Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/JBXx1mZbRgwDq1wB99JBcFdsYRY8aJ6aLKXx2Wq6tehN/1/3139312e33362e3136302e302f32312d3231203d3e203238313235.roa
File:                     3139312e33362e3136302e302f32312d3231203d3e203238313235.roa (raw, json)
Hash identifier:          K+qoxNipwJ6hkaTDHdJWoXkeD80/s79kDnjbgjLkYas=
Subject key identifier:   BC:A9:32:76:09:F8:4E:56:5F:B5:F9:7E:3E:E6:CA:9F:65:6E:CC:2B
Certificate issuer:       /CN=CBE4C67A3ABBA92F3095F94E1228F06365E6AEEA
Certificate serial:       545BDE4EAC11302F049E51FF4B10D3BCFF770458
Authority key identifier: CB:E4:C6:7A:3A:BB:A9:2F:30:95:F9:4E:12:28:F0:63:65:E6:AE:EA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CBE4C67A3ABBA92F3095F94E1228F06365E6AEEA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/JBXx1mZbRgwDq1wB99JBcFdsYRY8aJ6aLKXx2Wq6tehN/1/3139312e33362e3136302e302f32312d3231203d3e203238313235.roa
Signing time:             Wed 03 Apr 2024 20:20:49 +0000
ROA not before:           Wed 03 Apr 2024 20:15:49 +0000
ROA not after:            Wed 02 Apr 2025 20:20:49 +0000
asID:                     28125
IP address blocks:        191.36.160.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/JBXx1mZbRgwDq1wB99JBcFdsYRY8aJ6aLKXx2Wq6tehN/1/CBE4C67A3ABBA92F3095F94E1228F06365E6AEEA.crl
                          rsync://rpki-repo.registro.br/repo/JBXx1mZbRgwDq1wB99JBcFdsYRY8aJ6aLKXx2Wq6tehN/1/CBE4C67A3ABBA92F3095F94E1228F06365E6AEEA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CBE4C67A3ABBA92F3095F94E1228F06365E6AEEA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 16:26:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:5b:de:4e:ac:11:30:2f:04:9e:51:ff:4b:10:d3:bc:ff:77:04:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CBE4C67A3ABBA92F3095F94E1228F06365E6AEEA
        Validity
            Not Before: Apr  3 20:15:49 2024 GMT
            Not After : Apr  2 20:20:49 2025 GMT
        Subject: CN=BCA9327609F84E565FB5F97E3EE6CA9F656ECC2B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:5d:79:77:71:9d:5a:1b:d4:73:03:00:4b:a5:
                    54:d5:32:3d:de:2e:6a:43:6e:ff:d5:d5:74:b0:4c:
                    de:93:0c:da:90:a2:65:d2:06:ff:9b:46:b3:f6:c7:
                    f7:94:82:37:33:4c:29:79:0b:d7:de:2a:58:10:9c:
                    35:85:cc:30:0d:71:5a:bb:16:e5:1e:f8:7d:0d:16:
                    02:6f:4c:8d:45:40:1d:f1:8e:eb:40:48:86:a6:0f:
                    e6:fb:a4:b6:12:99:dd:be:0e:77:48:a1:03:27:12:
                    6f:1d:55:29:de:c0:99:f4:18:4f:2d:fa:30:39:4b:
                    08:0b:dd:91:a7:db:59:16:28:e4:0f:0b:03:27:f9:
                    42:34:af:14:73:0f:0d:55:1d:8a:03:56:50:e3:33:
                    7e:e9:a0:41:78:32:57:50:4f:a6:38:6d:a8:d7:f4:
                    88:a0:e7:cc:6a:33:af:69:d3:74:99:e4:9d:d7:f2:
                    e4:7d:04:9e:e8:99:94:3e:c3:8d:84:fd:14:76:a4:
                    e8:ed:31:e7:a1:02:9e:41:81:39:e0:8a:e6:62:a9:
                    98:9c:12:77:82:34:3f:5b:8e:3c:30:6a:2c:2b:9b:
                    a7:97:57:c5:0d:b1:1b:51:11:1e:21:6a:92:de:ec:
                    5e:ba:22:ce:6b:fe:79:06:02:15:05:a8:da:47:ff:
                    00:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:A9:32:76:09:F8:4E:56:5F:B5:F9:7E:3E:E6:CA:9F:65:6E:CC:2B
            X509v3 Authority Key Identifier:
                keyid:CB:E4:C6:7A:3A:BB:A9:2F:30:95:F9:4E:12:28:F0:63:65:E6:AE:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/JBXx1mZbRgwDq1wB99JBcFdsYRY8aJ6aLKXx2Wq6tehN/1/CBE4C67A3ABBA92F3095F94E1228F06365E6AEEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CBE4C67A3ABBA92F3095F94E1228F06365E6AEEA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/JBXx1mZbRgwDq1wB99JBcFdsYRY8aJ6aLKXx2Wq6tehN/1/3139312e33362e3136302e302f32312d3231203d3e203238313235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.36.160.0/21

    Signature Algorithm: sha256WithRSAEncryption
         16:26:00:c4:76:32:22:5b:69:5b:cb:6f:20:d1:61:47:10:a1:
         74:42:c6:be:a2:46:a5:c6:e5:f2:51:f2:01:36:6b:ae:4c:cc:
         48:79:06:0b:77:34:6f:e5:0b:ca:3a:b0:dd:b3:d8:f8:d8:56:
         ad:5e:eb:6c:55:f1:5c:b7:3a:f7:1f:73:a9:fe:16:ce:4a:4d:
         f1:1c:ce:05:92:4f:e9:6b:40:c2:dc:2b:a1:71:51:89:84:6d:
         6b:20:3c:43:40:ce:35:47:43:f1:e5:61:54:32:ed:1c:e8:e7:
         d8:8a:51:57:2f:22:c0:3e:9d:38:2d:e4:91:5c:f5:65:0b:42:
         1d:eb:e9:94:9c:e1:5b:46:a7:0a:4a:ba:39:b4:b3:98:18:6d:
         c1:ce:06:b4:3e:c3:b9:2e:d5:08:98:3d:4a:61:19:3b:31:b2:
         1e:8a:cb:9f:a1:89:fd:2c:00:0e:5f:6d:fd:da:46:0c:55:16:
         9d:7e:b3:23:9e:12:98:31:28:24:c5:06:c7:fb:98:e7:32:ac:
         88:a2:09:a3:18:2f:9e:4b:ea:2c:4d:dc:a5:bd:3c:0b:b6:46:
         ba:b6:df:fd:31:7d:a1:39:55:4d:fe:56:24:3f:d1:58:2d:84:
         20:65:54:cb:8d:37:dc:8f:2e:3b:16:43:39:df:64:db:58:93:
         10:51:e4:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 17:08:33 2024 by rpki-client on console-ams.rpki-client.org