Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E2NusR2ijw6G3YNiMEF333MRkoDTDbWggx7YKfVrfUmw/0/3138392e39312e39362e302f31392d3234203d3e20323632353839.roa
File:                     3138392e39312e39362e302f31392d3234203d3e20323632353839.roa (raw, json)
Hash identifier:          l/h1FWF5pVO84lEpMu2mDKErJ3zEMh2CLgAGvTQIMyw=
Subject key identifier:   73:C9:62:73:47:C6:34:32:2F:BC:ED:B7:C3:99:3E:5D:A2:72:93:93
Certificate issuer:       /CN=F44EDF36C881BC97A766BDEEFF070251613E095D
Certificate serial:       7532E2E3B5236C4FD8FDE182823FEA430F43326D
Authority key identifier: F4:4E:DF:36:C8:81:BC:97:A7:66:BD:EE:FF:07:02:51:61:3E:09:5D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F44EDF36C881BC97A766BDEEFF070251613E095D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E2NusR2ijw6G3YNiMEF333MRkoDTDbWggx7YKfVrfUmw/0/3138392e39312e39362e302f31392d3234203d3e20323632353839.roa
Signing time:             Thu 30 Nov 2023 22:19:20 +0000
ROA not before:           Thu 30 Nov 2023 22:14:20 +0000
ROA not after:            Thu 28 Nov 2024 22:19:20 +0000
asID:                     262589
IP address blocks:        189.91.96.0/19 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/E2NusR2ijw6G3YNiMEF333MRkoDTDbWggx7YKfVrfUmw/0/F44EDF36C881BC97A766BDEEFF070251613E095D.crl
                          rsync://rpki-repo.registro.br/repo/E2NusR2ijw6G3YNiMEF333MRkoDTDbWggx7YKfVrfUmw/0/F44EDF36C881BC97A766BDEEFF070251613E095D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F44EDF36C881BC97A766BDEEFF070251613E095D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 29 Mar 2024 10:31:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:32:e2:e3:b5:23:6c:4f:d8:fd:e1:82:82:3f:ea:43:0f:43:32:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F44EDF36C881BC97A766BDEEFF070251613E095D
        Validity
            Not Before: Nov 30 22:14:20 2023 GMT
            Not After : Nov 28 22:19:20 2024 GMT
        Subject: CN=73C9627347C634322FBCEDB7C3993E5DA2729393
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:19:7f:e0:18:07:83:98:05:7d:31:6c:3b:84:
                    b1:4a:5d:78:16:c2:9a:f7:93:a5:6b:4c:69:34:f2:
                    33:af:e2:25:f2:9d:6e:5b:a5:3f:46:2d:2f:53:e3:
                    72:7d:b7:3a:27:c1:b4:15:43:b7:f0:55:a5:3c:fc:
                    fe:7a:9b:51:83:84:93:d8:1f:7b:60:fd:93:47:16:
                    82:d5:82:7d:26:9f:27:d8:a7:aa:b8:70:9d:be:bf:
                    f7:6a:8a:4d:bc:32:bb:80:da:96:72:52:f9:cb:7e:
                    5b:ed:b3:b4:6a:11:b8:55:1f:b0:b7:47:55:23:4b:
                    40:71:92:2e:29:84:bd:8d:63:63:61:e5:50:a0:90:
                    0e:d6:df:89:bd:ba:c4:55:83:1a:0c:02:31:14:e6:
                    65:13:e0:23:5a:37:77:ee:4a:ac:b7:15:cf:69:79:
                    0b:88:a1:41:03:18:67:36:c8:96:12:21:4a:23:8b:
                    e8:5c:c7:da:e0:ee:18:04:1c:6e:ff:37:c3:fa:54:
                    a1:6a:85:96:3f:45:6b:00:95:b3:0f:c1:34:24:a3:
                    ae:0e:1a:9d:fa:62:de:51:97:a7:a6:ae:e3:a3:c3:
                    12:08:90:c2:04:ff:2e:0f:36:ef:cf:1f:5d:97:f8:
                    7f:f3:bc:ab:11:0e:f6:39:fd:86:ba:8c:0f:c2:d0:
                    78:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:C9:62:73:47:C6:34:32:2F:BC:ED:B7:C3:99:3E:5D:A2:72:93:93
            X509v3 Authority Key Identifier:
                keyid:F4:4E:DF:36:C8:81:BC:97:A7:66:BD:EE:FF:07:02:51:61:3E:09:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E2NusR2ijw6G3YNiMEF333MRkoDTDbWggx7YKfVrfUmw/0/F44EDF36C881BC97A766BDEEFF070251613E095D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F44EDF36C881BC97A766BDEEFF070251613E095D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E2NusR2ijw6G3YNiMEF333MRkoDTDbWggx7YKfVrfUmw/0/3138392e39312e39362e302f31392d3234203d3e20323632353839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.91.96.0/19

    Signature Algorithm: sha256WithRSAEncryption
         81:b8:ae:c8:03:4f:5b:38:b2:14:bd:9d:fc:b8:75:81:85:d0:
         66:a0:c8:77:b5:73:6c:16:7b:51:5d:84:ce:27:b3:59:67:8b:
         04:e0:f5:6d:67:af:ec:9b:df:77:55:f4:d7:8f:64:a6:58:2e:
         e2:a9:13:00:13:ec:7f:ba:db:d0:fd:96:72:eb:48:6c:87:ea:
         ce:02:4a:ae:c3:15:76:aa:c9:f7:32:da:1e:8d:ca:bc:15:d1:
         a3:2b:5c:a4:a5:5e:fc:7a:14:ec:3e:d8:f1:4d:ce:dd:77:bc:
         1f:a7:30:87:ce:3b:5c:93:9c:56:b0:53:55:77:67:31:08:2a:
         f6:3e:1c:70:84:41:08:83:ab:89:df:ad:ba:0a:f1:df:52:be:
         77:72:ee:74:23:2e:4a:60:75:c8:eb:13:96:26:74:e5:e9:3d:
         e4:b2:bb:3e:e4:ad:d6:ea:39:31:53:04:e7:1b:95:a3:18:3f:
         f8:26:82:81:45:7f:ed:49:06:a8:e7:6f:a5:3a:1a:fc:c6:9c:
         b7:1d:f1:58:b0:85:2b:b5:18:da:04:a8:26:ea:26:fc:df:68:
         62:60:4d:c7:e6:c0:d8:26:60:b2:85:3c:66:92:22:c5:4b:76:
         55:88:6a:e5:7d:ca:85:6f:92:77:23:5c:09:1a:fc:c1:d8:0f:
         75:bf:c4:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 28 10:47:38 2024 by rpki-client on console-ams.rpki-client.org