Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/xpQugU6YWWXSw7bH46Qnxoq5Hi9PHrH1hAYGU2erjRw/1/3139312e3234322e3139362e302f32332d3233203d3e20323633313433.roa
File:                     3139312e3234322e3139362e302f32332d3233203d3e20323633313433.roa (raw, json)
Hash identifier:          +pnoY2NjD/47wfbCWhznUaERDBSbjtnI2NstgYB/dSs=
Subject key identifier:   EB:C3:F2:78:B3:1F:F3:AC:B9:D1:2C:AD:BB:E4:B7:11:27:F3:45:73
Certificate issuer:       /CN=250B0AD65A4B78C64DD4D568A25D2C2BB27CF86D
Certificate serial:       29EB2365B90679EA60A6F3D8DEB5295EF4ACF713
Authority key identifier: 25:0B:0A:D6:5A:4B:78:C6:4D:D4:D5:68:A2:5D:2C:2B:B2:7C:F8:6D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/250B0AD65A4B78C64DD4D568A25D2C2BB27CF86D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/xpQugU6YWWXSw7bH46Qnxoq5Hi9PHrH1hAYGU2erjRw/1/3139312e3234322e3139362e302f32332d3233203d3e20323633313433.roa
Signing time:             Tue 25 Jun 2024 20:17:38 +0000
ROA not before:           Tue 25 Jun 2024 20:12:38 +0000
ROA not after:            Tue 24 Jun 2025 20:17:38 +0000
asID:                     263143
IP address blocks:        191.242.196.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/xpQugU6YWWXSw7bH46Qnxoq5Hi9PHrH1hAYGU2erjRw/1/250B0AD65A4B78C64DD4D568A25D2C2BB27CF86D.crl
                          rsync://rpki-repo.registro.br/repo/xpQugU6YWWXSw7bH46Qnxoq5Hi9PHrH1hAYGU2erjRw/1/250B0AD65A4B78C64DD4D568A25D2C2BB27CF86D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/250B0AD65A4B78C64DD4D568A25D2C2BB27CF86D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 21:08:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:eb:23:65:b9:06:79:ea:60:a6:f3:d8:de:b5:29:5e:f4:ac:f7:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=250B0AD65A4B78C64DD4D568A25D2C2BB27CF86D
        Validity
            Not Before: Jun 25 20:12:38 2024 GMT
            Not After : Jun 24 20:17:38 2025 GMT
        Subject: CN=EBC3F278B31FF3ACB9D12CADBBE4B71127F34573
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:68:8a:ba:11:2a:7b:de:10:f2:a2:c2:2d:c9:
                    0a:e7:94:25:3e:cc:fd:7d:89:f8:d1:fc:db:47:66:
                    b6:3d:28:16:e0:55:df:ff:2a:00:cc:46:2b:02:80:
                    7e:59:9c:5c:fd:71:48:60:84:6f:9d:80:1b:04:36:
                    36:0d:23:a2:27:65:c4:c6:61:3d:d2:19:0d:8c:da:
                    5b:df:a7:49:dc:df:ad:5e:e8:22:8b:64:03:97:86:
                    5c:55:bc:c1:84:95:aa:d4:70:0d:c0:96:b0:9b:c2:
                    0c:87:80:c1:ca:89:5d:46:d7:1d:57:11:d4:62:47:
                    e9:7c:a7:33:ac:9c:06:1e:c4:77:51:6e:63:61:25:
                    51:af:b5:f7:c9:d5:3a:8b:aa:0a:99:78:de:93:e4:
                    1c:ae:42:33:cf:10:ec:d1:f1:04:d7:5b:d8:52:5f:
                    d4:c7:06:1d:4b:ba:76:20:60:a7:ba:ed:c1:d7:3b:
                    be:cd:07:ea:22:c3:10:65:24:f4:50:e1:f2:fa:af:
                    48:b4:ae:73:3d:81:ee:67:40:1e:3b:69:10:29:b3:
                    0a:39:81:47:10:fd:7f:09:32:cd:4d:0b:f4:47:6c:
                    36:2f:11:78:05:ab:58:46:2c:51:95:25:7d:8a:2a:
                    d8:9c:bf:97:72:e5:1a:24:22:06:1e:5f:5d:26:39:
                    11:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:C3:F2:78:B3:1F:F3:AC:B9:D1:2C:AD:BB:E4:B7:11:27:F3:45:73
            X509v3 Authority Key Identifier:
                keyid:25:0B:0A:D6:5A:4B:78:C6:4D:D4:D5:68:A2:5D:2C:2B:B2:7C:F8:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/xpQugU6YWWXSw7bH46Qnxoq5Hi9PHrH1hAYGU2erjRw/1/250B0AD65A4B78C64DD4D568A25D2C2BB27CF86D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/250B0AD65A4B78C64DD4D568A25D2C2BB27CF86D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/xpQugU6YWWXSw7bH46Qnxoq5Hi9PHrH1hAYGU2erjRw/1/3139312e3234322e3139362e302f32332d3233203d3e20323633313433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.242.196.0/23

    Signature Algorithm: sha256WithRSAEncryption
         20:fb:b5:45:9f:54:7e:cd:a3:3d:8a:57:da:b1:9f:a9:c0:f7:
         62:4a:da:ba:ea:31:83:8b:8d:ea:79:0e:24:61:43:71:29:30:
         d7:2b:f0:eb:0b:9f:fc:06:54:06:c2:a2:12:15:bc:bf:c6:18:
         d4:2d:ec:2d:a2:18:03:9d:ad:d0:f8:38:a8:42:aa:a4:70:78:
         d6:ee:fb:91:d1:49:2c:e0:a4:4f:0b:f8:b4:bd:7f:7a:8e:58:
         d3:44:be:74:ac:18:f7:ae:a4:27:09:d1:ae:b4:73:83:9e:76:
         c6:a6:04:de:53:13:21:74:1e:1a:78:59:b4:36:0a:d0:0c:6c:
         76:49:8c:89:e7:58:c0:7f:b5:68:68:d4:2b:cb:fd:c8:be:fe:
         6a:5b:09:b0:09:b4:13:cb:a5:0d:f1:5a:dc:fa:f4:93:76:37:
         62:e4:1c:32:6d:b4:f9:ac:3c:72:ac:cb:ea:5e:ea:14:ba:24:
         7c:e5:c4:2b:c1:dc:01:ff:13:3e:65:ee:4b:b3:39:38:17:8a:
         0f:5d:68:45:71:17:ea:d6:e4:ba:da:2f:f8:e6:58:e9:f5:86:
         63:14:a8:d1:2f:a2:da:27:20:43:a6:45:e1:b8:e4:20:c1:df:
         76:3a:6e:6c:12:65:29:da:64:c2:e9:cf:c0:e1:06:2a:9e:f8:
         da:a8:99:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 21:52:43 2024 by rpki-client on console-fra.rpki-client.org