Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2z11Heg6SyHFa7uPHDokYp6cbCJTnU2BFnpgwmfZJ9dJ/1/3139302e3130322e34342e302f32332d3233203d3e20323731353134.roa
File:                     3139302e3130322e34342e302f32332d3233203d3e20323731353134.roa (raw, json)
Hash identifier:          sCXbK14oze2cKNJnEyz+JDlKDCDHD4ZAizFuqzSdOQc=
Subject key identifier:   1B:72:82:AA:4E:00:C3:D6:42:0A:EA:1A:17:2E:2A:04:37:40:45:21
Certificate issuer:       /CN=F204F7A503A8093CC6560627483C5834D61956E8
Certificate serial:       5A87D422BFB52B944110D82A419AFFB7D9C027CC
Authority key identifier: F2:04:F7:A5:03:A8:09:3C:C6:56:06:27:48:3C:58:34:D6:19:56:E8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F204F7A503A8093CC6560627483C5834D61956E8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2z11Heg6SyHFa7uPHDokYp6cbCJTnU2BFnpgwmfZJ9dJ/1/3139302e3130322e34342e302f32332d3233203d3e20323731353134.roa
Signing time:             Thu 04 Apr 2024 05:40:46 +0000
ROA not before:           Thu 04 Apr 2024 05:35:46 +0000
ROA not after:            Thu 03 Apr 2025 05:40:46 +0000
asID:                     271514
IP address blocks:        190.102.44.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2z11Heg6SyHFa7uPHDokYp6cbCJTnU2BFnpgwmfZJ9dJ/1/F204F7A503A8093CC6560627483C5834D61956E8.crl
                          rsync://rpki-repo.registro.br/repo/2z11Heg6SyHFa7uPHDokYp6cbCJTnU2BFnpgwmfZJ9dJ/1/F204F7A503A8093CC6560627483C5834D61956E8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F204F7A503A8093CC6560627483C5834D61956E8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 15:28:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:87:d4:22:bf:b5:2b:94:41:10:d8:2a:41:9a:ff:b7:d9:c0:27:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F204F7A503A8093CC6560627483C5834D61956E8
        Validity
            Not Before: Apr  4 05:35:46 2024 GMT
            Not After : Apr  3 05:40:46 2025 GMT
        Subject: CN=1B7282AA4E00C3D6420AEA1A172E2A0437404521
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:ee:85:12:94:33:59:fe:c9:7b:7e:c8:1f:e3:
                    14:a5:24:38:ba:05:0c:53:87:09:ce:4e:0b:42:14:
                    0c:40:54:5e:1b:4c:6f:e9:84:2d:ce:a6:7b:c0:25:
                    88:bc:05:90:e2:44:19:21:ea:0e:06:95:fa:86:01:
                    2e:1d:18:86:b3:b6:af:2b:50:3a:74:e3:f4:c1:1b:
                    b9:11:26:e6:15:ae:aa:42:14:38:d1:72:cd:09:39:
                    57:0d:79:b4:aa:c7:f5:e0:14:b5:f6:da:ae:68:e6:
                    66:ed:1c:bb:f0:c2:33:97:08:76:b9:60:ae:6d:07:
                    26:d0:97:fd:c4:14:2f:41:4c:40:69:39:c1:83:29:
                    98:91:fc:b9:ab:1a:f2:ff:27:ee:eb:85:6e:02:1d:
                    fd:81:bb:84:9e:3e:10:8c:ee:58:20:d7:78:29:3d:
                    22:dd:60:d8:d0:b3:2b:31:0c:b2:60:d9:5d:7d:6a:
                    99:d2:9e:bc:f5:ca:87:d7:d0:b8:8e:3f:8a:a3:68:
                    d6:83:71:ca:44:62:e8:36:03:e7:ea:ad:da:d5:e8:
                    10:a4:93:9b:c7:94:ba:82:4f:13:6d:3b:9e:2a:fb:
                    55:16:1e:d8:86:74:dd:ac:d1:71:b0:70:70:36:17:
                    c4:11:38:d4:2e:cb:95:72:a8:5f:9a:37:38:ec:76:
                    d1:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:72:82:AA:4E:00:C3:D6:42:0A:EA:1A:17:2E:2A:04:37:40:45:21
            X509v3 Authority Key Identifier:
                keyid:F2:04:F7:A5:03:A8:09:3C:C6:56:06:27:48:3C:58:34:D6:19:56:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2z11Heg6SyHFa7uPHDokYp6cbCJTnU2BFnpgwmfZJ9dJ/1/F204F7A503A8093CC6560627483C5834D61956E8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F204F7A503A8093CC6560627483C5834D61956E8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2z11Heg6SyHFa7uPHDokYp6cbCJTnU2BFnpgwmfZJ9dJ/1/3139302e3130322e34342e302f32332d3233203d3e20323731353134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.102.44.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2e:73:0f:ac:18:e1:f5:eb:87:2d:4c:37:0d:77:f8:d7:90:14:
         3b:8c:49:2b:09:58:71:8b:75:85:2d:89:12:6c:be:cd:f8:40:
         fe:b3:b6:ad:23:10:26:d2:46:1b:99:f6:e1:07:e3:6b:3a:f0:
         8f:02:17:5c:60:4a:7b:d1:60:23:a6:05:e0:fb:b9:aa:82:26:
         af:88:9e:bf:d8:4a:d0:a7:1e:f8:02:aa:24:c3:17:56:85:8d:
         6b:2f:9e:4e:76:fc:59:77:12:e2:6c:27:67:66:2b:9f:1a:53:
         f0:ce:30:61:de:63:b5:b0:9e:fa:78:6d:4f:44:db:1b:e5:76:
         59:92:d3:11:74:ec:f5:0c:8f:12:ee:4e:7f:56:f5:24:35:47:
         9e:2b:cf:b9:49:cf:81:c4:8d:9f:cf:88:dc:a6:84:94:2b:50:
         0a:8f:6e:58:51:4e:6d:c1:78:1c:c9:b0:93:04:86:16:0f:6e:
         71:a1:93:9b:fe:40:2c:e3:f6:3b:b5:c8:6d:1d:a3:aa:03:bc:
         57:f6:fc:02:ae:24:dc:6f:f4:22:93:46:5c:43:a5:06:32:d9:
         07:46:69:ae:4d:53:90:91:76:80:1e:71:18:8d:95:69:b3:59:
         2a:3b:d6:a5:23:71:7e:29:e8:cb:f1:8b:b5:66:81:b9:e9:68:
         f5:53:b9:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 15:42:14 2024 by rpki-client on console-fra.rpki-client.org