Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/3139312e33372e3232332e302f32342d3234203d3e20323733333039.roa
File:                     3139312e33372e3232332e302f32342d3234203d3e20323733333039.roa (raw, json)
Hash identifier:          KqHtabQgdvM6eil51jBABSemMUGHdJtJZrnmup/k2fA=
Subject key identifier:   76:69:A8:C9:DE:26:3E:AC:04:90:BA:26:34:0B:A6:50:D2:D3:63:4F
Certificate issuer:       /CN=11C40A54AEA8862C23E5838BA28E2EC6317D1116
Certificate serial:       7A17B8D71B394D17F8B160D234435914ADC931FF
Authority key identifier: 11:C4:0A:54:AE:A8:86:2C:23:E5:83:8B:A2:8E:2E:C6:31:7D:11:16
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11C40A54AEA8862C23E5838BA28E2EC6317D1116.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/3139312e33372e3232332e302f32342d3234203d3e20323733333039.roa
Signing time:             Thu 09 May 2024 13:21:38 +0000
ROA not before:           Thu 09 May 2024 13:16:38 +0000
ROA not after:            Thu 08 May 2025 13:21:38 +0000
asID:                     273309
IP address blocks:        191.37.223.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/11C40A54AEA8862C23E5838BA28E2EC6317D1116.crl
                          rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/11C40A54AEA8862C23E5838BA28E2EC6317D1116.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11C40A54AEA8862C23E5838BA28E2EC6317D1116.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:17:b8:d7:1b:39:4d:17:f8:b1:60:d2:34:43:59:14:ad:c9:31:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11C40A54AEA8862C23E5838BA28E2EC6317D1116
        Validity
            Not Before: May  9 13:16:38 2024 GMT
            Not After : May  8 13:21:38 2025 GMT
        Subject: CN=7669A8C9DE263EAC0490BA26340BA650D2D3634F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:eb:0f:90:24:dd:d7:6c:0d:8c:3a:25:33:51:
                    9a:77:aa:aa:33:b8:f4:81:e7:98:94:d4:46:70:d9:
                    f8:ce:db:92:b4:a7:9a:ad:7a:08:00:c5:2c:4c:ed:
                    a3:d1:41:94:81:27:73:3b:fa:1b:75:62:86:b3:1b:
                    85:bf:a0:b5:95:15:a8:f0:c1:c9:5e:46:31:03:66:
                    c8:b0:aa:3f:e2:85:1d:78:4b:39:a1:51:c3:fd:3f:
                    b1:5c:17:52:73:cf:87:fb:46:6c:d6:9b:a9:9f:5e:
                    1c:65:ee:b8:82:a8:cf:f2:90:2e:e2:34:84:4f:2d:
                    9f:28:3c:e8:d4:de:d8:da:56:33:28:56:bd:ff:38:
                    68:eb:09:5e:6b:35:50:50:9c:a7:42:8e:17:24:6d:
                    40:32:16:6e:c4:68:6f:52:2a:b1:59:17:27:a5:02:
                    2e:63:17:69:c1:af:a3:8e:55:65:1c:95:89:f6:11:
                    28:64:7d:b1:ef:df:eb:bc:60:b1:ae:b3:62:20:91:
                    0d:24:6c:06:d6:b0:6e:dc:6e:dc:22:80:d2:fa:b5:
                    3e:58:54:cd:9b:36:5d:0d:1e:b4:b5:eb:27:a1:10:
                    76:c0:a3:da:ef:e9:23:b7:26:8a:21:c5:91:61:d5:
                    fe:a8:92:0a:b0:57:17:5e:52:7a:2c:a7:51:06:0b:
                    82:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:69:A8:C9:DE:26:3E:AC:04:90:BA:26:34:0B:A6:50:D2:D3:63:4F
            X509v3 Authority Key Identifier:
                keyid:11:C4:0A:54:AE:A8:86:2C:23:E5:83:8B:A2:8E:2E:C6:31:7D:11:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/11C40A54AEA8862C23E5838BA28E2EC6317D1116.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11C40A54AEA8862C23E5838BA28E2EC6317D1116.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/3139312e33372e3232332e302f32342d3234203d3e20323733333039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.37.223.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9e:b9:2b:6e:71:da:35:2f:36:2d:4b:66:be:06:fa:e7:c1:8f:
         f7:db:a0:29:4e:dc:3d:20:ef:39:b3:92:74:9e:d8:f0:f6:ad:
         95:1b:c4:7d:23:b4:6e:cc:b2:03:88:b1:a7:ca:4a:bb:bf:f5:
         4b:eb:e3:da:00:e4:47:01:5b:a0:aa:aa:e9:77:43:cf:07:e6:
         79:63:54:20:e7:7f:c7:d5:e9:a4:2b:26:76:20:be:52:ba:d4:
         61:cf:cc:2c:ab:f0:c4:1b:bf:6f:8b:d7:88:fb:f7:84:ea:0b:
         be:50:0c:51:fb:3d:40:31:74:32:40:01:b6:10:aa:10:91:51:
         15:3c:8c:ea:a7:38:cf:ac:ef:b3:50:a7:22:01:61:96:4e:ae:
         72:35:0d:d6:a4:43:61:ae:a5:9c:89:ea:c3:14:5a:72:0f:05:
         a5:61:51:5e:5c:13:03:8b:9d:e1:45:34:68:44:83:8f:7d:33:
         40:57:9e:82:08:0d:84:59:c3:65:0a:b5:b5:a4:7a:86:b5:c4:
         ea:bf:bb:91:c9:21:ad:e9:de:7d:53:8d:26:8b:30:43:39:03:
         03:85:e4:39:5f:10:e1:2c:9a:e0:d2:b2:e7:7d:fa:5d:09:8a:
         ec:f2:9e:e5:9a:b5:ba:55:2f:28:97:b0:1a:23:5e:93:c7:1a:
         d5:9f:87:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 08:42:04 2024 by rpki-client on console-fra.rpki-client.org