Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Hm99MLVemgJZseUfGkM6GoLBbfvMXpphpvWe8U5U6iTn/0/3139312e3234332e3231322e302f32322d3332203d3e20323633353138.roa
File:                     3139312e3234332e3231322e302f32322d3332203d3e20323633353138.roa (raw, json)
Hash identifier:          y63tdg5rSmnqg3BDBodBZ/h24U08+vEM4nRnJ3aq8PY=
Subject key identifier:   B2:C5:60:FD:46:BE:1E:50:C5:49:C9:75:98:B2:6A:B8:D8:A7:8B:4A
Certificate issuer:       /CN=2F4916C0EC5F1E6BFF1A64DC9604454738775E27
Certificate serial:       22C54F5B453024A00A973CD3DCF3FD90F2F7CE4B
Authority key identifier: 2F:49:16:C0:EC:5F:1E:6B:FF:1A:64:DC:96:04:45:47:38:77:5E:27
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F4916C0EC5F1E6BFF1A64DC9604454738775E27.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Hm99MLVemgJZseUfGkM6GoLBbfvMXpphpvWe8U5U6iTn/0/3139312e3234332e3231322e302f32322d3332203d3e20323633353138.roa
Signing time:             Tue 05 Nov 2024 10:27:10 +0000
ROA not before:           Tue 05 Nov 2024 10:22:10 +0000
ROA not after:            Tue 04 Nov 2025 10:27:10 +0000
asID:                     263518
IP address blocks:        191.243.212.0/22 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Hm99MLVemgJZseUfGkM6GoLBbfvMXpphpvWe8U5U6iTn/0/2F4916C0EC5F1E6BFF1A64DC9604454738775E27.crl
                          rsync://rpki-repo.registro.br/repo/Hm99MLVemgJZseUfGkM6GoLBbfvMXpphpvWe8U5U6iTn/0/2F4916C0EC5F1E6BFF1A64DC9604454738775E27.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F4916C0EC5F1E6BFF1A64DC9604454738775E27.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 02:27:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:c5:4f:5b:45:30:24:a0:0a:97:3c:d3:dc:f3:fd:90:f2:f7:ce:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2F4916C0EC5F1E6BFF1A64DC9604454738775E27
        Validity
            Not Before: Nov  5 10:22:10 2024 GMT
            Not After : Nov  4 10:27:10 2025 GMT
        Subject: CN=B2C560FD46BE1E50C549C97598B26AB8D8A78B4A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:fa:4a:33:9e:87:a3:03:26:4b:ba:4d:3c:ad:
                    9b:e0:aa:52:69:e8:0f:13:b9:27:f3:74:61:4b:b5:
                    96:cc:03:b3:41:74:79:4f:f6:22:9b:42:57:98:91:
                    35:3f:50:2f:55:0f:7e:87:41:af:30:f2:ea:c2:06:
                    cc:e1:91:b3:3b:e7:0b:e3:58:8b:bc:34:63:a1:7e:
                    53:75:97:61:7e:c7:c5:4c:13:8b:eb:fc:4b:14:5b:
                    ae:72:2d:ef:3d:c8:1f:a7:bd:13:05:e0:a0:8b:31:
                    7d:16:e5:4a:39:59:df:cf:0f:1b:cf:58:55:f9:9b:
                    1b:43:aa:45:56:51:21:61:26:2b:06:24:e9:cd:9e:
                    d7:42:cc:7f:2b:d9:14:98:2b:15:6d:6b:45:c9:4c:
                    0a:ec:dc:98:60:70:e4:b5:59:1b:97:e4:0f:25:26:
                    3d:e5:0e:51:d5:48:91:a3:ef:b4:7f:d8:ab:58:70:
                    d4:42:51:90:f8:03:a1:ce:05:58:e1:4e:59:a5:2e:
                    6c:48:f5:87:25:a4:7f:fc:02:42:71:ce:d2:00:f0:
                    a4:7d:da:1c:31:8f:d1:92:51:41:2b:21:1f:ae:c8:
                    45:50:62:a8:d4:49:21:c8:03:94:94:17:33:7e:6e:
                    ad:8e:9e:f5:99:f3:8b:97:d0:b9:59:d8:ee:6f:b6:
                    1c:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:C5:60:FD:46:BE:1E:50:C5:49:C9:75:98:B2:6A:B8:D8:A7:8B:4A
            X509v3 Authority Key Identifier:
                keyid:2F:49:16:C0:EC:5F:1E:6B:FF:1A:64:DC:96:04:45:47:38:77:5E:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Hm99MLVemgJZseUfGkM6GoLBbfvMXpphpvWe8U5U6iTn/0/2F4916C0EC5F1E6BFF1A64DC9604454738775E27.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F4916C0EC5F1E6BFF1A64DC9604454738775E27.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Hm99MLVemgJZseUfGkM6GoLBbfvMXpphpvWe8U5U6iTn/0/3139312e3234332e3231322e302f32322d3332203d3e20323633353138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.243.212.0/22

    Signature Algorithm: sha256WithRSAEncryption
         29:82:1e:4d:66:87:1d:30:37:08:94:4e:f5:47:34:1b:f0:14:
         30:c4:96:22:fa:60:8e:2e:45:0d:33:a5:20:5f:46:4f:d7:81:
         f3:30:cc:69:1c:40:98:75:5a:34:09:c3:63:86:e8:63:b2:76:
         4e:f4:66:a0:65:c3:ac:b4:38:9f:fa:dd:09:b4:ac:2b:1c:44:
         56:8b:a9:e6:48:a7:05:d9:68:f2:53:01:59:bc:e7:01:7f:ad:
         a3:f3:fb:84:82:4b:b1:29:8b:c5:bf:81:f1:e6:ef:dd:78:a3:
         6b:20:b7:e9:92:db:39:67:37:ff:14:5b:6b:b7:cb:f9:4d:c8:
         22:e3:5f:53:41:da:e5:76:23:a4:23:54:a4:57:0f:dc:b5:46:
         82:b5:c8:85:94:15:c3:59:56:c4:c0:c5:eb:23:e8:a2:82:4f:
         7f:41:20:da:1e:c9:1b:96:7a:2c:d2:b6:2e:0f:51:25:cb:1c:
         83:2d:ba:bf:11:69:3f:41:82:8d:6a:a7:3d:53:a0:2d:8f:86:
         77:4c:05:79:9b:fb:7b:4d:d8:2a:c8:a8:22:d0:ae:43:1f:33:
         9e:ef:ec:02:9d:99:d0:bf:ff:40:31:68:42:4a:21:c5:45:92:
         c7:03:d9:b3:c0:9d:36:b2:93:60:da:fb:c0:b3:7b:ce:55:19:
         7d:09:0d:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 04:53:01 2024 by rpki-client on console-ams.rpki-client.org