Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DeDcngWXnuqxGK6ofU9T1V75NtodDJrAEhMDcVrzch5g/1/3139312e372e382e302f32312d3234203d3e20323632353935.roa
File:                     3139312e372e382e302f32312d3234203d3e20323632353935.roa (raw, json)
Hash identifier:          u8HrWiNbQ+lckiFxrMPjegCtPADBXCSjHNr2q0cvVFI=
Subject key identifier:   61:96:12:88:C9:76:0B:B4:96:7A:9C:88:DE:50:85:DF:25:80:95:21
Certificate issuer:       /CN=4371007B3B7771C6CF4FBE4A71B3B946B841AD63
Certificate serial:       08AC96CAA3C47F14668688AFF67C94D7EDF2A8E9
Authority key identifier: 43:71:00:7B:3B:77:71:C6:CF:4F:BE:4A:71:B3:B9:46:B8:41:AD:63
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4371007B3B7771C6CF4FBE4A71B3B946B841AD63.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DeDcngWXnuqxGK6ofU9T1V75NtodDJrAEhMDcVrzch5g/1/3139312e372e382e302f32312d3234203d3e20323632353935.roa
Signing time:             Wed 03 Apr 2024 18:30:05 +0000
ROA not before:           Wed 03 Apr 2024 18:25:05 +0000
ROA not after:            Wed 02 Apr 2025 18:30:05 +0000
asID:                     262595
IP address blocks:        191.7.8.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DeDcngWXnuqxGK6ofU9T1V75NtodDJrAEhMDcVrzch5g/1/4371007B3B7771C6CF4FBE4A71B3B946B841AD63.crl
                          rsync://rpki-repo.registro.br/repo/DeDcngWXnuqxGK6ofU9T1V75NtodDJrAEhMDcVrzch5g/1/4371007B3B7771C6CF4FBE4A71B3B946B841AD63.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4371007B3B7771C6CF4FBE4A71B3B946B841AD63.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 23:27:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:ac:96:ca:a3:c4:7f:14:66:86:88:af:f6:7c:94:d7:ed:f2:a8:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4371007B3B7771C6CF4FBE4A71B3B946B841AD63
        Validity
            Not Before: Apr  3 18:25:05 2024 GMT
            Not After : Apr  2 18:30:05 2025 GMT
        Subject: CN=61961288C9760BB4967A9C88DE5085DF25809521
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:4e:92:8a:21:0a:14:32:b9:ee:3a:fe:b3:1c:
                    89:02:9e:50:14:2f:a0:7c:43:92:5e:a1:0f:f5:f9:
                    f3:a5:4c:f8:2d:ca:3a:a4:30:58:72:e3:1d:22:43:
                    81:f2:10:65:9c:d1:ba:b7:25:79:26:57:c9:74:6b:
                    99:b7:b1:be:02:5c:99:8a:d3:28:72:65:d9:15:13:
                    18:51:e9:2c:89:03:cb:bf:b6:7c:2d:8b:e3:76:ea:
                    f1:b5:9f:00:89:48:5e:be:e4:03:c6:a0:28:1a:ae:
                    cd:af:4f:ae:c7:0d:3f:17:76:77:6b:bc:cf:58:f9:
                    a6:77:bb:43:1f:98:41:97:6f:d5:0c:27:28:cf:be:
                    ab:d6:12:48:be:86:72:c3:02:c4:b4:34:f5:1a:f7:
                    c6:e3:cc:fb:b8:a3:d4:14:9a:b5:8d:3c:c5:00:64:
                    3f:ac:dd:e5:02:21:13:74:48:e9:f8:9c:81:e6:d7:
                    8f:e0:f8:03:f6:9d:fc:b1:40:af:d7:32:fd:9f:b3:
                    01:d5:49:68:c8:e3:30:98:38:ef:86:62:32:26:aa:
                    74:ba:2c:68:6d:df:d7:ef:95:48:b5:f1:e8:1a:61:
                    fa:73:e3:f5:5b:e2:1a:51:eb:ee:dd:08:b3:b7:b8:
                    b4:c8:22:a8:12:e5:ca:38:95:7e:44:7e:cb:85:ac:
                    c0:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:96:12:88:C9:76:0B:B4:96:7A:9C:88:DE:50:85:DF:25:80:95:21
            X509v3 Authority Key Identifier:
                keyid:43:71:00:7B:3B:77:71:C6:CF:4F:BE:4A:71:B3:B9:46:B8:41:AD:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DeDcngWXnuqxGK6ofU9T1V75NtodDJrAEhMDcVrzch5g/1/4371007B3B7771C6CF4FBE4A71B3B946B841AD63.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4371007B3B7771C6CF4FBE4A71B3B946B841AD63.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DeDcngWXnuqxGK6ofU9T1V75NtodDJrAEhMDcVrzch5g/1/3139312e372e382e302f32312d3234203d3e20323632353935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.7.8.0/21

    Signature Algorithm: sha256WithRSAEncryption
         2f:26:58:6c:c5:5b:a4:33:e4:a3:57:25:99:01:1e:32:49:86:
         de:c5:17:c9:b9:af:d2:53:57:d0:74:c7:57:7d:e0:06:f1:78:
         45:f4:0f:a3:76:f2:2a:76:eb:63:18:f1:8d:88:73:64:74:5f:
         f6:e8:c7:ff:84:c9:55:ea:06:6f:79:32:fe:04:4a:95:e4:40:
         37:aa:3b:ab:a2:98:91:ca:89:5b:ce:d1:89:78:9e:c4:7e:25:
         12:50:1f:db:e6:b3:eb:1e:4e:a2:57:68:ed:9b:40:27:14:0a:
         18:59:f1:ef:b2:1e:62:07:28:93:3e:1a:97:35:9d:d9:a5:7b:
         65:19:02:35:07:17:c4:5b:3d:9b:29:b4:25:8f:a8:f3:00:74:
         e6:af:59:c7:58:f3:18:65:0b:ee:63:61:96:07:03:25:d4:e8:
         54:83:ee:2f:21:95:09:81:1a:cd:f5:43:05:0a:36:df:62:5c:
         9b:ff:50:1b:fd:24:a6:98:1c:58:1f:e2:5c:a4:80:c4:21:cd:
         c6:2e:79:38:c4:b7:1e:05:0b:ad:9b:41:8b:e4:90:25:96:a3:
         7a:a5:1a:ee:da:b9:b9:10:9d:b3:1f:05:21:78:bb:2c:88:aa:
         9a:d1:50:8e:97:e1:c6:be:25:4b:63:70:86:cc:61:64:db:2a:
         24:49:5a:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:21:11 2024 by rpki-client on console-fra.rpki-client.org