Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4PC4JRS969A7rRwBN6EMhj6w9VcXuKf3EYYHZTyNJ2Li/0/3139312e3235332e32342e302f32322d3232203d3e20323633353234.roa
File:                     3139312e3235332e32342e302f32322d3232203d3e20323633353234.roa (raw, json)
Hash identifier:          QcHgp9AA4U/8wDHsm8FtD+KwSGV4sD/QT70FGZMqNPQ=
Subject key identifier:   A0:AA:B6:E0:9B:1D:D9:06:34:09:CB:FF:18:CE:2E:57:92:F2:24:CA
Certificate issuer:       /CN=5CFA9CC80E4DE4A1A680D6A4DE3C7280C2627258
Certificate serial:       7228A65482028CEFDF1E0D7862E098CB9B8FB2FA
Authority key identifier: 5C:FA:9C:C8:0E:4D:E4:A1:A6:80:D6:A4:DE:3C:72:80:C2:62:72:58
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5CFA9CC80E4DE4A1A680D6A4DE3C7280C2627258.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4PC4JRS969A7rRwBN6EMhj6w9VcXuKf3EYYHZTyNJ2Li/0/3139312e3235332e32342e302f32322d3232203d3e20323633353234.roa
Signing time:             Sat 29 Jul 2023 12:20:54 +0000
ROA not before:           Sat 29 Jul 2023 12:15:54 +0000
ROA not after:            Sat 27 Jul 2024 12:20:54 +0000
asID:                     263524
IP address blocks:        191.253.24.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4PC4JRS969A7rRwBN6EMhj6w9VcXuKf3EYYHZTyNJ2Li/0/5CFA9CC80E4DE4A1A680D6A4DE3C7280C2627258.crl
                          rsync://rpki-repo.registro.br/repo/4PC4JRS969A7rRwBN6EMhj6w9VcXuKf3EYYHZTyNJ2Li/0/5CFA9CC80E4DE4A1A680D6A4DE3C7280C2627258.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5CFA9CC80E4DE4A1A680D6A4DE3C7280C2627258.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 10 Jan 2024 06:03:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:28:a6:54:82:02:8c:ef:df:1e:0d:78:62:e0:98:cb:9b:8f:b2:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5CFA9CC80E4DE4A1A680D6A4DE3C7280C2627258
        Validity
            Not Before: Jul 29 12:15:54 2023 GMT
            Not After : Jul 27 12:20:54 2024 GMT
        Subject: CN=A0AAB6E09B1DD9063409CBFF18CE2E5792F224CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:fd:32:f4:f8:87:a6:86:60:09:5d:74:7d:49:
                    76:92:c9:cd:1b:e3:11:bc:2f:3b:f2:00:f2:de:b6:
                    68:ba:01:27:a8:c7:6e:f8:5a:0b:c5:3e:f6:4b:47:
                    8e:12:70:b9:7b:d6:54:be:6c:fd:c0:b3:8b:a9:07:
                    93:ab:ff:7c:ba:98:0b:09:52:ee:76:0c:f2:e4:1e:
                    f9:a6:fa:f7:c8:75:d5:9d:d2:29:60:7d:f6:65:c6:
                    c4:d0:db:d8:62:c1:8e:1d:9b:b0:27:f4:87:b6:1c:
                    90:d9:19:be:3f:f0:30:15:f8:a2:1c:55:ae:2b:15:
                    0d:c0:f0:e9:d4:2c:7f:3a:0a:68:a6:f7:00:9c:59:
                    15:7b:4f:70:fd:48:21:4b:3e:88:b9:be:56:74:e6:
                    4a:6f:6b:ce:29:e4:95:96:d2:76:5b:59:97:32:9f:
                    86:63:51:6c:1b:67:ea:4c:82:10:c1:97:65:67:79:
                    9a:09:c0:11:75:af:c5:a3:dc:51:4a:b0:6f:54:ae:
                    de:f0:74:cb:e8:aa:68:71:5e:c4:fe:02:d7:a3:1e:
                    9c:8c:36:e3:5e:10:82:69:fe:11:35:38:2c:58:9e:
                    4d:52:b4:5b:b6:38:d2:2c:6a:95:0a:f8:fc:de:b4:
                    b4:c4:26:26:b4:4a:bc:a7:80:84:76:34:fe:e1:6a:
                    6d:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:AA:B6:E0:9B:1D:D9:06:34:09:CB:FF:18:CE:2E:57:92:F2:24:CA
            X509v3 Authority Key Identifier:
                keyid:5C:FA:9C:C8:0E:4D:E4:A1:A6:80:D6:A4:DE:3C:72:80:C2:62:72:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4PC4JRS969A7rRwBN6EMhj6w9VcXuKf3EYYHZTyNJ2Li/0/5CFA9CC80E4DE4A1A680D6A4DE3C7280C2627258.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5CFA9CC80E4DE4A1A680D6A4DE3C7280C2627258.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4PC4JRS969A7rRwBN6EMhj6w9VcXuKf3EYYHZTyNJ2Li/0/3139312e3235332e32342e302f32322d3232203d3e20323633353234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.253.24.0/22

    Signature Algorithm: sha256WithRSAEncryption
         24:d1:c0:11:59:92:25:85:e0:bf:3f:a9:52:fb:0f:01:c2:25:
         51:66:d3:25:df:5c:13:45:ae:88:77:47:ae:d8:db:ee:6f:dd:
         ef:db:c7:6e:2e:ac:a8:f5:14:d6:e2:18:20:3a:e3:02:4a:e1:
         d8:e4:9f:38:89:a0:dc:40:78:36:33:ad:1b:84:3a:66:76:13:
         86:64:ee:b8:2b:11:eb:6b:25:a7:52:24:db:b1:28:c6:2c:eb:
         4c:97:62:6a:3b:b3:c4:95:a0:1f:b6:78:06:2e:36:16:e3:51:
         49:59:a4:e3:91:d7:0a:94:f5:08:55:83:c3:ce:a1:86:4b:26:
         04:2f:35:20:a1:78:8a:6a:0e:9b:b2:c8:fa:ad:af:77:42:d8:
         31:a9:1f:89:3d:9e:b2:3f:1e:75:6d:0f:84:29:a1:ea:1c:8d:
         59:46:22:d2:86:e7:3b:bb:0a:de:53:62:94:e7:72:ed:25:f4:
         c2:5b:65:68:d4:d9:3e:bf:bc:7f:27:91:92:9d:ab:5f:3b:84:
         4a:e4:f0:24:5a:40:c4:c6:75:be:3b:f0:84:ac:e2:b5:32:3b:
         60:29:d2:3d:c2:87:fe:47:f2:3c:aa:02:2e:54:8c:d3:4f:83:
         15:34:2e:8a:a5:45:2a:b8:5d:6b:30:38:14:4f:e5:4b:d7:b0:
         96:93:c1:e7
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUciimVIICjO/fHg14YuCYy5uPsvowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUNGQTlDQzgwRTRERTRBMUE2ODBENkE0REUzQzcyODBD
MjYyNzI1ODAeFw0yMzA3MjkxMjE1NTRaFw0yNDA3MjcxMjIwNTRaMDMxMTAvBgNV
BAMTKEEwQUFCNkUwOUIxREQ5MDYzNDA5Q0JGRjE4Q0UyRTU3OTJGMjI0Q0EwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCf/TL0+IemhmAJXXR9SXaSyc0b
4xG8LzvyAPLetmi6ASeox274WgvFPvZLR44ScLl71lS+bP3As4upB5Or/3y6mAsJ
Uu52DPLkHvmm+vfIddWd0ilgffZlxsTQ29hiwY4dm7An9Ie2HJDZGb4/8DAV+KIc
Va4rFQ3A8OnULH86Cmim9wCcWRV7T3D9SCFLPoi5vlZ05kpva84p5JWW0nZbWZcy
n4ZjUWwbZ+pMghDBl2VneZoJwBF1r8Wj3FFKsG9Urt7wdMvoqmhxXsT+AtejHpyM
NuNeEIJp/hE1OCxYnk1StFu2ONIsapUK+PzetLTEJia0SryngIR2NP7ham2JAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUoKq24Jsd2QY0Ccv/GM4uV5LyJMowHwYDVR0j
BBgwFoAUXPqcyA5N5KGmgNak3jxygMJiclgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNFBDNEpSUzk2OUE3clJ3Qk42RU1oajZ3OVZjWHVLZjNFWVlIWlR5Tkoy
TGkvMC81Q0ZBOUNDODBFNERFNEExQTY4MEQ2QTRERTNDNzI4MEMyNjI3MjU4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzVDRkE5Q0M4MEU0REU0QTFB
NjgwRDZBNERFM0M3MjgwQzI2MjcyNTguY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRQQzRKUlM5NjlBN3JSd0JONkVNaGo2dzlWY1h1S2YzRVlZSFpUeU5KMkxpLzAv
MzEzOTMxMmUzMjM1MzMyZTMyMzQyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzMjM2
MzMzNTMyMzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAK//RgwDQYJKoZIhvcNAQELBQADggEBACTRwBFZ
kiWF4L8/qVL7DwHCJVFm0yXfXBNFroh3R67Y2+5v3e/bx24urKj1FNbiGCA64wJK
4djknziJoNxAeDYzrRuEOmZ2E4Zk7rgrEetrJadSJNuxKMYs60yXYmo7s8SVoB+2
eAYuNhbjUUlZpOOR1wqU9QhVg8POoYZLJgQvNSCheIpqDpuyyPqtr3dC2DGpH4k9
nrI/HnVtD4QpoeocjVlGItKG5zu7Ct5TYpTncu0l9MJbZWjU2T6/vH8nkZKdq187
hErk8CRaQMTGdb478ISs4rUyO2Ap0j3Ch/5H8jyqAi5UjNNPgxU0LoqlRSq4XWsw
OBRP5UvXsJaTwec=
-----END CERTIFICATE-----
Generated at Tue Jan 9 05:55:21 2024 by rpki-client on console.sobornost.net