Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H7p9nhwLPmqXPYnXdaTC6dh1BuPDqnccx2MVgu7jCwZW/1/3139312e362e3137362e302f32302d3234203d3e20323632343238.roa
File:                     3139312e362e3137362e302f32302d3234203d3e20323632343238.roa (raw, json)
Hash identifier:          sqrru5jzlQv0Z7hKvtoU5WQWXZl10XLlsUiiFzYZYpE=
Subject key identifier:   B6:A3:EF:4C:65:3D:C0:DA:FD:F1:2F:4A:37:A6:DC:87:95:54:AB:DB
Certificate issuer:       /CN=938F45B39DC45B48A1C4185FBA8AF194B821EFA1
Certificate serial:       33142E6D8DAFFA1CB6427FF574912CF588F38C49
Authority key identifier: 93:8F:45:B3:9D:C4:5B:48:A1:C4:18:5F:BA:8A:F1:94:B8:21:EF:A1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/938F45B39DC45B48A1C4185FBA8AF194B821EFA1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H7p9nhwLPmqXPYnXdaTC6dh1BuPDqnccx2MVgu7jCwZW/1/3139312e362e3137362e302f32302d3234203d3e20323632343238.roa
Signing time:             Wed 03 Apr 2024 20:19:37 +0000
ROA not before:           Wed 03 Apr 2024 20:14:37 +0000
ROA not after:            Wed 02 Apr 2025 20:19:37 +0000
asID:                     262428
IP address blocks:        191.6.176.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/H7p9nhwLPmqXPYnXdaTC6dh1BuPDqnccx2MVgu7jCwZW/1/938F45B39DC45B48A1C4185FBA8AF194B821EFA1.crl
                          rsync://rpki-repo.registro.br/repo/H7p9nhwLPmqXPYnXdaTC6dh1BuPDqnccx2MVgu7jCwZW/1/938F45B39DC45B48A1C4185FBA8AF194B821EFA1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/938F45B39DC45B48A1C4185FBA8AF194B821EFA1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 13:16:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:14:2e:6d:8d:af:fa:1c:b6:42:7f:f5:74:91:2c:f5:88:f3:8c:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=938F45B39DC45B48A1C4185FBA8AF194B821EFA1
        Validity
            Not Before: Apr  3 20:14:37 2024 GMT
            Not After : Apr  2 20:19:37 2025 GMT
        Subject: CN=B6A3EF4C653DC0DAFDF12F4A37A6DC879554ABDB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:04:ed:06:db:9d:d0:9c:74:b9:11:5b:47:c9:
                    ad:86:0a:e3:0c:53:0f:79:2f:64:6e:38:70:41:7e:
                    60:71:72:1d:65:f8:d7:fc:3f:cc:b3:b3:3c:72:fa:
                    02:7c:70:53:3c:19:1e:34:a8:55:85:72:7e:56:95:
                    1e:6b:1f:71:6d:cc:3c:d4:90:19:f1:f9:f0:4a:fd:
                    8f:7d:34:e5:66:ec:a3:c6:17:40:04:22:68:40:20:
                    f4:85:f8:0d:e1:39:0c:56:f6:05:ea:33:de:03:b3:
                    42:8a:c5:51:c7:f0:ac:ff:21:99:38:8d:48:c2:33:
                    40:d6:72:04:1e:63:72:ae:26:17:df:8e:e4:7d:76:
                    e9:fc:1a:1c:9a:c5:ef:3b:38:76:2f:bd:9d:4f:95:
                    f0:10:9f:25:81:5b:12:36:51:67:d8:1b:7f:71:88:
                    8f:03:04:61:c1:be:9d:80:fd:45:ac:02:e0:86:74:
                    bd:92:09:5d:bb:e3:06:d4:8e:6d:6a:66:cb:78:af:
                    68:10:ca:85:a2:47:cd:32:ac:da:90:24:9f:49:fb:
                    27:e4:0d:06:70:f3:3d:a7:23:48:ab:70:a3:73:ec:
                    4e:b8:f0:e7:06:a5:c9:8d:d6:84:1a:60:6d:ca:8e:
                    11:ef:02:78:3b:d7:62:78:6d:38:0a:e5:fb:63:a5:
                    6f:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:A3:EF:4C:65:3D:C0:DA:FD:F1:2F:4A:37:A6:DC:87:95:54:AB:DB
            X509v3 Authority Key Identifier:
                keyid:93:8F:45:B3:9D:C4:5B:48:A1:C4:18:5F:BA:8A:F1:94:B8:21:EF:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H7p9nhwLPmqXPYnXdaTC6dh1BuPDqnccx2MVgu7jCwZW/1/938F45B39DC45B48A1C4185FBA8AF194B821EFA1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/938F45B39DC45B48A1C4185FBA8AF194B821EFA1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H7p9nhwLPmqXPYnXdaTC6dh1BuPDqnccx2MVgu7jCwZW/1/3139312e362e3137362e302f32302d3234203d3e20323632343238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.6.176.0/20

    Signature Algorithm: sha256WithRSAEncryption
         18:03:0a:d5:2e:aa:9c:05:a5:23:49:bd:4b:2d:7f:2e:aa:13:
         ad:57:36:07:c3:e9:b3:b1:c5:76:ea:12:f6:44:75:e0:62:e4:
         68:e8:ce:f0:c2:57:e2:1e:22:f2:26:0c:82:f8:4f:56:e4:64:
         9a:be:0f:42:eb:bf:88:72:69:38:8e:dd:92:06:7a:3e:fe:de:
         e6:d3:75:b2:47:9e:be:d3:d3:a2:36:ca:7d:70:34:05:a3:b4:
         63:07:13:c8:44:30:ca:d7:36:57:2b:76:bb:84:94:57:63:52:
         05:9c:86:63:59:4f:bf:db:bc:5c:75:ad:37:9d:08:7a:ed:73:
         bb:5e:b6:8f:a5:96:7b:12:13:de:35:ac:0c:c7:3a:e1:fc:b1:
         64:da:cd:6e:af:db:35:08:d1:4d:ed:0b:2d:e1:e0:01:fa:cd:
         94:66:0d:63:7f:de:10:25:dd:4b:b1:20:55:75:28:7f:8f:ff:
         21:fb:b8:83:19:0b:51:ce:59:26:94:72:d0:ef:3c:e2:65:b8:
         e0:e3:41:72:34:9a:19:1b:72:7d:dd:60:4d:07:19:5f:f6:ba:
         cd:fe:9c:b5:4a:4f:9b:0f:9e:03:78:25:3f:af:24:1e:c5:b1:
         54:22:1e:9c:6e:22:79:20:07:d3:ff:b6:e0:c3:a4:48:1d:d6:
         1e:86:eb:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:14:54 2024 by rpki-client on console-fra.rpki-client.org