Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GxS1HkbMUJ74HqafsjbKn3WrRLrnUmMb2aPfDQ1Gx6PY/0/3139312e3234322e34392e302f32342d3234203d3e20323633343730.roa
File:                     3139312e3234322e34392e302f32342d3234203d3e20323633343730.roa (raw, json)
Hash identifier:          Dgj7dDRXcEy7Yq4Kh40h4/Pz5SVuQ1jdGbwigoNEmRI=
Subject key identifier:   13:CF:32:CC:B1:A8:7D:88:3E:BC:12:7D:F8:7D:36:CE:46:BE:3D:51
Certificate issuer:       /CN=9E103E5AB6354DFB87A485229671C8A2FC2131E8
Certificate serial:       3820E8B5A1AB945B3F44022958861605FFF1C65E
Authority key identifier: 9E:10:3E:5A:B6:35:4D:FB:87:A4:85:22:96:71:C8:A2:FC:21:31:E8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9E103E5AB6354DFB87A485229671C8A2FC2131E8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GxS1HkbMUJ74HqafsjbKn3WrRLrnUmMb2aPfDQ1Gx6PY/0/3139312e3234322e34392e302f32342d3234203d3e20323633343730.roa
Signing time:             Wed 15 May 2024 18:09:10 +0000
ROA not before:           Wed 15 May 2024 18:04:10 +0000
ROA not after:            Wed 14 May 2025 18:09:10 +0000
asID:                     263470
IP address blocks:        191.242.49.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GxS1HkbMUJ74HqafsjbKn3WrRLrnUmMb2aPfDQ1Gx6PY/0/9E103E5AB6354DFB87A485229671C8A2FC2131E8.crl
                          rsync://rpki-repo.registro.br/repo/GxS1HkbMUJ74HqafsjbKn3WrRLrnUmMb2aPfDQ1Gx6PY/0/9E103E5AB6354DFB87A485229671C8A2FC2131E8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9E103E5AB6354DFB87A485229671C8A2FC2131E8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 17 Jun 2024 11:54:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:20:e8:b5:a1:ab:94:5b:3f:44:02:29:58:86:16:05:ff:f1:c6:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9E103E5AB6354DFB87A485229671C8A2FC2131E8
        Validity
            Not Before: May 15 18:04:10 2024 GMT
            Not After : May 14 18:09:10 2025 GMT
        Subject: CN=13CF32CCB1A87D883EBC127DF87D36CE46BE3D51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:66:bc:4c:9a:87:14:46:1e:d7:fc:6b:2f:09:
                    69:33:73:27:e1:c1:be:78:f8:e0:47:46:37:08:a6:
                    8a:73:70:03:86:a6:cb:fa:b1:c6:a2:77:56:98:53:
                    12:76:6f:17:43:d5:4b:e2:0b:80:8c:cd:0c:a2:c1:
                    a5:c5:5a:30:b4:9c:7b:6c:2a:60:60:45:c1:72:97:
                    c6:1c:05:d3:42:5b:3a:d6:52:ef:c2:cd:aa:1b:a2:
                    3e:5a:48:7e:d5:39:83:d2:22:c6:1b:16:a9:f7:69:
                    b6:b2:10:fa:85:e7:e6:75:26:f3:c4:51:21:e0:89:
                    94:48:86:71:6c:d5:4a:42:fc:78:6e:6a:ec:f0:8c:
                    56:89:69:12:c6:15:ff:13:68:88:82:73:d5:3c:d8:
                    77:4a:7b:4a:84:01:b8:9c:5a:16:ef:57:2f:e6:04:
                    e7:3e:2c:c6:14:58:69:59:76:da:d1:cd:05:7e:c7:
                    a6:d0:9d:b2:d0:7c:7e:48:12:c9:af:d4:37:a4:2d:
                    1f:71:82:ee:c5:48:26:78:b0:e6:e2:b1:7d:5c:52:
                    49:1f:7f:c2:5a:e4:5b:17:56:3a:fa:27:fc:bf:d2:
                    c5:5d:a5:31:a5:a9:65:1b:d6:0c:9c:03:1f:03:20:
                    e8:54:6d:c2:1d:29:dd:76:9c:89:4e:3f:c0:f9:70:
                    61:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:CF:32:CC:B1:A8:7D:88:3E:BC:12:7D:F8:7D:36:CE:46:BE:3D:51
            X509v3 Authority Key Identifier:
                keyid:9E:10:3E:5A:B6:35:4D:FB:87:A4:85:22:96:71:C8:A2:FC:21:31:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GxS1HkbMUJ74HqafsjbKn3WrRLrnUmMb2aPfDQ1Gx6PY/0/9E103E5AB6354DFB87A485229671C8A2FC2131E8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9E103E5AB6354DFB87A485229671C8A2FC2131E8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GxS1HkbMUJ74HqafsjbKn3WrRLrnUmMb2aPfDQ1Gx6PY/0/3139312e3234322e34392e302f32342d3234203d3e20323633343730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.242.49.0/24

    Signature Algorithm: sha256WithRSAEncryption
         51:9a:10:79:d3:8f:ba:33:0e:f6:89:2d:3b:1e:14:ab:87:ea:
         7b:fd:be:cb:75:0e:2c:94:da:81:a5:dc:19:68:91:39:01:a2:
         95:d8:f7:da:ba:cd:45:79:ff:b3:d5:98:5d:70:a4:9e:28:94:
         87:58:dc:ef:34:a2:1e:10:96:a2:bd:61:0c:9c:2a:a3:48:f5:
         da:5b:49:a8:a3:84:f9:50:dd:1c:9c:f9:3f:be:38:76:6e:58:
         26:f8:d4:f8:82:44:ce:fb:ba:04:4c:c3:57:fd:b4:c4:d4:a2:
         74:24:66:1b:df:fa:73:6e:01:cf:1e:8e:9d:8e:74:7a:1b:66:
         09:fb:bd:10:77:25:1a:d1:ae:04:17:97:e4:a4:8e:f4:4d:30:
         2a:a5:df:db:17:9c:60:fc:35:ca:b6:ac:9e:33:42:69:1e:9a:
         36:de:ca:cc:0f:8c:4b:3c:bc:da:01:5a:a8:a2:f0:88:c2:ff:
         0d:ed:01:78:62:0d:3a:07:43:6f:45:6a:13:87:37:d3:c3:e4:
         87:d0:94:dc:b9:03:48:d1:21:df:6b:33:2a:c6:9d:63:fa:bc:
         3f:39:62:e2:8a:89:d8:c9:e3:a3:6d:ab:01:3b:33:5d:31:f5:
         7d:32:5d:fe:e1:7b:4f:98:0f:e2:0f:b6:3d:74:1d:c4:db:df:
         cc:38:a6:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 21:30:52 2024 by rpki-client on console-fra.rpki-client.org