Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/WSxxAn3UtmrYsXRXmUnPj6ZjioavzKUqkWzvnNrBGyw/1/3139322e3134302e3130322e302f32342d3234203d3e20323636323536.roa
File:                     3139322e3134302e3130322e302f32342d3234203d3e20323636323536.roa (raw, json)
Hash identifier:          IlKPNsjGYIr+xMvxoys4z5tm987MYCGPqKADXKW4DhI=
Subject key identifier:   72:4F:0B:15:A8:B2:26:31:92:9B:E9:E6:32:91:7D:81:54:EF:AD:EA
Certificate issuer:       /CN=98A11CF45A997CA909604F2E4619398BBAA2D923
Certificate serial:       125BA758F3CD9938D003148DB6473F88CDCAF05A
Authority key identifier: 98:A1:1C:F4:5A:99:7C:A9:09:60:4F:2E:46:19:39:8B:BA:A2:D9:23
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/98A11CF45A997CA909604F2E4619398BBAA2D923.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/WSxxAn3UtmrYsXRXmUnPj6ZjioavzKUqkWzvnNrBGyw/1/3139322e3134302e3130322e302f32342d3234203d3e20323636323536.roa
Signing time:             Thu 04 Apr 2024 02:15:59 +0000
ROA not before:           Thu 04 Apr 2024 02:10:59 +0000
ROA not after:            Thu 03 Apr 2025 02:15:59 +0000
asID:                     266256
IP address blocks:        192.140.102.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/WSxxAn3UtmrYsXRXmUnPj6ZjioavzKUqkWzvnNrBGyw/1/98A11CF45A997CA909604F2E4619398BBAA2D923.crl
                          rsync://rpki-repo.registro.br/repo/WSxxAn3UtmrYsXRXmUnPj6ZjioavzKUqkWzvnNrBGyw/1/98A11CF45A997CA909604F2E4619398BBAA2D923.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/98A11CF45A997CA909604F2E4619398BBAA2D923.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 11:21:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:5b:a7:58:f3:cd:99:38:d0:03:14:8d:b6:47:3f:88:cd:ca:f0:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98A11CF45A997CA909604F2E4619398BBAA2D923
        Validity
            Not Before: Apr  4 02:10:59 2024 GMT
            Not After : Apr  3 02:15:59 2025 GMT
        Subject: CN=724F0B15A8B22631929BE9E632917D8154EFADEA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:7d:e8:55:ac:8e:44:f3:d6:4c:c1:19:39:85:
                    ef:8e:f4:06:c5:93:03:c8:13:d0:32:8b:a9:9d:67:
                    d1:56:c7:af:6d:c9:c4:0a:1b:36:fe:6c:3f:ab:61:
                    40:f6:11:89:48:de:08:35:f2:6d:9c:86:fc:96:a2:
                    12:75:60:7f:b7:36:9b:fa:78:7b:03:83:c0:a5:aa:
                    0b:60:25:49:60:8c:f6:a0:59:3a:d5:06:5b:97:d2:
                    55:5b:d8:56:07:36:32:3d:6e:7f:46:4e:91:95:67:
                    eb:24:4c:33:d5:e7:70:0d:15:49:a1:51:c7:39:42:
                    cf:6e:3f:af:73:02:8b:38:4a:bc:b0:a0:5d:96:9f:
                    6e:d5:e1:b0:cd:2b:f2:4f:64:7f:dd:b7:e9:9f:7d:
                    09:08:a1:76:0a:3d:53:a5:c3:26:47:ad:36:fd:e0:
                    be:04:09:33:5d:03:7c:25:7f:cd:4a:15:fc:08:0e:
                    02:8e:cd:07:cd:f0:cc:46:57:da:f5:eb:e3:f1:7c:
                    8b:bc:39:b5:6b:ad:d3:49:68:d5:a9:56:a5:c7:38:
                    16:62:9f:29:a8:d5:c3:21:72:8c:9a:dc:57:c2:63:
                    df:84:36:84:9b:e7:ed:2c:05:58:77:1d:a7:65:2e:
                    cb:86:b4:89:dd:09:37:0b:f5:cb:c6:b3:a3:b8:2c:
                    6c:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:4F:0B:15:A8:B2:26:31:92:9B:E9:E6:32:91:7D:81:54:EF:AD:EA
            X509v3 Authority Key Identifier:
                keyid:98:A1:1C:F4:5A:99:7C:A9:09:60:4F:2E:46:19:39:8B:BA:A2:D9:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/WSxxAn3UtmrYsXRXmUnPj6ZjioavzKUqkWzvnNrBGyw/1/98A11CF45A997CA909604F2E4619398BBAA2D923.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/98A11CF45A997CA909604F2E4619398BBAA2D923.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/WSxxAn3UtmrYsXRXmUnPj6ZjioavzKUqkWzvnNrBGyw/1/3139322e3134302e3130322e302f32342d3234203d3e20323636323536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.140.102.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ab:17:84:e9:da:d1:0f:9b:78:01:62:19:94:80:8f:3f:36:db:
         17:de:e2:0a:25:0c:6b:5c:81:3a:56:57:b3:45:2d:d0:c4:7c:
         eb:93:92:3e:9d:20:3d:b4:d3:b7:aa:01:05:09:39:c3:7b:a5:
         8d:30:3d:b9:78:21:32:82:8b:53:39:20:e0:71:48:a3:1e:4e:
         9b:82:c0:33:fa:58:02:49:38:3d:29:31:f6:5e:93:db:92:9b:
         c1:9f:ef:87:f0:55:7d:99:6b:2a:f0:45:08:37:a7:e5:35:b2:
         a3:c6:d3:6f:6e:5d:46:7e:a1:32:f6:62:d8:77:c5:28:d3:b3:
         51:06:f4:60:32:f7:25:dc:9b:c8:0d:10:e8:30:9a:d1:b3:6e:
         d8:a1:78:da:cf:87:81:9d:06:4c:21:b9:08:59:8d:76:9a:97:
         09:71:0d:7c:0d:0e:de:40:f6:c8:db:da:ff:60:60:97:02:41:
         df:91:28:d0:7f:36:48:f0:0e:6e:f9:50:9e:1f:1e:61:f2:bb:
         d6:6e:e0:bd:0c:bf:ee:87:70:76:e4:d3:33:f6:38:29:d3:de:
         93:4c:46:8b:47:34:47:35:73:fa:3d:ad:da:2d:04:c0:08:42:
         2d:c9:12:5f:e5:6a:04:e0:fe:f2:56:1c:d4:96:01:90:aa:06:
         95:b9:54:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:39:28 2024 by rpki-client on console-ams.rpki-client.org