Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GxS1HkbMUJ74HqafsjbKn3WrRLrnUmMb2aPfDQ1Gx6PY/0/3139312e3234322e35352e302f32342d3234203d3e20323633343730.roa
File:                     3139312e3234322e35352e302f32342d3234203d3e20323633343730.roa (raw, json)
Hash identifier:          NbnAiLSNEBJQ+TpK5J2qzu3qxpvatEONqMMTwhBwwCA=
Subject key identifier:   3D:04:09:54:20:FA:D0:BC:99:AE:A4:3B:1E:4D:21:E1:09:3F:B7:D9
Certificate issuer:       /CN=9E103E5AB6354DFB87A485229671C8A2FC2131E8
Certificate serial:       1F038DB0C5A214AE3E92B41E3B7A936590C2E36C
Authority key identifier: 9E:10:3E:5A:B6:35:4D:FB:87:A4:85:22:96:71:C8:A2:FC:21:31:E8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9E103E5AB6354DFB87A485229671C8A2FC2131E8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GxS1HkbMUJ74HqafsjbKn3WrRLrnUmMb2aPfDQ1Gx6PY/0/3139312e3234322e35352e302f32342d3234203d3e20323633343730.roa
Signing time:             Wed 15 May 2024 18:09:31 +0000
ROA not before:           Wed 15 May 2024 18:04:31 +0000
ROA not after:            Wed 14 May 2025 18:09:31 +0000
asID:                     263470
IP address blocks:        191.242.55.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GxS1HkbMUJ74HqafsjbKn3WrRLrnUmMb2aPfDQ1Gx6PY/0/9E103E5AB6354DFB87A485229671C8A2FC2131E8.crl
                          rsync://rpki-repo.registro.br/repo/GxS1HkbMUJ74HqafsjbKn3WrRLrnUmMb2aPfDQ1Gx6PY/0/9E103E5AB6354DFB87A485229671C8A2FC2131E8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9E103E5AB6354DFB87A485229671C8A2FC2131E8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 17 Jun 2024 11:54:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:03:8d:b0:c5:a2:14:ae:3e:92:b4:1e:3b:7a:93:65:90:c2:e3:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9E103E5AB6354DFB87A485229671C8A2FC2131E8
        Validity
            Not Before: May 15 18:04:31 2024 GMT
            Not After : May 14 18:09:31 2025 GMT
        Subject: CN=3D04095420FAD0BC99AEA43B1E4D21E1093FB7D9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:d5:41:82:70:e4:17:54:85:49:ad:f1:fc:8f:
                    06:7d:f9:76:c0:50:62:f2:9e:01:78:64:5a:71:6d:
                    19:1a:b8:95:fa:8c:f2:92:a2:0d:58:b5:d9:9a:6a:
                    a6:07:da:e2:88:e0:5b:4c:6d:f7:b1:e3:a1:2b:1f:
                    76:e1:32:55:a8:a3:c7:cf:57:60:10:b3:96:04:a6:
                    33:09:fe:bb:9c:d1:b9:ef:4e:e7:cd:5e:69:ea:95:
                    28:dc:3f:34:9d:19:94:14:28:7e:38:9d:72:d7:a5:
                    78:5a:c0:df:a7:f4:eb:33:39:01:37:0f:a7:95:d1:
                    21:f9:51:ed:8f:cd:45:84:d9:a9:fc:80:f2:df:0b:
                    48:1b:0b:8c:21:fe:b0:99:b3:29:5d:e0:85:d9:62:
                    41:7d:0f:5b:77:8d:93:78:cc:77:2b:3b:96:33:90:
                    83:9b:57:fc:79:7b:bf:c1:88:7d:af:dc:32:ee:06:
                    51:15:bd:0f:ff:6a:a0:b5:eb:e3:46:e9:81:a0:40:
                    ad:a5:b7:36:02:06:99:a1:20:2d:62:d5:3d:8f:74:
                    8e:98:e7:e8:af:44:18:fe:75:24:2d:f9:d9:8b:20:
                    d8:ae:dc:c4:38:18:fa:a1:98:09:ce:36:5b:5f:c8:
                    42:11:19:d2:5f:df:ef:34:9f:b4:15:2b:66:3f:e0:
                    f0:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:04:09:54:20:FA:D0:BC:99:AE:A4:3B:1E:4D:21:E1:09:3F:B7:D9
            X509v3 Authority Key Identifier:
                keyid:9E:10:3E:5A:B6:35:4D:FB:87:A4:85:22:96:71:C8:A2:FC:21:31:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GxS1HkbMUJ74HqafsjbKn3WrRLrnUmMb2aPfDQ1Gx6PY/0/9E103E5AB6354DFB87A485229671C8A2FC2131E8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9E103E5AB6354DFB87A485229671C8A2FC2131E8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GxS1HkbMUJ74HqafsjbKn3WrRLrnUmMb2aPfDQ1Gx6PY/0/3139312e3234322e35352e302f32342d3234203d3e20323633343730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.242.55.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5a:4b:0c:6b:a2:23:f7:04:7b:db:d7:52:44:03:ec:a7:63:fa:
         d5:e3:de:7e:19:b8:1d:e7:a2:01:d1:fa:5b:ef:30:45:e7:3a:
         f4:19:7b:e5:fd:da:64:8f:81:4f:ed:48:48:02:32:ac:c4:2d:
         e9:25:75:e0:85:36:a5:e4:08:6a:1a:13:fc:78:35:2c:09:c6:
         f6:9e:7f:27:c6:3d:a9:12:ed:80:0e:80:2a:ad:9d:14:c3:90:
         2b:e2:a1:33:84:f1:88:ac:14:6e:ce:60:8d:e6:3a:c2:24:b2:
         ed:e6:ed:73:d8:59:fd:c5:fa:e2:54:16:04:38:ec:13:24:83:
         2b:44:eb:ae:29:b6:79:3a:cd:43:82:94:ba:16:10:ad:60:67:
         56:c1:8c:ba:d5:1f:3c:1e:9d:ab:a6:fe:ca:6d:ac:ff:f2:ed:
         95:3c:31:db:b9:00:2e:3a:4a:6f:cc:10:e9:12:c9:17:d7:84:
         6d:ef:df:e2:c1:b3:f1:71:a8:a0:c2:f3:0c:85:9d:11:80:f9:
         7b:02:02:46:60:c4:ba:76:b0:41:35:ec:cf:6b:e5:4d:1c:6e:
         e8:fc:85:bc:4e:ff:90:e2:2e:4f:27:2d:c8:f7:53:46:2a:7c:
         5c:97:95:b7:cf:a1:b7:77:04:a1:aa:3c:5a:38:5f:0c:c5:2b:
         f2:3a:75:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 23:12:48 2024 by rpki-client on console-ams.rpki-client.org