Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DjA9fcqDpUMGuBESZGGN1Zw3j4aniGs35LGvbVcVsrwS/0/3139312e33362e3234302e302f32302d3234203d3e20323633333435.roa
File:                     3139312e33362e3234302e302f32302d3234203d3e20323633333435.roa (raw, json)
Hash identifier:          zoTdh+1NCDTw7iojt4DbnBNlq8IiTlzliewkDdVbHmA=
Subject key identifier:   01:93:98:47:17:96:B4:99:1B:41:37:E5:6D:6A:48:37:C9:47:CC:36
Certificate issuer:       /CN=DD5E4267AF3777DCED3F61422AAC5AFF1F1A4BE1
Certificate serial:       7F2B6AD61D38EAAEF0C518D867BA1B37080A4044
Authority key identifier: DD:5E:42:67:AF:37:77:DC:ED:3F:61:42:2A:AC:5A:FF:1F:1A:4B:E1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DD5E4267AF3777DCED3F61422AAC5AFF1F1A4BE1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DjA9fcqDpUMGuBESZGGN1Zw3j4aniGs35LGvbVcVsrwS/0/3139312e33362e3234302e302f32302d3234203d3e20323633333435.roa
Signing time:             Sat 15 Apr 2023 21:56:04 +0000
ROA not before:           Sat 15 Apr 2023 21:51:04 +0000
ROA not after:            Sat 13 Apr 2024 21:56:04 +0000
asID:                     263345
IP address blocks:        191.36.240.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DjA9fcqDpUMGuBESZGGN1Zw3j4aniGs35LGvbVcVsrwS/0/DD5E4267AF3777DCED3F61422AAC5AFF1F1A4BE1.crl
                          rsync://rpki-repo.registro.br/repo/DjA9fcqDpUMGuBESZGGN1Zw3j4aniGs35LGvbVcVsrwS/0/DD5E4267AF3777DCED3F61422AAC5AFF1F1A4BE1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DD5E4267AF3777DCED3F61422AAC5AFF1F1A4BE1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 20 Jul 2023 14:51:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:2b:6a:d6:1d:38:ea:ae:f0:c5:18:d8:67:ba:1b:37:08:0a:40:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DD5E4267AF3777DCED3F61422AAC5AFF1F1A4BE1
        Validity
            Not Before: Apr 15 21:51:04 2023 GMT
            Not After : Apr 13 21:56:04 2024 GMT
        Subject: CN=019398471796B4991B4137E56D6A4837C947CC36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:3c:6a:d7:00:63:9f:a6:53:85:26:b2:81:10:
                    0f:ce:05:a6:51:41:0b:92:7f:1a:04:8a:42:9d:53:
                    c4:7d:7f:da:38:ba:3d:7a:20:4e:ce:fb:e2:f4:1e:
                    aa:39:e7:4d:84:0e:c2:d7:57:5d:52:0a:a8:b8:e1:
                    b0:02:71:bb:89:c3:87:bd:8f:b4:f2:73:3b:16:08:
                    4b:2a:21:15:8e:cf:27:f9:f2:5f:34:ea:de:bf:ed:
                    17:fc:66:3f:8f:1e:fb:48:16:20:af:6c:8a:2b:74:
                    57:6e:1e:46:4f:10:43:84:ab:d7:f3:1a:01:52:b6:
                    d9:a6:ae:94:b9:1e:cd:07:1b:3c:c3:4a:ab:f6:62:
                    e8:e5:0c:ee:50:22:e5:e6:f1:66:97:7a:27:d7:e0:
                    ee:1f:40:bf:5e:a7:2b:f1:66:11:0d:aa:10:d2:25:
                    86:84:88:ce:b6:47:f9:ce:5e:c3:f7:91:3e:89:48:
                    36:22:bf:5c:66:eb:bd:ab:f4:f5:17:82:67:df:f6:
                    11:2a:62:2e:a1:02:4f:e4:25:c7:5a:8c:1c:ac:56:
                    35:cf:6d:39:79:79:5e:8c:13:50:eb:78:a2:b1:17:
                    00:9a:49:70:49:0f:a1:8a:77:eb:bc:cb:71:6a:3e:
                    23:e2:be:81:47:f8:7f:9b:8b:c7:8f:8e:4a:d7:d3:
                    a9:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:93:98:47:17:96:B4:99:1B:41:37:E5:6D:6A:48:37:C9:47:CC:36
            X509v3 Authority Key Identifier:
                keyid:DD:5E:42:67:AF:37:77:DC:ED:3F:61:42:2A:AC:5A:FF:1F:1A:4B:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DjA9fcqDpUMGuBESZGGN1Zw3j4aniGs35LGvbVcVsrwS/0/DD5E4267AF3777DCED3F61422AAC5AFF1F1A4BE1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DD5E4267AF3777DCED3F61422AAC5AFF1F1A4BE1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DjA9fcqDpUMGuBESZGGN1Zw3j4aniGs35LGvbVcVsrwS/0/3139312e33362e3234302e302f32302d3234203d3e20323633333435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.36.240.0/20

    Signature Algorithm: sha256WithRSAEncryption
         93:94:1a:e3:18:2b:42:4b:a7:4a:60:bc:cb:61:11:ed:8a:72:
         1b:1f:a2:f3:53:d4:16:2d:91:0a:17:fe:47:0f:c7:38:fc:61:
         a4:a6:b1:fb:b8:7b:d9:0a:91:a1:98:cd:c2:8f:3d:12:02:c4:
         40:19:49:91:c0:c8:36:2a:48:c5:03:82:57:ba:2b:71:c4:77:
         be:2a:ef:9f:6d:18:a4:ff:2c:58:e2:d3:ce:fc:dd:69:28:72:
         c0:9e:60:f7:5d:c0:83:10:f1:05:52:27:a6:a6:6b:86:c4:8a:
         1a:44:ce:bd:57:21:7d:1e:bc:c9:84:37:c5:52:cb:93:78:57:
         43:fb:ea:85:23:18:11:58:c7:b9:2e:7d:33:1c:df:3d:cf:7b:
         e7:51:1c:5f:1c:19:4b:69:89:28:cb:a7:d9:9b:11:e4:c7:8d:
         36:8d:4a:9b:4a:2b:c8:a8:b7:f3:ac:b8:03:df:5b:54:b5:63:
         0a:5a:b0:fa:f0:b5:01:a1:b5:4d:12:04:2f:92:38:60:b0:a8:
         e1:c8:38:85:55:c4:c5:40:45:bb:06:95:a9:45:81:ca:50:09:
         75:95:b1:ba:50:b0:e0:ae:99:33:b9:e9:3f:86:68:64:ce:90:
         7f:6b:61:1b:ae:1c:7e:72:b9:ad:91:d8:f3:b0:08:6d:ba:20:
         c4:65:3f:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:16:12 2023 by rpki-client on console-ams.rpki-client.org