Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/3139312e33372e3232322e302f32342d3234203d3e20323733333039.roa
File:                     3139312e33372e3232322e302f32342d3234203d3e20323733333039.roa (raw, json)
Hash identifier:          Is9QaG81UOtr2XYWVjRtqo7JuvHcm+3nSIOT439vsDg=
Subject key identifier:   69:B3:59:78:A0:54:EB:1F:E2:4C:7B:7A:A8:6C:1C:8D:A7:49:AB:46
Certificate issuer:       /CN=11C40A54AEA8862C23E5838BA28E2EC6317D1116
Certificate serial:       D76C9541EB207E79B5E8A604B75E75A589BE05
Authority key identifier: 11:C4:0A:54:AE:A8:86:2C:23:E5:83:8B:A2:8E:2E:C6:31:7D:11:16
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11C40A54AEA8862C23E5838BA28E2EC6317D1116.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/3139312e33372e3232322e302f32342d3234203d3e20323733333039.roa
Signing time:             Thu 09 May 2024 13:16:58 +0000
ROA not before:           Thu 09 May 2024 13:11:58 +0000
ROA not after:            Thu 08 May 2025 13:16:58 +0000
asID:                     273309
IP address blocks:        191.37.222.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/11C40A54AEA8862C23E5838BA28E2EC6317D1116.crl
                          rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/11C40A54AEA8862C23E5838BA28E2EC6317D1116.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11C40A54AEA8862C23E5838BA28E2EC6317D1116.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 28 Nov 2024 00:48:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            d7:6c:95:41:eb:20:7e:79:b5:e8:a6:04:b7:5e:75:a5:89:be:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11C40A54AEA8862C23E5838BA28E2EC6317D1116
        Validity
            Not Before: May  9 13:11:58 2024 GMT
            Not After : May  8 13:16:58 2025 GMT
        Subject: CN=69B35978A054EB1FE24C7B7AA86C1C8DA749AB46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:e4:69:62:cd:cd:1b:35:bb:ac:17:51:df:ba:
                    85:49:29:f5:73:5f:41:82:62:bc:b6:6c:da:97:fe:
                    87:52:74:e2:c4:36:de:4e:95:22:2c:ef:20:96:0a:
                    f0:b9:22:e7:55:03:b8:ff:9c:0b:6d:33:76:ed:39:
                    8d:05:86:ec:cb:2f:90:d4:00:0f:70:63:16:71:11:
                    8a:ac:7f:8c:d8:69:59:f3:6b:78:1a:92:b3:73:52:
                    0b:f2:db:09:d6:6e:94:4c:b3:58:12:cd:dc:54:cd:
                    d7:e6:05:3e:3f:ce:9f:cb:e0:39:91:1b:cc:08:76:
                    93:97:9f:96:c9:b1:d0:30:90:97:08:91:f6:e9:b8:
                    16:cb:36:2a:ea:89:e3:0f:01:6e:fa:41:a9:fb:08:
                    59:48:99:ce:3a:e2:98:7d:5c:ed:fb:86:03:14:b3:
                    5e:e8:06:5f:4f:57:aa:7e:13:89:10:6e:f7:64:31:
                    61:ae:1e:93:2c:7b:0e:bd:d6:a6:0d:0e:7d:0e:55:
                    52:f0:5f:35:05:6d:02:89:13:88:f2:fc:93:1e:1b:
                    bc:bc:4e:3b:d1:a0:e0:f0:b5:25:2f:d6:ac:3c:94:
                    bc:5e:58:48:96:54:a3:b7:78:d7:ce:7d:a3:0f:18:
                    51:6a:f1:72:1c:64:d2:c3:f6:fb:e3:ca:85:79:8e:
                    72:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:B3:59:78:A0:54:EB:1F:E2:4C:7B:7A:A8:6C:1C:8D:A7:49:AB:46
            X509v3 Authority Key Identifier:
                keyid:11:C4:0A:54:AE:A8:86:2C:23:E5:83:8B:A2:8E:2E:C6:31:7D:11:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/11C40A54AEA8862C23E5838BA28E2EC6317D1116.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11C40A54AEA8862C23E5838BA28E2EC6317D1116.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/3139312e33372e3232322e302f32342d3234203d3e20323733333039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.37.222.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8c:c7:36:cb:f5:f8:f3:e7:a5:95:ef:5a:8e:7d:f2:1c:e4:d6:
         8a:2d:01:ba:95:5b:bf:29:ee:3d:4c:21:06:e2:c0:2c:e5:e6:
         91:26:e0:29:cd:d1:83:e3:41:f5:49:e1:bb:ed:7c:d1:9d:5d:
         75:ab:de:da:b0:23:24:df:7b:35:ed:c9:43:32:f7:43:72:fc:
         17:9a:52:f6:d4:2b:0a:08:1d:57:f4:fd:3e:f4:29:65:86:24:
         d0:7b:75:fa:54:ac:18:dc:5e:16:0b:c7:8f:7a:12:39:c1:d3:
         48:e3:ef:e8:28:95:5c:e2:b1:2d:d2:6f:6c:8c:5d:72:33:7e:
         d8:ed:c7:27:1d:a0:fc:84:76:70:c0:92:dc:89:fe:aa:97:31:
         b9:9c:3a:59:b4:5c:4a:68:2a:c4:e8:fc:7f:6c:e0:0c:3a:28:
         bc:9a:de:7e:f8:d1:4a:31:af:48:05:07:92:19:ff:cc:c8:ed:
         ce:9e:1d:68:fc:4d:7f:37:b6:c6:14:42:62:e8:0b:32:32:61:
         d9:ef:10:df:b7:31:c9:fd:8d:5c:9a:64:97:9d:97:e6:a0:38:
         c2:a5:4b:8e:34:ad:7f:34:2f:1b:c2:96:71:ba:b6:df:74:2f:
         e0:ce:20:7f:8d:bd:a8:65:dc:51:df:de:3d:44:d8:b4:56:58:
         ec:3e:76:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 02:16:04 2024 by rpki-client on console-fra.rpki-client.org