Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EqzHZ2ES3m3wGDJNvxDLgHMyxrSDpSESbLcnLVQJpyCf/0/3139312e35322e3234382e302f32312d3332203d3e20323633313635.roa
File:                     3139312e35322e3234382e302f32312d3332203d3e20323633313635.roa (raw, json)
Hash identifier:          icReVHwpARhwhkurbT+3R/iXpMUd0hVkmtmH1DxGJ3Y=
Subject key identifier:   6D:8F:07:5F:1C:50:3C:EA:F8:E7:7D:3E:EF:07:22:9F:4B:E1:17:1E
Certificate issuer:       /CN=CCC1598968804633B2A44FA3F4900D700A0BCC47
Certificate serial:       1F113365EDC58760ED1AD473B1D41D957028BCD7
Authority key identifier: CC:C1:59:89:68:80:46:33:B2:A4:4F:A3:F4:90:0D:70:0A:0B:CC:47
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CCC1598968804633B2A44FA3F4900D700A0BCC47.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EqzHZ2ES3m3wGDJNvxDLgHMyxrSDpSESbLcnLVQJpyCf/0/3139312e35322e3234382e302f32312d3332203d3e20323633313635.roa
Signing time:             Thu 21 Nov 2024 12:23:19 +0000
ROA not before:           Thu 21 Nov 2024 12:18:19 +0000
ROA not after:            Thu 20 Nov 2025 12:23:19 +0000
asID:                     263165
IP address blocks:        191.52.248.0/21 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EqzHZ2ES3m3wGDJNvxDLgHMyxrSDpSESbLcnLVQJpyCf/0/CCC1598968804633B2A44FA3F4900D700A0BCC47.crl
                          rsync://rpki-repo.registro.br/repo/EqzHZ2ES3m3wGDJNvxDLgHMyxrSDpSESbLcnLVQJpyCf/0/CCC1598968804633B2A44FA3F4900D700A0BCC47.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CCC1598968804633B2A44FA3F4900D700A0BCC47.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:11:33:65:ed:c5:87:60:ed:1a:d4:73:b1:d4:1d:95:70:28:bc:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CCC1598968804633B2A44FA3F4900D700A0BCC47
        Validity
            Not Before: Nov 21 12:18:19 2024 GMT
            Not After : Nov 20 12:23:19 2025 GMT
        Subject: CN=6D8F075F1C503CEAF8E77D3EEF07229F4BE1171E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:45:36:de:9e:89:09:01:db:dd:81:10:20:0a:
                    c5:36:fc:10:44:c4:6b:d5:da:d1:dc:02:6a:40:d8:
                    68:eb:51:c7:a5:c3:61:d7:fd:be:13:46:c6:82:0f:
                    8d:d2:47:36:06:e5:a9:8f:17:2b:71:9a:dc:17:fa:
                    38:d2:83:fd:3e:92:f7:62:0b:b5:1e:d9:8d:09:a1:
                    03:3c:67:26:00:09:c2:95:c0:9e:75:9a:7d:22:a9:
                    2f:d5:18:be:6f:0d:4e:48:71:2b:f9:f3:91:62:b8:
                    16:7d:ee:ce:9e:1e:bf:ed:8e:44:f5:5d:f0:ae:f4:
                    43:ac:75:b4:9b:c9:e0:96:3e:fa:d4:41:ee:76:6e:
                    ea:71:40:22:c0:af:bf:62:c6:d8:b6:e1:b8:83:8b:
                    88:e3:96:dd:8e:83:cf:1d:11:36:c8:51:a7:19:12:
                    d4:83:d2:6b:f9:ba:04:e8:af:f9:78:20:b8:00:35:
                    e1:9f:b1:73:03:a8:b9:e6:e5:62:62:8c:27:f9:22:
                    12:d1:a3:6b:4d:c2:b7:39:26:36:69:52:0b:65:a1:
                    ec:56:24:5e:f0:3b:f2:91:86:97:de:27:78:c3:74:
                    e7:79:43:26:fd:75:1c:6d:2d:2b:24:57:d5:89:62:
                    b9:6c:f7:11:b1:c1:6b:9e:7c:34:6a:68:ce:41:fc:
                    65:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:8F:07:5F:1C:50:3C:EA:F8:E7:7D:3E:EF:07:22:9F:4B:E1:17:1E
            X509v3 Authority Key Identifier:
                keyid:CC:C1:59:89:68:80:46:33:B2:A4:4F:A3:F4:90:0D:70:0A:0B:CC:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EqzHZ2ES3m3wGDJNvxDLgHMyxrSDpSESbLcnLVQJpyCf/0/CCC1598968804633B2A44FA3F4900D700A0BCC47.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CCC1598968804633B2A44FA3F4900D700A0BCC47.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EqzHZ2ES3m3wGDJNvxDLgHMyxrSDpSESbLcnLVQJpyCf/0/3139312e35322e3234382e302f32312d3332203d3e20323633313635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.52.248.0/21

    Signature Algorithm: sha256WithRSAEncryption
         7c:cb:af:72:f8:11:97:41:bd:cd:c5:a6:56:67:57:45:57:89:
         b7:ef:ed:fc:d4:1f:76:60:78:86:bb:42:63:d0:d9:3d:1b:2a:
         ff:c4:e0:eb:4a:12:6a:03:b1:8d:69:19:c1:fc:13:bb:ca:39:
         19:77:be:e0:36:db:d4:39:53:34:4a:80:7d:5f:c2:e6:3a:f7:
         c3:81:b7:26:1d:4e:2b:88:13:b1:66:27:6e:1b:43:f0:63:d1:
         71:32:7b:bd:b2:e9:bb:83:5b:4e:5f:e7:54:36:b7:3f:4e:e0:
         b3:46:b8:13:1b:09:b7:c9:4d:a0:5f:08:b9:35:27:37:bb:7d:
         30:06:b1:d9:9f:72:18:b3:77:07:39:eb:a1:06:38:09:de:2a:
         5c:bc:2e:29:b3:ef:7c:af:3e:93:13:bd:a6:43:97:8d:8b:18:
         69:55:88:26:c8:3d:db:da:2c:0b:7b:e6:3b:50:22:0f:f5:8b:
         92:15:9a:06:0b:07:96:85:76:43:b4:df:ed:ed:34:97:9d:57:
         44:86:3a:c8:a2:e0:3f:2a:b0:7e:6e:47:c3:f1:76:c6:32:10:
         6a:b0:01:29:17:2b:82:ee:fe:27:9b:c9:52:f6:5d:52:55:c3:
         1e:22:4a:3a:fd:f1:e9:f1:d1:09:c0:26:c6:cf:1f:cf:a0:b0:
         e9:f0:08:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:54:43 2024 by rpki-client on console-ams.rpki-client.org