Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/zmJR3chq5g8LZWTtSvQrBBC43EDMFgYBf7XSx9EWVHr/0/3230312e3231362e39312e302f32342d3234203d3e20323731373236.roa
File:                     3230312e3231362e39312e302f32342d3234203d3e20323731373236.roa (raw, json)
Hash identifier:          IUFGndobrjXorMd9MDF0BBxKaTMU1ZslTY88po8byVo=
Subject key identifier:   65:B5:34:EC:ED:D7:56:A8:85:EC:75:FB:24:28:8B:F2:C4:2C:7D:4D
Certificate issuer:       /CN=E4A60880B8D4EC0024322D87A27CBCBDC2192A65
Certificate serial:       13FAC9A4A83231CA06F9890B02D833C2BF600243
Authority key identifier: E4:A6:08:80:B8:D4:EC:00:24:32:2D:87:A2:7C:BC:BD:C2:19:2A:65
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4A60880B8D4EC0024322D87A27CBCBDC2192A65.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/zmJR3chq5g8LZWTtSvQrBBC43EDMFgYBf7XSx9EWVHr/0/3230312e3231362e39312e302f32342d3234203d3e20323731373236.roa
Signing time:             Fri 06 Sep 2024 02:57:10 +0000
ROA not before:           Fri 06 Sep 2024 02:52:10 +0000
ROA not after:            Fri 05 Sep 2025 02:57:10 +0000
asID:                     271726
IP address blocks:        201.216.91.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/zmJR3chq5g8LZWTtSvQrBBC43EDMFgYBf7XSx9EWVHr/0/E4A60880B8D4EC0024322D87A27CBCBDC2192A65.crl
                          rsync://rpki-repo.registro.br/repo/zmJR3chq5g8LZWTtSvQrBBC43EDMFgYBf7XSx9EWVHr/0/E4A60880B8D4EC0024322D87A27CBCBDC2192A65.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4A60880B8D4EC0024322D87A27CBCBDC2192A65.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:fa:c9:a4:a8:32:31:ca:06:f9:89:0b:02:d8:33:c2:bf:60:02:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E4A60880B8D4EC0024322D87A27CBCBDC2192A65
        Validity
            Not Before: Sep  6 02:52:10 2024 GMT
            Not After : Sep  5 02:57:10 2025 GMT
        Subject: CN=65B534ECEDD756A885EC75FB24288BF2C42C7D4D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:d2:59:0b:b1:6a:97:47:7b:ac:a3:97:c8:a4:
                    2f:98:ff:69:d6:6c:20:1a:14:52:fc:71:b7:78:48:
                    36:a3:9a:10:29:92:7c:21:ad:f2:5a:b2:67:31:1e:
                    f7:65:9a:1b:f6:d5:3a:15:0f:5d:1f:cc:33:fb:a9:
                    f3:a0:dc:fd:0a:9a:0b:81:f9:a5:b4:b6:b4:c6:a3:
                    80:c6:1e:a6:a5:1b:70:92:51:33:97:a8:9a:48:62:
                    bc:f1:92:c3:e7:a4:36:25:34:02:39:b1:13:94:20:
                    a0:de:a7:1b:46:43:a4:08:8b:36:ed:08:da:e3:5f:
                    39:03:50:3c:39:d0:81:b1:89:6c:54:8b:1b:86:38:
                    33:81:89:4c:84:d5:cf:83:06:0d:d9:d3:a3:15:5d:
                    c7:03:88:2b:cb:0a:37:c2:27:0d:f9:66:8e:66:c0:
                    89:32:18:87:e9:df:57:29:11:46:00:18:c6:bd:37:
                    9d:ba:51:22:ae:74:88:1a:8c:3d:f1:91:a7:c4:d8:
                    bf:5a:58:86:c4:73:5b:dc:2d:6d:4d:50:77:8f:28:
                    0f:54:20:e6:ca:3d:c2:56:d1:ab:75:86:cb:51:e1:
                    01:1b:11:17:3c:9c:5e:72:d7:9f:7d:38:71:f1:b0:
                    f3:e4:9c:d1:36:66:76:99:27:c9:6c:8c:7d:2b:51:
                    d6:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:B5:34:EC:ED:D7:56:A8:85:EC:75:FB:24:28:8B:F2:C4:2C:7D:4D
            X509v3 Authority Key Identifier:
                keyid:E4:A6:08:80:B8:D4:EC:00:24:32:2D:87:A2:7C:BC:BD:C2:19:2A:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/zmJR3chq5g8LZWTtSvQrBBC43EDMFgYBf7XSx9EWVHr/0/E4A60880B8D4EC0024322D87A27CBCBDC2192A65.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4A60880B8D4EC0024322D87A27CBCBDC2192A65.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/zmJR3chq5g8LZWTtSvQrBBC43EDMFgYBf7XSx9EWVHr/0/3230312e3231362e39312e302f32342d3234203d3e20323731373236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.216.91.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d1:9f:92:2f:67:1f:23:50:7d:48:8f:09:bd:f4:f9:41:5a:96:
         2b:c8:e0:14:87:2a:9c:96:a7:21:70:27:20:ae:95:e4:88:c4:
         f7:e1:db:5a:46:51:8a:96:c3:31:4f:0f:84:a6:c1:8d:9d:19:
         ec:a3:da:7c:d9:a1:9e:65:6d:b2:99:2b:2b:1b:a7:a4:a0:3e:
         ef:4a:37:54:34:0e:00:5e:ab:e0:75:ae:70:9f:64:f5:5f:fc:
         1a:f8:9b:e4:f0:3d:b8:96:e4:11:39:ad:62:fe:bf:d7:7f:04:
         8b:35:f5:d9:ab:51:c3:ea:bf:97:68:67:42:98:e1:54:f4:bd:
         cb:8b:86:dc:14:d5:1d:de:08:c9:3c:13:78:d1:6c:3f:bd:47:
         08:e5:a1:35:5c:3f:ea:a1:b3:ca:d4:09:e1:8f:42:d7:f9:12:
         b9:73:20:77:3c:06:b9:32:52:28:68:48:90:57:5c:6b:c1:02:
         64:1d:77:bb:78:aa:0b:97:41:68:70:63:23:00:80:ce:f0:1f:
         9f:d6:67:f8:61:db:a6:91:56:bc:20:55:3e:1c:f7:15:19:80:
         40:4c:62:8d:24:09:9d:8e:a6:e6:f8:04:11:0b:dd:6b:fc:9f:
         a5:fd:2f:b7:4f:f7:d1:89:a6:e3:11:fe:0a:c3:1b:da:02:0b:
         15:42:d9:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 02:30:13 2024 by rpki-client on console-fra.rpki-client.org