Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ErR1SBgMX1CvzEX1iiQs33ySdndB23UGuooUDrC6wNQb/1/3139312e3234322e3232322e302f32332d3233203d3e20323633313434.roa
File:                     3139312e3234322e3232322e302f32332d3233203d3e20323633313434.roa (raw, json)
Hash identifier:          3Ej7pa++ttZoXZR1gFgCw87C9NP2w9VFemvbPv1kIhE=
Subject key identifier:   6A:B1:FB:74:BA:35:72:36:9A:96:11:86:49:37:1E:C8:21:97:BB:CA
Certificate issuer:       /CN=41F9151ED2649F5878D0A6F01EEF968AB545A303
Certificate serial:       73B858E51D65251839FD9075255EFC2AAB986EBD
Authority key identifier: 41:F9:15:1E:D2:64:9F:58:78:D0:A6:F0:1E:EF:96:8A:B5:45:A3:03
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/41F9151ED2649F5878D0A6F01EEF968AB545A303.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ErR1SBgMX1CvzEX1iiQs33ySdndB23UGuooUDrC6wNQb/1/3139312e3234322e3232322e302f32332d3233203d3e20323633313434.roa
Signing time:             Thu 04 Apr 2024 00:03:00 +0000
ROA not before:           Wed 03 Apr 2024 23:58:00 +0000
ROA not after:            Thu 03 Apr 2025 00:03:00 +0000
asID:                     263144
IP address blocks:        191.242.222.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ErR1SBgMX1CvzEX1iiQs33ySdndB23UGuooUDrC6wNQb/1/41F9151ED2649F5878D0A6F01EEF968AB545A303.crl
                          rsync://rpki-repo.registro.br/repo/ErR1SBgMX1CvzEX1iiQs33ySdndB23UGuooUDrC6wNQb/1/41F9151ED2649F5878D0A6F01EEF968AB545A303.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/41F9151ED2649F5878D0A6F01EEF968AB545A303.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 04:24:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:b8:58:e5:1d:65:25:18:39:fd:90:75:25:5e:fc:2a:ab:98:6e:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41F9151ED2649F5878D0A6F01EEF968AB545A303
        Validity
            Not Before: Apr  3 23:58:00 2024 GMT
            Not After : Apr  3 00:03:00 2025 GMT
        Subject: CN=6AB1FB74BA3572369A96118649371EC82197BBCA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:0e:32:4b:b7:3f:d4:39:f9:12:62:a4:98:a4:
                    00:f0:da:2e:1a:37:0c:6a:b5:c4:6e:94:62:10:18:
                    a0:ed:da:f1:15:5e:1a:40:1c:80:d3:e4:1b:df:69:
                    96:ae:19:ca:05:54:7c:c7:c6:8c:7c:d2:c6:73:f5:
                    0c:a1:28:76:00:7b:8a:ab:1d:d0:20:24:f1:ab:bf:
                    d1:ed:e7:5d:4b:da:b1:78:ad:a8:c7:54:21:0d:61:
                    e2:e9:77:c5:22:6f:d7:29:58:4a:c3:90:92:20:e1:
                    ed:e0:ed:7b:a9:1d:25:d3:53:25:2e:63:0b:69:f0:
                    ab:82:d2:09:12:0b:98:22:8c:76:53:eb:30:21:71:
                    d4:89:8c:c4:11:86:73:55:74:b2:09:97:81:ab:3a:
                    da:df:b0:15:1b:c6:18:28:30:93:ac:8e:73:99:f7:
                    12:f8:18:a5:4a:e5:c3:80:f8:c9:82:e9:b6:b2:c4:
                    7e:5f:34:4d:ed:79:7a:68:bb:ad:17:35:78:48:e6:
                    0d:83:e5:aa:77:a2:a1:af:80:ba:2c:ec:a2:20:af:
                    02:7f:fc:3d:43:20:b6:70:02:e8:ba:84:c8:0b:27:
                    d2:01:0b:f1:20:b7:69:a3:56:3d:70:41:3a:a7:a4:
                    b5:b1:1c:c1:50:bc:36:e5:c1:11:cc:0e:71:e9:38:
                    83:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:B1:FB:74:BA:35:72:36:9A:96:11:86:49:37:1E:C8:21:97:BB:CA
            X509v3 Authority Key Identifier:
                keyid:41:F9:15:1E:D2:64:9F:58:78:D0:A6:F0:1E:EF:96:8A:B5:45:A3:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ErR1SBgMX1CvzEX1iiQs33ySdndB23UGuooUDrC6wNQb/1/41F9151ED2649F5878D0A6F01EEF968AB545A303.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/41F9151ED2649F5878D0A6F01EEF968AB545A303.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ErR1SBgMX1CvzEX1iiQs33ySdndB23UGuooUDrC6wNQb/1/3139312e3234322e3232322e302f32332d3233203d3e20323633313434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.242.222.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1d:4a:92:4a:76:f9:67:5d:72:73:99:52:87:b1:f7:db:04:ad:
         3c:ac:fe:1f:9e:21:79:08:2e:12:8d:b5:18:81:4e:0f:c7:93:
         ec:50:f1:50:56:2f:c5:71:df:59:bf:82:55:bc:7e:a7:fc:0c:
         d6:68:a2:1e:10:70:b6:da:f2:ee:72:15:49:27:6d:c6:29:8b:
         a9:60:a0:c3:24:b9:2b:0b:c2:aa:4b:08:51:62:74:a5:c5:32:
         cd:8c:e0:4b:88:9c:29:69:30:56:1b:3f:32:db:c4:bf:d4:b5:
         dd:72:f5:35:0b:71:2b:06:eb:be:67:81:a7:ff:77:ff:43:00:
         ff:b2:42:d9:a2:fc:07:aa:29:23:14:2b:6d:39:e0:78:64:23:
         38:a6:ed:98:07:c9:db:ce:04:38:51:7a:4f:19:34:4f:21:50:
         c2:f4:41:ce:76:3b:14:33:22:1c:2b:7e:a8:04:da:6f:b9:a4:
         74:0d:a5:8a:fe:1f:8f:59:f3:a6:5a:a4:3a:74:57:6b:66:c2:
         06:4d:7f:cd:32:9d:8e:e3:39:18:61:46:dc:a6:7b:90:d0:d4:
         fc:3e:df:8a:16:b4:71:b6:18:99:e4:b0:e3:9b:4e:5d:7d:fb:
         7f:23:39:5c:fe:bf:dc:24:d9:5f:a1:83:8e:0a:8c:64:6f:cb:
         9e:7c:28:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 08:18:40 2024 by rpki-client on console-ams.rpki-client.org