Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HurcAJzMFLF8e4gpH6JejRDq3jvPJjbkm1m9mRBSDnyo/1/3134312e3139332e3135312e302f32342d3234203d3e203533313230.roa
File:                     3134312e3139332e3135312e302f32342d3234203d3e203533313230.roa (raw, json)
Hash identifier:          9c0vhbE5CL0gaSh5jcCPlcvd8J/Vel1AXX0ZMzzxE4k=
Subject key identifier:   5D:E9:4E:1D:4E:5F:C8:B0:22:76:20:DC:FE:C4:FD:EF:EB:F3:10:24
Certificate issuer:       /CN=2AADFACED9C75E320914697A02E254A3D463839A
Certificate serial:       2E665903C011287C235B286398CF37756CBDBEEA
Authority key identifier: 2A:AD:FA:CE:D9:C7:5E:32:09:14:69:7A:02:E2:54:A3:D4:63:83:9A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2AADFACED9C75E320914697A02E254A3D463839A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HurcAJzMFLF8e4gpH6JejRDq3jvPJjbkm1m9mRBSDnyo/1/3134312e3139332e3135312e302f32342d3234203d3e203533313230.roa
Signing time:             Thu 04 Apr 2024 08:03:03 +0000
ROA not before:           Thu 04 Apr 2024 07:58:03 +0000
ROA not after:            Thu 03 Apr 2025 08:03:03 +0000
asID:                     53120
IP address blocks:        141.193.151.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HurcAJzMFLF8e4gpH6JejRDq3jvPJjbkm1m9mRBSDnyo/1/2AADFACED9C75E320914697A02E254A3D463839A.crl
                          rsync://rpki-repo.registro.br/repo/HurcAJzMFLF8e4gpH6JejRDq3jvPJjbkm1m9mRBSDnyo/1/2AADFACED9C75E320914697A02E254A3D463839A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2AADFACED9C75E320914697A02E254A3D463839A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 21:33:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:66:59:03:c0:11:28:7c:23:5b:28:63:98:cf:37:75:6c:bd:be:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2AADFACED9C75E320914697A02E254A3D463839A
        Validity
            Not Before: Apr  4 07:58:03 2024 GMT
            Not After : Apr  3 08:03:03 2025 GMT
        Subject: CN=5DE94E1D4E5FC8B0227620DCFEC4FDEFEBF31024
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:1c:60:2d:e4:99:c6:b5:01:b4:68:03:38:e1:
                    64:71:06:88:c0:ae:37:83:0f:c5:c1:0f:58:72:19:
                    ae:97:6b:e5:59:84:97:dc:8a:58:03:5f:ee:6e:59:
                    ba:74:df:22:ec:8b:f9:26:33:a6:65:8c:68:31:48:
                    af:23:04:95:c8:09:06:6f:4d:44:ee:13:87:8c:83:
                    46:ab:17:eb:ab:86:e9:61:33:2d:2a:2f:e7:5f:00:
                    64:4d:7a:8c:7c:74:73:c3:79:21:7b:1f:4a:e6:1f:
                    cc:c9:07:32:ea:3d:70:d2:0e:5d:75:73:f6:45:fa:
                    74:4d:21:1f:da:89:fa:7b:2c:e2:a2:fa:0b:12:0f:
                    4b:c4:39:f4:b3:49:3f:b2:fb:32:ea:33:73:9f:b3:
                    b3:26:2e:3f:32:7d:35:ec:9c:66:27:ec:fa:ad:90:
                    28:e4:64:d5:3f:7f:5b:60:4b:a0:5b:fd:91:91:cf:
                    b6:40:1c:85:c8:dc:fe:ff:65:8d:07:d8:89:9b:6f:
                    16:e8:2e:a5:e2:9e:7a:5f:e9:dd:aa:11:26:9a:3c:
                    a8:d5:f3:5a:78:48:1e:fb:c6:2a:df:77:85:a7:28:
                    2b:d6:0d:1c:1c:cf:8a:33:7e:4f:3e:6b:92:60:8e:
                    70:7c:9d:3c:49:11:e6:1d:cf:a0:9f:43:25:22:6a:
                    85:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:E9:4E:1D:4E:5F:C8:B0:22:76:20:DC:FE:C4:FD:EF:EB:F3:10:24
            X509v3 Authority Key Identifier:
                keyid:2A:AD:FA:CE:D9:C7:5E:32:09:14:69:7A:02:E2:54:A3:D4:63:83:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HurcAJzMFLF8e4gpH6JejRDq3jvPJjbkm1m9mRBSDnyo/1/2AADFACED9C75E320914697A02E254A3D463839A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2AADFACED9C75E320914697A02E254A3D463839A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HurcAJzMFLF8e4gpH6JejRDq3jvPJjbkm1m9mRBSDnyo/1/3134312e3139332e3135312e302f32342d3234203d3e203533313230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.193.151.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4b:bc:bc:81:0d:6b:94:e0:57:8b:f4:c2:7f:8c:aa:d8:10:e0:
         17:0c:61:a4:e1:61:59:1b:08:8f:29:c2:b5:3b:01:1b:05:8c:
         c4:6d:64:53:22:0a:f5:67:7d:83:1c:0b:e8:8a:db:e0:c6:93:
         cc:f2:67:49:ff:59:10:f0:e7:9c:11:f9:89:de:d9:ef:8b:b7:
         27:06:42:ba:08:4b:f2:50:19:3b:d4:09:77:f3:ee:d8:dc:e6:
         7a:85:10:e9:0f:4e:25:b8:51:2e:cc:60:a7:7b:6a:2c:95:c6:
         20:5e:73:13:4b:ad:14:39:4f:63:91:db:2e:2c:25:0f:25:bd:
         0c:a0:ed:4f:61:47:93:58:e6:5c:7b:e1:85:27:d7:ea:a2:df:
         c0:ae:9c:09:fd:42:09:85:56:97:0a:c4:78:85:23:a3:5b:1b:
         7e:05:6e:39:2e:79:c2:4d:38:f6:47:4d:68:a5:7f:1d:a7:ac:
         60:24:59:33:fa:c7:e4:1a:52:aa:16:2f:0e:53:01:6d:2f:3d:
         3c:b0:22:6b:5e:1f:fb:32:3b:b6:e5:6d:88:d5:7b:fc:d8:e2:
         ea:d0:6f:ab:93:66:16:37:bf:ac:be:1d:bb:d0:e1:06:96:6a:
         24:01:d9:4b:70:ae:6a:8c:3f:2d:72:e2:4b:a9:f2:b6:9c:a6:
         d0:62:6c:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:10:16 2024 by rpki-client on console-ams.rpki-client.org