Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/WSxxAn3UtmrYsXRXmUnPj6ZjioavzKUqkWzvnNrBGyw/1/3139322e3134302e3130322e302f32332d3233203d3e20323636323536.roa
File:                     3139322e3134302e3130322e302f32332d3233203d3e20323636323536.roa (raw, json)
Hash identifier:          wgZNsPD6g7F9UvFhvS+0F7Opn7ARc0BJVfdTYUqPxak=
Subject key identifier:   65:01:72:BE:9B:C2:F3:AA:6A:EA:EC:71:C7:54:AC:70:8F:67:5E:17
Certificate issuer:       /CN=98A11CF45A997CA909604F2E4619398BBAA2D923
Certificate serial:       72FE2D7137142E62828BA14FFC49F6DF2053DBC2
Authority key identifier: 98:A1:1C:F4:5A:99:7C:A9:09:60:4F:2E:46:19:39:8B:BA:A2:D9:23
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/98A11CF45A997CA909604F2E4619398BBAA2D923.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/WSxxAn3UtmrYsXRXmUnPj6ZjioavzKUqkWzvnNrBGyw/1/3139322e3134302e3130322e302f32332d3233203d3e20323636323536.roa
Signing time:             Thu 04 Apr 2024 02:15:58 +0000
ROA not before:           Thu 04 Apr 2024 02:10:58 +0000
ROA not after:            Thu 03 Apr 2025 02:15:58 +0000
asID:                     266256
IP address blocks:        192.140.102.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/WSxxAn3UtmrYsXRXmUnPj6ZjioavzKUqkWzvnNrBGyw/1/98A11CF45A997CA909604F2E4619398BBAA2D923.crl
                          rsync://rpki-repo.registro.br/repo/WSxxAn3UtmrYsXRXmUnPj6ZjioavzKUqkWzvnNrBGyw/1/98A11CF45A997CA909604F2E4619398BBAA2D923.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/98A11CF45A997CA909604F2E4619398BBAA2D923.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 11:21:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:fe:2d:71:37:14:2e:62:82:8b:a1:4f:fc:49:f6:df:20:53:db:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98A11CF45A997CA909604F2E4619398BBAA2D923
        Validity
            Not Before: Apr  4 02:10:58 2024 GMT
            Not After : Apr  3 02:15:58 2025 GMT
        Subject: CN=650172BE9BC2F3AA6AEAEC71C754AC708F675E17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:bb:73:36:ea:bd:cd:69:58:99:8b:c0:01:b2:
                    45:39:8d:5e:9f:48:30:5e:6a:5d:64:bb:97:27:13:
                    48:3d:9e:69:73:19:78:e7:88:54:04:f2:70:11:ee:
                    70:7b:da:af:f3:26:77:21:ff:d5:2e:8d:3f:9c:39:
                    87:b9:0b:04:d7:9c:81:33:5f:8a:bd:b3:e1:2e:e3:
                    b9:4c:b0:a9:6a:dc:64:e4:b3:d6:19:35:48:00:65:
                    9e:6c:e1:c5:dd:84:9f:c2:35:ad:2b:a8:79:a2:51:
                    6d:9b:4c:c8:76:42:2e:a6:a2:d3:7d:f7:fd:30:16:
                    09:e0:8e:39:b6:37:64:16:e9:6b:e7:5a:1c:f8:69:
                    d9:80:df:1e:b8:93:78:4f:d5:a2:9c:0a:67:a3:cc:
                    6b:d9:ca:1b:d8:99:7e:40:c8:85:16:25:4c:9f:ab:
                    ab:54:6e:aa:e2:b9:e6:9c:d3:16:0d:fb:47:50:79:
                    0a:6e:dc:f5:c0:09:35:b5:49:cb:b0:1e:c9:1d:c1:
                    78:bf:f8:ef:8e:05:ce:f7:d2:1e:74:99:7c:b2:bc:
                    c5:d2:4b:99:69:8c:21:02:60:19:e6:f6:70:d7:e1:
                    ba:ef:aa:72:8d:2b:13:dc:62:59:41:69:31:af:a5:
                    b0:71:fc:4a:f4:a3:fe:4c:6e:e2:e1:0c:8e:4f:5b:
                    1a:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:01:72:BE:9B:C2:F3:AA:6A:EA:EC:71:C7:54:AC:70:8F:67:5E:17
            X509v3 Authority Key Identifier:
                keyid:98:A1:1C:F4:5A:99:7C:A9:09:60:4F:2E:46:19:39:8B:BA:A2:D9:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/WSxxAn3UtmrYsXRXmUnPj6ZjioavzKUqkWzvnNrBGyw/1/98A11CF45A997CA909604F2E4619398BBAA2D923.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/98A11CF45A997CA909604F2E4619398BBAA2D923.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/WSxxAn3UtmrYsXRXmUnPj6ZjioavzKUqkWzvnNrBGyw/1/3139322e3134302e3130322e302f32332d3233203d3e20323636323536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.140.102.0/23

    Signature Algorithm: sha256WithRSAEncryption
         bb:6f:d3:34:7f:0a:56:91:ae:30:cf:3f:03:f9:34:57:bc:b8:
         3f:ce:40:fc:65:e3:af:5e:71:4c:e8:44:52:44:cf:3f:81:ba:
         61:aa:51:eb:74:a3:ec:fc:a0:35:24:bd:77:ee:28:c6:a6:c6:
         7a:19:9c:a0:87:8b:22:be:6d:7b:64:1f:22:ac:cd:f9:f9:3b:
         7a:fd:ea:6e:11:82:c3:5e:ae:a7:fa:e9:59:2d:14:b7:9b:0e:
         4c:ab:1a:20:e6:24:26:fd:4b:e9:e3:87:a4:f0:5a:83:17:2b:
         18:5c:33:e2:b8:e7:d1:7d:51:9a:05:78:a4:ed:90:d7:42:d8:
         d5:6a:b3:e7:0f:4b:97:8b:82:f5:6a:9a:87:22:f0:a6:1e:03:
         e7:98:90:8d:b0:a7:b9:ae:7c:04:43:97:30:ab:2d:b4:a2:a4:
         2d:9b:67:03:d9:9c:e0:ce:9b:7c:ac:99:8d:20:72:18:26:f9:
         88:a9:6c:22:5a:77:ae:59:4d:9c:a8:35:72:db:12:ae:3b:a5:
         4e:26:af:52:86:41:46:c4:a9:84:5f:5e:94:82:85:4f:5f:7d:
         61:b3:de:0b:79:c3:66:04:04:5f:f5:5a:4a:47:d4:67:f2:9c:
         9d:2a:e8:8f:ef:e6:27:93:ba:96:36:07:56:83:38:08:ae:05:
         9c:bf:2e:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:30:14 2024 by rpki-client on console-fra.rpki-client.org