Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GxS1HkbMUJ74HqafsjbKn3WrRLrnUmMb2aPfDQ1Gx6PY/0/3139312e3234322e35332e302f32342d3234203d3e20323633343730.roa
File:                     3139312e3234322e35332e302f32342d3234203d3e20323633343730.roa (raw, json)
Hash identifier:          Om100bry7EBztBdX+zRlD6zjl3O79IZxNFS90HwXGuk=
Subject key identifier:   82:F6:8D:D7:37:B8:EF:64:2D:13:FA:8F:72:FA:C7:F4:10:E5:07:63
Certificate issuer:       /CN=9E103E5AB6354DFB87A485229671C8A2FC2131E8
Certificate serial:       711D046BA5AD442BB505E1B4CCD9EAD2DDCB638D
Authority key identifier: 9E:10:3E:5A:B6:35:4D:FB:87:A4:85:22:96:71:C8:A2:FC:21:31:E8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9E103E5AB6354DFB87A485229671C8A2FC2131E8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GxS1HkbMUJ74HqafsjbKn3WrRLrnUmMb2aPfDQ1Gx6PY/0/3139312e3234322e35332e302f32342d3234203d3e20323633343730.roa
Signing time:             Wed 15 May 2024 18:09:26 +0000
ROA not before:           Wed 15 May 2024 18:04:26 +0000
ROA not after:            Wed 14 May 2025 18:09:26 +0000
asID:                     263470
IP address blocks:        191.242.53.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GxS1HkbMUJ74HqafsjbKn3WrRLrnUmMb2aPfDQ1Gx6PY/0/9E103E5AB6354DFB87A485229671C8A2FC2131E8.crl
                          rsync://rpki-repo.registro.br/repo/GxS1HkbMUJ74HqafsjbKn3WrRLrnUmMb2aPfDQ1Gx6PY/0/9E103E5AB6354DFB87A485229671C8A2FC2131E8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9E103E5AB6354DFB87A485229671C8A2FC2131E8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 17 Jun 2024 11:54:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:1d:04:6b:a5:ad:44:2b:b5:05:e1:b4:cc:d9:ea:d2:dd:cb:63:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9E103E5AB6354DFB87A485229671C8A2FC2131E8
        Validity
            Not Before: May 15 18:04:26 2024 GMT
            Not After : May 14 18:09:26 2025 GMT
        Subject: CN=82F68DD737B8EF642D13FA8F72FAC7F410E50763
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:5d:77:0e:8b:9e:0d:af:47:c1:f3:a7:25:78:
                    77:db:83:9f:2a:88:e3:3d:82:71:ea:cd:04:30:b4:
                    80:30:3f:87:60:c5:d4:19:65:d5:38:35:e2:4c:5b:
                    51:e2:e5:b9:92:d9:ff:f6:40:83:0b:0b:fd:ac:da:
                    52:46:a5:94:d7:1b:ac:b2:93:61:dd:7b:f4:56:83:
                    b4:46:47:2d:2b:fa:f0:1e:ff:ed:be:fa:5c:75:b5:
                    5a:72:2b:74:c9:61:e8:ec:f2:83:7e:42:bd:5a:a1:
                    f0:95:90:76:fc:8e:61:3f:e0:88:cd:2a:cd:6e:90:
                    8a:b4:9e:21:8b:4e:97:2b:29:00:dc:c3:52:eb:65:
                    be:23:25:f5:6e:37:df:bd:a8:79:4c:d1:37:53:67:
                    fa:b4:d0:76:d5:99:94:1d:7f:22:1a:c9:cb:19:46:
                    6c:e8:07:a6:7b:89:9c:62:31:84:37:72:da:4e:98:
                    77:f8:70:88:fa:10:3f:72:a9:2c:69:a5:f1:1b:07:
                    32:a1:f1:4c:03:e2:ff:76:b1:d1:c0:ae:53:01:36:
                    be:1d:cb:80:b6:18:7d:ff:ea:6c:3f:87:8f:6c:72:
                    32:b0:7c:e6:2a:20:52:4b:11:df:01:02:c8:ab:18:
                    78:37:ef:c9:a5:1e:53:75:d3:60:b8:93:3c:78:af:
                    10:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:F6:8D:D7:37:B8:EF:64:2D:13:FA:8F:72:FA:C7:F4:10:E5:07:63
            X509v3 Authority Key Identifier:
                keyid:9E:10:3E:5A:B6:35:4D:FB:87:A4:85:22:96:71:C8:A2:FC:21:31:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GxS1HkbMUJ74HqafsjbKn3WrRLrnUmMb2aPfDQ1Gx6PY/0/9E103E5AB6354DFB87A485229671C8A2FC2131E8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9E103E5AB6354DFB87A485229671C8A2FC2131E8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GxS1HkbMUJ74HqafsjbKn3WrRLrnUmMb2aPfDQ1Gx6PY/0/3139312e3234322e35332e302f32342d3234203d3e20323633343730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.242.53.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5d:0e:f3:f2:0e:12:6d:b3:4c:a4:c9:32:ab:ea:9a:1d:87:f6:
         16:79:0b:27:a2:42:1d:af:71:6d:1d:dc:c7:12:be:46:df:0c:
         9d:d3:e6:97:ea:0b:62:3c:76:e1:21:f3:58:3e:38:2f:ad:68:
         36:9b:bd:73:de:c3:7b:68:23:05:50:c4:ce:31:2e:e9:95:9c:
         d8:64:02:73:8c:06:47:cd:d7:5c:97:be:bd:ff:80:92:1c:1b:
         26:c3:66:8c:5e:47:5e:95:3a:d2:fd:24:1d:1c:64:12:50:c7:
         81:c1:44:d1:7d:60:c4:bf:c7:ba:e1:2a:d3:4b:1a:4d:cc:7c:
         f7:1d:14:71:19:39:6c:84:ea:fa:41:9b:79:9a:ce:0b:d2:dd:
         d5:cd:22:90:33:90:43:83:3a:56:a9:56:c2:e4:62:04:e8:7e:
         c0:2e:d9:e7:af:1d:0d:13:3d:ca:45:fc:91:7f:8a:e0:9b:7d:
         c6:ec:8f:cd:41:35:cd:ff:9b:a5:c4:6c:e0:b8:a6:ba:62:f9:
         38:47:e6:62:11:9d:ec:51:f3:99:08:cb:b9:60:64:48:e0:a7:
         a3:82:79:12:a7:6b:25:17:80:77:c9:a1:75:5c:a5:5e:a5:61:
         ac:6f:c8:2b:35:61:80:8d:5c:62:53:b0:56:e7:a3:83:d6:93:
         05:3b:fe:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 21:30:52 2024 by rpki-client on console-fra.rpki-client.org