Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CuiyBXWpPUHJzzPZ1BEbSk6YC2utHNAiS5rEoUmofiSY/0/3139312e3234332e34382e302f32322d3234203d3e20323633343935.roa
File:                     3139312e3234332e34382e302f32322d3234203d3e20323633343935.roa (raw, json)
Hash identifier:          k4jV6Q2J+fbTTQdrtIbbCgBNPPV6ydQ6P64WAOU7GAU=
Subject key identifier:   4D:9A:00:6A:E4:D4:B4:78:3E:2B:A7:9F:AB:B6:85:10:D6:8A:04:00
Certificate issuer:       /CN=DE4FC56805C7667E1801854B3C77ADCB64A63DD7
Certificate serial:       556278DA331297E35EC40D70FCE4B7B947D5B4D8
Authority key identifier: DE:4F:C5:68:05:C7:66:7E:18:01:85:4B:3C:77:AD:CB:64:A6:3D:D7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE4FC56805C7667E1801854B3C77ADCB64A63DD7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CuiyBXWpPUHJzzPZ1BEbSk6YC2utHNAiS5rEoUmofiSY/0/3139312e3234332e34382e302f32322d3234203d3e20323633343935.roa
Signing time:             Wed 05 Jun 2024 19:02:23 +0000
ROA not before:           Wed 05 Jun 2024 18:57:23 +0000
ROA not after:            Wed 04 Jun 2025 19:02:23 +0000
asID:                     263495
IP address blocks:        191.243.48.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CuiyBXWpPUHJzzPZ1BEbSk6YC2utHNAiS5rEoUmofiSY/0/DE4FC56805C7667E1801854B3C77ADCB64A63DD7.crl
                          rsync://rpki-repo.registro.br/repo/CuiyBXWpPUHJzzPZ1BEbSk6YC2utHNAiS5rEoUmofiSY/0/DE4FC56805C7667E1801854B3C77ADCB64A63DD7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE4FC56805C7667E1801854B3C77ADCB64A63DD7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 17 Feb 2025 16:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:62:78:da:33:12:97:e3:5e:c4:0d:70:fc:e4:b7:b9:47:d5:b4:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DE4FC56805C7667E1801854B3C77ADCB64A63DD7
        Validity
            Not Before: Jun  5 18:57:23 2024 GMT
            Not After : Jun  4 19:02:23 2025 GMT
        Subject: CN=4D9A006AE4D4B4783E2BA79FABB68510D68A0400
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:70:19:a1:90:fc:9d:ba:08:26:2b:98:80:2a:
                    f5:79:58:e3:75:1d:ac:c7:f3:3b:c6:72:5f:30:a2:
                    57:0b:4f:65:aa:e1:d3:95:03:ae:ae:a5:fa:ca:c6:
                    2f:81:77:54:01:34:09:85:4a:f5:39:0d:28:ef:85:
                    98:0e:b9:74:b1:5e:ab:68:f5:ca:00:92:ba:b6:35:
                    c6:91:8f:6f:bf:d6:54:40:1f:41:de:2f:f3:e3:00:
                    28:59:93:3b:cb:a0:2c:de:71:4d:01:54:a3:13:01:
                    2e:3e:b0:cb:76:35:da:e5:c8:33:f7:02:0d:4d:15:
                    54:cd:15:37:07:b3:1a:9e:e5:22:12:16:a3:6f:dd:
                    23:bc:73:b8:8a:26:cc:3b:f2:f8:90:a0:fb:17:04:
                    17:bd:e4:01:42:e9:be:b5:e7:b6:9b:c3:a4:90:43:
                    68:92:37:d9:63:70:9c:76:64:b1:48:36:8b:7f:c1:
                    46:f4:90:da:be:ec:73:9e:e1:85:cd:96:4c:d7:60:
                    a3:ca:eb:eb:92:a8:8d:da:fc:64:d1:72:86:a6:6f:
                    30:ea:7a:dd:dd:2b:75:6d:59:c0:49:c4:54:28:d2:
                    d9:bf:4a:ff:36:71:ad:e4:7f:76:65:a3:0d:ec:7a:
                    72:f6:17:10:14:28:6b:01:c9:93:ff:80:1e:06:7f:
                    f0:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:9A:00:6A:E4:D4:B4:78:3E:2B:A7:9F:AB:B6:85:10:D6:8A:04:00
            X509v3 Authority Key Identifier:
                keyid:DE:4F:C5:68:05:C7:66:7E:18:01:85:4B:3C:77:AD:CB:64:A6:3D:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CuiyBXWpPUHJzzPZ1BEbSk6YC2utHNAiS5rEoUmofiSY/0/DE4FC56805C7667E1801854B3C77ADCB64A63DD7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE4FC56805C7667E1801854B3C77ADCB64A63DD7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CuiyBXWpPUHJzzPZ1BEbSk6YC2utHNAiS5rEoUmofiSY/0/3139312e3234332e34382e302f32322d3234203d3e20323633343935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.243.48.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8c:ae:8c:5b:24:b7:5c:64:52:c6:6e:3a:8a:33:01:8d:43:15:
         2e:dd:37:bf:71:34:2c:c6:69:c0:d6:1f:31:85:a4:68:92:77:
         29:a4:35:41:54:8b:13:d8:7d:45:f8:23:f2:c3:96:a8:2b:e5:
         fb:e8:08:bc:d2:46:92:b2:d1:9d:51:a3:54:13:a6:fd:0f:80:
         e3:08:39:b4:cf:ba:6c:a3:9a:4d:25:0c:8f:b2:43:12:00:6c:
         b5:ec:c6:a8:0e:18:fb:95:cc:e6:4d:86:34:f9:aa:eb:48:46:
         fd:6b:28:39:2f:26:cb:c2:62:a1:22:81:6e:58:85:53:b6:49:
         d1:e5:9b:64:6b:96:34:f0:46:19:0e:87:70:a5:f5:41:e5:62:
         e7:ae:ff:64:aa:c9:38:f2:50:93:8f:8c:90:26:e5:e4:5f:23:
         5b:02:c4:3b:e5:87:18:0a:4b:2a:4b:7e:b9:de:8e:7e:5b:6a:
         82:35:29:a5:4b:9e:b2:d0:88:b2:51:76:e0:93:79:38:c1:c8:
         49:58:9a:e1:b0:60:e2:5b:e5:33:5f:58:8b:8d:a7:9e:a0:3e:
         80:5e:e5:02:0b:e4:f8:54:8e:43:aa:c0:a5:8d:a9:da:56:2f:
         e8:db:15:74:0a:91:c4:dc:83:5e:3d:8b:9e:c6:1a:2b:eb:e9:
         43:44:61:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:08:59 2025 by rpki-client