Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2LDCBWd83mNGY9Cq5pEdUJm4kYrcECuAQS1SpAxT7rd1/0/3139302e3131312e39362e302f32322d3332203d3e20323733343830.roa
File:                     3139302e3131312e39362e302f32322d3332203d3e20323733343830.roa (raw, json)
Hash identifier:          tvYJdxakj1sWw7l/EYUsSHxFcDcr9WMEdUyLyt9gDGM=
Subject key identifier:   DB:70:69:41:E1:FB:45:7E:94:47:B0:6C:4C:51:75:6F:8B:93:7F:A3
Certificate issuer:       /CN=BDE1DA2EE12E7623CD58696CFC32A1D68980F4F4
Certificate serial:       45F281B3EDE50078F5A02842F8D83D2F841A0823
Authority key identifier: BD:E1:DA:2E:E1:2E:76:23:CD:58:69:6C:FC:32:A1:D6:89:80:F4:F4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BDE1DA2EE12E7623CD58696CFC32A1D68980F4F4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2LDCBWd83mNGY9Cq5pEdUJm4kYrcECuAQS1SpAxT7rd1/0/3139302e3131312e39362e302f32322d3332203d3e20323733343830.roa
Signing time:             Thu 16 May 2024 14:56:46 +0000
ROA not before:           Thu 16 May 2024 14:51:46 +0000
ROA not after:            Thu 15 May 2025 14:56:46 +0000
asID:                     273480
IP address blocks:        190.111.96.0/22 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2LDCBWd83mNGY9Cq5pEdUJm4kYrcECuAQS1SpAxT7rd1/0/BDE1DA2EE12E7623CD58696CFC32A1D68980F4F4.crl
                          rsync://rpki-repo.registro.br/repo/2LDCBWd83mNGY9Cq5pEdUJm4kYrcECuAQS1SpAxT7rd1/0/BDE1DA2EE12E7623CD58696CFC32A1D68980F4F4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BDE1DA2EE12E7623CD58696CFC32A1D68980F4F4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 03:36:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:f2:81:b3:ed:e5:00:78:f5:a0:28:42:f8:d8:3d:2f:84:1a:08:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BDE1DA2EE12E7623CD58696CFC32A1D68980F4F4
        Validity
            Not Before: May 16 14:51:46 2024 GMT
            Not After : May 15 14:56:46 2025 GMT
        Subject: CN=DB706941E1FB457E9447B06C4C51756F8B937FA3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:7e:21:8b:f4:5b:c7:17:96:4f:28:e2:0e:9d:
                    24:d4:e5:e5:8d:e4:12:6a:5a:ab:56:94:31:79:d7:
                    a9:57:39:1a:e2:73:80:20:82:42:10:d5:2b:ce:98:
                    0d:c7:e4:d1:3b:3a:a7:92:ba:d8:27:3e:e0:75:2b:
                    89:6c:55:74:90:48:67:cf:4c:fd:90:ef:f3:45:24:
                    da:32:ce:73:bd:d2:6c:1a:20:76:cf:1f:c7:46:1c:
                    ff:cf:bf:38:c9:cf:6b:a3:27:a2:a0:41:22:78:06:
                    3a:ae:fa:90:44:bb:f1:e3:8a:58:12:27:ee:b2:e6:
                    a1:0f:6a:0c:b4:19:c6:3b:88:46:1a:32:a0:75:ad:
                    42:17:d2:bc:23:17:39:d0:fb:c5:4b:7d:ff:57:16:
                    ed:cd:f8:81:db:8f:60:79:f1:94:e8:7b:46:f9:a4:
                    1a:24:88:1b:44:d6:77:cb:c4:be:ca:23:b7:f6:5d:
                    d6:da:7f:a4:f6:bb:1b:c5:ef:5a:3d:13:db:a4:07:
                    22:a2:e7:0a:92:9e:c1:bb:1d:72:89:61:99:29:e3:
                    97:66:ce:d5:bd:65:e5:e1:63:73:55:df:43:f0:dc:
                    3d:bb:31:8e:1c:90:44:4f:f5:c2:3f:d6:2d:1c:bc:
                    c1:21:ca:37:a1:e6:5e:92:d4:37:36:75:9d:68:04:
                    95:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:70:69:41:E1:FB:45:7E:94:47:B0:6C:4C:51:75:6F:8B:93:7F:A3
            X509v3 Authority Key Identifier:
                keyid:BD:E1:DA:2E:E1:2E:76:23:CD:58:69:6C:FC:32:A1:D6:89:80:F4:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2LDCBWd83mNGY9Cq5pEdUJm4kYrcECuAQS1SpAxT7rd1/0/BDE1DA2EE12E7623CD58696CFC32A1D68980F4F4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BDE1DA2EE12E7623CD58696CFC32A1D68980F4F4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2LDCBWd83mNGY9Cq5pEdUJm4kYrcECuAQS1SpAxT7rd1/0/3139302e3131312e39362e302f32322d3332203d3e20323733343830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.111.96.0/22

    Signature Algorithm: sha256WithRSAEncryption
         29:29:28:09:d3:c5:24:42:8f:88:7d:40:74:eb:e0:da:95:ca:
         90:7b:54:c7:71:5b:81:53:01:a9:86:9b:55:4b:c7:cb:76:e3:
         ce:80:eb:91:84:a9:fa:4c:32:ce:31:08:69:c8:0e:69:5f:64:
         e9:5d:ac:75:15:59:65:5c:7f:9e:e4:09:5d:da:bf:0d:9f:5d:
         7a:d5:ec:f8:d6:55:62:7f:d0:b7:71:2a:29:6d:12:15:67:ea:
         ea:1e:bb:58:ae:18:3b:bc:e5:f2:68:2a:9d:5f:94:18:ab:b1:
         fb:46:3a:e5:0c:5d:15:0f:3c:54:8d:30:d5:a7:93:99:e1:01:
         13:2d:b2:5b:19:63:e1:62:ca:ad:20:36:96:64:cc:7f:be:75:
         85:13:6e:cb:46:4b:ed:ba:55:1c:2c:1d:f7:99:62:e2:af:a1:
         8e:6c:ed:62:b6:14:92:71:7c:a5:ba:f4:40:b6:4b:6c:66:43:
         47:54:be:a6:5f:dd:45:55:f1:c9:da:e1:37:4e:f6:7c:1e:d1:
         95:f8:9e:e1:3a:21:9f:3f:92:aa:cc:42:58:f6:fa:73:0d:bc:
         ea:92:04:13:b4:12:dd:3b:32:da:a1:4d:96:68:2c:3a:32:5d:
         13:93:a1:1a:42:46:bc:05:a7:79:01:62:07:9b:08:17:9e:19:
         77:fd:51:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 05:00:50 2024 by rpki-client on console-fra.rpki-client.org