Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HS5t3Q1b7PRtSTz9qHJgigwnD5fpKe3K3EBE9sNwop2P/1/3139312e3234302e3230382e302f32312d3234203d3e20323731313833.roa
File:                     3139312e3234302e3230382e302f32312d3234203d3e20323731313833.roa (raw, json)
Hash identifier:          7xPqgsGKMzb/El4pO+6+oFN7OOg4kPBaEVmrM+phXQo=
Subject key identifier:   42:30:A2:80:BB:0D:9E:83:BD:79:99:D7:CC:95:55:46:CB:8F:69:36
Certificate issuer:       /CN=44D3F1577250CA6E2174DFB39A484561766D6292
Certificate serial:       7579AD2BBAD698E3E55662D506F3BE68B3773BC7
Authority key identifier: 44:D3:F1:57:72:50:CA:6E:21:74:DF:B3:9A:48:45:61:76:6D:62:92
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/44D3F1577250CA6E2174DFB39A484561766D6292.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HS5t3Q1b7PRtSTz9qHJgigwnD5fpKe3K3EBE9sNwop2P/1/3139312e3234302e3230382e302f32312d3234203d3e20323731313833.roa
Signing time:             Wed 03 Apr 2024 22:32:15 +0000
ROA not before:           Wed 03 Apr 2024 22:27:15 +0000
ROA not after:            Wed 02 Apr 2025 22:32:15 +0000
asID:                     271183
IP address blocks:        191.240.208.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HS5t3Q1b7PRtSTz9qHJgigwnD5fpKe3K3EBE9sNwop2P/1/44D3F1577250CA6E2174DFB39A484561766D6292.crl
                          rsync://rpki-repo.registro.br/repo/HS5t3Q1b7PRtSTz9qHJgigwnD5fpKe3K3EBE9sNwop2P/1/44D3F1577250CA6E2174DFB39A484561766D6292.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/44D3F1577250CA6E2174DFB39A484561766D6292.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 22:33:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:79:ad:2b:ba:d6:98:e3:e5:56:62:d5:06:f3:be:68:b3:77:3b:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44D3F1577250CA6E2174DFB39A484561766D6292
        Validity
            Not Before: Apr  3 22:27:15 2024 GMT
            Not After : Apr  2 22:32:15 2025 GMT
        Subject: CN=4230A280BB0D9E83BD7999D7CC955546CB8F6936
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:37:12:73:c6:71:41:8a:2a:95:e3:0a:5a:bd:
                    73:e2:ca:c5:ed:91:08:a8:a1:48:2a:44:80:ea:d7:
                    70:aa:84:c7:7b:6f:91:69:19:da:3e:cf:b5:fa:61:
                    eb:93:4f:e4:58:0d:e7:55:fb:da:a2:e7:ba:31:93:
                    eb:1e:21:2d:71:ae:f4:8a:b8:b1:4c:d9:8f:7c:dc:
                    7c:dd:ea:17:f6:dc:1d:9f:00:9d:44:86:ca:a2:f1:
                    d4:d8:6e:5b:cb:89:18:5e:b6:a2:83:8f:9c:e5:3a:
                    5b:b4:6c:2f:1b:18:34:00:09:86:ba:78:9d:71:dc:
                    61:6e:e7:fa:8c:99:cd:75:cc:b7:d6:45:94:44:1e:
                    b3:d1:f8:82:56:8f:88:22:f7:b2:ad:06:15:5e:0a:
                    65:ab:08:d5:23:57:57:de:ea:97:3d:a7:29:bf:80:
                    23:ca:6f:12:3b:af:a0:b8:94:97:5f:e2:68:ad:d2:
                    1f:2f:ab:78:08:f7:1f:8b:ca:03:bf:94:16:b2:43:
                    94:0e:71:b5:ae:50:65:e7:53:2b:f1:c7:84:bb:ec:
                    8d:68:80:ca:10:41:1e:68:5d:a0:ce:af:5b:7f:ff:
                    27:60:f7:a5:8c:17:01:dc:4b:e7:c1:a7:df:7d:72:
                    90:ba:f4:20:be:8d:8d:96:81:cc:f0:12:c5:a3:e3:
                    af:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:30:A2:80:BB:0D:9E:83:BD:79:99:D7:CC:95:55:46:CB:8F:69:36
            X509v3 Authority Key Identifier:
                keyid:44:D3:F1:57:72:50:CA:6E:21:74:DF:B3:9A:48:45:61:76:6D:62:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HS5t3Q1b7PRtSTz9qHJgigwnD5fpKe3K3EBE9sNwop2P/1/44D3F1577250CA6E2174DFB39A484561766D6292.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/44D3F1577250CA6E2174DFB39A484561766D6292.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HS5t3Q1b7PRtSTz9qHJgigwnD5fpKe3K3EBE9sNwop2P/1/3139312e3234302e3230382e302f32312d3234203d3e20323731313833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.240.208.0/21

    Signature Algorithm: sha256WithRSAEncryption
         18:a6:aa:cf:20:5e:e5:de:f0:5f:84:43:ca:47:36:a7:01:d4:
         e0:ea:50:fe:4d:93:ff:0d:30:45:62:3a:d4:f2:62:c0:b1:62:
         2b:ba:57:20:4f:92:ca:b5:8a:7b:88:de:c4:0c:39:6d:ae:59:
         1c:d4:d3:c9:30:59:18:da:b9:da:e6:d2:6e:66:8a:27:f7:5b:
         94:ec:a6:a6:2d:85:eb:eb:2e:e1:6c:41:e5:69:0b:b3:cf:e3:
         63:8f:04:ce:20:6a:92:51:8b:36:76:46:c4:1a:92:a6:49:1e:
         fa:ec:3a:ac:ea:3f:d9:b6:38:64:dd:9b:05:91:9a:09:8f:08:
         ec:48:04:16:96:f3:cf:ef:18:5b:6d:88:48:cc:3f:72:a6:ae:
         ec:ae:f4:8f:64:f5:a4:9a:23:2a:14:35:4a:b1:6c:41:b6:cc:
         23:64:fa:42:a7:06:a8:9c:cc:47:ba:26:4e:04:d4:83:af:53:
         dc:ec:7f:73:a0:af:14:ff:ad:4b:bc:52:db:e0:81:91:51:b6:
         51:a2:c6:70:80:25:9f:41:2d:2c:c7:0f:4e:ee:ba:1d:99:80:
         f3:a8:24:b7:48:b1:15:9a:8b:8b:6e:54:e9:d8:b4:03:5c:46:
         ba:2f:c3:d3:fe:36:e4:db:ed:d4:7d:be:fc:41:92:57:05:86:
         28:8a:1b:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 23:59:00 2024 by rpki-client on console-fra.rpki-client.org