Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4PC4JRS969A7rRwBN6EMhj6w9VcXuKf3EYYHZTyNJ2Li/0/3139312e3235332e32362e302f32332d3233203d3e20323633353234.roa
File:                     3139312e3235332e32362e302f32332d3233203d3e20323633353234.roa (raw, json)
Hash identifier:          47o9kWHROOx3W1pCG2gmeSMMVrZCk6ygBR9ySQGukVY=
Subject key identifier:   22:A6:1B:FF:DF:AE:EC:27:AE:B2:F0:6E:A1:98:DE:55:05:6D:A9:0A
Certificate issuer:       /CN=5CFA9CC80E4DE4A1A680D6A4DE3C7280C2627258
Certificate serial:       3D437DBF01F3802242B4C19785BBCBD8943FCA79
Authority key identifier: 5C:FA:9C:C8:0E:4D:E4:A1:A6:80:D6:A4:DE:3C:72:80:C2:62:72:58
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5CFA9CC80E4DE4A1A680D6A4DE3C7280C2627258.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4PC4JRS969A7rRwBN6EMhj6w9VcXuKf3EYYHZTyNJ2Li/0/3139312e3235332e32362e302f32332d3233203d3e20323633353234.roa
Signing time:             Wed 13 Dec 2023 21:24:10 +0000
ROA not before:           Wed 13 Dec 2023 21:19:10 +0000
ROA not after:            Wed 11 Dec 2024 21:24:10 +0000
asID:                     263524
IP address blocks:        191.253.26.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4PC4JRS969A7rRwBN6EMhj6w9VcXuKf3EYYHZTyNJ2Li/0/5CFA9CC80E4DE4A1A680D6A4DE3C7280C2627258.crl
                          rsync://rpki-repo.registro.br/repo/4PC4JRS969A7rRwBN6EMhj6w9VcXuKf3EYYHZTyNJ2Li/0/5CFA9CC80E4DE4A1A680D6A4DE3C7280C2627258.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5CFA9CC80E4DE4A1A680D6A4DE3C7280C2627258.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 10 Jan 2024 06:03:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:43:7d:bf:01:f3:80:22:42:b4:c1:97:85:bb:cb:d8:94:3f:ca:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5CFA9CC80E4DE4A1A680D6A4DE3C7280C2627258
        Validity
            Not Before: Dec 13 21:19:10 2023 GMT
            Not After : Dec 11 21:24:10 2024 GMT
        Subject: CN=22A61BFFDFAEEC27AEB2F06EA198DE55056DA90A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:97:8a:f4:b4:33:a5:83:52:12:0d:32:c5:24:
                    5c:38:b9:05:56:44:e1:c2:11:65:89:9e:f5:e2:d4:
                    14:9f:97:2d:65:bd:79:e6:19:28:10:b2:d1:55:89:
                    67:52:79:93:40:2c:4f:84:6e:1e:52:d6:85:1d:8d:
                    fb:f8:cc:bf:2b:66:9a:bc:d0:84:97:be:6a:75:51:
                    88:12:95:6f:49:94:ac:f7:ce:d9:e0:73:89:49:ed:
                    1d:46:6b:08:89:b8:d9:f6:d2:c0:34:d0:1e:ec:a3:
                    69:4e:06:d8:c8:1b:f9:06:5a:9d:03:e7:da:03:47:
                    b4:db:f6:2d:92:78:81:dc:f0:e4:99:27:a4:9f:66:
                    36:51:58:c3:cb:5d:e1:e6:66:48:9d:87:8f:db:44:
                    2d:7c:ae:4c:1a:60:08:95:ca:b8:e7:f4:16:80:d3:
                    3d:91:6b:62:04:eb:f1:ee:64:60:44:ad:e9:3c:79:
                    42:9a:7f:9e:b2:09:71:85:b1:c0:cd:40:ec:70:5e:
                    55:08:6f:a6:9e:8a:f2:5d:e6:81:aa:9d:7a:7b:a5:
                    b2:01:77:6c:73:57:27:19:8d:4a:f5:ac:f9:e0:eb:
                    d9:70:a5:35:a9:c9:1c:10:1d:bc:24:b2:12:32:7b:
                    58:66:bc:eb:80:84:71:80:f1:88:68:37:cd:89:53:
                    5d:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:A6:1B:FF:DF:AE:EC:27:AE:B2:F0:6E:A1:98:DE:55:05:6D:A9:0A
            X509v3 Authority Key Identifier:
                keyid:5C:FA:9C:C8:0E:4D:E4:A1:A6:80:D6:A4:DE:3C:72:80:C2:62:72:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4PC4JRS969A7rRwBN6EMhj6w9VcXuKf3EYYHZTyNJ2Li/0/5CFA9CC80E4DE4A1A680D6A4DE3C7280C2627258.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5CFA9CC80E4DE4A1A680D6A4DE3C7280C2627258.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4PC4JRS969A7rRwBN6EMhj6w9VcXuKf3EYYHZTyNJ2Li/0/3139312e3235332e32362e302f32332d3233203d3e20323633353234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.253.26.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8c:eb:80:91:ca:93:92:94:f2:61:75:31:a4:8a:fe:3a:72:53:
         b7:2b:dc:18:37:8b:be:17:0d:89:e5:b8:c5:72:76:40:98:06:
         28:c8:e9:a4:8a:57:26:1c:a4:00:d9:47:34:3e:67:46:c8:c7:
         a2:33:40:ec:7b:13:42:51:c7:62:d4:18:d8:13:51:67:67:ff:
         d5:02:6a:46:ae:c5:d3:6b:ab:15:b1:7e:37:f4:16:f2:dd:60:
         ad:a8:6e:93:f4:a0:93:3b:ff:6a:50:3a:65:58:f5:e8:aa:cf:
         71:f9:c7:81:cb:88:60:6f:04:c4:7a:fe:1e:40:04:a6:74:61:
         ca:eb:02:ed:bd:b8:ec:2a:db:e3:72:2b:83:cb:34:f2:8a:cf:
         12:64:44:c1:c7:9a:7e:dc:b4:be:88:84:bd:c3:55:a6:1a:75:
         cc:4a:06:c9:07:48:08:70:7b:33:a1:7e:a5:ad:b6:76:e8:26:
         84:c8:d1:67:85:d2:70:37:4d:a7:ad:b4:56:e7:ed:88:c7:ac:
         56:08:ea:60:35:44:a8:a0:a1:33:10:ed:3a:a2:d9:57:aa:97:
         21:0b:7f:a0:0d:5b:f4:6d:b9:d1:cd:8b:63:65:f6:1c:6d:7d:
         04:e6:ce:f1:74:9c:86:5b:8f:2e:16:66:c1:e9:0b:b1:fd:e3:
         df:e3:a4:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 9 05:55:21 2024 by rpki-client on console.sobornost.net