Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2tCkhwyTNHwLB1YLniMfMN8tRak6TQLY3kt6JpWDPMFh/0/3138392e39312e35342e302f32332d3233203d3e203238323034.roa
File:                     3138392e39312e35342e302f32332d3233203d3e203238323034.roa (raw, json)
Hash identifier:          q4BMxK7occYILBMUzn4rCx82JsZcLj4u09mXHOCB/iQ=
Subject key identifier:   1A:92:D6:46:8E:E1:00:E9:27:E8:44:9F:27:16:F1:3D:08:29:81:79
Certificate issuer:       /CN=A99D272225729B303C95F28914878741C6AE29BE
Certificate serial:       769D415F7FB57A85FBB382CA1620C72F35025A50
Authority key identifier: A9:9D:27:22:25:72:9B:30:3C:95:F2:89:14:87:87:41:C6:AE:29:BE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A99D272225729B303C95F28914878741C6AE29BE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2tCkhwyTNHwLB1YLniMfMN8tRak6TQLY3kt6JpWDPMFh/0/3138392e39312e35342e302f32332d3233203d3e203238323034.roa
Signing time:             Wed 24 Apr 2024 14:37:44 +0000
ROA not before:           Wed 24 Apr 2024 14:32:44 +0000
ROA not after:            Wed 23 Apr 2025 14:37:44 +0000
asID:                     28204
IP address blocks:        189.91.54.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2tCkhwyTNHwLB1YLniMfMN8tRak6TQLY3kt6JpWDPMFh/0/A99D272225729B303C95F28914878741C6AE29BE.crl
                          rsync://rpki-repo.registro.br/repo/2tCkhwyTNHwLB1YLniMfMN8tRak6TQLY3kt6JpWDPMFh/0/A99D272225729B303C95F28914878741C6AE29BE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A99D272225729B303C95F28914878741C6AE29BE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 02 Jun 2024 16:06:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:9d:41:5f:7f:b5:7a:85:fb:b3:82:ca:16:20:c7:2f:35:02:5a:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A99D272225729B303C95F28914878741C6AE29BE
        Validity
            Not Before: Apr 24 14:32:44 2024 GMT
            Not After : Apr 23 14:37:44 2025 GMT
        Subject: CN=1A92D6468EE100E927E8449F2716F13D08298179
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:8f:61:7e:2f:1f:45:a7:ad:35:99:6e:1b:d1:
                    a8:a9:7e:93:3d:3c:f7:fb:32:67:f1:b1:18:6f:36:
                    45:d3:aa:b3:33:2d:d6:83:e9:15:a6:83:57:f2:cd:
                    14:21:6f:7f:77:17:77:31:c0:af:d7:da:79:a6:f9:
                    1e:88:fe:d6:02:2d:e5:9f:01:fe:bd:9a:00:18:3a:
                    14:a7:a0:9d:8a:93:a6:d8:d4:9c:b0:71:a9:96:f4:
                    e5:3c:5f:33:4a:d7:11:1b:d1:61:8d:71:ed:fe:ac:
                    53:f7:0a:ce:91:74:9e:46:e3:4d:ef:0a:60:67:8a:
                    0b:30:5e:5d:31:14:0e:9b:3e:04:de:0a:61:2b:e8:
                    e4:f9:6e:65:82:b7:b0:70:a2:22:ec:52:13:bd:62:
                    8c:ee:85:ee:11:06:05:0c:eb:2d:8a:c9:35:62:d6:
                    98:da:dd:c6:44:8e:8a:9b:0d:69:43:43:7f:72:7e:
                    68:ba:af:e0:43:ac:63:e4:43:5f:5a:da:74:53:51:
                    21:e5:40:35:0e:4d:f0:7a:2a:0e:94:2b:b1:aa:37:
                    97:2a:fc:9c:a8:09:89:4f:05:e9:79:01:12:b0:9e:
                    0e:14:b0:0d:32:85:35:7a:36:9e:6e:3a:87:84:d6:
                    21:52:12:6d:23:08:91:da:17:f0:d2:ea:6d:23:a8:
                    ad:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:92:D6:46:8E:E1:00:E9:27:E8:44:9F:27:16:F1:3D:08:29:81:79
            X509v3 Authority Key Identifier:
                keyid:A9:9D:27:22:25:72:9B:30:3C:95:F2:89:14:87:87:41:C6:AE:29:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2tCkhwyTNHwLB1YLniMfMN8tRak6TQLY3kt6JpWDPMFh/0/A99D272225729B303C95F28914878741C6AE29BE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A99D272225729B303C95F28914878741C6AE29BE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2tCkhwyTNHwLB1YLniMfMN8tRak6TQLY3kt6JpWDPMFh/0/3138392e39312e35342e302f32332d3233203d3e203238323034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.91.54.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9e:2c:6c:7b:cf:89:a3:af:5c:1a:ed:6d:e4:75:6b:60:9b:23:
         50:b5:de:5b:41:d3:c6:75:11:97:65:9e:54:9b:4e:2f:44:8f:
         dc:e3:4a:f8:10:2c:07:8e:2b:65:48:0c:22:2d:45:af:fa:b0:
         28:41:a6:87:a3:4a:76:f1:45:de:cf:37:ce:68:80:66:61:96:
         38:56:e2:04:eb:54:15:1e:00:4a:10:bf:97:3c:b3:73:1a:72:
         81:72:47:cc:b9:cf:e8:fa:55:9d:52:15:f1:a3:fd:0a:57:fb:
         27:21:e7:7d:f4:7a:4e:d5:ad:46:f0:55:36:0b:ae:2e:0a:56:
         97:64:de:90:e9:e6:ff:44:2b:7d:fe:3d:33:5d:56:ac:66:19:
         06:25:72:2b:34:b8:28:6b:6d:bb:42:8c:6a:ac:83:6b:a1:6e:
         87:41:f2:41:a0:32:f7:fb:f0:56:be:25:25:33:1a:6d:09:da:
         b6:42:12:1f:05:f0:33:b5:df:cb:73:49:53:f5:2b:14:59:ec:
         a9:0a:2b:98:2b:fb:19:69:0e:31:ce:be:24:ca:df:1e:3f:c1:
         f1:9c:e9:0c:a0:4a:b8:9c:a8:0a:d7:1d:40:9b:66:30:76:85:
         ef:79:83:29:76:72:b4:a6:55:aa:0b:f6:51:12:85:57:48:b4:
         ea:9a:f5:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 14:35:04 2024 by rpki-client on console-fra.rpki-client.org