Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2SapynWKhumGNgHfEGDY7J6CEonuNxXzyHHaCvEvCcuY/1/3139302e3130332e3135322e302f32332d3233203d3e20323730393336.roa
File:                     3139302e3130332e3135322e302f32332d3233203d3e20323730393336.roa (raw, json)
Hash identifier:          9z83r5LYnoiExaoSwJv4n/p0YFmAeKQ6c2Hx4dlRnP8=
Subject key identifier:   6F:1F:B0:1A:01:FA:A6:CC:B0:2F:EF:EC:80:51:9E:1A:79:74:A6:31
Certificate issuer:       /CN=AB9EE7D565C02709758537AFEB7BB83EC6AD2ED3
Certificate serial:       1E6FA1A032975B0C3BE86DF6D345BB9E351E72DC
Authority key identifier: AB:9E:E7:D5:65:C0:27:09:75:85:37:AF:EB:7B:B8:3E:C6:AD:2E:D3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AB9EE7D565C02709758537AFEB7BB83EC6AD2ED3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2SapynWKhumGNgHfEGDY7J6CEonuNxXzyHHaCvEvCcuY/1/3139302e3130332e3135322e302f32332d3233203d3e20323730393336.roa
Signing time:             Fri 16 Aug 2024 01:48:58 +0000
ROA not before:           Fri 16 Aug 2024 01:43:58 +0000
ROA not after:            Fri 15 Aug 2025 01:48:58 +0000
asID:                     270936
IP address blocks:        190.103.152.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2SapynWKhumGNgHfEGDY7J6CEonuNxXzyHHaCvEvCcuY/1/AB9EE7D565C02709758537AFEB7BB83EC6AD2ED3.crl
                          rsync://rpki-repo.registro.br/repo/2SapynWKhumGNgHfEGDY7J6CEonuNxXzyHHaCvEvCcuY/1/AB9EE7D565C02709758537AFEB7BB83EC6AD2ED3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AB9EE7D565C02709758537AFEB7BB83EC6AD2ED3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 12:12:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:6f:a1:a0:32:97:5b:0c:3b:e8:6d:f6:d3:45:bb:9e:35:1e:72:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AB9EE7D565C02709758537AFEB7BB83EC6AD2ED3
        Validity
            Not Before: Aug 16 01:43:58 2024 GMT
            Not After : Aug 15 01:48:58 2025 GMT
        Subject: CN=6F1FB01A01FAA6CCB02FEFEC80519E1A7974A631
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:e9:20:00:ae:d5:a5:64:a6:0b:7b:90:43:e3:
                    a0:b8:c6:e0:e9:f0:bc:21:6a:7a:6e:a7:ca:99:ec:
                    fb:70:83:e2:a9:c1:e9:54:a5:3d:ee:48:5e:39:6b:
                    50:6d:3f:2f:9b:0c:68:8a:5c:07:9d:99:d3:2a:8c:
                    45:79:89:35:47:22:11:fc:93:e2:b6:82:b4:c9:8e:
                    61:c4:e6:07:aa:49:33:cb:2c:76:57:90:bb:9c:da:
                    3a:84:0f:9d:ba:de:67:2f:a7:7c:7d:46:1b:83:14:
                    90:83:49:23:f5:5f:e0:49:52:34:a3:2d:7e:08:77:
                    06:5b:39:72:11:2f:69:a0:e8:cf:3c:d0:c4:0a:84:
                    be:90:8a:8e:df:41:79:20:81:bf:23:d8:8e:33:97:
                    10:19:60:9d:de:1b:17:34:a9:3e:e8:d4:94:65:04:
                    d7:76:38:57:ed:c8:ea:d4:13:5e:ef:d6:a2:64:17:
                    50:31:f2:48:ac:09:8b:e4:bf:ef:48:0a:da:08:b4:
                    a5:4e:9e:56:d7:8e:78:bb:70:66:b0:8f:1c:25:4b:
                    72:47:b8:52:28:fe:49:44:f2:55:cc:e5:10:5f:bc:
                    af:50:87:71:32:18:5e:5e:91:69:6f:cc:32:59:3f:
                    eb:29:73:a3:9e:33:f7:bf:63:03:cd:fd:64:73:c4:
                    96:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:1F:B0:1A:01:FA:A6:CC:B0:2F:EF:EC:80:51:9E:1A:79:74:A6:31
            X509v3 Authority Key Identifier:
                keyid:AB:9E:E7:D5:65:C0:27:09:75:85:37:AF:EB:7B:B8:3E:C6:AD:2E:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2SapynWKhumGNgHfEGDY7J6CEonuNxXzyHHaCvEvCcuY/1/AB9EE7D565C02709758537AFEB7BB83EC6AD2ED3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AB9EE7D565C02709758537AFEB7BB83EC6AD2ED3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2SapynWKhumGNgHfEGDY7J6CEonuNxXzyHHaCvEvCcuY/1/3139302e3130332e3135322e302f32332d3233203d3e20323730393336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.103.152.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2e:04:89:50:d4:24:69:aa:c9:03:83:79:09:d3:e2:f6:7a:aa:
         09:c3:3d:86:1d:ca:5b:11:bf:55:1b:d5:71:00:a7:d8:98:26:
         20:1e:3e:0e:4a:fb:6e:23:3e:ee:a8:ed:49:3a:97:fc:c2:cb:
         70:59:ad:e8:57:33:3b:7a:fc:87:cb:ba:9c:10:88:95:e0:47:
         d3:b4:2e:38:fb:a6:5e:43:5e:58:29:47:32:f6:8c:e5:cc:14:
         de:a3:cd:da:ea:c0:b8:d9:69:b5:4f:0e:df:4c:60:da:8f:bf:
         0c:18:01:d3:27:03:a2:51:e1:a8:9a:53:86:48:49:11:ec:b8:
         53:39:46:e4:a0:74:38:74:71:d2:9a:89:f2:81:2f:f4:d7:ca:
         bd:77:97:09:51:37:a9:9e:dc:b5:29:d0:25:0b:c0:a1:e6:44:
         c5:61:9f:3a:9b:5b:f6:46:72:c1:0a:9e:7c:32:f2:e5:86:d8:
         7e:43:94:21:d1:d1:41:42:9d:8b:70:8a:37:05:b2:b2:fa:9e:
         3b:27:56:aa:d4:93:e8:1c:32:52:b8:5a:0b:99:6d:8e:9f:a4:
         a8:43:bf:c0:fa:a5:aa:f4:32:13:13:75:80:d3:2f:06:8d:e4:
         62:ad:32:a5:d4:05:31:18:42:05:b8:60:3c:77:13:bc:bc:87:
         d3:84:49:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:14:38 2024 by rpki-client on console-fra.rpki-client.org