Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/xpQugU6YWWXSw7bH46Qnxoq5Hi9PHrH1hAYGU2erjRw/1/3139312e3234322e3139372e302f32342d3234203d3e20323633313433.roa
File:                     3139312e3234322e3139372e302f32342d3234203d3e20323633313433.roa (raw, json)
Hash identifier:          ATwvZ+8l2/RYVvy6rwJ9p49WkfhM7HXN9zHur5pazw0=
Subject key identifier:   7B:B0:25:C5:9C:54:3E:91:96:F5:7F:80:DA:A6:20:4D:C9:BD:EE:CF
Certificate issuer:       /CN=250B0AD65A4B78C64DD4D568A25D2C2BB27CF86D
Certificate serial:       68E0D664F6B79DD4DA41D0D542AC5FFECBE58B73
Authority key identifier: 25:0B:0A:D6:5A:4B:78:C6:4D:D4:D5:68:A2:5D:2C:2B:B2:7C:F8:6D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/250B0AD65A4B78C64DD4D568A25D2C2BB27CF86D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/xpQugU6YWWXSw7bH46Qnxoq5Hi9PHrH1hAYGU2erjRw/1/3139312e3234322e3139372e302f32342d3234203d3e20323633313433.roa
Signing time:             Thu 04 Apr 2024 22:06:41 +0000
ROA not before:           Thu 04 Apr 2024 22:01:41 +0000
ROA not after:            Thu 03 Apr 2025 22:06:41 +0000
asID:                     263143
IP address blocks:        191.242.197.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/xpQugU6YWWXSw7bH46Qnxoq5Hi9PHrH1hAYGU2erjRw/1/250B0AD65A4B78C64DD4D568A25D2C2BB27CF86D.crl
                          rsync://rpki-repo.registro.br/repo/xpQugU6YWWXSw7bH46Qnxoq5Hi9PHrH1hAYGU2erjRw/1/250B0AD65A4B78C64DD4D568A25D2C2BB27CF86D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/250B0AD65A4B78C64DD4D568A25D2C2BB27CF86D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:e0:d6:64:f6:b7:9d:d4:da:41:d0:d5:42:ac:5f:fe:cb:e5:8b:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=250B0AD65A4B78C64DD4D568A25D2C2BB27CF86D
        Validity
            Not Before: Apr  4 22:01:41 2024 GMT
            Not After : Apr  3 22:06:41 2025 GMT
        Subject: CN=7BB025C59C543E9196F57F80DAA6204DC9BDEECF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:f0:f5:93:d0:20:bc:ea:10:63:19:47:e0:e9:
                    cd:f3:9f:17:38:1b:a0:30:64:50:1d:23:b1:91:51:
                    84:55:62:ca:af:29:6e:44:45:b8:9d:e9:e9:c4:53:
                    d0:13:a7:85:0a:8d:e0:9c:4a:cf:45:f1:fa:00:97:
                    dc:65:85:a1:2a:0a:43:18:ad:cd:a4:5e:d4:19:3e:
                    fe:82:e2:05:8f:f7:c0:14:e7:a5:20:ae:1b:d0:ec:
                    b9:7c:dc:81:76:bb:3d:17:6d:04:1b:03:7b:66:68:
                    70:af:ac:94:90:76:d2:ac:4f:84:42:35:22:51:64:
                    92:fd:05:08:cd:1d:61:f5:14:10:07:c4:b2:13:9a:
                    7d:38:9e:2e:3b:42:9d:10:0e:40:3d:b3:30:3a:f9:
                    43:63:de:06:95:10:e2:ac:28:9c:68:79:28:38:44:
                    68:aa:f9:4d:cb:28:45:81:cd:44:b8:9d:bf:be:34:
                    fe:67:e9:bf:b9:7f:a6:f4:52:7c:b9:d3:a2:a0:ad:
                    9b:f7:b1:60:92:39:89:3f:f2:f0:84:ed:95:c1:4a:
                    8e:2f:b7:32:be:e1:bf:64:0f:bb:f7:ae:eb:b4:8a:
                    9f:04:c5:6d:7d:3a:ee:ea:7c:6f:8b:fb:7f:5d:a0:
                    81:d7:3c:22:4b:2c:6a:7e:bd:75:00:09:24:04:cb:
                    24:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:B0:25:C5:9C:54:3E:91:96:F5:7F:80:DA:A6:20:4D:C9:BD:EE:CF
            X509v3 Authority Key Identifier:
                keyid:25:0B:0A:D6:5A:4B:78:C6:4D:D4:D5:68:A2:5D:2C:2B:B2:7C:F8:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/xpQugU6YWWXSw7bH46Qnxoq5Hi9PHrH1hAYGU2erjRw/1/250B0AD65A4B78C64DD4D568A25D2C2BB27CF86D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/250B0AD65A4B78C64DD4D568A25D2C2BB27CF86D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/xpQugU6YWWXSw7bH46Qnxoq5Hi9PHrH1hAYGU2erjRw/1/3139312e3234322e3139372e302f32342d3234203d3e20323633313433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.242.197.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1d:6f:41:a4:18:44:69:45:1c:a0:c1:e5:27:70:b7:3b:3e:d0:
         c5:b9:94:41:5d:b2:dd:66:1a:12:d9:4d:50:a6:eb:5c:4e:91:
         2b:59:7c:8e:5c:b9:c7:f5:f6:e7:ba:1f:b6:aa:cb:59:b1:1b:
         cb:2c:df:8d:09:05:e8:56:8c:d3:d6:37:70:0d:84:13:d7:d3:
         48:e9:ff:c0:78:2d:18:61:b6:e3:63:ae:6b:99:d0:1b:e7:25:
         33:ac:81:a8:03:6d:9c:f0:9e:fa:cc:46:d1:c4:91:f8:a8:93:
         2b:aa:5f:03:74:e6:11:c5:73:df:69:99:dc:e0:b8:9c:51:c8:
         a1:44:0f:12:a9:8b:56:d5:40:45:68:04:f4:3c:93:e6:c6:8b:
         5c:b3:d1:1c:34:1f:6c:61:6a:af:eb:7d:3a:75:60:a6:25:0a:
         56:82:35:e7:93:9f:d1:61:8f:b1:e7:da:b5:8f:0e:e2:ea:af:
         07:5e:85:fb:84:ec:a7:82:2c:57:cc:ce:c5:1f:31:84:63:33:
         93:b7:0d:81:dc:af:0a:46:58:30:98:2a:4d:4e:85:e8:8e:9a:
         d2:f4:b7:ab:e4:5f:e5:fe:70:99:3d:96:bb:5f:51:80:10:92:
         48:12:8b:91:46:89:0f:ee:9c:3a:ca:c2:3e:25:65:18:e3:60:
         73:00:bc:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 01:25:42 2024 by rpki-client on console-ams.rpki-client.org