Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ciazpvg81Q4DGM2j81CVSFauYWRQc64YAyMwrGXvRzSU/0/3139312e352e3136342e302f32322d3234203d3e20323633353431.roa
File:                     3139312e352e3136342e302f32322d3234203d3e20323633353431.roa (raw, json)
Hash identifier:          X/WrNQ0M0jDekmQsfYPbU20/IPKtSdR06oIjDUvd4Tg=
Subject key identifier:   BF:61:8F:50:8F:E3:53:0F:66:B2:0C:60:03:CD:4E:88:D9:E4:1A:0E
Certificate issuer:       /CN=27515C5E9BC6223F27332FBE1616CE57715E9CAF
Certificate serial:       384095D9ADD2C3B8753F9D9FBCC6BFD3FB3F3A28
Authority key identifier: 27:51:5C:5E:9B:C6:22:3F:27:33:2F:BE:16:16:CE:57:71:5E:9C:AF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/27515C5E9BC6223F27332FBE1616CE57715E9CAF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ciazpvg81Q4DGM2j81CVSFauYWRQc64YAyMwrGXvRzSU/0/3139312e352e3136342e302f32322d3234203d3e20323633353431.roa
Signing time:             Mon 02 Sep 2024 12:52:19 +0000
ROA not before:           Mon 02 Sep 2024 12:47:19 +0000
ROA not after:            Mon 01 Sep 2025 12:52:19 +0000
asID:                     263541
IP address blocks:        191.5.164.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ciazpvg81Q4DGM2j81CVSFauYWRQc64YAyMwrGXvRzSU/0/27515C5E9BC6223F27332FBE1616CE57715E9CAF.crl
                          rsync://rpki-repo.registro.br/repo/Ciazpvg81Q4DGM2j81CVSFauYWRQc64YAyMwrGXvRzSU/0/27515C5E9BC6223F27332FBE1616CE57715E9CAF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/27515C5E9BC6223F27332FBE1616CE57715E9CAF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 18:25:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:40:95:d9:ad:d2:c3:b8:75:3f:9d:9f:bc:c6:bf:d3:fb:3f:3a:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27515C5E9BC6223F27332FBE1616CE57715E9CAF
        Validity
            Not Before: Sep  2 12:47:19 2024 GMT
            Not After : Sep  1 12:52:19 2025 GMT
        Subject: CN=BF618F508FE3530F66B20C6003CD4E88D9E41A0E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:7a:5c:70:0a:03:bd:22:cf:39:1f:21:5e:7d:
                    52:32:27:eb:02:64:ea:3a:54:6a:44:43:ac:56:b1:
                    29:51:d4:32:10:64:9d:81:8a:fe:e7:e7:b1:30:b4:
                    07:3b:3c:a6:4f:ba:51:72:7b:cc:ab:e2:1b:dd:6b:
                    fe:da:49:cf:5d:cb:12:3f:d3:46:0a:93:f0:82:49:
                    17:d1:4d:bd:e1:e5:b7:34:1c:7a:c5:57:8f:92:0a:
                    77:86:03:d6:f3:b2:49:00:93:36:3a:da:94:61:a1:
                    a9:67:3b:79:fd:23:71:b5:ae:a6:88:5c:b5:1c:c9:
                    0a:cf:ae:ec:32:07:aa:dd:09:2d:b8:70:e3:18:68:
                    7d:84:ec:09:89:09:2a:19:dd:17:fc:61:10:15:ea:
                    1e:4d:a1:d7:6b:18:e9:e3:b6:29:df:f1:83:03:56:
                    5f:c3:70:80:70:7a:a7:35:0d:42:5e:b0:62:87:d1:
                    73:21:93:d9:87:57:eb:0b:f2:11:31:7a:27:7c:45:
                    84:3e:ad:c2:ec:e4:76:d1:a6:c7:bb:95:de:73:50:
                    90:84:5f:a3:e4:78:aa:2b:22:de:d1:2b:eb:cd:ad:
                    72:b5:80:c9:ca:f1:42:cb:7d:01:3a:27:e5:ab:bd:
                    af:89:3a:cb:7f:69:db:53:65:61:da:66:42:fe:fe:
                    76:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:61:8F:50:8F:E3:53:0F:66:B2:0C:60:03:CD:4E:88:D9:E4:1A:0E
            X509v3 Authority Key Identifier:
                keyid:27:51:5C:5E:9B:C6:22:3F:27:33:2F:BE:16:16:CE:57:71:5E:9C:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ciazpvg81Q4DGM2j81CVSFauYWRQc64YAyMwrGXvRzSU/0/27515C5E9BC6223F27332FBE1616CE57715E9CAF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/27515C5E9BC6223F27332FBE1616CE57715E9CAF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ciazpvg81Q4DGM2j81CVSFauYWRQc64YAyMwrGXvRzSU/0/3139312e352e3136342e302f32322d3234203d3e20323633353431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.5.164.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3d:b6:85:92:93:69:e3:9a:1c:9c:49:eb:32:95:99:b8:22:14:
         5f:18:e9:95:fe:40:89:8f:e9:c3:6b:7a:94:da:f2:eb:bc:71:
         8b:f0:e3:31:46:02:fc:8d:d8:cb:7d:36:0d:e2:c0:b4:4f:c5:
         62:58:14:d9:09:c6:05:2c:e1:58:5d:59:ca:eb:dc:f6:b8:a1:
         43:de:0e:b4:c7:dc:b9:b2:bf:ca:17:2a:f1:1e:4e:32:b5:f2:
         49:be:01:45:81:0b:e5:c2:8d:95:da:f1:44:38:ae:ae:13:59:
         2a:27:0c:1f:df:b7:30:bc:64:25:01:d3:d9:4d:57:19:ea:c7:
         07:6a:0f:95:d8:86:7c:1b:46:25:c8:08:59:52:c6:13:29:9e:
         24:6a:d3:94:5d:d3:9b:94:65:62:7c:6b:e5:f3:e9:55:11:c6:
         d0:5b:ff:fd:ed:53:18:2b:04:c5:3f:f9:b8:eb:80:c8:af:a3:
         f6:9c:75:4f:c7:9c:1f:6a:29:0d:ed:a8:b8:20:16:e7:4e:47:
         2e:2e:e0:e8:57:9b:93:c9:a3:ad:2f:c2:4f:d0:32:5e:b4:16:
         19:d6:f8:be:ec:4d:e2:5f:01:07:3d:f5:53:b2:f1:0d:4a:47:
         7d:0a:02:87:8d:68:23:36:0f:9a:ad:38:e1:08:7b:b6:98:aa:
         78:bb:c9:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 17:27:53 2024 by rpki-client on console-fra.rpki-client.org