Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Epow7tyDvPA621U7rJpoCiEFF6pWV5m7cWhT9msj4rVH/1/3139312e352e34382e302f32312d3234203d3e20323633353332.roa
File:                     3139312e352e34382e302f32312d3234203d3e20323633353332.roa (raw, json)
Hash identifier:          4KKjNdTOXr38BzieogsNT5dLZvu6jnS/qvihvaDeSw0=
Subject key identifier:   AD:09:5B:2C:CB:D8:02:A0:BA:BA:B1:E1:54:B9:AE:9C:1F:1D:5F:D8
Certificate issuer:       /CN=40024D9137B1E11B244B48E87E69634A33E200A3
Certificate serial:       0DD7FDBBC5EFB4BBB0D5AF4DC777B3DCACAEE85F
Authority key identifier: 40:02:4D:91:37:B1:E1:1B:24:4B:48:E8:7E:69:63:4A:33:E2:00:A3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/40024D9137B1E11B244B48E87E69634A33E200A3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Epow7tyDvPA621U7rJpoCiEFF6pWV5m7cWhT9msj4rVH/1/3139312e352e34382e302f32312d3234203d3e20323633353332.roa
Signing time:             Thu 04 Apr 2024 08:12:44 +0000
ROA not before:           Thu 04 Apr 2024 08:07:44 +0000
ROA not after:            Thu 03 Apr 2025 08:12:44 +0000
asID:                     263532
IP address blocks:        191.5.48.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Epow7tyDvPA621U7rJpoCiEFF6pWV5m7cWhT9msj4rVH/1/40024D9137B1E11B244B48E87E69634A33E200A3.crl
                          rsync://rpki-repo.registro.br/repo/Epow7tyDvPA621U7rJpoCiEFF6pWV5m7cWhT9msj4rVH/1/40024D9137B1E11B244B48E87E69634A33E200A3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/40024D9137B1E11B244B48E87E69634A33E200A3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 14:50:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:d7:fd:bb:c5:ef:b4:bb:b0:d5:af:4d:c7:77:b3:dc:ac:ae:e8:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40024D9137B1E11B244B48E87E69634A33E200A3
        Validity
            Not Before: Apr  4 08:07:44 2024 GMT
            Not After : Apr  3 08:12:44 2025 GMT
        Subject: CN=AD095B2CCBD802A0BABAB1E154B9AE9C1F1D5FD8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:ef:5b:4b:97:5f:07:31:82:43:e9:64:aa:ac:
                    c3:fa:57:28:db:e6:68:27:b3:28:60:92:fa:69:60:
                    65:bc:d8:21:3d:8d:bb:9d:a4:ef:44:c5:d4:2a:b7:
                    18:be:8d:f9:c4:b6:d7:65:73:82:94:fd:80:91:99:
                    3a:f4:1e:e5:ce:e5:29:87:fa:2e:40:66:16:8a:f4:
                    96:fa:d3:4c:ad:56:2c:ba:c1:33:30:0e:41:b8:60:
                    c6:38:75:d6:b9:69:0b:38:94:c5:83:57:20:22:1f:
                    8b:61:f6:df:94:44:31:e7:6b:5a:d3:f5:0c:c1:78:
                    d7:75:73:55:74:df:17:8b:98:0d:64:e4:4c:4b:14:
                    31:1e:50:6e:62:9a:c6:c2:15:c5:b2:60:48:d3:fd:
                    8a:2f:ae:00:56:04:6c:e7:0d:4d:c0:64:bc:46:a3:
                    80:98:ff:71:d6:00:fe:47:24:14:35:d3:e8:80:f7:
                    e2:71:7b:68:8c:60:91:27:c2:cd:72:7a:ed:08:77:
                    e1:44:cd:5a:be:d4:b4:11:99:88:1d:c7:11:2f:16:
                    8d:ba:8f:04:05:33:31:be:02:0f:a7:cb:98:fa:d4:
                    63:84:c7:9f:25:3a:1f:d6:6e:18:96:48:cf:92:08:
                    14:3a:3c:53:d5:1e:05:25:69:1d:c4:9a:8b:00:05:
                    67:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:09:5B:2C:CB:D8:02:A0:BA:BA:B1:E1:54:B9:AE:9C:1F:1D:5F:D8
            X509v3 Authority Key Identifier:
                keyid:40:02:4D:91:37:B1:E1:1B:24:4B:48:E8:7E:69:63:4A:33:E2:00:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Epow7tyDvPA621U7rJpoCiEFF6pWV5m7cWhT9msj4rVH/1/40024D9137B1E11B244B48E87E69634A33E200A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/40024D9137B1E11B244B48E87E69634A33E200A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Epow7tyDvPA621U7rJpoCiEFF6pWV5m7cWhT9msj4rVH/1/3139312e352e34382e302f32312d3234203d3e20323633353332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.5.48.0/21

    Signature Algorithm: sha256WithRSAEncryption
         3a:0b:31:82:c4:8c:de:37:41:a2:e9:cf:12:1e:3e:33:2f:37:
         55:1e:77:a9:0c:8a:87:19:c5:6e:3a:81:3e:9d:9f:fc:03:da:
         3b:6e:6e:be:81:86:e8:23:f0:c9:86:a0:68:6c:85:da:5f:88:
         37:8a:42:aa:77:57:8e:e2:72:bd:42:73:e7:91:72:64:38:ae:
         77:42:00:dd:5d:0b:35:38:e4:97:5b:f1:7d:3e:44:80:10:10:
         31:12:47:ca:89:79:d1:2e:f0:40:53:40:d9:64:36:eb:59:78:
         77:44:5a:91:28:30:2e:7b:b9:2c:f6:b8:02:f4:50:5a:e4:8e:
         a3:f3:b7:56:e7:c7:0e:a2:20:6d:5f:57:25:a2:91:4a:9a:e3:
         b6:65:8f:06:a7:69:8e:ea:29:12:98:5b:96:87:87:40:ed:d3:
         56:05:e2:21:47:5e:1e:ad:d7:21:59:79:d6:08:21:45:0b:ef:
         d5:d7:8a:b7:4a:9f:50:a9:06:a8:d4:ea:be:27:61:47:5a:32:
         8f:fd:07:45:20:57:89:98:9f:58:e7:ee:f4:7f:d8:07:d8:6f:
         4b:8c:e8:9a:5e:36:ce:36:89:5e:80:7b:3e:be:c2:ba:a9:f5:
         cf:7f:b6:90:70:17:1d:c3:02:8a:93:1b:f9:36:20:35:a7:a0:
         ad:8f:f7:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 13:32:01 2024 by rpki-client on console-fra.rpki-client.org