Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HFYqcrLVv1JJWzvUFgR8qZzpidLQTtkBkXZs6geQduie/1/3139312e3234342e302e302f31342d3234203d3e203232303835.roa
File:                     3139312e3234342e302e302f31342d3234203d3e203232303835.roa (raw, json)
Hash identifier:          vSRr49aJErIGMQYwz5iVgokO80ChkmdwISrtWrn2cms=
Subject key identifier:   22:EA:D6:D0:4B:B2:ED:F6:96:B7:80:12:E1:99:12:15:41:E8:5E:FD
Certificate issuer:       /CN=D5EBEEFD45A0D90B5E60CD8D4B4384098353E828
Certificate serial:       1C5E58D2FE5658E91A76415F7566CA2A9160C075
Authority key identifier: D5:EB:EE:FD:45:A0:D9:0B:5E:60:CD:8D:4B:43:84:09:83:53:E8:28
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D5EBEEFD45A0D90B5E60CD8D4B4384098353E828.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HFYqcrLVv1JJWzvUFgR8qZzpidLQTtkBkXZs6geQduie/1/3139312e3234342e302e302f31342d3234203d3e203232303835.roa
Signing time:             Tue 16 Jul 2024 14:09:37 +0000
ROA not before:           Tue 16 Jul 2024 14:04:37 +0000
ROA not after:            Tue 15 Jul 2025 14:09:37 +0000
asID:                     22085
IP address blocks:        191.244.0.0/14 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HFYqcrLVv1JJWzvUFgR8qZzpidLQTtkBkXZs6geQduie/1/D5EBEEFD45A0D90B5E60CD8D4B4384098353E828.crl
                          rsync://rpki-repo.registro.br/repo/HFYqcrLVv1JJWzvUFgR8qZzpidLQTtkBkXZs6geQduie/1/D5EBEEFD45A0D90B5E60CD8D4B4384098353E828.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D5EBEEFD45A0D90B5E60CD8D4B4384098353E828.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:5e:58:d2:fe:56:58:e9:1a:76:41:5f:75:66:ca:2a:91:60:c0:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D5EBEEFD45A0D90B5E60CD8D4B4384098353E828
        Validity
            Not Before: Jul 16 14:04:37 2024 GMT
            Not After : Jul 15 14:09:37 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:6f:0d:df:a1:a9:0a:8c:0b:15:11:c0:7d:db:
                    89:49:54:ac:ef:fa:8f:e9:0c:f5:c8:09:96:00:2c:
                    33:23:26:34:19:4a:06:b4:b4:99:6c:86:f7:43:33:
                    31:11:d1:b7:b3:c4:08:e5:68:d2:66:b8:4b:f6:2b:
                    63:74:2f:bb:fb:16:a1:3a:11:86:07:28:87:34:fb:
                    11:11:e8:6b:50:68:3e:a7:58:91:2f:5f:34:48:3a:
                    06:2b:83:14:3a:79:59:32:0b:b9:37:4a:16:96:f7:
                    b5:a5:48:60:6a:6f:d3:1a:77:53:ad:da:91:ab:f3:
                    b2:fa:9d:6a:25:b5:46:63:15:63:e5:89:32:48:c5:
                    70:a9:b0:56:91:fe:a8:db:47:b0:db:b4:75:82:9a:
                    eb:0d:62:12:a1:50:74:0b:01:10:6c:ee:5e:9c:51:
                    73:00:c6:70:9c:85:71:43:e6:f1:12:42:b0:1a:39:
                    67:7d:23:4a:ec:2f:11:5d:60:01:05:7a:4c:7b:58:
                    19:67:2d:94:9e:74:4d:5c:01:63:0c:50:ec:d3:63:
                    c5:24:ad:4e:6b:62:90:c4:74:98:18:8c:18:26:9d:
                    d9:a5:5e:8c:f2:a7:bc:12:b1:4a:32:f8:cf:91:05:
                    94:26:07:d1:0b:28:09:a5:8f:dd:65:c0:2f:09:74:
                    62:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:EA:D6:D0:4B:B2:ED:F6:96:B7:80:12:E1:99:12:15:41:E8:5E:FD
            X509v3 Authority Key Identifier:
                keyid:D5:EB:EE:FD:45:A0:D9:0B:5E:60:CD:8D:4B:43:84:09:83:53:E8:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HFYqcrLVv1JJWzvUFgR8qZzpidLQTtkBkXZs6geQduie/1/D5EBEEFD45A0D90B5E60CD8D4B4384098353E828.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D5EBEEFD45A0D90B5E60CD8D4B4384098353E828.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HFYqcrLVv1JJWzvUFgR8qZzpidLQTtkBkXZs6geQduie/1/3139312e3234342e302e302f31342d3234203d3e203232303835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.244.0.0/14

    Signature Algorithm: sha256WithRSAEncryption
         cb:2c:c5:9e:c4:cd:51:45:32:70:a6:e9:ec:79:7d:9d:a9:94:
         c3:cb:9b:49:66:93:56:b4:5b:79:fa:b9:9b:ca:9c:30:5e:4d:
         21:4b:f0:c5:40:2b:28:0d:5f:71:8e:d8:7e:ab:19:02:ec:1f:
         24:de:8c:58:65:84:24:a7:d3:4b:47:ef:6c:1c:1b:09:38:4f:
         44:96:de:55:06:a0:32:d7:f5:61:8d:87:f9:95:b3:f9:ba:fb:
         e4:53:0d:f7:48:f9:f1:31:4b:a3:a4:e7:01:56:23:30:84:92:
         19:85:6f:c5:f6:1e:15:eb:f2:0e:a4:aa:33:d3:3c:e7:97:e1:
         c5:aa:9e:c9:ba:74:88:85:bb:b6:6b:5c:b5:b2:8f:f9:0b:3e:
         13:8e:05:17:b2:c8:fb:71:9d:3c:f6:2b:7c:e3:f5:95:b8:5c:
         d1:23:3c:9f:5d:d6:8c:34:4c:d1:c3:f5:1b:9a:9c:ce:5e:66:
         e0:22:5f:9e:27:d2:13:44:40:d4:81:02:2d:49:59:3c:9c:4f:
         8e:3f:a0:46:81:2b:a1:5b:f2:ea:62:13:f7:7b:73:2d:75:b4:
         87:ed:a5:10:ba:00:33:cf:ee:6a:57:87:73:e8:d3:db:14:c5:
         9c:c8:16:d6:a2:8a:5c:b5:18:fb:f6:5e:56:02:39:cd:94:5a:
         f9:20:12:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:54:46 2024 by rpki-client on console-ams.rpki-client.org