Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/3230312e34392e302e302f31392d3139203d3e203131393231.roa
File:                     3230312e34392e302e302f31392d3139203d3e203131393231.roa (raw, json)
Hash identifier:          PUmtd4JnLAEUwacGtK3dmnjLjq4kSmMpk/bopX99G6E=
Subject key identifier:   10:12:24:34:01:A0:78:FD:77:EC:C5:0F:55:4C:0D:FB:54:BF:E9:F6
Certificate issuer:       /CN=D79C7E4BAE4953730FE72125E941901AFC590C0B
Certificate serial:       363ADAFF2F90F138BE897E80235D6A632D6784E6
Authority key identifier: D7:9C:7E:4B:AE:49:53:73:0F:E7:21:25:E9:41:90:1A:FC:59:0C:0B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D79C7E4BAE4953730FE72125E941901AFC590C0B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/3230312e34392e302e302f31392d3139203d3e203131393231.roa
Signing time:             Tue 22 Oct 2024 20:03:16 +0000
ROA not before:           Tue 22 Oct 2024 19:58:16 +0000
ROA not after:            Tue 21 Oct 2025 20:03:16 +0000
asID:                     11921
IP address blocks:        201.49.0.0/19 maxlen: 19

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/D79C7E4BAE4953730FE72125E941901AFC590C0B.crl
                          rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/D79C7E4BAE4953730FE72125E941901AFC590C0B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D79C7E4BAE4953730FE72125E941901AFC590C0B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 23:55:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:3a:da:ff:2f:90:f1:38:be:89:7e:80:23:5d:6a:63:2d:67:84:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D79C7E4BAE4953730FE72125E941901AFC590C0B
        Validity
            Not Before: Oct 22 19:58:16 2024 GMT
            Not After : Oct 21 20:03:16 2025 GMT
        Subject: CN=1012243401A078FD77ECC50F554C0DFB54BFE9F6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:8d:6a:da:4f:57:11:cd:ab:a7:2c:b1:06:2c:
                    4c:d0:fb:f1:02:7f:36:97:4a:26:7e:49:94:a2:16:
                    7d:f6:64:69:06:85:69:9a:d3:0a:e3:00:5b:ba:b8:
                    e6:87:7c:fd:b4:2d:66:1c:98:67:b2:08:27:c3:68:
                    94:e7:9b:4a:33:dc:c0:eb:a0:52:f3:ba:e1:80:22:
                    b5:06:72:8b:a4:ee:9f:52:a7:cd:91:b1:10:b0:24:
                    71:e0:b6:5d:63:6f:96:69:e2:78:3e:36:38:ea:9a:
                    1d:53:e2:99:a7:ad:07:40:01:f6:9d:6d:86:bb:5d:
                    09:75:7b:40:ea:2e:44:c7:30:57:17:dc:5d:6c:f1:
                    07:20:e2:39:35:74:1f:32:0f:63:fb:b7:43:8d:7d:
                    bc:0b:96:6a:64:37:4b:1d:c1:ba:c1:29:64:57:5e:
                    3a:f1:f2:9a:d0:f7:66:7b:1b:ea:ed:0d:86:c3:6e:
                    ae:19:8e:53:90:63:d7:1f:96:5d:fd:e7:b7:42:6b:
                    ff:f3:f8:c8:06:b2:23:87:60:63:fb:98:bb:10:ef:
                    fd:59:01:82:81:db:50:bd:d5:44:1b:55:a0:9b:7a:
                    60:68:ec:16:4d:ec:ea:66:ed:fa:8d:31:34:52:aa:
                    03:97:8e:cc:21:71:be:d7:29:bc:97:8b:0a:7b:8c:
                    18:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:12:24:34:01:A0:78:FD:77:EC:C5:0F:55:4C:0D:FB:54:BF:E9:F6
            X509v3 Authority Key Identifier:
                keyid:D7:9C:7E:4B:AE:49:53:73:0F:E7:21:25:E9:41:90:1A:FC:59:0C:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/D79C7E4BAE4953730FE72125E941901AFC590C0B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D79C7E4BAE4953730FE72125E941901AFC590C0B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/3230312e34392e302e302f31392d3139203d3e203131393231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.49.0.0/19

    Signature Algorithm: sha256WithRSAEncryption
         60:1e:32:cf:44:20:18:56:22:5f:8c:fc:3d:86:37:db:59:97:
         41:e4:99:85:d6:08:52:69:d9:71:69:ab:06:e2:95:ff:c2:34:
         07:0c:6f:4f:ed:b1:46:04:c3:56:d5:34:81:67:09:05:48:61:
         2c:49:eb:f0:d1:10:56:1e:8e:84:ac:48:a1:1d:cc:86:db:52:
         5d:b7:ad:fe:36:fe:51:90:d6:30:d7:f1:b0:ba:fc:2c:f5:47:
         c2:71:8f:21:5a:63:62:36:3e:c5:ab:e0:8a:4d:ad:ab:63:40:
         bb:2a:1e:b9:50:15:de:d1:6d:9e:51:bc:f4:e1:19:38:3c:78:
         c3:d9:84:5f:0c:63:20:ae:96:03:0c:e3:86:9b:38:ee:55:2f:
         59:69:96:d1:dd:03:2e:5e:f1:c8:63:82:a5:88:71:cb:a7:d5:
         e2:dd:e2:f2:d5:59:7a:e7:f3:d1:62:78:a5:c8:da:57:e1:26:
         1e:b6:de:89:61:91:83:8c:61:6d:05:98:70:b1:9d:f3:62:72:
         d8:08:ad:0e:36:d9:b1:7e:39:48:d1:98:e0:7e:e9:e5:f5:18:
         5a:cd:e6:13:37:6f:19:f9:cd:4f:b4:2a:7d:7d:36:af:49:92:
         a8:3c:2c:1c:99:b5:01:31:d0:18:c4:02:fc:ea:56:fc:10:34:
         5a:9f:db:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:10:15 2024 by rpki-client on console-ams.rpki-client.org