Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ciazpvg81Q4DGM2j81CVSFauYWRQc64YAyMwrGXvRzSU/0/3139312e3234312e32312e302f32342d3234203d3e20323633353431.roa
File:                     3139312e3234312e32312e302f32342d3234203d3e20323633353431.roa (raw, json)
Hash identifier:          yxQgcDkIR6t9xRK+PzLehFkegO5VxTdlwodmJOsmlqU=
Subject key identifier:   9B:08:34:86:67:7E:89:E0:8E:4C:0E:9F:20:0E:05:FC:16:97:42:21
Certificate issuer:       /CN=27515C5E9BC6223F27332FBE1616CE57715E9CAF
Certificate serial:       77233935F861FD2AB77A91C0A156EDA513C05ECF
Authority key identifier: 27:51:5C:5E:9B:C6:22:3F:27:33:2F:BE:16:16:CE:57:71:5E:9C:AF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/27515C5E9BC6223F27332FBE1616CE57715E9CAF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ciazpvg81Q4DGM2j81CVSFauYWRQc64YAyMwrGXvRzSU/0/3139312e3234312e32312e302f32342d3234203d3e20323633353431.roa
Signing time:             Mon 02 Sep 2024 12:52:31 +0000
ROA not before:           Mon 02 Sep 2024 12:47:31 +0000
ROA not after:            Mon 01 Sep 2025 12:52:31 +0000
asID:                     263541
IP address blocks:        191.241.21.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ciazpvg81Q4DGM2j81CVSFauYWRQc64YAyMwrGXvRzSU/0/27515C5E9BC6223F27332FBE1616CE57715E9CAF.crl
                          rsync://rpki-repo.registro.br/repo/Ciazpvg81Q4DGM2j81CVSFauYWRQc64YAyMwrGXvRzSU/0/27515C5E9BC6223F27332FBE1616CE57715E9CAF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/27515C5E9BC6223F27332FBE1616CE57715E9CAF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 07:57:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:23:39:35:f8:61:fd:2a:b7:7a:91:c0:a1:56:ed:a5:13:c0:5e:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27515C5E9BC6223F27332FBE1616CE57715E9CAF
        Validity
            Not Before: Sep  2 12:47:31 2024 GMT
            Not After : Sep  1 12:52:31 2025 GMT
        Subject: CN=9B083486677E89E08E4C0E9F200E05FC16974221
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:b3:b9:11:07:c5:dd:9e:37:3e:e3:ae:d7:75:
                    5b:4c:a3:12:41:75:8b:0a:d6:87:dc:a6:8f:1e:23:
                    dd:f0:c4:49:98:53:f0:2f:54:ac:20:47:a8:ab:35:
                    1d:fc:53:c2:0b:82:0f:fd:83:0b:a7:03:2d:f0:e6:
                    af:4e:81:bf:7e:5e:c8:41:bc:5f:69:52:6a:61:3b:
                    30:98:2d:3d:68:52:2e:bd:f4:8f:f5:13:b5:ff:28:
                    c9:00:a5:06:69:5a:22:d6:bd:77:52:1a:95:28:b3:
                    95:85:ca:52:60:ea:0f:2a:64:8a:5d:cd:08:4c:ab:
                    65:01:fd:60:66:10:1d:22:ad:fc:68:d2:04:be:b0:
                    be:9a:32:cc:1e:5c:69:68:e1:65:ea:00:5c:2c:5f:
                    c3:88:2d:0b:d9:eb:5b:05:67:6c:9c:a6:7d:b5:4a:
                    a1:41:53:f7:0a:04:83:66:62:fa:26:94:d1:93:e7:
                    14:71:a6:31:63:31:95:87:89:1b:52:65:f3:56:3c:
                    4e:ad:00:c7:e9:58:17:15:3c:cd:15:72:f5:4b:8d:
                    c2:74:1c:78:1c:aa:dd:dc:bb:cd:f4:14:83:4f:76:
                    c6:a5:97:4e:1f:c2:e4:04:1d:d7:a1:72:56:bd:c1:
                    73:8b:b8:0f:0f:7e:cc:a7:61:a5:af:4a:91:7a:15:
                    57:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:08:34:86:67:7E:89:E0:8E:4C:0E:9F:20:0E:05:FC:16:97:42:21
            X509v3 Authority Key Identifier:
                keyid:27:51:5C:5E:9B:C6:22:3F:27:33:2F:BE:16:16:CE:57:71:5E:9C:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ciazpvg81Q4DGM2j81CVSFauYWRQc64YAyMwrGXvRzSU/0/27515C5E9BC6223F27332FBE1616CE57715E9CAF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/27515C5E9BC6223F27332FBE1616CE57715E9CAF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ciazpvg81Q4DGM2j81CVSFauYWRQc64YAyMwrGXvRzSU/0/3139312e3234312e32312e302f32342d3234203d3e20323633353431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.241.21.0/24

    Signature Algorithm: sha256WithRSAEncryption
         04:d3:38:d8:9b:07:f7:ce:e9:fb:06:3f:07:e6:d2:b9:43:44:
         3e:02:69:17:86:0e:e0:56:e2:41:14:27:e2:ae:56:0e:28:f6:
         50:4f:20:f5:c0:41:38:31:f5:36:b6:81:cf:13:11:17:86:b5:
         e1:22:3f:e9:dd:59:8c:b4:2a:1a:53:95:63:b5:aa:ef:d4:92:
         2a:21:ac:ae:10:fc:d2:84:66:51:be:e9:02:c8:17:18:21:0c:
         19:68:f1:74:68:3f:97:23:26:56:48:b1:82:80:d6:c8:55:d2:
         35:e9:a6:65:f1:11:c2:86:e9:36:1b:71:27:e7:fb:71:bf:72:
         17:b0:4f:39:d9:0b:72:a7:d7:a7:a7:a9:7a:13:9e:f1:6e:6a:
         1a:4f:7c:be:d6:04:7f:65:77:f8:ed:56:9a:f5:bc:cd:fa:53:
         22:ff:3d:f9:d8:95:b0:b3:75:0a:45:0d:ea:ff:44:6b:eb:4b:
         4a:0c:5a:f9:b8:1c:e7:9b:44:e1:ee:a4:1d:5d:dc:5f:33:59:
         9e:73:6d:1d:75:b4:4d:e8:cb:4f:3e:b6:01:8f:8b:5c:4d:4e:
         22:a8:0a:af:3b:a9:35:e7:e6:33:cf:c1:48:f5:c1:27:87:18:
         57:dd:26:33:49:03:24:eb:1f:c5:7b:da:09:a4:e6:73:8c:20:
         8a:47:1b:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 07:01:38 2024 by rpki-client on console-ams.rpki-client.org