Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ciazpvg81Q4DGM2j81CVSFauYWRQc64YAyMwrGXvRzSU/0/3139312e3234312e32302e302f32332d3233203d3e20323633353431.roa
File:                     3139312e3234312e32302e302f32332d3233203d3e20323633353431.roa (raw, json)
Hash identifier:          kMpc2GhzIzwWBTNDIrkohiVTxTtAS+umpYs+7GbWXho=
Subject key identifier:   CF:F4:59:74:C6:66:D7:D7:74:20:D3:A6:D2:B5:71:67:85:87:F2:2A
Certificate issuer:       /CN=AB6EBC1B7182C64982948DD7B8CB166F20C4649E
Certificate serial:       61CA6A420B30A082DC18332A3E8477C573C3A5FA
Authority key identifier: AB:6E:BC:1B:71:82:C6:49:82:94:8D:D7:B8:CB:16:6F:20:C4:64:9E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AB6EBC1B7182C64982948DD7B8CB166F20C4649E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ciazpvg81Q4DGM2j81CVSFauYWRQc64YAyMwrGXvRzSU/0/3139312e3234312e32302e302f32332d3233203d3e20323633353431.roa
Signing time:             Tue 30 Apr 2024 14:46:00 +0000
ROA not before:           Tue 30 Apr 2024 14:41:00 +0000
ROA not after:            Tue 29 Apr 2025 14:46:00 +0000
asID:                     263541
IP address blocks:        191.241.20.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ciazpvg81Q4DGM2j81CVSFauYWRQc64YAyMwrGXvRzSU/0/AB6EBC1B7182C64982948DD7B8CB166F20C4649E.crl
                          rsync://rpki-repo.registro.br/repo/Ciazpvg81Q4DGM2j81CVSFauYWRQc64YAyMwrGXvRzSU/0/AB6EBC1B7182C64982948DD7B8CB166F20C4649E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AB6EBC1B7182C64982948DD7B8CB166F20C4649E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 20:28:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:ca:6a:42:0b:30:a0:82:dc:18:33:2a:3e:84:77:c5:73:c3:a5:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AB6EBC1B7182C64982948DD7B8CB166F20C4649E
        Validity
            Not Before: Apr 30 14:41:00 2024 GMT
            Not After : Apr 29 14:46:00 2025 GMT
        Subject: CN=CFF45974C666D7D77420D3A6D2B571678587F22A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:2b:95:21:86:b0:b5:89:0a:53:75:e7:f3:00:
                    23:6c:a4:3d:f3:95:6d:2f:ea:74:0e:fa:ed:ff:b3:
                    09:c9:1a:fe:5d:b1:ec:d5:0d:c0:53:7d:e9:0d:3b:
                    bb:69:2e:36:17:9b:91:c3:7b:ee:37:af:3f:eb:a3:
                    03:51:e8:37:1a:35:b1:5f:d3:ee:71:0e:76:1d:29:
                    70:3b:04:59:9d:1d:e2:35:8e:c2:85:d5:2e:56:e0:
                    46:16:3d:9c:da:9d:0a:be:ef:b5:c9:d1:45:05:3c:
                    59:0b:c7:65:63:28:15:68:99:82:d5:1a:13:85:39:
                    4c:9d:89:fb:e8:b1:d1:30:0b:c4:65:58:b9:2b:39:
                    fd:70:df:eb:5a:c1:05:68:7f:6e:69:8d:d2:57:a0:
                    95:16:d1:1a:a7:2c:ee:e6:da:f3:a3:98:da:06:0e:
                    a1:0a:d3:31:aa:4b:7a:ed:94:5f:e1:b3:e8:00:51:
                    32:4a:a9:34:c9:a8:25:22:13:5e:c3:c2:40:01:b8:
                    67:11:e0:a0:60:1e:31:51:e9:78:8c:ec:c5:cc:58:
                    a1:6e:ef:ed:52:18:33:72:e5:b5:ef:23:27:ce:7d:
                    f3:ec:83:ce:54:bf:c1:fc:1f:70:37:c7:a7:42:74:
                    be:ed:97:c8:5f:69:1d:9d:87:52:a3:d9:cb:ba:95:
                    24:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:F4:59:74:C6:66:D7:D7:74:20:D3:A6:D2:B5:71:67:85:87:F2:2A
            X509v3 Authority Key Identifier:
                keyid:AB:6E:BC:1B:71:82:C6:49:82:94:8D:D7:B8:CB:16:6F:20:C4:64:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ciazpvg81Q4DGM2j81CVSFauYWRQc64YAyMwrGXvRzSU/0/AB6EBC1B7182C64982948DD7B8CB166F20C4649E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AB6EBC1B7182C64982948DD7B8CB166F20C4649E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ciazpvg81Q4DGM2j81CVSFauYWRQc64YAyMwrGXvRzSU/0/3139312e3234312e32302e302f32332d3233203d3e20323633353431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.241.20.0/23

    Signature Algorithm: sha256WithRSAEncryption
         25:d5:38:39:97:72:a3:76:61:3c:cb:b9:65:d8:a7:db:a8:25:
         82:45:bd:e9:5d:0f:8f:3c:82:12:3a:c9:80:9b:4b:b1:c0:16:
         37:6b:d0:bb:f9:20:80:26:6d:9c:5e:5e:fd:28:8d:9d:48:0e:
         c6:e4:f2:db:8f:59:34:73:35:84:4c:08:57:b9:76:b0:1b:8c:
         2c:81:c9:12:a2:9f:c6:51:ae:a8:9f:4b:f0:ed:a1:26:4a:0c:
         fa:cf:00:65:be:1c:a0:b9:e9:04:26:9f:bf:4c:b1:3d:18:8b:
         7d:c3:6a:fa:04:fd:f3:cf:1c:ad:c7:bf:e8:1d:3a:47:39:93:
         d2:36:3a:5d:41:e8:33:b1:81:4f:1b:a5:d1:aa:e7:c5:7f:ca:
         9b:43:88:ec:e9:d0:9e:a3:42:f0:2c:89:fc:ad:65:a9:f7:5a:
         cb:a7:f9:17:ef:db:1f:0e:9c:ff:f5:23:3a:d1:20:80:18:8d:
         39:ae:4d:b3:db:30:76:61:ae:0d:7b:f1:62:c6:75:db:60:ee:
         0b:80:04:0a:5f:38:92:46:47:14:1f:68:f5:8a:1a:0b:cb:f1:
         69:67:b2:fd:a8:ed:b3:4d:1c:8d:bc:5a:41:43:83:55:c0:e8:
         04:4c:4b:20:04:d6:15:f6:a5:a4:cb:9d:ce:8d:98:2e:e7:43:
         96:76:ed:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 19:18:08 2024 by rpki-client on console-fra.rpki-client.org