Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ciazpvg81Q4DGM2j81CVSFauYWRQc64YAyMwrGXvRzSU/0/3139312e3234312e32302e302f32342d3234203d3e20323633353431.roa
File:                     3139312e3234312e32302e302f32342d3234203d3e20323633353431.roa (raw, json)
Hash identifier:          Fxa2AdvKCUfIlmwEjJKhUbYsl0kKUfL/QU3VERiczL8=
Subject key identifier:   64:93:B8:03:32:AD:95:65:86:08:1A:A3:70:C1:90:B0:85:C1:3B:31
Certificate issuer:       /CN=AB6EBC1B7182C64982948DD7B8CB166F20C4649E
Certificate serial:       52E25A631AB09FCBF08BFD6CFBA86037BE88B021
Authority key identifier: AB:6E:BC:1B:71:82:C6:49:82:94:8D:D7:B8:CB:16:6F:20:C4:64:9E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AB6EBC1B7182C64982948DD7B8CB166F20C4649E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ciazpvg81Q4DGM2j81CVSFauYWRQc64YAyMwrGXvRzSU/0/3139312e3234312e32302e302f32342d3234203d3e20323633353431.roa
Signing time:             Tue 30 Apr 2024 14:46:00 +0000
ROA not before:           Tue 30 Apr 2024 14:41:00 +0000
ROA not after:            Tue 29 Apr 2025 14:46:00 +0000
asID:                     263541
IP address blocks:        191.241.20.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ciazpvg81Q4DGM2j81CVSFauYWRQc64YAyMwrGXvRzSU/0/AB6EBC1B7182C64982948DD7B8CB166F20C4649E.crl
                          rsync://rpki-repo.registro.br/repo/Ciazpvg81Q4DGM2j81CVSFauYWRQc64YAyMwrGXvRzSU/0/AB6EBC1B7182C64982948DD7B8CB166F20C4649E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AB6EBC1B7182C64982948DD7B8CB166F20C4649E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 20:15:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:e2:5a:63:1a:b0:9f:cb:f0:8b:fd:6c:fb:a8:60:37:be:88:b0:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AB6EBC1B7182C64982948DD7B8CB166F20C4649E
        Validity
            Not Before: Apr 30 14:41:00 2024 GMT
            Not After : Apr 29 14:46:00 2025 GMT
        Subject: CN=6493B80332AD956586081AA370C190B085C13B31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:51:54:27:31:e7:a2:3e:b4:d2:5a:e3:7c:97:
                    61:e9:f7:06:6f:5e:3b:21:31:76:f4:20:28:5e:08:
                    6e:45:e7:16:19:94:42:0b:f8:9c:ad:f3:33:38:63:
                    8c:1b:22:a1:5c:1d:d3:23:b4:0e:92:0e:9e:5e:59:
                    15:31:e4:25:c5:c7:6b:1e:40:10:cf:52:2a:1b:56:
                    2d:51:eb:96:c0:2e:d7:f8:48:17:14:71:f6:43:c1:
                    20:6d:67:e6:db:7d:32:66:e5:0f:85:74:84:ee:5c:
                    49:b1:53:d2:ab:58:f9:9e:64:59:9a:91:e6:a4:d7:
                    23:04:c6:fd:4b:12:fe:b5:e9:62:7a:fb:eb:ec:b2:
                    ec:2d:57:66:29:80:97:22:55:dc:df:cb:fa:60:32:
                    ef:12:6f:cd:3b:15:f6:71:55:58:2c:49:fe:45:a0:
                    c4:73:82:14:29:a5:7e:aa:09:79:30:52:2c:a1:d8:
                    6e:d1:e5:83:0e:07:a5:77:20:42:f3:56:85:36:75:
                    32:5b:00:aa:1b:45:2a:7a:de:0a:1f:36:d6:fa:15:
                    94:89:c0:5b:55:96:67:f8:de:cf:77:c5:4f:53:e0:
                    b1:b8:ff:8c:1c:3e:39:fb:18:f7:1a:81:f5:1c:8d:
                    e2:2d:71:b2:ca:a9:b7:87:e8:65:8c:64:6b:dd:3b:
                    6e:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:93:B8:03:32:AD:95:65:86:08:1A:A3:70:C1:90:B0:85:C1:3B:31
            X509v3 Authority Key Identifier:
                keyid:AB:6E:BC:1B:71:82:C6:49:82:94:8D:D7:B8:CB:16:6F:20:C4:64:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ciazpvg81Q4DGM2j81CVSFauYWRQc64YAyMwrGXvRzSU/0/AB6EBC1B7182C64982948DD7B8CB166F20C4649E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AB6EBC1B7182C64982948DD7B8CB166F20C4649E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ciazpvg81Q4DGM2j81CVSFauYWRQc64YAyMwrGXvRzSU/0/3139312e3234312e32302e302f32342d3234203d3e20323633353431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.241.20.0/24

    Signature Algorithm: sha256WithRSAEncryption
         85:eb:d0:f3:91:15:7d:86:67:79:ad:ac:31:ce:b3:00:65:4d:
         fc:e8:f9:a6:da:78:e3:96:57:00:66:bd:df:05:ab:71:dc:cb:
         fb:5f:d4:e1:5a:12:06:99:09:76:09:72:ce:55:39:ab:ef:ca:
         1e:01:72:2a:b9:6c:36:d9:5b:50:f1:09:e7:d4:a9:51:e6:b2:
         16:cc:f6:a4:4d:25:7a:2b:8f:b1:9f:5f:9c:66:82:48:10:49:
         7d:0f:5f:b4:24:ff:b5:7d:5c:ff:89:d7:54:de:2c:08:8a:7e:
         c9:93:d0:78:d2:d5:13:bc:4c:1d:d2:40:49:03:95:06:ec:80:
         76:d9:56:7a:3c:aa:5b:bd:81:ec:01:a7:20:3e:ac:94:53:d9:
         36:a4:a4:76:c0:59:5a:b9:9f:32:1d:c9:31:76:49:05:d9:00:
         78:8c:1c:f5:7b:58:7c:2e:63:08:02:5b:a5:e9:a4:b3:49:00:
         4e:23:bf:42:87:fc:ea:44:73:9d:50:03:db:4b:83:f8:44:ae:
         41:e0:11:d1:58:13:e9:06:a9:85:41:a9:04:48:e5:aa:db:c7:
         93:0b:d6:59:4c:79:79:05:cf:29:1a:b4:78:69:9a:cc:ba:b2:
         41:8e:c6:f7:72:4b:e2:9c:69:c6:4e:a3:b0:63:a0:bb:d8:9b:
         14:54:7f:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 21:05:18 2024 by rpki-client on console-ams.rpki-client.org