Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ct7HBK4b6K3uqrfmoJFBCTjdGUohLwRqZXSZQXzNKr1F/1/3139312e3234332e37322e302f32312d3234203d3e20323633343939.roa
File:                     3139312e3234332e37322e302f32312d3234203d3e20323633343939.roa (raw, json)
Hash identifier:          sXW/9ybIn9TuU3Ud4tZ+E/1zXutuOac3KC7b8Z98KEE=
Subject key identifier:   CF:91:C3:0C:DD:6D:F8:C6:7F:22:A0:78:84:80:B1:56:B5:5D:43:22
Certificate issuer:       /CN=785724BA2C79C31B8A2DA54506CAE7886EA06BE7
Certificate serial:       3AE188F8F4DAE22203827BEBDE07F43A1B722A87
Authority key identifier: 78:57:24:BA:2C:79:C3:1B:8A:2D:A5:45:06:CA:E7:88:6E:A0:6B:E7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/785724BA2C79C31B8A2DA54506CAE7886EA06BE7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ct7HBK4b6K3uqrfmoJFBCTjdGUohLwRqZXSZQXzNKr1F/1/3139312e3234332e37322e302f32312d3234203d3e20323633343939.roa
Signing time:             Wed 14 Aug 2024 14:10:11 +0000
ROA not before:           Wed 14 Aug 2024 14:05:11 +0000
ROA not after:            Wed 13 Aug 2025 14:10:11 +0000
asID:                     263499
IP address blocks:        191.243.72.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ct7HBK4b6K3uqrfmoJFBCTjdGUohLwRqZXSZQXzNKr1F/1/785724BA2C79C31B8A2DA54506CAE7886EA06BE7.crl
                          rsync://rpki-repo.registro.br/repo/Ct7HBK4b6K3uqrfmoJFBCTjdGUohLwRqZXSZQXzNKr1F/1/785724BA2C79C31B8A2DA54506CAE7886EA06BE7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/785724BA2C79C31B8A2DA54506CAE7886EA06BE7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 22:20:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:e1:88:f8:f4:da:e2:22:03:82:7b:eb:de:07:f4:3a:1b:72:2a:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=785724BA2C79C31B8A2DA54506CAE7886EA06BE7
        Validity
            Not Before: Aug 14 14:05:11 2024 GMT
            Not After : Aug 13 14:10:11 2025 GMT
        Subject: CN=3082010A0282010100DFAA07E69D03F5BBF8B3B254DD1F2F4737705A06203048158B4F19FA45164620A86BE9A73A41160952B07A611DA1E7885BA7308438A2775E7CEF7D05E2E698BA95FB4B8ADB1DDDF856FA4C4C272174733A068D9511D7B234AEA8E7B25D1717882B0409E8FF6266B5F77B3098B97C2D531EAE58EB220ED8AA94B967B415E9386ED1AF40EB3F38922C6FC7106FA7A744DC3DF271B7AD4EE0DE6122E5BFBF473B0AC5B49E3EAFA492BC218C609DDA405E74361C7F83C30CEC2732CC47AD259624A9BB64E239DA021B6B97E8FD94ABE5898ED4FFE896A791AFB94AD402A3C95C9D49B2381EB78CDA2BE1A5F930C88B6125B1D3E926C91734BA5FFDE64D05F0CEAF490203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:aa:07:e6:9d:03:f5:bb:f8:b3:b2:54:dd:1f:
                    2f:47:37:70:5a:06:20:30:48:15:8b:4f:19:fa:45:
                    16:46:20:a8:6b:e9:a7:3a:41:16:09:52:b0:7a:61:
                    1d:a1:e7:88:5b:a7:30:84:38:a2:77:5e:7c:ef:7d:
                    05:e2:e6:98:ba:95:fb:4b:8a:db:1d:dd:f8:56:fa:
                    4c:4c:27:21:74:73:3a:06:8d:95:11:d7:b2:34:ae:
                    a8:e7:b2:5d:17:17:88:2b:04:09:e8:ff:62:66:b5:
                    f7:7b:30:98:b9:7c:2d:53:1e:ae:58:eb:22:0e:d8:
                    aa:94:b9:67:b4:15:e9:38:6e:d1:af:40:eb:3f:38:
                    92:2c:6f:c7:10:6f:a7:a7:44:dc:3d:f2:71:b7:ad:
                    4e:e0:de:61:22:e5:bf:bf:47:3b:0a:c5:b4:9e:3e:
                    af:a4:92:bc:21:8c:60:9d:da:40:5e:74:36:1c:7f:
                    83:c3:0c:ec:27:32:cc:47:ad:25:96:24:a9:bb:64:
                    e2:39:da:02:1b:6b:97:e8:fd:94:ab:e5:89:8e:d4:
                    ff:e8:96:a7:91:af:b9:4a:d4:02:a3:c9:5c:9d:49:
                    b2:38:1e:b7:8c:da:2b:e1:a5:f9:30:c8:8b:61:25:
                    b1:d3:e9:26:c9:17:34:ba:5f:fd:e6:4d:05:f0:ce:
                    af:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:91:C3:0C:DD:6D:F8:C6:7F:22:A0:78:84:80:B1:56:B5:5D:43:22
            X509v3 Authority Key Identifier:
                keyid:78:57:24:BA:2C:79:C3:1B:8A:2D:A5:45:06:CA:E7:88:6E:A0:6B:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ct7HBK4b6K3uqrfmoJFBCTjdGUohLwRqZXSZQXzNKr1F/1/785724BA2C79C31B8A2DA54506CAE7886EA06BE7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/785724BA2C79C31B8A2DA54506CAE7886EA06BE7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ct7HBK4b6K3uqrfmoJFBCTjdGUohLwRqZXSZQXzNKr1F/1/3139312e3234332e37322e302f32312d3234203d3e20323633343939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.243.72.0/21

    Signature Algorithm: sha256WithRSAEncryption
         23:cc:67:aa:43:3a:06:7b:37:24:cc:34:55:6b:dd:03:c2:57:
         99:43:ed:89:b9:f8:1f:08:31:a7:0e:97:94:b6:50:ff:96:6c:
         32:b3:ce:00:9d:97:c4:48:6e:a6:66:e6:c0:f3:d6:97:a4:06:
         06:d1:f1:68:4e:44:6f:fa:55:6f:a1:1a:6f:bd:55:69:bc:02:
         49:ca:58:b4:32:32:17:4f:b1:83:e3:74:c4:1e:42:14:f5:0f:
         24:ae:5d:47:0f:7f:31:19:bd:87:35:ec:78:e3:da:58:5b:71:
         32:60:65:ea:23:50:e0:20:ca:be:da:99:f9:86:2d:39:b4:d4:
         3a:d8:e5:2e:7a:4b:0c:2c:e7:4c:59:8e:2b:c5:56:6c:57:20:
         09:49:26:58:0f:36:24:5b:e6:fe:8d:9c:e8:c9:a0:7c:f8:91:
         f5:42:e7:17:c3:ab:04:9b:7e:25:30:31:11:f5:3f:be:8d:cc:
         bf:1f:90:ee:e9:54:f5:c3:9b:39:e2:2e:34:02:aa:3f:ff:ac:
         bd:e5:ca:46:f4:16:61:85:d5:02:78:91:e7:ab:f8:6f:49:a6:
         2a:f5:65:cc:be:17:d2:3b:2b:96:7e:31:60:aa:ea:5e:84:35:
         ad:a2:1c:81:75:63:68:1f:c6:dd:ff:29:b6:32:11:e3:8a:79:
         af:14:dc:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 23:53:09 2024 by rpki-client on console-ams.rpki-client.org