Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ciazpvg81Q4DGM2j81CVSFauYWRQc64YAyMwrGXvRzSU/0/3139312e3234312e32332e302f32342d3234203d3e20323633353431.roa
File:                     3139312e3234312e32332e302f32342d3234203d3e20323633353431.roa (raw, json)
Hash identifier:          Q0yoFJR7fs2VZb4FkHtve2TYnf31zmX0aGKon54l3mY=
Subject key identifier:   9A:B3:1F:E7:02:37:71:DA:3E:02:08:73:39:D9:FD:45:7B:55:77:BF
Certificate issuer:       /CN=27515C5E9BC6223F27332FBE1616CE57715E9CAF
Certificate serial:       38E22997EC58EA2D8CEB5EFAA3F61B6420754C17
Authority key identifier: 27:51:5C:5E:9B:C6:22:3F:27:33:2F:BE:16:16:CE:57:71:5E:9C:AF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/27515C5E9BC6223F27332FBE1616CE57715E9CAF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ciazpvg81Q4DGM2j81CVSFauYWRQc64YAyMwrGXvRzSU/0/3139312e3234312e32332e302f32342d3234203d3e20323633353431.roa
Signing time:             Mon 02 Sep 2024 12:52:31 +0000
ROA not before:           Mon 02 Sep 2024 12:47:31 +0000
ROA not after:            Mon 01 Sep 2025 12:52:31 +0000
asID:                     263541
IP address blocks:        191.241.23.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ciazpvg81Q4DGM2j81CVSFauYWRQc64YAyMwrGXvRzSU/0/27515C5E9BC6223F27332FBE1616CE57715E9CAF.crl
                          rsync://rpki-repo.registro.br/repo/Ciazpvg81Q4DGM2j81CVSFauYWRQc64YAyMwrGXvRzSU/0/27515C5E9BC6223F27332FBE1616CE57715E9CAF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/27515C5E9BC6223F27332FBE1616CE57715E9CAF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 07:57:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:e2:29:97:ec:58:ea:2d:8c:eb:5e:fa:a3:f6:1b:64:20:75:4c:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27515C5E9BC6223F27332FBE1616CE57715E9CAF
        Validity
            Not Before: Sep  2 12:47:31 2024 GMT
            Not After : Sep  1 12:52:31 2025 GMT
        Subject: CN=9AB31FE7023771DA3E02087339D9FD457B5577BF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:6b:c6:97:50:d0:8b:cb:01:8b:1e:6b:d3:f6:
                    d2:1d:f0:ce:f5:0e:48:31:0c:91:f5:41:0c:4f:27:
                    6f:d1:85:b4:aa:c6:d6:63:ac:ef:e7:c3:ad:67:50:
                    6b:6c:5a:0d:57:0a:3b:5f:35:d8:47:86:af:e7:ff:
                    b0:c7:fb:e4:d8:4c:f3:0b:cb:dd:a3:56:13:1b:96:
                    c9:62:e5:34:e1:5f:8f:4e:e5:59:9a:50:fd:fb:5a:
                    a2:44:b2:e4:fd:30:89:49:86:a8:16:e3:86:fe:29:
                    b8:f8:ef:56:28:66:0c:2b:26:99:a7:11:4f:be:4a:
                    ae:67:c6:47:27:85:2b:15:47:83:ae:3c:d9:bf:d4:
                    4c:ff:2f:57:90:2d:bd:eb:57:6e:89:82:29:3a:30:
                    8c:d3:c0:c2:ec:b5:af:f2:27:af:a4:e1:68:5f:85:
                    e2:12:b7:fc:96:de:17:d0:ff:01:ec:ec:a0:ae:ee:
                    75:fc:72:da:2d:44:94:7b:9c:96:15:ce:6a:ef:a7:
                    b5:ff:27:4d:c1:cc:fa:89:17:7c:9a:2b:df:3b:a0:
                    bc:dc:69:06:fc:94:c2:05:c8:fa:95:4d:62:dc:36:
                    e4:3a:86:d2:ad:1a:e6:54:85:27:d0:42:d0:11:db:
                    ee:63:06:ad:e8:ca:5c:8f:cb:2d:f9:01:a5:67:7b:
                    5c:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:B3:1F:E7:02:37:71:DA:3E:02:08:73:39:D9:FD:45:7B:55:77:BF
            X509v3 Authority Key Identifier:
                keyid:27:51:5C:5E:9B:C6:22:3F:27:33:2F:BE:16:16:CE:57:71:5E:9C:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ciazpvg81Q4DGM2j81CVSFauYWRQc64YAyMwrGXvRzSU/0/27515C5E9BC6223F27332FBE1616CE57715E9CAF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/27515C5E9BC6223F27332FBE1616CE57715E9CAF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ciazpvg81Q4DGM2j81CVSFauYWRQc64YAyMwrGXvRzSU/0/3139312e3234312e32332e302f32342d3234203d3e20323633353431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.241.23.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1a:c5:dd:09:fe:78:61:41:7b:f5:4c:04:34:96:ad:ed:25:3c:
         d1:c5:23:39:8e:4a:43:31:db:61:47:42:0f:1c:39:26:74:85:
         b7:bd:20:c8:16:6a:13:01:7b:70:5c:4b:92:2f:ee:53:03:63:
         d7:db:4e:e8:d7:f5:51:39:7c:f4:a7:8b:3c:98:7c:d3:16:91:
         48:7b:2d:8c:4a:61:43:b5:db:bc:f9:55:1a:e9:15:51:a5:9c:
         0d:4c:1c:d5:2d:43:05:72:73:d0:eb:8c:b8:5b:e2:65:f5:71:
         b1:ae:66:dc:85:ce:74:38:cc:27:63:3d:d7:83:20:de:a4:6d:
         00:ff:2b:af:c3:0f:d2:a3:fe:93:fc:bd:10:7b:f8:33:ac:64:
         f4:71:33:4f:cb:c4:f1:c3:ef:49:27:bd:de:c7:bf:d1:60:63:
         7a:2e:8d:f2:c0:eb:6c:12:c6:21:72:a6:67:3a:13:cf:bc:43:
         bd:39:51:63:b9:10:0d:76:bb:b7:3d:5c:22:bd:ee:09:0f:ab:
         56:aa:82:42:d7:d7:0c:c9:68:21:d3:b1:cc:a3:17:39:98:20:
         82:47:ab:ec:d2:92:83:9e:70:92:15:9d:42:09:4d:0a:22:1c:
         23:cb:9a:b2:46:0e:99:25:d9:94:d1:72:66:16:be:17:08:81:
         e5:0d:69:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 06:32:11 2024 by rpki-client on console-fra.rpki-client.org