Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GJ56oSfruP9FjS6sr749N4ndgTJnARkypfungt127aRH/0/3139322e3134312e3234312e302f32342d3234203d3e20323637353432.roa
File:                     3139322e3134312e3234312e302f32342d3234203d3e20323637353432.roa (raw, json)
Hash identifier:          iJ6ltOQJVNmJbZeqxftraIZmSiZ90s12Z7mWp2U363U=
Subject key identifier:   26:2B:50:A2:9F:DC:7F:D4:30:27:FD:76:69:2F:92:BF:75:9A:4D:6A
Certificate issuer:       /CN=BDE43E626C927270D334976A9B665C443892DF57
Certificate serial:       4B61E1742AF940BDB8719837246694C68A7D52DE
Authority key identifier: BD:E4:3E:62:6C:92:72:70:D3:34:97:6A:9B:66:5C:44:38:92:DF:57
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BDE43E626C927270D334976A9B665C443892DF57.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GJ56oSfruP9FjS6sr749N4ndgTJnARkypfungt127aRH/0/3139322e3134312e3234312e302f32342d3234203d3e20323637353432.roa
Signing time:             Sat 30 Nov 2024 23:40:20 +0000
ROA not before:           Sat 30 Nov 2024 23:35:20 +0000
ROA not after:            Sat 29 Nov 2025 23:40:20 +0000
asID:                     267542
IP address blocks:        192.141.241.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GJ56oSfruP9FjS6sr749N4ndgTJnARkypfungt127aRH/0/BDE43E626C927270D334976A9B665C443892DF57.crl
                          rsync://rpki-repo.registro.br/repo/GJ56oSfruP9FjS6sr749N4ndgTJnARkypfungt127aRH/0/BDE43E626C927270D334976A9B665C443892DF57.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BDE43E626C927270D334976A9B665C443892DF57.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 15 Mar 2025 00:50:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:61:e1:74:2a:f9:40:bd:b8:71:98:37:24:66:94:c6:8a:7d:52:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BDE43E626C927270D334976A9B665C443892DF57
        Validity
            Not Before: Nov 30 23:35:20 2024 GMT
            Not After : Nov 29 23:40:20 2025 GMT
        Subject: CN=262B50A29FDC7FD43027FD76692F92BF759A4D6A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:aa:cf:80:6f:8b:52:01:f0:57:53:f5:a4:66:
                    06:e8:39:18:2b:48:fe:ba:97:6d:da:ff:61:3e:e1:
                    37:87:00:66:38:70:f1:d0:b2:a8:30:8f:d7:4d:09:
                    b5:87:d7:b8:b0:18:fe:15:27:77:f7:67:34:26:14:
                    f3:ce:60:99:3c:a2:1c:07:8e:2b:c1:0a:bd:56:fa:
                    bc:01:b1:d2:da:f3:64:11:83:f0:39:7f:5a:52:f0:
                    6d:01:f0:8c:f8:ae:59:30:d3:f2:aa:8e:96:ab:d2:
                    63:01:25:28:de:7f:df:21:ac:f7:ca:84:52:58:48:
                    2a:5d:de:bc:0f:f7:9c:c0:68:45:72:ae:9c:ee:57:
                    d4:56:4a:af:00:c3:c3:3f:79:0e:13:fb:2a:d4:14:
                    9f:db:93:58:02:04:a8:af:74:9a:6b:90:cc:0f:28:
                    72:e8:39:fb:4e:45:78:91:29:70:b5:c0:23:50:9b:
                    9c:00:a0:6b:48:07:c9:9b:1b:fe:2a:82:b3:db:92:
                    b4:d8:03:97:cc:d7:cc:20:35:40:7c:e4:54:66:fb:
                    14:4b:b0:3a:f0:65:2a:44:37:93:06:58:cf:75:1b:
                    1e:98:50:cf:6f:e3:86:e3:1e:15:e8:f2:8e:82:e6:
                    cb:0d:2c:37:e8:60:9f:af:60:c9:f1:f9:15:d8:91:
                    46:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:2B:50:A2:9F:DC:7F:D4:30:27:FD:76:69:2F:92:BF:75:9A:4D:6A
            X509v3 Authority Key Identifier:
                keyid:BD:E4:3E:62:6C:92:72:70:D3:34:97:6A:9B:66:5C:44:38:92:DF:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GJ56oSfruP9FjS6sr749N4ndgTJnARkypfungt127aRH/0/BDE43E626C927270D334976A9B665C443892DF57.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BDE43E626C927270D334976A9B665C443892DF57.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GJ56oSfruP9FjS6sr749N4ndgTJnARkypfungt127aRH/0/3139322e3134312e3234312e302f32342d3234203d3e20323637353432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.141.241.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a2:56:52:d3:4a:61:43:48:30:5a:2e:2c:b9:3a:7a:f1:dc:c6:
         b2:d9:3d:d8:b4:ec:8a:4c:af:0e:5f:59:12:0b:89:6e:eb:9a:
         f1:eb:d5:0c:a9:1b:19:ab:d9:99:65:1c:e2:cd:14:48:3b:96:
         38:48:28:73:87:f3:02:f0:ff:7c:4b:0a:df:aa:f9:1e:7a:9b:
         38:63:ea:c6:d8:09:cd:5f:b7:b4:88:f2:5a:54:f6:24:a9:6c:
         da:d8:3f:6d:88:c3:ef:22:28:31:48:18:e7:3e:11:e4:a2:f9:
         7d:4d:43:ce:4c:bb:f0:17:1d:59:40:92:b6:11:ca:fb:e2:1d:
         c5:4b:e7:5c:be:bb:37:77:2e:03:c3:47:86:09:6a:b0:ff:ac:
         2a:ab:e9:03:3f:f7:7f:13:b0:52:03:55:86:b7:7d:62:68:e6:
         af:4d:df:2e:c5:9c:f4:6f:e3:0d:ab:02:be:bc:93:79:98:dd:
         7f:3f:eb:ba:bb:6d:c2:cb:31:00:51:d4:61:c4:35:95:d9:44:
         44:c5:d5:f5:77:6b:80:ed:a5:1b:9e:2f:7b:7e:2b:6e:71:19:
         23:af:11:d7:e6:4a:09:aa:fd:f9:29:af:73:93:1d:8e:ac:8e:
         a0:cb:20:06:55:81:60:f7:7e:11:70:9e:03:01:22:d6:9f:a6:
         50:f9:b4:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 04:03:29 2025 by rpki-client