Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2tCkhwyTNHwLB1YLniMfMN8tRak6TQLY3kt6JpWDPMFh/0/3138392e39312e35322e302f32332d3233203d3e203238323034.roa
File:                     3138392e39312e35322e302f32332d3233203d3e203238323034.roa (raw, json)
Hash identifier:          sRoDkO7IwSbp19WcbwRbEaWxcOhgor4jbtnhYM20KFs=
Subject key identifier:   A6:BD:22:30:06:5F:86:B4:BA:39:AE:23:9F:A5:B2:14:87:70:C0:8F
Certificate issuer:       /CN=A99D272225729B303C95F28914878741C6AE29BE
Certificate serial:       0DF4636FCBBB3045D505FCA2E4245693B5D7B0B7
Authority key identifier: A9:9D:27:22:25:72:9B:30:3C:95:F2:89:14:87:87:41:C6:AE:29:BE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A99D272225729B303C95F28914878741C6AE29BE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2tCkhwyTNHwLB1YLniMfMN8tRak6TQLY3kt6JpWDPMFh/0/3138392e39312e35322e302f32332d3233203d3e203238323034.roa
Signing time:             Wed 24 Apr 2024 14:37:30 +0000
ROA not before:           Wed 24 Apr 2024 14:32:30 +0000
ROA not after:            Wed 23 Apr 2025 14:37:30 +0000
asID:                     28204
IP address blocks:        189.91.52.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2tCkhwyTNHwLB1YLniMfMN8tRak6TQLY3kt6JpWDPMFh/0/A99D272225729B303C95F28914878741C6AE29BE.crl
                          rsync://rpki-repo.registro.br/repo/2tCkhwyTNHwLB1YLniMfMN8tRak6TQLY3kt6JpWDPMFh/0/A99D272225729B303C95F28914878741C6AE29BE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A99D272225729B303C95F28914878741C6AE29BE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 02 Jun 2024 16:06:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:f4:63:6f:cb:bb:30:45:d5:05:fc:a2:e4:24:56:93:b5:d7:b0:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A99D272225729B303C95F28914878741C6AE29BE
        Validity
            Not Before: Apr 24 14:32:30 2024 GMT
            Not After : Apr 23 14:37:30 2025 GMT
        Subject: CN=A6BD2230065F86B4BA39AE239FA5B2148770C08F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:47:49:29:03:e6:c0:92:17:16:53:9d:3b:3d:
                    51:f3:e7:c5:86:db:9c:59:10:f6:28:88:f5:33:ee:
                    6a:ca:10:10:10:cd:e7:47:00:28:a8:32:ef:fc:87:
                    ed:bf:67:01:c7:7e:86:64:ea:5a:e7:74:bc:03:93:
                    be:94:57:2c:c8:32:07:9b:6b:23:e8:af:68:19:46:
                    03:dc:bb:16:d7:6c:30:a7:33:bb:46:a8:5d:94:ef:
                    52:63:3d:38:eb:2c:59:81:4e:08:51:6a:6e:bc:7a:
                    8f:eb:72:a2:63:91:0d:07:b9:4b:8f:ed:e9:97:1f:
                    4d:ee:6f:3e:9b:80:35:c3:a8:63:99:d5:7e:e7:e5:
                    6c:8a:2a:c0:45:9d:27:76:79:27:25:01:bb:49:cf:
                    70:8e:d1:5b:ad:9f:3a:2b:4d:cb:ce:00:9e:a1:64:
                    1f:b7:ed:29:dc:0b:34:a3:dd:92:b7:d4:2a:73:1e:
                    5e:0c:85:29:1e:c8:6e:e3:eb:e9:68:24:d3:5e:ab:
                    0d:ef:e0:dd:47:bf:8c:43:35:3e:02:25:4e:a4:0a:
                    54:44:f4:6e:ca:30:08:1c:49:b6:84:71:61:9f:46:
                    d6:ad:1d:f6:79:e2:07:d4:52:18:bf:c8:82:ab:c7:
                    96:82:d5:24:69:6b:56:53:46:6e:e0:d2:ed:70:4b:
                    cd:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:BD:22:30:06:5F:86:B4:BA:39:AE:23:9F:A5:B2:14:87:70:C0:8F
            X509v3 Authority Key Identifier:
                keyid:A9:9D:27:22:25:72:9B:30:3C:95:F2:89:14:87:87:41:C6:AE:29:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2tCkhwyTNHwLB1YLniMfMN8tRak6TQLY3kt6JpWDPMFh/0/A99D272225729B303C95F28914878741C6AE29BE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A99D272225729B303C95F28914878741C6AE29BE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2tCkhwyTNHwLB1YLniMfMN8tRak6TQLY3kt6JpWDPMFh/0/3138392e39312e35322e302f32332d3233203d3e203238323034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.91.52.0/23

    Signature Algorithm: sha256WithRSAEncryption
         77:8a:68:cc:56:69:b8:14:83:f9:48:3d:7d:4a:32:75:db:86:
         4f:17:79:82:e6:3a:42:8d:62:ba:21:0f:88:b1:27:eb:d0:6a:
         30:ed:f9:49:61:96:ab:70:16:79:8d:fa:96:de:46:fc:c3:38:
         f8:1c:24:ad:4e:5d:a8:e1:91:71:1f:3f:c6:3a:07:0b:82:2c:
         e7:83:b2:46:2a:6a:e5:ac:9a:94:5c:12:bf:fd:d9:35:44:c7:
         e1:2d:42:95:12:da:08:e8:9b:d6:18:af:62:55:b3:c6:02:5c:
         db:b0:be:d9:d8:6b:87:e0:de:31:53:b4:59:75:c4:bd:e2:37:
         e0:a7:a6:69:ed:53:1d:11:44:44:09:98:c7:6c:33:b7:90:d3:
         4d:eb:8c:66:c8:d8:30:8a:45:75:c3:ee:94:44:3e:41:51:6c:
         0b:bc:a1:5a:07:1b:f0:4b:f9:b5:64:7e:72:02:5d:e6:3d:ca:
         36:6f:af:49:3c:08:0a:05:2f:e5:94:1a:12:a3:79:8a:38:fa:
         5b:82:da:2e:b8:cf:cc:cb:25:23:57:7f:bb:88:f0:ba:d8:82:
         e9:2e:41:d2:23:31:a9:cc:e2:d0:92:c3:77:0b:e0:a5:28:bc:
         eb:ae:65:d4:9e:d5:a4:a5:54:fe:e0:7b:c4:8b:57:c9:e7:fd:
         8e:4f:2c:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 14:35:04 2024 by rpki-client on console-fra.rpki-client.org