Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4PC4JRS969A7rRwBN6EMhj6w9VcXuKf3EYYHZTyNJ2Li/0/3139312e3235332e32372e302f32342d3234203d3e20323633353234.roa
File:                     3139312e3235332e32372e302f32342d3234203d3e20323633353234.roa (raw, json)
Hash identifier:          K7ytsBzzmYAmaNbuVzQCDrAjQyUgLNkH2dwji4TWckI=
Subject key identifier:   43:6D:B7:67:41:A9:30:3D:93:A4:8F:02:19:5C:D2:24:56:0B:F7:E8
Certificate issuer:       /CN=5CFA9CC80E4DE4A1A680D6A4DE3C7280C2627258
Certificate serial:       46617AB97E4EA6BDF2380A0841D60F78C38D00E9
Authority key identifier: 5C:FA:9C:C8:0E:4D:E4:A1:A6:80:D6:A4:DE:3C:72:80:C2:62:72:58
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5CFA9CC80E4DE4A1A680D6A4DE3C7280C2627258.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4PC4JRS969A7rRwBN6EMhj6w9VcXuKf3EYYHZTyNJ2Li/0/3139312e3235332e32372e302f32342d3234203d3e20323633353234.roa
Signing time:             Fri 10 Nov 2023 12:21:03 +0000
ROA not before:           Fri 10 Nov 2023 12:16:03 +0000
ROA not after:            Fri 08 Nov 2024 12:21:03 +0000
asID:                     263524
IP address blocks:        191.253.27.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4PC4JRS969A7rRwBN6EMhj6w9VcXuKf3EYYHZTyNJ2Li/0/5CFA9CC80E4DE4A1A680D6A4DE3C7280C2627258.crl
                          rsync://rpki-repo.registro.br/repo/4PC4JRS969A7rRwBN6EMhj6w9VcXuKf3EYYHZTyNJ2Li/0/5CFA9CC80E4DE4A1A680D6A4DE3C7280C2627258.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5CFA9CC80E4DE4A1A680D6A4DE3C7280C2627258.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 10 Jan 2024 06:03:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:61:7a:b9:7e:4e:a6:bd:f2:38:0a:08:41:d6:0f:78:c3:8d:00:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5CFA9CC80E4DE4A1A680D6A4DE3C7280C2627258
        Validity
            Not Before: Nov 10 12:16:03 2023 GMT
            Not After : Nov  8 12:21:03 2024 GMT
        Subject: CN=436DB76741A9303D93A48F02195CD224560BF7E8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:73:4f:51:23:4b:7e:cd:e4:43:8d:01:e5:3b:
                    28:20:2f:1f:d0:5a:25:84:2f:73:ad:d8:01:95:83:
                    9e:02:c4:56:26:b1:4a:c9:3a:ad:0f:f7:b1:f5:03:
                    9e:bc:1d:91:c4:87:b5:5e:c9:50:72:2e:a8:1b:bb:
                    77:c4:19:e8:cd:cd:a3:30:9f:9c:49:a5:ad:0a:10:
                    ab:45:a2:33:2e:55:d3:41:74:7d:28:32:c2:56:a6:
                    51:64:f5:06:99:2d:f8:ec:8f:43:15:5b:e4:7a:71:
                    6e:c3:07:10:23:97:3f:b7:00:93:97:b5:9a:4e:97:
                    92:4d:92:ca:10:f4:34:9e:18:83:81:b7:6b:42:67:
                    18:5e:1d:a2:87:03:32:90:35:03:85:a4:fb:5e:ba:
                    82:d0:2e:c3:d0:b5:62:e6:f4:bf:a1:95:62:eb:47:
                    af:15:e9:5c:35:6d:0e:23:51:6c:ee:07:02:bb:57:
                    be:e9:7a:16:29:8c:76:83:28:53:64:04:0c:d4:d9:
                    7d:eb:33:07:12:66:d3:b1:72:4f:01:bf:b9:a2:d5:
                    ff:ce:05:5d:8b:21:89:06:b5:09:91:51:a5:79:e8:
                    a4:48:35:40:a4:58:1a:0d:d9:2b:9d:50:da:4a:75:
                    9f:d7:fb:3d:13:2b:95:8b:7b:59:23:93:dc:ef:ad:
                    8d:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:6D:B7:67:41:A9:30:3D:93:A4:8F:02:19:5C:D2:24:56:0B:F7:E8
            X509v3 Authority Key Identifier:
                keyid:5C:FA:9C:C8:0E:4D:E4:A1:A6:80:D6:A4:DE:3C:72:80:C2:62:72:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4PC4JRS969A7rRwBN6EMhj6w9VcXuKf3EYYHZTyNJ2Li/0/5CFA9CC80E4DE4A1A680D6A4DE3C7280C2627258.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5CFA9CC80E4DE4A1A680D6A4DE3C7280C2627258.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4PC4JRS969A7rRwBN6EMhj6w9VcXuKf3EYYHZTyNJ2Li/0/3139312e3235332e32372e302f32342d3234203d3e20323633353234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.253.27.0/24

    Signature Algorithm: sha256WithRSAEncryption
         79:b4:65:c3:3b:a8:69:ae:61:1f:f3:c4:6e:6e:c0:39:8b:9d:
         6a:0f:1a:22:55:eb:d5:f4:9b:a3:94:22:06:ad:73:08:a9:aa:
         93:9e:f7:b6:a7:c5:9f:a6:18:b3:4c:cc:17:08:e6:c6:ef:2b:
         2f:59:51:94:5d:9d:2c:e4:21:90:94:dc:db:e3:24:ea:f9:f6:
         e9:cf:22:e4:86:64:1a:17:65:bb:83:a7:8e:91:f6:b8:d1:20:
         2e:82:b3:87:02:e1:90:3e:86:62:33:94:e0:39:f1:97:38:9d:
         6d:66:42:74:f5:b4:e0:63:6d:5c:b2:da:36:dd:36:11:1e:20:
         42:41:89:89:ee:ae:d1:73:7b:90:94:15:cb:57:91:cd:f0:cb:
         a5:47:30:71:0c:db:db:27:4d:b7:ba:32:fc:35:59:23:91:62:
         0e:0c:b5:10:1f:13:f7:fd:59:a0:74:b5:de:10:6e:14:94:38:
         5b:fc:73:27:b1:a4:1b:0f:97:6f:6c:9e:29:8f:76:ed:ab:bf:
         05:ed:5a:28:53:82:1d:92:0e:9f:bb:1a:aa:b0:81:f9:f0:f5:
         a7:3a:bf:30:bb:34:23:04:72:d7:8e:11:78:a2:b6:79:30:21:
         4a:09:14:a6:55:a2:bd:13:f7:3d:a3:3b:51:b9:95:8b:ed:62:
         88:92:b4:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 9 05:55:21 2024 by rpki-client on console.sobornost.net