Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4PC4JRS969A7rRwBN6EMhj6w9VcXuKf3EYYHZTyNJ2Li/0/3139312e3235332e32342e302f32312d3231203d3e20323633353234.roa
File:                     3139312e3235332e32342e302f32312d3231203d3e20323633353234.roa (raw, json)
Hash identifier:          gW8Sw4Wt4ftdZ/u2Xs0paFLFNqqYHe/dPVALQDzPrdw=
Subject key identifier:   02:7F:B2:C2:B2:18:FC:D9:B1:CC:20:61:49:48:C4:9B:F1:14:85:FF
Certificate issuer:       /CN=5CFA9CC80E4DE4A1A680D6A4DE3C7280C2627258
Certificate serial:       0B226A00148E38BF9F3E23276C21EBFCBE70EABB
Authority key identifier: 5C:FA:9C:C8:0E:4D:E4:A1:A6:80:D6:A4:DE:3C:72:80:C2:62:72:58
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5CFA9CC80E4DE4A1A680D6A4DE3C7280C2627258.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4PC4JRS969A7rRwBN6EMhj6w9VcXuKf3EYYHZTyNJ2Li/0/3139312e3235332e32342e302f32312d3231203d3e20323633353234.roa
Signing time:             Sat 29 Jul 2023 12:20:48 +0000
ROA not before:           Sat 29 Jul 2023 12:15:48 +0000
ROA not after:            Sat 27 Jul 2024 12:20:48 +0000
asID:                     263524
IP address blocks:        191.253.24.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4PC4JRS969A7rRwBN6EMhj6w9VcXuKf3EYYHZTyNJ2Li/0/5CFA9CC80E4DE4A1A680D6A4DE3C7280C2627258.crl
                          rsync://rpki-repo.registro.br/repo/4PC4JRS969A7rRwBN6EMhj6w9VcXuKf3EYYHZTyNJ2Li/0/5CFA9CC80E4DE4A1A680D6A4DE3C7280C2627258.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5CFA9CC80E4DE4A1A680D6A4DE3C7280C2627258.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 10 Jan 2024 06:03:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:22:6a:00:14:8e:38:bf:9f:3e:23:27:6c:21:eb:fc:be:70:ea:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5CFA9CC80E4DE4A1A680D6A4DE3C7280C2627258
        Validity
            Not Before: Jul 29 12:15:48 2023 GMT
            Not After : Jul 27 12:20:48 2024 GMT
        Subject: CN=027FB2C2B218FCD9B1CC20614948C49BF11485FF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:41:fd:7a:bc:fe:db:c9:57:3d:c1:79:19:8f:
                    d3:f3:e1:a2:b2:43:f0:35:91:67:86:60:a0:3b:72:
                    36:1e:df:59:e1:f1:fc:28:e1:af:8d:9c:16:8d:5b:
                    fb:ab:a7:1c:bd:48:5f:24:3d:68:e7:fa:48:8c:8e:
                    89:94:b2:bb:51:31:d1:33:e2:87:92:8c:3a:55:c4:
                    d0:07:01:12:f3:e7:4c:83:ae:ae:cd:5b:d1:49:45:
                    93:09:f3:bb:15:cf:6e:fe:16:65:e1:dc:71:ba:ea:
                    a5:fd:f4:8c:90:a7:cf:ea:fe:30:15:06:55:34:ba:
                    88:9f:00:70:d9:c3:d8:92:ac:51:63:c9:d6:a5:84:
                    5b:8e:a6:5b:d7:a5:2e:89:9e:50:b9:e5:dc:1a:1a:
                    4a:17:47:96:0b:16:2a:1b:f4:e8:ed:5c:23:f5:af:
                    78:04:b3:b8:6b:d7:a6:14:7f:a9:16:38:58:75:1e:
                    21:4f:57:8d:15:2a:c0:72:ef:4b:74:87:56:89:37:
                    82:30:e4:66:06:e0:21:83:a4:27:04:36:88:1a:94:
                    05:2e:9c:fb:7b:e6:89:6d:93:de:bf:07:71:9a:f2:
                    77:36:a5:9b:b7:05:0b:6d:9d:33:1c:5b:64:a8:3d:
                    0c:6d:eb:25:81:83:e6:49:8a:31:00:37:dc:57:da:
                    93:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:7F:B2:C2:B2:18:FC:D9:B1:CC:20:61:49:48:C4:9B:F1:14:85:FF
            X509v3 Authority Key Identifier:
                keyid:5C:FA:9C:C8:0E:4D:E4:A1:A6:80:D6:A4:DE:3C:72:80:C2:62:72:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4PC4JRS969A7rRwBN6EMhj6w9VcXuKf3EYYHZTyNJ2Li/0/5CFA9CC80E4DE4A1A680D6A4DE3C7280C2627258.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5CFA9CC80E4DE4A1A680D6A4DE3C7280C2627258.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4PC4JRS969A7rRwBN6EMhj6w9VcXuKf3EYYHZTyNJ2Li/0/3139312e3235332e32342e302f32312d3231203d3e20323633353234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.253.24.0/21

    Signature Algorithm: sha256WithRSAEncryption
         98:70:5c:b6:20:b3:3b:f7:5e:a5:e6:17:75:21:b0:1b:46:81:
         53:0b:82:04:8f:17:8f:fd:28:23:a5:7b:e4:99:0c:7e:b8:a4:
         0a:0b:cd:8e:df:66:c8:5d:07:d3:c5:c0:cf:88:9a:25:ee:05:
         44:15:37:33:a6:bc:2f:14:7f:34:c4:7f:5a:a7:20:90:91:20:
         d4:d8:b7:d9:19:42:45:3b:1c:ff:c8:79:6c:58:10:93:bf:76:
         bc:4c:b8:8d:87:ba:96:78:9b:73:77:8e:71:7e:0a:8c:e7:fa:
         18:88:0c:da:78:d9:12:08:65:47:0d:d6:5b:7c:9f:1d:af:bc:
         49:41:3a:c3:f1:13:d9:04:24:92:c9:5b:ba:c7:94:a1:07:b6:
         f5:65:aa:2d:b5:ed:7e:8e:97:e4:8c:bd:b1:59:37:74:c9:f4:
         f1:eb:78:17:97:97:8f:14:2f:4a:b6:e7:d7:52:f0:16:93:5b:
         5e:62:47:f9:da:17:0b:d9:36:6c:ce:59:76:85:5f:b0:7a:fa:
         94:14:0a:52:c8:a3:58:b5:3c:01:e2:41:e7:36:80:d3:ec:84:
         0a:e4:9b:9d:28:df:a3:c7:19:2b:43:bc:31:bf:c1:12:13:36:
         6c:c3:b6:91:94:2a:40:70:d9:bb:b8:73:3b:4b:0d:4a:ad:6d:
         ed:51:0f:92
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUCyJqABSOOL+fPiMnbCHr/L5w6rswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUNGQTlDQzgwRTRERTRBMUE2ODBENkE0REUzQzcyODBD
MjYyNzI1ODAeFw0yMzA3MjkxMjE1NDhaFw0yNDA3MjcxMjIwNDhaMDMxMTAvBgNV
BAMTKDAyN0ZCMkMyQjIxOEZDRDlCMUNDMjA2MTQ5NDhDNDlCRjExNDg1RkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDeQf16vP7byVc9wXkZj9Pz4aKy
Q/A1kWeGYKA7cjYe31nh8fwo4a+NnBaNW/urpxy9SF8kPWjn+kiMjomUsrtRMdEz
4oeSjDpVxNAHARLz50yDrq7NW9FJRZMJ87sVz27+FmXh3HG66qX99IyQp8/q/jAV
BlU0uoifAHDZw9iSrFFjydalhFuOplvXpS6JnlC55dwaGkoXR5YLFiob9OjtXCP1
r3gEs7hr16YUf6kWOFh1HiFPV40VKsBy70t0h1aJN4Iw5GYG4CGDpCcENogalAUu
nPt75oltk96/B3Ga8nc2pZu3BQttnTMcW2SoPQxt6yWBg+ZJijEAN9xX2pP5AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUAn+ywrIY/NmxzCBhSUjEm/EUhf8wHwYDVR0j
BBgwFoAUXPqcyA5N5KGmgNak3jxygMJiclgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNFBDNEpSUzk2OUE3clJ3Qk42RU1oajZ3OVZjWHVLZjNFWVlIWlR5Tkoy
TGkvMC81Q0ZBOUNDODBFNERFNEExQTY4MEQ2QTRERTNDNzI4MEMyNjI3MjU4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzVDRkE5Q0M4MEU0REU0QTFB
NjgwRDZBNERFM0M3MjgwQzI2MjcyNTguY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRQQzRKUlM5NjlBN3JSd0JONkVNaGo2dzlWY1h1S2YzRVlZSFpUeU5KMkxpLzAv
MzEzOTMxMmUzMjM1MzMyZTMyMzQyZTMwMmYzMjMxMmQzMjMxMjAzZDNlMjAzMjM2
MzMzNTMyMzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAO//RgwDQYJKoZIhvcNAQELBQADggEBAJhwXLYg
szv3XqXmF3UhsBtGgVMLggSPF4/9KCOle+SZDH64pAoLzY7fZshdB9PFwM+ImiXu
BUQVNzOmvC8UfzTEf1qnIJCRINTYt9kZQkU7HP/IeWxYEJO/drxMuI2HupZ4m3N3
jnF+Cozn+hiIDNp42RIIZUcN1lt8nx2vvElBOsPxE9kEJJLJW7rHlKEHtvVlqi21
7X6Ol+SMvbFZN3TJ9PHreBeXl48UL0q259dS8BaTW15iR/naFwvZNmzOWXaFX7B6
+pQUClLIo1i1PAHiQec2gNPshArkm50o36PHGStDvDG/wRITNmzDtpGUKkBw2bu4
cztLDUqtbe1RD5I=
-----END CERTIFICATE-----
Generated at Tue Jan 9 05:55:21 2024 by rpki-client on console.sobornost.net