Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E2NusR2ijw6G3YNiMEF333MRkoDTDbWggx7YKfVrfUmw/1/3138392e39312e39362e302f31392d3234203d3e20323632353839.roa
File:                     3138392e39312e39362e302f31392d3234203d3e20323632353839.roa (raw, json)
Hash identifier:          k28sMLMFqfoEW9Z+f9tgGs/HAWSebwSvd/UwxYN6Djw=
Subject key identifier:   48:5D:76:F5:41:3E:0D:8D:A6:92:74:4F:A4:24:42:D4:0D:E3:E7:CC
Certificate issuer:       /CN=BACB501EDCAB377D2343D4379062CDF97EA26F66
Certificate serial:       3FDE0825F4DB82E55077E866BEBBE54FE17BF7A6
Authority key identifier: BA:CB:50:1E:DC:AB:37:7D:23:43:D4:37:90:62:CD:F9:7E:A2:6F:66
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BACB501EDCAB377D2343D4379062CDF97EA26F66.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E2NusR2ijw6G3YNiMEF333MRkoDTDbWggx7YKfVrfUmw/1/3138392e39312e39362e302f31392d3234203d3e20323632353839.roa
Signing time:             Fri 05 Apr 2024 03:32:30 +0000
ROA not before:           Fri 05 Apr 2024 03:27:30 +0000
ROA not after:            Fri 04 Apr 2025 03:32:30 +0000
asID:                     262589
IP address blocks:        189.91.96.0/19 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/E2NusR2ijw6G3YNiMEF333MRkoDTDbWggx7YKfVrfUmw/1/BACB501EDCAB377D2343D4379062CDF97EA26F66.crl
                          rsync://rpki-repo.registro.br/repo/E2NusR2ijw6G3YNiMEF333MRkoDTDbWggx7YKfVrfUmw/1/BACB501EDCAB377D2343D4379062CDF97EA26F66.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BACB501EDCAB377D2343D4379062CDF97EA26F66.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 16:26:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:de:08:25:f4:db:82:e5:50:77:e8:66:be:bb:e5:4f:e1:7b:f7:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BACB501EDCAB377D2343D4379062CDF97EA26F66
        Validity
            Not Before: Apr  5 03:27:30 2024 GMT
            Not After : Apr  4 03:32:30 2025 GMT
        Subject: CN=485D76F5413E0D8DA692744FA42442D40DE3E7CC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:d9:bc:87:fa:91:4e:32:98:d1:71:1b:55:bd:
                    32:d5:40:69:69:e9:8e:13:ae:3c:e0:f7:12:57:34:
                    5f:a7:72:e9:73:d7:d9:b5:aa:f7:be:97:c0:17:eb:
                    74:9d:0f:07:7a:25:08:25:f5:91:13:c4:12:d7:64:
                    65:f0:c9:a6:2c:94:a6:fd:9b:11:38:17:08:50:df:
                    70:51:27:59:0e:8a:25:d9:02:5b:8a:56:5b:b3:16:
                    c3:6a:ba:d3:1f:cf:0a:e0:ea:41:d5:6e:a2:bb:f8:
                    05:2c:4f:e4:42:79:ce:02:7c:57:1d:c1:0f:9a:bf:
                    97:90:d8:aa:f0:23:5b:b8:29:81:b3:08:df:c0:d3:
                    f6:40:06:5d:b5:14:30:a0:68:31:15:a8:b5:5c:ee:
                    4c:fd:f5:e7:54:3a:0e:9b:4a:29:e0:46:90:c1:25:
                    1a:c0:1a:a2:04:af:3c:49:13:34:f9:9c:5c:56:c5:
                    79:f6:8b:cb:52:a1:ac:49:90:2c:c6:17:a0:e4:a9:
                    01:86:63:e6:88:bf:db:c6:37:bb:27:6d:f5:53:04:
                    00:98:51:c6:a6:6d:28:89:8f:2e:e3:b9:bc:f2:32:
                    08:5f:25:80:4f:7b:67:b9:36:72:35:b9:df:4b:e0:
                    bd:47:21:e1:ee:6b:2a:0a:a6:03:97:25:21:bb:4b:
                    45:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:5D:76:F5:41:3E:0D:8D:A6:92:74:4F:A4:24:42:D4:0D:E3:E7:CC
            X509v3 Authority Key Identifier:
                keyid:BA:CB:50:1E:DC:AB:37:7D:23:43:D4:37:90:62:CD:F9:7E:A2:6F:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E2NusR2ijw6G3YNiMEF333MRkoDTDbWggx7YKfVrfUmw/1/BACB501EDCAB377D2343D4379062CDF97EA26F66.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BACB501EDCAB377D2343D4379062CDF97EA26F66.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E2NusR2ijw6G3YNiMEF333MRkoDTDbWggx7YKfVrfUmw/1/3138392e39312e39362e302f31392d3234203d3e20323632353839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.91.96.0/19

    Signature Algorithm: sha256WithRSAEncryption
         b3:07:75:25:94:33:f2:18:0c:cd:4e:ea:68:49:2c:d7:83:f0:
         f1:33:1f:87:9b:ae:82:c3:0c:59:c8:00:44:e3:99:11:db:b6:
         8e:6c:15:99:ca:e3:d0:89:25:ba:ad:eb:e5:f8:e4:03:52:7a:
         6c:90:65:37:e4:7c:4e:5b:93:ab:bf:36:d0:30:e7:31:f2:d6:
         58:a4:e8:f1:77:90:2d:52:63:c4:aa:8b:d6:b3:00:bc:ab:e4:
         37:ee:4d:c9:75:55:0a:95:00:2a:73:d9:8a:6e:c8:2b:e5:f8:
         6a:11:e9:1f:49:ff:76:9f:fd:e4:e6:3a:fa:15:b6:be:ab:f3:
         5d:d9:22:9e:40:0d:a8:62:cf:cf:b9:ec:41:0a:bb:69:91:19:
         9b:14:f5:14:1f:fb:35:c8:a5:be:6d:9d:53:37:65:0d:13:6d:
         1f:5c:2b:d5:c7:5d:7f:a2:f1:47:8a:b5:0c:d4:1f:ee:55:52:
         13:32:d9:ef:b8:c1:9f:ec:27:03:16:e2:b0:ac:63:dd:95:63:
         1e:89:c5:32:de:b3:d3:08:7c:e3:94:fd:8c:fb:49:a5:d0:d0:
         3b:cf:eb:7c:b5:61:47:ea:ec:3e:25:3c:df:41:34:32:a8:a3:
         bf:68:76:4f:da:8b:6d:ee:ff:f0:b0:6a:ff:c9:69:84:5f:2e:
         ea:e5:98:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 17:08:26 2024 by rpki-client on console-ams.rpki-client.org