Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GxS1HkbMUJ74HqafsjbKn3WrRLrnUmMb2aPfDQ1Gx6PY/0/3139312e3234322e35302e302f32342d3234203d3e20323633343730.roa
File:                     3139312e3234322e35302e302f32342d3234203d3e20323633343730.roa (raw, json)
Hash identifier:          z9gFUUUzOheIyFf1s3b8W1hsdwmgVhLfthFWFp/eHrg=
Subject key identifier:   1E:09:31:D4:2C:DA:7F:CE:79:FE:2E:CE:41:91:E8:24:13:04:1F:F3
Certificate issuer:       /CN=9E103E5AB6354DFB87A485229671C8A2FC2131E8
Certificate serial:       34E71CF9023900D74DB245DD826D323BF6AEA9F3
Authority key identifier: 9E:10:3E:5A:B6:35:4D:FB:87:A4:85:22:96:71:C8:A2:FC:21:31:E8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9E103E5AB6354DFB87A485229671C8A2FC2131E8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GxS1HkbMUJ74HqafsjbKn3WrRLrnUmMb2aPfDQ1Gx6PY/0/3139312e3234322e35302e302f32342d3234203d3e20323633343730.roa
Signing time:             Wed 15 May 2024 18:09:13 +0000
ROA not before:           Wed 15 May 2024 18:04:13 +0000
ROA not after:            Wed 14 May 2025 18:09:13 +0000
asID:                     263470
IP address blocks:        191.242.50.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GxS1HkbMUJ74HqafsjbKn3WrRLrnUmMb2aPfDQ1Gx6PY/0/9E103E5AB6354DFB87A485229671C8A2FC2131E8.crl
                          rsync://rpki-repo.registro.br/repo/GxS1HkbMUJ74HqafsjbKn3WrRLrnUmMb2aPfDQ1Gx6PY/0/9E103E5AB6354DFB87A485229671C8A2FC2131E8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9E103E5AB6354DFB87A485229671C8A2FC2131E8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 17 Jun 2024 11:54:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:e7:1c:f9:02:39:00:d7:4d:b2:45:dd:82:6d:32:3b:f6:ae:a9:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9E103E5AB6354DFB87A485229671C8A2FC2131E8
        Validity
            Not Before: May 15 18:04:13 2024 GMT
            Not After : May 14 18:09:13 2025 GMT
        Subject: CN=1E0931D42CDA7FCE79FE2ECE4191E82413041FF3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:0e:f4:d3:a7:e8:0c:40:21:3f:d2:a1:47:2a:
                    f1:9e:d2:01:19:47:f4:99:fd:17:27:89:39:24:73:
                    9a:d0:b6:59:40:a7:8a:8c:89:3e:21:b1:98:4b:39:
                    ff:ad:71:17:08:c4:75:fc:60:be:e4:d9:a6:1d:1d:
                    b3:a6:68:3a:62:f9:d3:cf:cb:6b:69:e4:00:5a:9f:
                    28:52:91:dd:fc:92:9b:63:1a:27:1e:77:4f:b1:9d:
                    59:eb:c3:c7:fd:3b:62:a7:ed:4d:ab:ad:a9:f6:88:
                    0a:3b:a7:c2:5d:f8:db:b1:1b:9c:0e:26:35:98:d0:
                    b4:ad:5a:49:75:3d:26:85:32:24:44:df:7d:bc:1b:
                    92:b8:a8:23:68:e4:75:ce:4b:68:3b:56:a0:fb:5d:
                    37:24:0b:90:d7:06:05:e4:3d:16:7a:d5:8e:67:90:
                    6c:86:a7:30:3f:12:e1:a0:be:a6:de:e7:c2:a9:6e:
                    45:e4:81:82:b4:9d:87:b9:45:4b:a6:77:ea:7e:6c:
                    e7:f4:71:3a:4a:a8:5d:19:41:22:bf:2b:dd:9b:6b:
                    ce:29:fc:38:c7:e2:4a:f8:47:c1:12:2c:0a:e6:de:
                    af:6f:b1:17:ea:d5:2f:51:da:11:ef:52:ea:ac:a7:
                    72:79:f2:b9:2c:3f:c4:46:f0:e1:35:52:bb:7b:39:
                    75:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:09:31:D4:2C:DA:7F:CE:79:FE:2E:CE:41:91:E8:24:13:04:1F:F3
            X509v3 Authority Key Identifier:
                keyid:9E:10:3E:5A:B6:35:4D:FB:87:A4:85:22:96:71:C8:A2:FC:21:31:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GxS1HkbMUJ74HqafsjbKn3WrRLrnUmMb2aPfDQ1Gx6PY/0/9E103E5AB6354DFB87A485229671C8A2FC2131E8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9E103E5AB6354DFB87A485229671C8A2FC2131E8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GxS1HkbMUJ74HqafsjbKn3WrRLrnUmMb2aPfDQ1Gx6PY/0/3139312e3234322e35302e302f32342d3234203d3e20323633343730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.242.50.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a5:1d:a2:46:f8:ea:3c:36:47:d9:b9:70:b7:b1:3b:37:7a:9b:
         5a:01:3f:32:fc:bd:67:dc:b9:fd:93:f1:9a:88:a9:f8:d8:a8:
         79:ad:55:be:ed:1f:34:09:c0:b6:5f:0d:cf:72:99:ee:57:67:
         a4:ae:e8:22:be:ae:50:16:8d:f7:d3:4d:13:99:ce:89:e7:24:
         84:0d:77:b6:ad:4c:26:ab:d7:fc:e0:8c:f4:c0:c7:ea:32:86:
         64:3b:52:ce:0b:0e:91:3b:c2:50:db:ce:71:c7:ed:a2:86:fe:
         25:8e:f1:25:2f:74:95:9a:43:a0:74:be:34:22:2d:4f:7e:49:
         24:d0:c2:01:18:4b:a7:eb:c6:cb:e2:33:e9:03:0f:2f:58:0e:
         25:1b:3d:4f:2a:c8:db:59:43:20:85:d1:fc:3f:47:b7:10:ec:
         b3:19:b4:ab:d0:c4:6a:11:90:b2:a4:e6:94:e4:df:06:26:1f:
         7d:3d:0a:af:48:ef:64:9a:f3:d0:b7:45:f2:1e:54:f0:6f:1f:
         82:5a:a7:6b:c0:17:ab:be:3c:86:ec:ff:64:5f:2d:7f:be:dc:
         68:a5:53:f8:b0:af:b9:28:8b:92:9a:c0:eb:c0:90:55:6a:a2:
         f7:b6:34:c5:1f:c0:b3:48:55:02:88:15:63:be:6e:c1:99:15:
         45:35:b4:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 21:30:52 2024 by rpki-client on console-fra.rpki-client.org