Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4PC4JRS969A7rRwBN6EMhj6w9VcXuKf3EYYHZTyNJ2Li/0/3139312e3235332e32342e302f32342d3234203d3e20323633353234.roa
File:                     3139312e3235332e32342e302f32342d3234203d3e20323633353234.roa (raw, json)
Hash identifier:          1LY8YGBYuZcosQR9RZbmQUOeGBFXm2FIQZ5P47UO6e8=
Subject key identifier:   38:00:B9:F3:44:F4:C3:77:3B:38:CE:CF:E1:72:2A:22:B5:AE:D5:E6
Certificate issuer:       /CN=5CFA9CC80E4DE4A1A680D6A4DE3C7280C2627258
Certificate serial:       4C41B157E45E1B76A202DE59B20C24890B7873A7
Authority key identifier: 5C:FA:9C:C8:0E:4D:E4:A1:A6:80:D6:A4:DE:3C:72:80:C2:62:72:58
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5CFA9CC80E4DE4A1A680D6A4DE3C7280C2627258.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4PC4JRS969A7rRwBN6EMhj6w9VcXuKf3EYYHZTyNJ2Li/0/3139312e3235332e32342e302f32342d3234203d3e20323633353234.roa
Signing time:             Fri 10 Nov 2023 12:21:00 +0000
ROA not before:           Fri 10 Nov 2023 12:16:00 +0000
ROA not after:            Fri 08 Nov 2024 12:21:00 +0000
asID:                     263524
IP address blocks:        191.253.24.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4PC4JRS969A7rRwBN6EMhj6w9VcXuKf3EYYHZTyNJ2Li/0/5CFA9CC80E4DE4A1A680D6A4DE3C7280C2627258.crl
                          rsync://rpki-repo.registro.br/repo/4PC4JRS969A7rRwBN6EMhj6w9VcXuKf3EYYHZTyNJ2Li/0/5CFA9CC80E4DE4A1A680D6A4DE3C7280C2627258.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5CFA9CC80E4DE4A1A680D6A4DE3C7280C2627258.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 10 Jan 2024 06:03:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:41:b1:57:e4:5e:1b:76:a2:02:de:59:b2:0c:24:89:0b:78:73:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5CFA9CC80E4DE4A1A680D6A4DE3C7280C2627258
        Validity
            Not Before: Nov 10 12:16:00 2023 GMT
            Not After : Nov  8 12:21:00 2024 GMT
        Subject: CN=3800B9F344F4C3773B38CECFE1722A22B5AED5E6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:a9:a3:87:c0:e0:0c:c9:85:95:f5:e3:73:2d:
                    69:74:13:57:f5:48:67:85:c3:20:98:1e:0a:3c:b8:
                    5c:bd:d5:69:c6:7a:c8:41:56:7c:a7:db:a4:43:b7:
                    1f:6b:6b:51:87:28:43:cf:88:40:c9:a4:22:40:58:
                    f3:a6:be:5a:73:da:2b:72:8d:ae:1b:c1:4f:88:c2:
                    e8:c8:ed:b0:ba:14:6c:4e:fb:ee:ee:52:54:0b:d2:
                    f4:04:5c:15:a8:83:be:e8:15:16:67:c2:22:51:4a:
                    36:be:d8:1c:36:b6:2e:f7:97:5a:d6:d3:fb:26:ec:
                    63:cc:51:66:00:ab:ca:ef:b6:27:b6:41:e6:5e:26:
                    f4:ea:75:c9:56:58:96:4e:d8:57:d4:e4:ae:ac:69:
                    85:fc:36:f8:96:16:f6:d5:01:a9:fa:33:27:b5:91:
                    9a:2c:64:80:13:7d:18:91:48:c9:b4:ac:f7:f2:17:
                    6b:2b:77:f4:4f:c8:9f:84:0e:24:d3:7b:57:f3:a4:
                    7e:db:b6:f0:8c:ab:9a:6f:7f:aa:e2:de:f9:ac:0b:
                    a8:ac:07:2d:b5:f7:82:9d:e8:be:48:2c:06:8b:76:
                    bb:b2:19:e2:6a:28:ac:3f:82:7b:39:52:05:97:02:
                    65:d0:58:26:f3:49:7f:9c:55:8b:2e:08:ba:30:60:
                    b7:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:00:B9:F3:44:F4:C3:77:3B:38:CE:CF:E1:72:2A:22:B5:AE:D5:E6
            X509v3 Authority Key Identifier:
                keyid:5C:FA:9C:C8:0E:4D:E4:A1:A6:80:D6:A4:DE:3C:72:80:C2:62:72:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4PC4JRS969A7rRwBN6EMhj6w9VcXuKf3EYYHZTyNJ2Li/0/5CFA9CC80E4DE4A1A680D6A4DE3C7280C2627258.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5CFA9CC80E4DE4A1A680D6A4DE3C7280C2627258.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4PC4JRS969A7rRwBN6EMhj6w9VcXuKf3EYYHZTyNJ2Li/0/3139312e3235332e32342e302f32342d3234203d3e20323633353234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.253.24.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8d:08:36:85:7f:7f:fb:72:f9:ba:e2:35:0a:f7:15:0a:e0:07:
         81:5a:0d:e5:bf:7a:c6:58:0a:f8:d2:0b:fa:ad:ca:c0:3a:71:
         9c:fc:2e:cc:86:55:77:39:72:2b:c7:0c:07:0c:a2:36:a9:d9:
         f4:94:a9:15:8d:28:df:d3:72:27:5d:46:1b:e8:e1:29:9c:95:
         23:c2:d3:ba:c8:23:5e:40:f1:c9:84:80:6f:5d:c4:d4:d3:46:
         5a:c7:45:13:3a:ed:04:cd:30:4b:44:99:b3:2c:41:63:d4:c6:
         cf:90:58:4b:50:58:1f:c7:c5:0e:63:8d:7e:df:ae:6c:5b:f1:
         b5:d3:79:25:f7:3d:5e:e1:ac:91:61:05:70:c9:e2:8c:ff:d6:
         d5:af:81:fe:5d:2c:3e:10:68:f5:12:99:26:1a:6a:b1:5a:6a:
         41:4c:f9:29:8b:17:fa:ec:29:49:ff:34:67:b3:b1:41:59:8d:
         67:67:f6:f4:9d:5d:a9:4b:1e:8b:a2:ed:a3:df:d2:55:35:32:
         2d:c1:31:e4:f9:a7:db:cc:99:03:8a:52:b3:78:18:fb:2c:52:
         ae:1f:ac:fc:e2:f8:70:1f:86:05:bd:9e:92:21:ba:13:bc:70:
         da:89:c8:d0:9d:08:b0:38:0a:13:c0:63:c0:2e:98:55:a7:02:
         5f:d9:4f:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 9 05:55:21 2024 by rpki-client on console.sobornost.net