Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2SapynWKhumGNgHfEGDY7J6CEonuNxXzyHHaCvEvCcuY/1/3139302e3130332e3135352e302f32342d3234203d3e20323730393336.roa
File:                     3139302e3130332e3135352e302f32342d3234203d3e20323730393336.roa (raw, json)
Hash identifier:          Y0ZZCAJamKHxo2bQHeyTlazlV4UEH9QQu5XZH3al5a8=
Subject key identifier:   20:50:AC:8A:CB:6C:0B:61:FB:E9:03:E9:91:00:26:4D:41:44:00:AE
Certificate issuer:       /CN=AB9EE7D565C02709758537AFEB7BB83EC6AD2ED3
Certificate serial:       31B05BBC97A20E9F9E46AE93FE040965ABF82263
Authority key identifier: AB:9E:E7:D5:65:C0:27:09:75:85:37:AF:EB:7B:B8:3E:C6:AD:2E:D3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AB9EE7D565C02709758537AFEB7BB83EC6AD2ED3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2SapynWKhumGNgHfEGDY7J6CEonuNxXzyHHaCvEvCcuY/1/3139302e3130332e3135352e302f32342d3234203d3e20323730393336.roa
Signing time:             Sat 17 Aug 2024 00:48:28 +0000
ROA not before:           Sat 17 Aug 2024 00:43:28 +0000
ROA not after:            Sat 16 Aug 2025 00:48:28 +0000
asID:                     270936
IP address blocks:        190.103.155.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2SapynWKhumGNgHfEGDY7J6CEonuNxXzyHHaCvEvCcuY/1/AB9EE7D565C02709758537AFEB7BB83EC6AD2ED3.crl
                          rsync://rpki-repo.registro.br/repo/2SapynWKhumGNgHfEGDY7J6CEonuNxXzyHHaCvEvCcuY/1/AB9EE7D565C02709758537AFEB7BB83EC6AD2ED3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AB9EE7D565C02709758537AFEB7BB83EC6AD2ED3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 12:12:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:b0:5b:bc:97:a2:0e:9f:9e:46:ae:93:fe:04:09:65:ab:f8:22:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AB9EE7D565C02709758537AFEB7BB83EC6AD2ED3
        Validity
            Not Before: Aug 17 00:43:28 2024 GMT
            Not After : Aug 16 00:48:28 2025 GMT
        Subject: CN=2050AC8ACB6C0B61FBE903E99100264D414400AE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:a7:41:d5:ef:52:7d:fc:7c:1d:be:9c:18:09:
                    8e:a1:4e:09:4a:35:28:6e:cd:f2:1e:1d:4c:67:17:
                    4c:b9:48:ac:fc:b1:4b:2e:75:27:65:f6:da:e0:81:
                    ae:e6:9d:7a:64:90:ff:be:74:57:7d:05:e1:0c:d5:
                    60:d8:8e:38:a2:23:38:cd:31:b9:f0:61:13:be:26:
                    50:6e:3a:80:0c:42:2e:4c:63:9f:a6:f6:b3:a5:12:
                    35:68:cc:1a:9a:3c:39:05:c1:30:7b:a6:f6:26:97:
                    21:b2:a5:4b:b4:6b:62:0d:69:91:cb:ec:25:08:65:
                    03:f9:da:76:69:ed:6f:56:cd:23:84:50:63:63:91:
                    d1:51:4d:fc:25:e6:ce:33:7e:14:10:f2:fe:b9:ce:
                    c7:5d:19:cd:b7:2d:db:1d:fd:68:6f:e4:bd:3a:fa:
                    e8:5e:6e:a7:b4:6b:1e:42:a8:d5:68:ae:28:50:c3:
                    00:7c:b2:80:ee:32:76:be:21:21:c9:83:80:03:75:
                    c7:bf:be:69:e4:a7:9e:2d:4a:5d:f0:61:02:cf:1c:
                    49:b3:ac:e1:db:cd:b9:f8:31:0f:1f:b7:36:da:fc:
                    63:15:6b:9e:5b:09:94:e2:23:64:6c:2c:c5:77:97:
                    9e:da:63:21:fa:e2:29:c6:4e:7f:b1:9a:19:50:50:
                    87:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:50:AC:8A:CB:6C:0B:61:FB:E9:03:E9:91:00:26:4D:41:44:00:AE
            X509v3 Authority Key Identifier:
                keyid:AB:9E:E7:D5:65:C0:27:09:75:85:37:AF:EB:7B:B8:3E:C6:AD:2E:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2SapynWKhumGNgHfEGDY7J6CEonuNxXzyHHaCvEvCcuY/1/AB9EE7D565C02709758537AFEB7BB83EC6AD2ED3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AB9EE7D565C02709758537AFEB7BB83EC6AD2ED3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2SapynWKhumGNgHfEGDY7J6CEonuNxXzyHHaCvEvCcuY/1/3139302e3130332e3135352e302f32342d3234203d3e20323730393336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.103.155.0/24

    Signature Algorithm: sha256WithRSAEncryption
         94:66:de:ad:93:38:79:f6:29:f9:1f:bc:ed:69:0c:a3:be:3b:
         62:bd:4d:c6:b6:b6:69:6d:8d:a1:67:57:11:e1:f0:8e:16:b4:
         22:6c:00:07:c5:23:83:ba:35:0d:ea:ae:f7:75:63:69:90:61:
         c0:39:26:44:2a:2e:61:f2:d1:64:28:bf:c6:d9:4c:75:ad:67:
         ec:e5:f2:d0:9a:0d:ca:0a:05:03:4c:7e:fd:0b:37:9f:33:db:
         d0:00:7d:9f:26:f9:98:07:fe:83:b2:67:57:3e:89:68:b9:af:
         17:27:b4:2c:a9:54:d6:d3:b1:a0:13:b9:ac:3c:55:d3:9d:5e:
         94:ce:d7:d5:c1:5b:41:6f:6b:0d:08:f9:6d:44:82:c4:da:2e:
         08:4b:5b:d1:ff:e9:19:41:f3:92:86:82:c9:78:6c:87:94:e6:
         2e:39:8d:e3:52:0b:a2:1c:69:08:a3:73:92:f7:70:e6:6c:79:
         12:81:a0:4b:9a:93:16:55:55:31:3d:16:c2:4b:2c:37:21:7d:
         16:4e:aa:51:6c:c3:d7:59:9c:80:57:f2:08:11:e2:b2:35:95:
         a5:dc:5d:87:7c:7f:f8:37:99:4b:33:23:17:7f:10:4e:58:89:
         a9:ff:92:d0:82:de:9e:8a:59:72:ee:ce:be:5b:f2:d5:27:91:
         0a:9c:e3:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:44:05 2024 by rpki-client on console-ams.rpki-client.org