Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ELnYhLVpUKUPfNiEYnfytHcTFQGzbr3NpwbNoQQ6tiCH/1/3139312e3234322e35362e302f32312d3234203d3e20323633343732.roa
File:                     3139312e3234322e35362e302f32312d3234203d3e20323633343732.roa (raw, json)
Hash identifier:          OPLiqAZmjV3DMxvDMYfLOKOnZ6fVS+7IKtLjBCdhOmc=
Subject key identifier:   9D:62:BA:A7:FB:94:E0:47:FC:E7:62:1E:87:AC:6E:92:E1:CC:BF:CD
Certificate issuer:       /CN=1C6519ED9E5FBAD331082D21DE33E5958EDD80C4
Certificate serial:       7683B2113043956A23218340BAC8CB8AAC399325
Authority key identifier: 1C:65:19:ED:9E:5F:BA:D3:31:08:2D:21:DE:33:E5:95:8E:DD:80:C4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1C6519ED9E5FBAD331082D21DE33E5958EDD80C4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ELnYhLVpUKUPfNiEYnfytHcTFQGzbr3NpwbNoQQ6tiCH/1/3139312e3234322e35362e302f32312d3234203d3e20323633343732.roa
Signing time:             Thu 04 Apr 2024 10:44:57 +0000
ROA not before:           Thu 04 Apr 2024 10:39:57 +0000
ROA not after:            Thu 03 Apr 2025 10:44:57 +0000
asID:                     263472
IP address blocks:        191.242.56.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ELnYhLVpUKUPfNiEYnfytHcTFQGzbr3NpwbNoQQ6tiCH/1/1C6519ED9E5FBAD331082D21DE33E5958EDD80C4.crl
                          rsync://rpki-repo.registro.br/repo/ELnYhLVpUKUPfNiEYnfytHcTFQGzbr3NpwbNoQQ6tiCH/1/1C6519ED9E5FBAD331082D21DE33E5958EDD80C4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1C6519ED9E5FBAD331082D21DE33E5958EDD80C4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 22:33:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:83:b2:11:30:43:95:6a:23:21:83:40:ba:c8:cb:8a:ac:39:93:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1C6519ED9E5FBAD331082D21DE33E5958EDD80C4
        Validity
            Not Before: Apr  4 10:39:57 2024 GMT
            Not After : Apr  3 10:44:57 2025 GMT
        Subject: CN=9D62BAA7FB94E047FCE7621E87AC6E92E1CCBFCD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:eb:43:98:e6:86:43:2a:a1:e5:6d:85:4e:2c:
                    bb:c1:ba:58:0e:3a:68:e2:93:a2:2d:da:5a:79:6e:
                    35:ad:31:aa:72:9f:4f:4d:99:67:ff:ac:1f:78:b5:
                    00:30:fb:cb:8e:ed:c3:4d:2f:79:9c:01:4d:97:bb:
                    e0:fc:8c:31:0c:c9:e3:15:cc:b8:29:01:fe:71:d2:
                    97:5a:83:c6:35:c0:7b:2a:c2:27:a2:68:24:c2:11:
                    3a:84:fe:46:0a:a9:ae:ac:7b:7a:a7:d0:15:5c:86:
                    26:a7:1e:25:49:21:ce:8e:70:8a:97:08:57:27:ca:
                    8e:43:f1:68:21:95:74:9d:b6:e5:37:9a:87:f9:44:
                    a4:b1:05:4b:3e:d3:e5:a1:23:7c:f5:f1:32:16:e8:
                    b2:be:d5:d7:87:06:d7:6b:43:e6:eb:fb:1f:7a:5d:
                    f8:d9:73:c7:bd:0e:de:13:ce:a0:ff:bd:ba:75:39:
                    4f:39:a0:44:ab:9a:08:75:f3:7d:58:98:ab:bc:df:
                    6f:4f:bf:ef:27:b5:4b:f5:21:f3:c6:2b:d2:77:2b:
                    03:fb:ba:ba:a1:a6:bf:1d:c7:ac:f9:42:61:47:97:
                    86:13:50:ca:b2:da:3b:2a:34:a3:15:95:b5:e0:96:
                    94:d7:ea:86:8a:6e:e4:56:72:3e:7f:03:b4:1d:a1:
                    c4:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:62:BA:A7:FB:94:E0:47:FC:E7:62:1E:87:AC:6E:92:E1:CC:BF:CD
            X509v3 Authority Key Identifier:
                keyid:1C:65:19:ED:9E:5F:BA:D3:31:08:2D:21:DE:33:E5:95:8E:DD:80:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ELnYhLVpUKUPfNiEYnfytHcTFQGzbr3NpwbNoQQ6tiCH/1/1C6519ED9E5FBAD331082D21DE33E5958EDD80C4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1C6519ED9E5FBAD331082D21DE33E5958EDD80C4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ELnYhLVpUKUPfNiEYnfytHcTFQGzbr3NpwbNoQQ6tiCH/1/3139312e3234322e35362e302f32312d3234203d3e20323633343732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.242.56.0/21

    Signature Algorithm: sha256WithRSAEncryption
         24:93:09:46:97:ec:15:d6:a9:7d:25:b0:6b:95:50:1e:63:47:
         64:07:fd:50:53:7f:f9:fc:0d:a8:52:a1:0f:03:d8:96:3f:5c:
         73:dc:89:71:02:d8:fa:2d:91:9f:6a:87:1b:73:a5:be:08:d9:
         1f:a7:e5:41:a9:6f:08:88:55:41:e6:f8:cf:2a:34:e4:8b:fb:
         ab:ec:06:70:9f:96:60:56:d3:31:74:88:4f:6c:a9:e3:31:fc:
         50:cb:42:de:06:35:14:a8:cd:3c:6b:6a:65:cf:bf:c3:83:22:
         63:db:66:1a:fb:42:bd:4b:c1:f9:64:c3:e2:a0:0f:74:e3:90:
         0a:5b:a3:63:77:bb:6a:8a:8a:0b:f3:85:e2:11:69:ad:f0:7a:
         b5:ef:0f:57:39:e6:90:09:07:7e:a3:75:a3:73:14:28:b2:5f:
         70:b1:b6:3a:af:d7:20:8d:3d:70:d7:dd:34:bd:1b:7d:9d:af:
         7b:32:a2:e3:a1:ed:57:64:d0:09:ce:73:08:ab:3e:75:f4:61:
         99:1e:5c:83:a5:a3:37:33:09:65:32:4f:14:fb:d0:d1:d3:7a:
         06:73:5c:8c:e0:c1:de:8d:c9:46:79:21:98:b1:70:df:08:6a:
         6d:16:c4:1f:ca:d2:23:c6:a3:fd:77:64:ae:d2:08:18:0a:57:
         08:e3:1d:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 23:53:11 2024 by rpki-client on console-ams.rpki-client.org