Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GxS1HkbMUJ74HqafsjbKn3WrRLrnUmMb2aPfDQ1Gx6PY/0/3139312e3234322e34382e302f32342d3234203d3e20323633343730.roa
File:                     3139312e3234322e34382e302f32342d3234203d3e20323633343730.roa (raw, json)
Hash identifier:          +sSuIVd0blahJqw8DPzIGF8vnS1crRPIEdPY1V70J74=
Subject key identifier:   65:EB:92:66:14:F2:66:90:C0:7C:EC:20:E5:00:82:C1:38:8C:08:71
Certificate issuer:       /CN=9E103E5AB6354DFB87A485229671C8A2FC2131E8
Certificate serial:       4E6C0982850CE0BA12F0C495F9B8BAD6C4B5183B
Authority key identifier: 9E:10:3E:5A:B6:35:4D:FB:87:A4:85:22:96:71:C8:A2:FC:21:31:E8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9E103E5AB6354DFB87A485229671C8A2FC2131E8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GxS1HkbMUJ74HqafsjbKn3WrRLrnUmMb2aPfDQ1Gx6PY/0/3139312e3234322e34382e302f32342d3234203d3e20323633343730.roa
Signing time:             Wed 15 May 2024 18:09:08 +0000
ROA not before:           Wed 15 May 2024 18:04:08 +0000
ROA not after:            Wed 14 May 2025 18:09:08 +0000
asID:                     263470
IP address blocks:        191.242.48.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GxS1HkbMUJ74HqafsjbKn3WrRLrnUmMb2aPfDQ1Gx6PY/0/9E103E5AB6354DFB87A485229671C8A2FC2131E8.crl
                          rsync://rpki-repo.registro.br/repo/GxS1HkbMUJ74HqafsjbKn3WrRLrnUmMb2aPfDQ1Gx6PY/0/9E103E5AB6354DFB87A485229671C8A2FC2131E8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9E103E5AB6354DFB87A485229671C8A2FC2131E8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 17 Jun 2024 11:54:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:6c:09:82:85:0c:e0:ba:12:f0:c4:95:f9:b8:ba:d6:c4:b5:18:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9E103E5AB6354DFB87A485229671C8A2FC2131E8
        Validity
            Not Before: May 15 18:04:08 2024 GMT
            Not After : May 14 18:09:08 2025 GMT
        Subject: CN=65EB926614F26690C07CEC20E50082C1388C0871
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:dd:dd:44:69:af:fa:40:f0:10:52:6b:e5:27:
                    88:b3:a2:cb:6c:c7:e2:49:96:a3:fc:ca:00:c8:20:
                    77:cd:82:4c:c2:2b:31:7b:ef:ff:18:ee:a0:4a:75:
                    ae:0b:49:68:1f:32:82:6d:18:83:dd:ae:87:a9:32:
                    4d:0b:26:88:0d:79:60:c6:8f:d5:31:ac:f6:04:09:
                    fb:fe:b5:73:81:a0:2b:0c:2b:1d:ea:3a:e9:be:54:
                    c4:ef:a3:f4:bd:54:81:28:80:e7:f1:56:8b:5c:3e:
                    00:01:2c:e9:2c:8e:5a:16:81:7d:57:ba:f7:d4:f4:
                    7f:88:d2:9e:62:ea:82:b6:ec:d2:bd:07:66:5d:5f:
                    37:fc:c7:82:ed:c1:d7:df:56:48:de:71:98:be:c2:
                    fe:8a:e0:db:60:b8:cf:c4:9d:2c:20:ba:fd:42:99:
                    7c:89:42:29:08:b4:ff:75:20:85:0a:24:ab:89:4e:
                    79:55:2c:bd:e2:df:90:d3:a9:f1:49:f3:60:5d:b9:
                    74:8b:c0:df:19:ac:ed:73:91:ae:eb:e6:1d:d5:e7:
                    73:bf:59:82:92:42:ea:b9:ef:2a:29:5e:11:59:fe:
                    1d:f2:c1:ef:4f:d8:2b:8a:1c:c4:e5:37:92:b3:56:
                    ee:7d:5c:18:3e:78:68:c8:2d:ab:a5:e5:13:7c:c8:
                    d3:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:EB:92:66:14:F2:66:90:C0:7C:EC:20:E5:00:82:C1:38:8C:08:71
            X509v3 Authority Key Identifier:
                keyid:9E:10:3E:5A:B6:35:4D:FB:87:A4:85:22:96:71:C8:A2:FC:21:31:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GxS1HkbMUJ74HqafsjbKn3WrRLrnUmMb2aPfDQ1Gx6PY/0/9E103E5AB6354DFB87A485229671C8A2FC2131E8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9E103E5AB6354DFB87A485229671C8A2FC2131E8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GxS1HkbMUJ74HqafsjbKn3WrRLrnUmMb2aPfDQ1Gx6PY/0/3139312e3234322e34382e302f32342d3234203d3e20323633343730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.242.48.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4e:93:b5:75:79:09:d0:34:a5:96:a8:15:7d:1d:db:34:51:9e:
         a3:90:65:da:da:3f:61:f9:27:8f:29:27:b3:fd:83:4a:74:76:
         81:e6:94:ea:bb:a7:93:64:9e:6a:aa:70:d8:d1:f6:07:fc:12:
         96:98:39:77:aa:97:8a:9e:64:69:4d:3b:5a:93:16:4b:b6:78:
         1d:8d:9c:97:e5:51:19:15:8f:ae:8f:90:3a:10:85:65:96:75:
         16:fc:a3:65:1f:b0:30:36:47:70:33:00:12:34:f4:d1:4e:f2:
         e4:65:a9:4d:be:61:52:6f:f5:fb:2b:17:da:df:b0:38:46:8d:
         56:40:4a:2b:1b:ec:1b:95:79:05:cd:3b:f9:42:10:bb:59:86:
         26:ef:4e:f3:d6:b1:21:0a:05:79:3a:ec:12:e1:a0:41:78:0b:
         d6:ba:4c:e7:84:c1:f2:b4:95:60:96:49:65:5b:07:7b:ac:f0:
         7d:06:64:3b:3c:0f:3c:cd:b4:39:49:3f:c0:6b:33:23:02:3e:
         68:d1:22:ce:3c:3f:aa:98:f8:87:76:88:f0:49:18:29:4f:e8:
         1c:67:dc:87:a9:53:8c:a6:9c:5e:75:3b:ad:ab:98:be:91:9f:
         ca:1d:62:de:81:ee:88:b5:6c:0f:63:60:38:1f:d8:ee:e3:15:
         7c:3e:c7:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 23:12:48 2024 by rpki-client on console-ams.rpki-client.org