Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CgguhGtMvE1hAVy2NvpzCv3FL2NkVbVHLycUiscsHpbN/0/3139312e362e3234382e302f32342d3234203d3e20323633333032.roa
File:                     3139312e362e3234382e302f32342d3234203d3e20323633333032.roa (raw, json)
Hash identifier:          s2RRe7wozywowCdqhiZs0s5r+WVSRFo9ktBbpf5i4uo=
Subject key identifier:   9A:2A:E4:3D:1F:6C:CD:3E:22:67:DF:6C:7B:72:1C:F3:0F:25:35:CF
Certificate issuer:       /CN=443FAA41D08D0DC55D06C514471A6A595278B345
Certificate serial:       5E10018DC1AD7120C35ADD90129E9201D8BCF24E
Authority key identifier: 44:3F:AA:41:D0:8D:0D:C5:5D:06:C5:14:47:1A:6A:59:52:78:B3:45
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/443FAA41D08D0DC55D06C514471A6A595278B345.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CgguhGtMvE1hAVy2NvpzCv3FL2NkVbVHLycUiscsHpbN/0/3139312e362e3234382e302f32342d3234203d3e20323633333032.roa
Signing time:             Tue 18 Jun 2024 18:29:34 +0000
ROA not before:           Tue 18 Jun 2024 18:24:34 +0000
ROA not after:            Tue 17 Jun 2025 18:29:34 +0000
asID:                     263302
IP address blocks:        191.6.248.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CgguhGtMvE1hAVy2NvpzCv3FL2NkVbVHLycUiscsHpbN/0/443FAA41D08D0DC55D06C514471A6A595278B345.crl
                          rsync://rpki-repo.registro.br/repo/CgguhGtMvE1hAVy2NvpzCv3FL2NkVbVHLycUiscsHpbN/0/443FAA41D08D0DC55D06C514471A6A595278B345.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/443FAA41D08D0DC55D06C514471A6A595278B345.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 30 Nov 2024 15:27:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:10:01:8d:c1:ad:71:20:c3:5a:dd:90:12:9e:92:01:d8:bc:f2:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=443FAA41D08D0DC55D06C514471A6A595278B345
        Validity
            Not Before: Jun 18 18:24:34 2024 GMT
            Not After : Jun 17 18:29:34 2025 GMT
        Subject: CN=9A2AE43D1F6CCD3E2267DF6C7B721CF30F2535CF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:15:06:f5:e0:21:c4:9e:ea:de:23:48:9a:2c:
                    ec:ea:b7:3c:fa:7f:2f:91:1d:df:f4:b2:54:ab:0c:
                    5d:eb:4d:bf:79:67:60:5d:71:3b:dc:5e:aa:12:89:
                    24:3f:cf:ff:d7:37:f8:8b:ba:4b:77:d2:cd:88:78:
                    93:bd:92:c5:5a:bc:8c:36:ce:f5:4a:16:57:45:51:
                    cf:03:d2:ce:49:50:dc:da:99:67:b6:ff:60:54:75:
                    94:03:8d:bc:2f:55:99:3f:79:27:81:ba:88:ae:cd:
                    48:15:45:4a:2b:4d:23:be:3a:b6:30:a9:c2:b3:c8:
                    27:ff:3f:34:0d:76:b5:a2:7a:6c:45:34:17:8b:e4:
                    de:7e:41:e5:45:4d:cb:e6:61:22:00:0f:3e:60:79:
                    f5:24:56:9d:90:bc:88:9b:84:1b:be:67:a1:5e:75:
                    d5:f2:99:39:0a:77:1c:ec:39:35:60:2c:fb:7c:35:
                    ee:fe:d8:5e:15:8f:1f:e0:19:83:92:c1:91:96:32:
                    d7:7b:38:31:6c:05:53:66:7c:1b:ba:29:28:38:11:
                    71:c7:4e:d4:b8:58:96:a0:9d:ac:70:a6:f8:3b:44:
                    d2:27:91:b9:7b:50:59:01:a0:d9:d2:ff:e4:ac:f2:
                    35:2d:d7:db:5b:ce:f2:b1:7c:53:a6:7a:ed:ec:20:
                    fb:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:2A:E4:3D:1F:6C:CD:3E:22:67:DF:6C:7B:72:1C:F3:0F:25:35:CF
            X509v3 Authority Key Identifier:
                keyid:44:3F:AA:41:D0:8D:0D:C5:5D:06:C5:14:47:1A:6A:59:52:78:B3:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CgguhGtMvE1hAVy2NvpzCv3FL2NkVbVHLycUiscsHpbN/0/443FAA41D08D0DC55D06C514471A6A595278B345.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/443FAA41D08D0DC55D06C514471A6A595278B345.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CgguhGtMvE1hAVy2NvpzCv3FL2NkVbVHLycUiscsHpbN/0/3139312e362e3234382e302f32342d3234203d3e20323633333032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.6.248.0/24

    Signature Algorithm: sha256WithRSAEncryption
         76:01:fd:c3:e6:2e:50:16:7e:27:96:29:d0:cd:e6:e8:72:b8:
         1b:12:32:f3:1b:2d:0a:59:dc:46:b0:a6:80:ad:e0:8c:2a:7f:
         76:e2:ce:86:60:66:d1:3b:95:5a:65:2a:8c:3c:0c:b2:55:29:
         58:0b:d5:d2:09:bc:0e:b0:c0:2f:73:f4:23:26:8b:0a:73:f6:
         7a:80:88:7a:f6:00:f0:80:56:e6:6b:20:eb:64:50:eb:1d:8a:
         7e:1f:96:f9:ff:fe:05:24:3d:f0:d5:e0:e3:cb:6b:9f:31:39:
         52:36:4b:ed:78:d4:df:76:d6:f2:7d:6a:d5:4a:90:32:28:35:
         72:d8:9a:89:ff:6d:a0:6f:26:21:2d:bb:cb:e4:cd:4a:bd:83:
         92:9b:91:bf:90:e9:be:ac:c0:fe:39:04:2c:b9:b2:73:91:88:
         1d:bf:ca:bd:65:c7:b8:86:35:eb:6e:f4:b8:75:65:f5:6b:a1:
         51:5e:a6:16:c6:d3:ed:7b:a5:79:1e:54:0f:e4:ce:f3:60:fa:
         4c:90:53:a4:32:20:68:aa:81:87:02:89:89:e6:5c:9c:e3:5b:
         44:2a:15:2f:40:40:97:9c:45:24:fd:23:7a:5a:19:bb:9e:52:
         0b:4b:47:c9:26:05:e2:2b:95:8b:4c:33:46:fd:44:26:25:7e:
         7d:52:25:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 29 15:30:17 2024 by rpki-client on console-ams.rpki-client.org