Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4PC4JRS969A7rRwBN6EMhj6w9VcXuKf3EYYHZTyNJ2Li/0/3139312e3235332e32362e302f32342d3234203d3e20323633353234.roa
File:                     3139312e3235332e32362e302f32342d3234203d3e20323633353234.roa (raw, json)
Hash identifier:          iKbRsU35OGcjsxp4XA58VNMhS3sl7ogzfG6QKJ0CiJQ=
Subject key identifier:   E9:19:08:FB:FD:D5:43:EC:6B:5E:32:0B:6B:1B:76:60:99:25:B1:91
Certificate issuer:       /CN=5CFA9CC80E4DE4A1A680D6A4DE3C7280C2627258
Certificate serial:       352C3984361A4EFDD9FF548F0521FA81E0C26146
Authority key identifier: 5C:FA:9C:C8:0E:4D:E4:A1:A6:80:D6:A4:DE:3C:72:80:C2:62:72:58
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5CFA9CC80E4DE4A1A680D6A4DE3C7280C2627258.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4PC4JRS969A7rRwBN6EMhj6w9VcXuKf3EYYHZTyNJ2Li/0/3139312e3235332e32362e302f32342d3234203d3e20323633353234.roa
Signing time:             Sat 29 Jul 2023 12:23:30 +0000
ROA not before:           Sat 29 Jul 2023 12:18:30 +0000
ROA not after:            Sat 27 Jul 2024 12:23:30 +0000
asID:                     263524
IP address blocks:        191.253.26.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4PC4JRS969A7rRwBN6EMhj6w9VcXuKf3EYYHZTyNJ2Li/0/5CFA9CC80E4DE4A1A680D6A4DE3C7280C2627258.crl
                          rsync://rpki-repo.registro.br/repo/4PC4JRS969A7rRwBN6EMhj6w9VcXuKf3EYYHZTyNJ2Li/0/5CFA9CC80E4DE4A1A680D6A4DE3C7280C2627258.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5CFA9CC80E4DE4A1A680D6A4DE3C7280C2627258.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 10 Jan 2024 06:03:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:2c:39:84:36:1a:4e:fd:d9:ff:54:8f:05:21:fa:81:e0:c2:61:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5CFA9CC80E4DE4A1A680D6A4DE3C7280C2627258
        Validity
            Not Before: Jul 29 12:18:30 2023 GMT
            Not After : Jul 27 12:23:30 2024 GMT
        Subject: CN=E91908FBFDD543EC6B5E320B6B1B76609925B191
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:8e:6f:4c:c6:25:8c:0d:46:86:b1:cc:48:0e:
                    cf:ca:d1:37:55:5e:ff:3e:61:87:d7:54:fa:d9:34:
                    4d:68:14:d0:5e:76:1c:33:87:1d:ab:a7:6b:c3:33:
                    68:3f:0a:c6:a7:5c:1e:9a:9f:e4:5b:47:44:6e:31:
                    d1:72:27:3c:1c:2a:4b:48:aa:40:15:c9:77:56:ca:
                    d7:a9:7d:34:70:69:64:63:44:ac:1b:9b:e8:cf:d1:
                    c6:35:80:a0:b7:21:c4:7f:55:ae:96:39:0f:27:2f:
                    08:d6:03:a6:24:ce:d8:6e:ea:9c:4d:b0:e8:60:cb:
                    ff:2e:8a:2b:e9:19:cb:a9:27:58:be:c1:3e:64:e0:
                    c9:3e:06:59:ea:d7:3d:94:55:26:c4:7b:49:ab:19:
                    94:02:92:b2:12:b3:42:e4:11:ac:79:90:23:fc:a6:
                    5c:0a:36:17:03:a6:9d:c6:d4:d3:5f:58:d7:b8:a8:
                    61:25:d8:cf:bd:d7:bb:83:a4:15:d5:64:10:3c:aa:
                    d3:5d:57:6f:5e:da:b4:9e:8c:6c:8c:78:9d:9f:f7:
                    77:ca:ed:78:be:13:a4:78:d4:f7:04:37:01:46:5d:
                    fc:b9:9f:54:24:62:c5:35:cb:6f:9c:92:77:23:34:
                    5f:15:0c:4e:41:34:41:3d:24:ef:9d:64:96:f2:56:
                    c7:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:19:08:FB:FD:D5:43:EC:6B:5E:32:0B:6B:1B:76:60:99:25:B1:91
            X509v3 Authority Key Identifier:
                keyid:5C:FA:9C:C8:0E:4D:E4:A1:A6:80:D6:A4:DE:3C:72:80:C2:62:72:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4PC4JRS969A7rRwBN6EMhj6w9VcXuKf3EYYHZTyNJ2Li/0/5CFA9CC80E4DE4A1A680D6A4DE3C7280C2627258.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5CFA9CC80E4DE4A1A680D6A4DE3C7280C2627258.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4PC4JRS969A7rRwBN6EMhj6w9VcXuKf3EYYHZTyNJ2Li/0/3139312e3235332e32362e302f32342d3234203d3e20323633353234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.253.26.0/24

    Signature Algorithm: sha256WithRSAEncryption
         38:91:bd:0a:1a:d9:dd:02:84:1f:f4:bc:2f:dc:78:77:e6:5f:
         a9:05:ec:92:c7:ac:c8:27:db:d3:1c:d2:a5:b7:f2:f2:eb:62:
         f6:d9:24:ee:a9:4b:e9:21:69:2e:e8:a9:17:f4:26:dd:7f:26:
         53:1a:d3:e1:af:98:dc:07:76:02:cd:3a:54:8f:6e:3a:fb:31:
         86:7d:a1:77:fe:1b:e9:3e:4f:eb:49:ba:9e:86:34:c4:bc:8e:
         fb:2b:f5:e0:97:11:f8:14:20:6d:fe:72:c8:53:71:f4:c7:7b:
         74:27:51:22:bf:50:2a:61:68:9d:f9:3b:aa:16:07:6e:76:03:
         e2:8b:dd:57:a3:87:a1:14:08:69:26:cd:d1:74:b2:74:13:ac:
         63:a9:cf:99:c7:3e:b5:aa:ba:f8:4f:15:09:58:4f:47:43:17:
         d2:a4:b9:12:3d:5d:50:95:9c:01:02:fb:51:7e:b1:ce:c4:50:
         d1:c7:db:76:e6:57:46:0d:bd:2f:c4:38:e7:14:83:30:6d:96:
         37:86:01:c6:2d:b6:4a:d9:96:f2:6e:29:1d:96:0b:4c:43:5a:
         5e:11:4f:a8:0f:c6:ba:20:dc:38:22:74:3e:20:72:f1:55:91:
         5c:17:87:8e:06:f1:af:96:3a:39:79:20:a9:05:e8:33:79:72:
         d7:10:64:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 9 05:55:21 2024 by rpki-client on console.sobornost.net