Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2t3bGZXz8mJDrDdmZ6NDc2xZDsbjfgErhrjWe7Hv8oQM/1/3139302e38392e3135302e302f32342d3234203d3e20323730333730.roa
File:                     3139302e38392e3135302e302f32342d3234203d3e20323730333730.roa (raw, json)
Hash identifier:          4yH4wFaxmhkR6TxrCjvZtJ0FJeNuRWKRy5MC16W3YXE=
Subject key identifier:   83:C7:E6:D0:82:8E:7D:3E:A3:80:69:6E:C2:BD:E7:EF:2C:4B:10:22
Certificate issuer:       /CN=C53FFF72C11B3649D5A047FD42D3DD312B1842CF
Certificate serial:       6FFFE888024468BB33A1F9DE9DF1E7F5FA36BBF2
Authority key identifier: C5:3F:FF:72:C1:1B:36:49:D5:A0:47:FD:42:D3:DD:31:2B:18:42:CF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C53FFF72C11B3649D5A047FD42D3DD312B1842CF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2t3bGZXz8mJDrDdmZ6NDc2xZDsbjfgErhrjWe7Hv8oQM/1/3139302e38392e3135302e302f32342d3234203d3e20323730333730.roa
Signing time:             Thu 04 Apr 2024 09:31:52 +0000
ROA not before:           Thu 04 Apr 2024 09:26:52 +0000
ROA not after:            Thu 03 Apr 2025 09:31:52 +0000
asID:                     270370
IP address blocks:        190.89.150.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2t3bGZXz8mJDrDdmZ6NDc2xZDsbjfgErhrjWe7Hv8oQM/1/C53FFF72C11B3649D5A047FD42D3DD312B1842CF.crl
                          rsync://rpki-repo.registro.br/repo/2t3bGZXz8mJDrDdmZ6NDc2xZDsbjfgErhrjWe7Hv8oQM/1/C53FFF72C11B3649D5A047FD42D3DD312B1842CF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C53FFF72C11B3649D5A047FD42D3DD312B1842CF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 18:27:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:ff:e8:88:02:44:68:bb:33:a1:f9:de:9d:f1:e7:f5:fa:36:bb:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C53FFF72C11B3649D5A047FD42D3DD312B1842CF
        Validity
            Not Before: Apr  4 09:26:52 2024 GMT
            Not After : Apr  3 09:31:52 2025 GMT
        Subject: CN=83C7E6D0828E7D3EA380696EC2BDE7EF2C4B1022
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:ce:b8:fb:98:3b:c3:2f:16:e1:37:c9:b1:42:
                    db:ef:a2:15:21:69:f1:51:4e:c9:75:42:36:5e:c9:
                    ea:82:12:e9:4e:97:6d:d0:65:9b:5e:73:5f:d2:5a:
                    b8:d0:1a:a0:d2:0a:8e:d6:dc:93:4a:6f:64:4b:c7:
                    10:52:3b:0c:d2:a8:9d:17:d9:0f:af:d2:8f:11:d0:
                    5a:d4:e7:e2:f5:b5:54:02:f5:b8:85:32:4f:0a:2a:
                    b9:89:f4:1e:c5:93:1a:d8:fc:c2:79:07:fe:90:0f:
                    74:98:4c:fc:a4:75:43:8a:07:58:ce:3a:eb:d1:74:
                    4b:25:43:9d:e8:6f:55:14:8b:6e:ec:82:c6:f3:b4:
                    04:80:d2:2d:2e:53:38:86:97:72:57:c8:06:f5:82:
                    19:cb:64:6f:ed:85:d1:13:d6:59:48:77:06:8e:48:
                    75:fc:fb:45:27:c4:59:e9:aa:2e:f5:c4:a3:02:c9:
                    3a:40:88:88:b9:c1:9d:80:b1:41:71:79:54:56:18:
                    f3:18:dc:b6:e5:bc:28:2f:ca:c9:87:46:ad:1b:52:
                    b2:cb:0d:e0:b7:d5:27:ce:1e:4f:c0:97:b7:6d:4d:
                    92:01:a6:90:bf:aa:fa:c0:bf:57:84:f0:bc:35:cc:
                    75:0c:72:29:84:2f:44:3b:24:17:ff:1b:f9:ee:00:
                    2d:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:C7:E6:D0:82:8E:7D:3E:A3:80:69:6E:C2:BD:E7:EF:2C:4B:10:22
            X509v3 Authority Key Identifier:
                keyid:C5:3F:FF:72:C1:1B:36:49:D5:A0:47:FD:42:D3:DD:31:2B:18:42:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2t3bGZXz8mJDrDdmZ6NDc2xZDsbjfgErhrjWe7Hv8oQM/1/C53FFF72C11B3649D5A047FD42D3DD312B1842CF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C53FFF72C11B3649D5A047FD42D3DD312B1842CF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2t3bGZXz8mJDrDdmZ6NDc2xZDsbjfgErhrjWe7Hv8oQM/1/3139302e38392e3135302e302f32342d3234203d3e20323730333730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.89.150.0/24

    Signature Algorithm: sha256WithRSAEncryption
         dd:4d:39:59:c8:f6:79:b1:18:f3:fe:0f:36:56:63:d5:b6:57:
         28:ea:11:0b:7e:54:62:9b:44:b5:1a:fb:69:c1:d1:7e:02:fd:
         d5:32:1f:32:27:d2:0a:61:ea:aa:97:58:90:76:27:cd:47:bc:
         c9:33:8d:9d:2c:03:bf:0a:01:66:68:a3:46:8e:69:56:58:dc:
         00:f9:02:5d:14:17:f3:e8:f2:7e:e4:f4:33:0c:1d:4d:18:6e:
         0b:70:a1:04:28:f8:5b:69:42:73:ed:13:01:41:90:08:2d:2a:
         62:b3:91:b2:51:a5:73:b3:bc:c5:9d:e9:7a:a4:77:78:cd:db:
         24:5e:cd:49:46:f1:26:37:1d:00:16:e7:7a:ac:0c:da:71:4a:
         8f:8a:f0:95:7b:b6:2f:20:5d:36:c4:26:b6:b8:cf:bb:47:ab:
         6b:62:50:c5:c7:2e:cd:74:a5:5e:3b:7f:bb:0f:c0:32:10:61:
         07:a0:18:47:de:3d:88:a6:b9:0b:55:ae:08:30:84:b8:54:d8:
         2f:5c:28:ad:49:7b:4c:34:e0:99:c5:1e:ba:cd:d2:ee:a2:87:
         66:c2:ec:3a:ae:be:68:fa:64:9a:30:80:f7:4d:d5:e9:b2:31:
         0f:31:b2:3e:36:da:81:7f:40:9c:1e:84:90:1e:70:02:06:85:
         bc:49:be:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 17:50:18 2024 by rpki-client on console-fra.rpki-client.org