Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ciazpvg81Q4DGM2j81CVSFauYWRQc64YAyMwrGXvRzSU/0/3139312e3234312e32332e302f32342d3234203d3e20323633353431.roa
File:                     3139312e3234312e32332e302f32342d3234203d3e20323633353431.roa (raw, json)
Hash identifier:          YB/DhNh1cI4dlqyFH1MXwQhL1LsklgHJlaWpFh2R9Rk=
Subject key identifier:   58:EC:E6:B5:2B:2E:E0:DF:1E:B4:34:24:31:44:48:0B:24:BF:41:10
Certificate issuer:       /CN=DFA5F9058A3FC234221062FC10FD9D6253F81867
Certificate serial:       1AE1FE28F39B11996FD3EFC8F3104D7E4F9B607C
Authority key identifier: DF:A5:F9:05:8A:3F:C2:34:22:10:62:FC:10:FD:9D:62:53:F8:18:67
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DFA5F9058A3FC234221062FC10FD9D6253F81867.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ciazpvg81Q4DGM2j81CVSFauYWRQc64YAyMwrGXvRzSU/0/3139312e3234312e32332e302f32342d3234203d3e20323633353431.roa
Signing time:             Thu 09 Jan 2025 14:07:31 +0000
ROA not before:           Thu 09 Jan 2025 14:02:31 +0000
ROA not after:            Thu 08 Jan 2026 14:07:31 +0000
asID:                     263541
IP address blocks:        191.241.23.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ciazpvg81Q4DGM2j81CVSFauYWRQc64YAyMwrGXvRzSU/0/DFA5F9058A3FC234221062FC10FD9D6253F81867.crl
                          rsync://rpki-repo.registro.br/repo/Ciazpvg81Q4DGM2j81CVSFauYWRQc64YAyMwrGXvRzSU/0/DFA5F9058A3FC234221062FC10FD9D6253F81867.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DFA5F9058A3FC234221062FC10FD9D6253F81867.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 11 Apr 2025 01:19:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:e1:fe:28:f3:9b:11:99:6f:d3:ef:c8:f3:10:4d:7e:4f:9b:60:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DFA5F9058A3FC234221062FC10FD9D6253F81867
        Validity
            Not Before: Jan  9 14:02:31 2025 GMT
            Not After : Jan  8 14:07:31 2026 GMT
        Subject: CN=58ECE6B52B2EE0DF1EB434243144480B24BF4110
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:01:6f:c9:3e:0b:71:82:dc:ee:ba:24:59:02:
                    9d:c6:48:18:e5:04:6f:3e:68:bc:01:40:cc:4e:fb:
                    60:2a:4c:18:bc:f2:73:4e:74:1e:24:5c:d6:69:26:
                    59:68:43:a4:31:81:0b:31:e5:70:be:15:a5:86:d1:
                    95:4b:3c:b5:16:5d:c7:d5:fc:44:87:ba:08:d0:0d:
                    29:87:97:34:1c:fd:a7:f8:cd:55:45:f7:13:fc:a2:
                    c2:b0:44:62:5b:65:54:d6:89:f2:92:59:f1:a5:b8:
                    94:be:76:dc:b3:6b:7d:61:1b:89:9d:10:9d:21:9e:
                    ea:8b:d2:b1:51:30:48:3f:c0:1c:d9:31:f8:63:28:
                    72:1f:e9:82:ae:0b:02:5a:72:7d:d3:86:cf:7a:00:
                    e6:c0:5d:1a:2b:d1:ee:49:1d:c5:84:58:5f:d6:a6:
                    1c:fe:37:06:6e:03:05:16:c1:5f:75:83:2d:29:4d:
                    30:db:da:4f:87:75:3f:9b:8f:e6:4f:6f:67:92:5f:
                    af:73:8b:da:71:99:0f:9f:84:01:2f:44:6a:d1:d5:
                    8f:5d:2b:62:a9:80:ea:c1:9f:7b:2c:f1:f8:34:60:
                    fb:3a:e3:3d:d5:3d:22:5e:71:84:68:47:5a:8e:d3:
                    23:6a:75:0b:d0:70:20:10:42:5a:50:b0:c3:94:14:
                    2d:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:EC:E6:B5:2B:2E:E0:DF:1E:B4:34:24:31:44:48:0B:24:BF:41:10
            X509v3 Authority Key Identifier:
                keyid:DF:A5:F9:05:8A:3F:C2:34:22:10:62:FC:10:FD:9D:62:53:F8:18:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ciazpvg81Q4DGM2j81CVSFauYWRQc64YAyMwrGXvRzSU/0/DFA5F9058A3FC234221062FC10FD9D6253F81867.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DFA5F9058A3FC234221062FC10FD9D6253F81867.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ciazpvg81Q4DGM2j81CVSFauYWRQc64YAyMwrGXvRzSU/0/3139312e3234312e32332e302f32342d3234203d3e20323633353431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.241.23.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0b:2d:2c:3c:cc:77:2b:30:d6:46:cf:fa:e3:6b:b7:de:e8:8e:
         5a:bd:09:64:0d:a2:6c:03:c4:29:3d:52:1b:2c:22:eb:64:96:
         9d:5e:56:f8:07:23:8a:b5:90:ee:66:13:40:a7:f9:2c:f3:8a:
         21:80:ab:a4:3f:b2:ec:c0:24:05:71:6a:9a:39:a6:7f:91:70:
         01:37:89:01:24:56:fa:43:90:6d:d9:c6:e7:10:53:d4:44:45:
         06:56:09:12:77:c3:79:91:28:c9:05:2b:d7:79:8e:3a:b1:1f:
         a2:36:35:b8:4d:bc:74:11:88:74:64:fd:a7:fe:3c:f4:ea:24:
         76:e8:5c:0b:b9:cc:8c:e2:1d:3d:63:ee:45:37:c0:b9:c9:68:
         e5:c2:b8:f4:ee:be:d9:47:36:bc:0f:3d:64:58:7f:7a:e7:97:
         e8:06:c2:8d:b4:76:eb:0c:58:db:8b:87:e3:34:58:e3:1e:a8:
         16:c8:e6:7f:49:ab:2b:a6:dc:7f:36:71:11:f1:18:d7:78:f6:
         82:c4:2f:9d:2d:c5:87:bb:3b:e2:7f:76:7b:97:4d:b6:b4:7f:
         fb:e3:a1:d4:7e:04:9e:29:78:1e:0e:28:b4:23:ea:3e:c6:88:
         ae:10:44:a8:05:85:17:dc:2a:9b:69:81:f7:62:10:1d:bc:59:
         3c:a6:12:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 15:50:16 2025 by rpki-client