:6B:84:23:97
            X509v3 Authority Key Identifier:
                keyid:44:3F:AA:41:D0:8D:0D:C5:5D:06:C5:14:47:1A:6A:59:52:78:B3:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CgguhGtMvE1hAVy2NvpzCv3FL2NkVbVHLycUiscsHpbN/0/443FAA41D08D0DC55D06C514471A6A595278B345.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/443FAA41D08D0DC55D06C514471A6A595278B345.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CgguhGtMvE1hAVy2NvpzCv3FL2NkVbVHLycUiscsHpbN/0/3139312e362e3234382e302f32332d3233203d3e20323633333032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.6.248.0/23

    Signature Algorithm: sha256WithRSAEncryption
         dc:d9:9a:9d:f4:2b:71:75:c9:e0:b1:93:02:13:a6:7c:e9:89:
         5d:77:18:48:8f:af:c6:5b:f9:e3:20:92:75:d6:84:64:5a:bd:
         12:0a:8e:a8:eb:b2:cb:14:87:87:90:c6:07:c2:28:4f:8c:27:
         7f:32:9a:8c:77:0d:07:e7:71:79:78:6d:88:29:b2:1e:b9:ab:
         ad:e1:7b:6a:bc:78:da:59:48:26:5e:12:fa:3e:f0:e2:6a:b0:
         75:45:f7:94:81:8d:6b:64:f7:26:55:8f:34:64:57:fc:63:33:
         cc:99:83:8b:b8:d9:0c:70:3f:2c:86:66:10:9f:fd:f4:3c:78:
         fb:c2:09:c0:6d:b1:b5:a4:0f:76:97:2b:19:af:fe:0a:e2:ee:
         62:e4:80:bd:84:17:f8:67:46:6e:46:2d:d3:1a:e3:86:7c:c3:
         09:04:de:56:1b:63:66:38:0d:af:10:75:34:1f:88:bc:84:f8:
         6e:de:29:7a:b3:73:5e:98:0b:b2:ce:57:2c:83:4e:6b:eb:7d:
         f9:0f:54:26:76:31:e2:33:01:cd:fe:06:04:3f:3e:ad:eb:9c:
         4c:01:3a:a6:62:2f:4c:3b:31:f4:fd:d4:94:ad:a2:e1:65:2b:
         c3:0b:a0:a6:d2:46:cd:fb:e9:60:d6:73:f5:2e:9a:16:28:2e:
         b5:69:2c:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 29 15:30:17 2024 by rpki-client on console-ams.rpki-client.org