Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Hmx4yjrsnLtA3andFR5ZVcHQnTEupF9oWTqovGo7mHkS/0/3139312e352e37322e302f32312d3332203d3e203532353833.roa
File:                     3139312e352e37322e302f32312d3332203d3e203532353833.roa (raw, json)
Hash identifier:          yAE29ksmNWbuy611Jvbmn1PMGOnZfYpH3WnUp0KX65w=
Subject key identifier:   53:C6:11:B2:5F:C3:A2:C6:C5:62:CE:FC:68:07:A8:BF:18:FB:C2:CD
Certificate issuer:       /CN=E1970E01B516F893C61CB25B64A1FB0E8CF7DCF9
Certificate serial:       1F2910DB9E289D646666DA8FF0E4FF32F68F834C
Authority key identifier: E1:97:0E:01:B5:16:F8:93:C6:1C:B2:5B:64:A1:FB:0E:8C:F7:DC:F9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E1970E01B516F893C61CB25B64A1FB0E8CF7DCF9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Hmx4yjrsnLtA3andFR5ZVcHQnTEupF9oWTqovGo7mHkS/0/3139312e352e37322e302f32312d3332203d3e203532353833.roa
Signing time:             Mon 15 Jul 2024 13:29:13 +0000
ROA not before:           Mon 15 Jul 2024 13:24:13 +0000
ROA not after:            Mon 14 Jul 2025 13:29:13 +0000
asID:                     52583
IP address blocks:        191.5.72.0/21 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Hmx4yjrsnLtA3andFR5ZVcHQnTEupF9oWTqovGo7mHkS/0/E1970E01B516F893C61CB25B64A1FB0E8CF7DCF9.crl
                          rsync://rpki-repo.registro.br/repo/Hmx4yjrsnLtA3andFR5ZVcHQnTEupF9oWTqovGo7mHkS/0/E1970E01B516F893C61CB25B64A1FB0E8CF7DCF9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E1970E01B516F893C61CB25B64A1FB0E8CF7DCF9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 30 Nov 2024 14:32:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:29:10:db:9e:28:9d:64:66:66:da:8f:f0:e4:ff:32:f6:8f:83:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E1970E01B516F893C61CB25B64A1FB0E8CF7DCF9
        Validity
            Not Before: Jul 15 13:24:13 2024 GMT
            Not After : Jul 14 13:29:13 2025 GMT
        Subject: CN=53C611B25FC3A2C6C562CEFC6807A8BF18FBC2CD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:e1:79:3e:45:0b:d1:68:84:76:80:9a:29:22:
                    c0:59:eb:3f:ff:33:10:36:89:60:de:9a:23:0f:db:
                    50:a4:3e:cd:97:83:00:1d:34:9a:4d:48:7d:e6:36:
                    e1:e7:4a:ce:b2:e4:37:e8:62:20:ea:3b:fe:61:e6:
                    25:46:11:84:4c:33:40:15:64:e1:3d:2d:6b:38:0f:
                    66:b0:f5:15:b3:b2:a6:f9:1a:ad:74:e7:92:43:78:
                    46:a6:3e:49:8a:c4:b5:8c:cc:05:c8:96:1a:b2:4b:
                    c8:4c:f5:50:83:fa:95:42:af:a5:30:be:e5:80:26:
                    55:44:65:ca:62:0c:98:88:35:45:e4:59:fc:99:f2:
                    d9:18:af:73:c7:cf:b8:0f:f7:af:eb:1c:ab:c4:97:
                    b3:bf:e2:b9:08:1a:5f:be:88:5f:a8:ce:ac:8c:e6:
                    d1:e0:d1:39:a9:da:ed:cf:a3:ee:bd:dc:e5:d0:0b:
                    87:7f:2a:5a:64:e9:c8:51:be:95:5e:41:c8:7a:f2:
                    b6:07:81:fd:f1:f7:fb:fe:71:86:9b:76:41:6b:d6:
                    5e:75:1f:c3:7f:0d:72:d9:1e:a7:ae:81:8f:34:0d:
                    98:00:9f:b2:80:a0:23:e7:44:19:64:c6:ea:05:d9:
                    f8:14:b9:3a:a6:67:43:64:81:43:6c:c0:cd:cd:4f:
                    df:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:C6:11:B2:5F:C3:A2:C6:C5:62:CE:FC:68:07:A8:BF:18:FB:C2:CD
            X509v3 Authority Key Identifier:
                keyid:E1:97:0E:01:B5:16:F8:93:C6:1C:B2:5B:64:A1:FB:0E:8C:F7:DC:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Hmx4yjrsnLtA3andFR5ZVcHQnTEupF9oWTqovGo7mHkS/0/E1970E01B516F893C61CB25B64A1FB0E8CF7DCF9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E1970E01B516F893C61CB25B64A1FB0E8CF7DCF9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Hmx4yjrsnLtA3andFR5ZVcHQnTEupF9oWTqovGo7mHkS/0/3139312e352e37322e302f32312d3332203d3e203532353833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.5.72.0/21

    Signature Algorithm: sha256WithRSAEncryption
         2f:05:57:26:50:20:73:8d:e0:45:9e:44:b4:b1:bd:30:10:a2:
         e7:90:30:05:d4:91:ac:6f:ad:ad:9c:23:57:87:05:5b:49:30:
         9d:65:51:19:cb:44:92:fe:86:5c:31:0c:4e:76:ac:6d:6c:b5:
         53:8f:79:67:27:92:a1:da:21:61:31:7a:6c:f0:ff:1d:52:9d:
         98:55:e2:f1:86:d9:96:e6:09:48:fb:e2:2d:40:31:b7:fc:c9:
         1b:62:ed:2f:0e:16:60:bd:35:d9:13:bb:d8:21:3b:5d:48:58:
         43:c0:74:53:6b:4a:b4:2f:e1:aa:44:2c:b7:a6:64:88:38:bb:
         fa:a9:3c:4e:58:a3:2e:d7:ba:0c:a4:e9:39:26:73:1c:ae:24:
         d9:5a:85:2c:72:d1:15:b2:14:2e:8f:25:ff:23:e1:fc:f2:99:
         1f:d5:e4:9d:4f:11:cf:4d:7a:28:39:16:3f:a4:cc:ad:42:29:
         a7:4c:97:03:82:8b:40:20:7e:49:ef:d7:9f:e8:6f:ed:99:44:
         c1:b7:3f:a0:05:fa:81:68:29:ab:79:cf:e6:24:39:ec:53:ca:
         38:c7:92:64:db:b5:c3:6a:51:af:71:36:1f:0f:5e:24:54:10:
         9a:fd:42:36:63:c3:b0:b9:32:7e:99:42:da:80:01:99:ff:20:
         75:c0:6b:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 29 14:49:09 2024 by rpki-client on console-fra.rpki-client.org