Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Hmx4yjrsnLtA3andFR5ZVcHQnTEupF9oWTqovGo7mHkS/0/3139312e352e37362e302f32342d3234203d3e20323638343834.roa
File:                     3139312e352e37362e302f32342d3234203d3e20323638343834.roa (raw, json)
Hash identifier:          TEJmS+jinMFQHlEre03Shq0+iL0S48QsIL1jZdP+dbI=
Subject key identifier:   C5:3F:AE:5E:CD:4C:76:EF:E0:D9:BA:A1:31:4A:04:55:10:41:AD:0F
Certificate issuer:       /CN=E1970E01B516F893C61CB25B64A1FB0E8CF7DCF9
Certificate serial:       3549C7D1F1100E816ED5301605ADC8CF755D9013
Authority key identifier: E1:97:0E:01:B5:16:F8:93:C6:1C:B2:5B:64:A1:FB:0E:8C:F7:DC:F9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E1970E01B516F893C61CB25B64A1FB0E8CF7DCF9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Hmx4yjrsnLtA3andFR5ZVcHQnTEupF9oWTqovGo7mHkS/0/3139312e352e37362e302f32342d3234203d3e20323638343834.roa
Signing time:             Tue 19 Nov 2024 15:05:08 +0000
ROA not before:           Tue 19 Nov 2024 15:00:08 +0000
ROA not after:            Tue 18 Nov 2025 15:05:08 +0000
asID:                     268484
IP address blocks:        191.5.76.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Hmx4yjrsnLtA3andFR5ZVcHQnTEupF9oWTqovGo7mHkS/0/E1970E01B516F893C61CB25B64A1FB0E8CF7DCF9.crl
                          rsync://rpki-repo.registro.br/repo/Hmx4yjrsnLtA3andFR5ZVcHQnTEupF9oWTqovGo7mHkS/0/E1970E01B516F893C61CB25B64A1FB0E8CF7DCF9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E1970E01B516F893C61CB25B64A1FB0E8CF7DCF9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 19:56:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:49:c7:d1:f1:10:0e:81:6e:d5:30:16:05:ad:c8:cf:75:5d:90:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E1970E01B516F893C61CB25B64A1FB0E8CF7DCF9
        Validity
            Not Before: Nov 19 15:00:08 2024 GMT
            Not After : Nov 18 15:05:08 2025 GMT
        Subject: CN=C53FAE5ECD4C76EFE0D9BAA1314A04551041AD0F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:6a:f8:c7:c2:de:78:dc:80:98:ca:10:43:95:
                    48:27:2d:df:bb:88:11:26:1e:81:5c:fe:d4:8b:b8:
                    5a:76:19:f4:bb:f1:d6:df:1e:83:4b:2e:91:bf:72:
                    f9:e0:a6:c4:12:0e:0e:15:4d:98:8b:13:80:cb:bb:
                    3f:d6:e9:21:89:02:e8:df:1e:22:ad:5d:5d:4f:92:
                    2b:82:c1:28:42:0f:28:22:28:a0:fd:11:1b:ed:83:
                    be:f8:29:7b:cb:6e:ce:e8:29:83:27:32:43:8f:9f:
                    d3:d4:72:3c:5a:35:09:f6:94:ca:fd:06:3a:2c:16:
                    4b:52:ea:3f:9e:96:05:55:3b:b9:08:2e:0c:cb:4e:
                    5b:b2:0d:70:3f:e7:93:4a:a9:9b:57:33:6b:29:41:
                    c5:b1:b1:14:8b:de:a0:1f:bf:89:d4:a9:67:1b:14:
                    37:55:63:ab:93:ae:7b:1e:83:20:26:e0:9e:27:37:
                    ce:75:d4:15:54:ed:68:2d:27:ac:8c:a9:a8:fc:34:
                    b9:f4:fe:b1:a6:9b:a1:df:bc:c4:de:ab:82:24:19:
                    b4:7e:b1:5d:d6:a8:fb:9d:c5:01:b6:5f:d1:bd:b9:
                    5c:52:1b:e7:a7:1e:43:5b:2b:6a:ca:a5:57:e6:69:
                    6e:c9:72:b2:86:5d:6f:8d:f5:8a:7b:83:8c:c7:a3:
                    63:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:3F:AE:5E:CD:4C:76:EF:E0:D9:BA:A1:31:4A:04:55:10:41:AD:0F
            X509v3 Authority Key Identifier:
                keyid:E1:97:0E:01:B5:16:F8:93:C6:1C:B2:5B:64:A1:FB:0E:8C:F7:DC:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Hmx4yjrsnLtA3andFR5ZVcHQnTEupF9oWTqovGo7mHkS/0/E1970E01B516F893C61CB25B64A1FB0E8CF7DCF9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E1970E01B516F893C61CB25B64A1FB0E8CF7DCF9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Hmx4yjrsnLtA3andFR5ZVcHQnTEupF9oWTqovGo7mHkS/0/3139312e352e37362e302f32342d3234203d3e20323638343834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.5.76.0/24

    Signature Algorithm: sha256WithRSAEncryption
         54:5c:6c:85:3a:c1:e7:6a:66:b0:34:a3:83:39:61:bc:7d:7d:
         a3:18:8e:6b:78:85:07:e8:b2:5f:ca:1a:8b:f0:a7:dd:37:9d:
         49:80:1e:c0:99:59:a7:be:59:99:1c:24:12:87:df:aa:05:de:
         d4:4b:54:4c:e7:4b:ff:10:96:47:01:34:49:35:5c:26:97:71:
         36:ac:12:42:31:73:64:4d:41:38:80:50:6d:22:7e:ff:25:e8:
         49:f7:ab:b2:1b:a7:d0:b4:45:ea:a5:81:fb:a9:06:8a:9d:fc:
         92:4c:e5:62:2c:d0:26:75:2a:6b:80:0d:6b:7b:92:e6:35:28:
         76:d2:1d:51:1f:bc:32:a8:eb:18:92:4d:06:09:a7:ec:f9:42:
         75:b0:1d:b1:3e:51:30:68:0b:65:f5:04:30:32:2c:32:07:ef:
         7e:18:4c:60:27:99:8f:48:cc:e2:4b:8a:fc:f6:3f:6c:6a:78:
         3b:df:e7:cc:e8:90:da:80:23:cf:c9:07:ba:29:8a:7b:1e:c1:
         f8:3b:82:51:1a:6b:08:f7:4c:53:0d:b6:90:ec:83:d2:08:3e:
         fd:f6:62:b8:17:18:77:fe:cd:f7:fc:48:26:9c:6b:cd:4f:31:
         8b:65:94:23:7d:7d:be:27:4b:44:68:7e:4c:e9:fb:7d:d3:9e:
         b9:8c:50:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 22:03:00 2024 by rpki-client on console-fra.rpki-client.org