Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DE8b6ZFp1tvBJBJm7S1u8ekiBnagEaXQ9ybcSwJYLSfU/1/3139312e33362e3232342e302f32322d3234203d3e20323635323639.roa
File:                     3139312e33362e3232342e302f32322d3234203d3e20323635323639.roa (raw, json)
Hash identifier:          EEcywN3jQmfHLC5++4s3D35koQsA1Gsb0YaZuQdB/mE=
Subject key identifier:   AC:17:3C:F9:E1:7D:AE:CB:F7:AE:A4:79:01:5D:4F:3F:C1:16:1C:7A
Certificate issuer:       /CN=32F2FCAAECE39370BDEE4350C868E619ED31A5B3
Certificate serial:       4D63B5F36CB5756407E25F34CA1E948CDC7A7FF3
Authority key identifier: 32:F2:FC:AA:EC:E3:93:70:BD:EE:43:50:C8:68:E6:19:ED:31:A5:B3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32F2FCAAECE39370BDEE4350C868E619ED31A5B3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DE8b6ZFp1tvBJBJm7S1u8ekiBnagEaXQ9ybcSwJYLSfU/1/3139312e33362e3232342e302f32322d3234203d3e20323635323639.roa
Signing time:             Thu 04 Apr 2024 09:15:23 +0000
ROA not before:           Thu 04 Apr 2024 09:10:23 +0000
ROA not after:            Thu 03 Apr 2025 09:15:23 +0000
asID:                     265269
IP address blocks:        191.36.224.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DE8b6ZFp1tvBJBJm7S1u8ekiBnagEaXQ9ybcSwJYLSfU/1/32F2FCAAECE39370BDEE4350C868E619ED31A5B3.crl
                          rsync://rpki-repo.registro.br/repo/DE8b6ZFp1tvBJBJm7S1u8ekiBnagEaXQ9ybcSwJYLSfU/1/32F2FCAAECE39370BDEE4350C868E619ED31A5B3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32F2FCAAECE39370BDEE4350C868E619ED31A5B3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 03 Jul 2024 20:51:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:63:b5:f3:6c:b5:75:64:07:e2:5f:34:ca:1e:94:8c:dc:7a:7f:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32F2FCAAECE39370BDEE4350C868E619ED31A5B3
        Validity
            Not Before: Apr  4 09:10:23 2024 GMT
            Not After : Apr  3 09:15:23 2025 GMT
        Subject: CN=AC173CF9E17DAECBF7AEA479015D4F3FC1161C7A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:ad:ca:39:b5:68:cd:7f:1b:95:17:27:f3:72:
                    a7:c3:f5:60:92:01:8f:3f:4d:d3:7d:19:e2:6d:dd:
                    b3:82:72:8b:9a:63:1e:3a:c3:09:41:b2:34:bf:92:
                    cd:68:40:71:35:11:9c:5e:03:6c:a7:9f:1e:45:98:
                    41:9a:bb:4b:6f:26:05:42:c7:e7:c7:e1:94:b4:06:
                    ac:cc:23:16:6d:bd:db:ec:db:8c:1a:69:9e:05:09:
                    8d:e7:2d:fa:c1:c0:05:eb:d2:d6:c7:0a:0e:5d:eb:
                    4a:6d:44:56:b2:16:66:12:0e:8f:8f:aa:3e:4f:d5:
                    db:32:16:af:77:ab:0e:9f:51:e6:5c:81:4d:f4:b7:
                    88:f8:a6:7d:54:8c:df:8c:34:ce:36:6b:6d:c5:41:
                    06:62:46:08:eb:58:5a:70:10:b2:b5:ce:d3:ab:9e:
                    4d:f7:bc:71:de:0f:23:c0:85:ca:ce:46:b0:71:45:
                    9c:80:76:ec:e3:2f:4b:84:c9:61:86:37:e8:01:5a:
                    41:b7:9f:f3:82:e8:5c:e0:d3:ae:9d:ae:cd:3d:52:
                    ac:31:c3:f8:fd:ab:b3:4c:ae:5e:cd:87:fe:5d:c1:
                    85:72:75:54:5f:89:73:22:60:20:a8:31:05:38:3f:
                    2e:a6:89:0f:57:df:73:77:7e:65:f7:97:81:ae:a3:
                    78:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:17:3C:F9:E1:7D:AE:CB:F7:AE:A4:79:01:5D:4F:3F:C1:16:1C:7A
            X509v3 Authority Key Identifier:
                keyid:32:F2:FC:AA:EC:E3:93:70:BD:EE:43:50:C8:68:E6:19:ED:31:A5:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DE8b6ZFp1tvBJBJm7S1u8ekiBnagEaXQ9ybcSwJYLSfU/1/32F2FCAAECE39370BDEE4350C868E619ED31A5B3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32F2FCAAECE39370BDEE4350C868E619ED31A5B3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DE8b6ZFp1tvBJBJm7S1u8ekiBnagEaXQ9ybcSwJYLSfU/1/3139312e33362e3232342e302f32322d3234203d3e20323635323639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.36.224.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5f:f9:ba:fa:0e:b2:d5:b1:27:85:74:b4:28:6b:9b:65:f9:f8:
         40:d9:0e:54:27:b7:7b:22:ae:8b:70:cc:b4:07:0e:38:f1:73:
         67:f7:bb:b3:32:bf:93:9b:87:68:6b:7b:30:09:87:cc:48:e1:
         76:67:7b:a3:e9:81:bf:03:44:b7:c8:74:a7:a6:d4:8e:0a:89:
         eb:05:8f:9c:7e:07:fe:1b:72:1e:09:0b:cd:df:2a:51:64:02:
         5e:b9:95:b6:f6:e8:e1:3c:7c:72:28:aa:0f:93:03:f4:72:68:
         aa:69:78:b8:f5:11:fd:5e:23:de:df:50:14:80:da:de:1d:6d:
         44:42:75:6e:9d:30:b1:57:20:af:c1:d6:8d:76:10:ed:e5:78:
         84:87:f2:fe:31:be:94:1c:41:12:3b:c9:29:d6:24:94:81:a2:
         de:4a:7b:5e:7a:3b:cf:72:65:d3:33:37:bd:9c:f9:78:4b:e8:
         92:b3:6d:cd:57:e6:4b:e0:9f:1e:54:a3:31:25:6d:6d:67:76:
         76:6b:20:61:2c:97:16:04:26:c9:58:4c:24:d6:94:ab:f3:81:
         d3:bb:4a:f1:b2:96:6b:0a:10:5b:0a:6d:4c:7f:d4:1b:70:51:
         c7:23:7a:14:61:c3:85:a7:4a:b3:9d:fe:0b:25:90:38:da:f6:
         f9:11:e6:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 2 23:51:23 2024 by rpki-client on console-ams.rpki-client.org