Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2z11Heg6SyHFa7uPHDokYp6cbCJTnU2BFnpgwmfZJ9dJ/1/3139302e3130322e34362e302f32342d3234203d3e20323731353134.roa
File:                     3139302e3130322e34362e302f32342d3234203d3e20323731353134.roa (raw, json)
Hash identifier:          1NgsK0NlJb/yyochT6Q6T5a9HjUb4SbtUtokmzwjtxA=
Subject key identifier:   A4:3C:F4:98:A4:30:67:95:40:49:35:31:E7:C1:0E:A3:BE:66:2E:DA
Certificate issuer:       /CN=F204F7A503A8093CC6560627483C5834D61956E8
Certificate serial:       058429A34E62451E170D4D33533DFF2A30CE97EE
Authority key identifier: F2:04:F7:A5:03:A8:09:3C:C6:56:06:27:48:3C:58:34:D6:19:56:E8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F204F7A503A8093CC6560627483C5834D61956E8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2z11Heg6SyHFa7uPHDokYp6cbCJTnU2BFnpgwmfZJ9dJ/1/3139302e3130322e34362e302f32342d3234203d3e20323731353134.roa
Signing time:             Thu 04 Apr 2024 05:40:46 +0000
ROA not before:           Thu 04 Apr 2024 05:35:46 +0000
ROA not after:            Thu 03 Apr 2025 05:40:46 +0000
asID:                     271514
IP address blocks:        190.102.46.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2z11Heg6SyHFa7uPHDokYp6cbCJTnU2BFnpgwmfZJ9dJ/1/F204F7A503A8093CC6560627483C5834D61956E8.crl
                          rsync://rpki-repo.registro.br/repo/2z11Heg6SyHFa7uPHDokYp6cbCJTnU2BFnpgwmfZJ9dJ/1/F204F7A503A8093CC6560627483C5834D61956E8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F204F7A503A8093CC6560627483C5834D61956E8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 13:43:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:84:29:a3:4e:62:45:1e:17:0d:4d:33:53:3d:ff:2a:30:ce:97:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F204F7A503A8093CC6560627483C5834D61956E8
        Validity
            Not Before: Apr  4 05:35:46 2024 GMT
            Not After : Apr  3 05:40:46 2025 GMT
        Subject: CN=A43CF498A430679540493531E7C10EA3BE662EDA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:78:5f:ff:d9:9f:44:7f:3e:6c:85:7f:0b:a2:
                    31:42:d4:a2:f0:c5:ac:44:c5:37:ec:d5:ff:c5:92:
                    c3:ac:5c:e0:45:25:76:ae:ff:67:8d:bc:b6:a0:65:
                    62:07:cc:f2:0c:28:ed:81:50:19:d2:19:4b:d0:ae:
                    67:7d:88:ce:d9:26:af:5b:dc:29:a3:af:9d:5f:e1:
                    e9:f2:bf:05:8d:65:98:5c:e4:81:6a:25:ca:17:5c:
                    7c:eb:eb:99:f0:a9:50:8f:49:f7:31:27:b1:73:eb:
                    f2:5e:3c:ef:fc:86:eb:a7:ee:41:73:fe:fe:df:aa:
                    be:b6:67:ae:ff:57:b8:a0:a5:f2:d2:c5:49:0e:05:
                    90:c9:cd:8b:1c:bf:e0:d2:c7:f9:14:f9:36:c6:18:
                    43:c9:5e:a6:f3:4a:27:37:05:3e:3f:1d:06:d0:a9:
                    9d:0c:5b:e2:3c:ad:57:c2:57:45:fd:ab:0d:df:9c:
                    2c:d8:b6:36:66:e5:e7:ce:26:61:b1:eb:38:33:16:
                    d0:3d:2c:b1:86:70:81:fe:0e:58:40:9f:b4:ae:fc:
                    04:f1:63:12:6e:a7:ff:ce:80:5b:d4:3c:38:3c:05:
                    21:d8:5d:56:9c:71:ee:15:0e:c7:ab:72:df:f1:f4:
                    11:10:d0:17:2e:ef:f5:ac:c4:c2:a3:74:3f:9d:b6:
                    ca:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:3C:F4:98:A4:30:67:95:40:49:35:31:E7:C1:0E:A3:BE:66:2E:DA
            X509v3 Authority Key Identifier:
                keyid:F2:04:F7:A5:03:A8:09:3C:C6:56:06:27:48:3C:58:34:D6:19:56:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2z11Heg6SyHFa7uPHDokYp6cbCJTnU2BFnpgwmfZJ9dJ/1/F204F7A503A8093CC6560627483C5834D61956E8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F204F7A503A8093CC6560627483C5834D61956E8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2z11Heg6SyHFa7uPHDokYp6cbCJTnU2BFnpgwmfZJ9dJ/1/3139302e3130322e34362e302f32342d3234203d3e20323731353134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.102.46.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5e:5a:59:fb:79:33:2a:be:bf:40:49:c7:88:ca:05:86:29:5a:
         bd:76:6f:cc:6d:73:af:49:4c:df:ed:7c:7a:8a:76:6a:ed:d4:
         43:7b:75:95:cb:3c:fc:56:09:65:69:13:b1:2d:5d:a6:69:a4:
         54:0d:f5:47:2f:18:87:02:29:4e:d3:98:ee:29:e4:c6:58:ea:
         9d:16:39:dc:4d:d7:33:ed:6a:e2:4f:60:5b:97:ee:eb:ac:7c:
         c9:72:83:d4:66:fa:04:24:d1:69:d5:1b:b4:01:12:82:5d:a7:
         8e:7f:08:62:c7:fa:c5:5e:8d:f9:7a:81:11:df:5a:3b:0b:91:
         c4:d5:92:69:cc:85:b2:0f:7e:7c:7e:6a:62:89:5e:5c:9a:33:
         66:62:81:18:30:04:25:95:c4:f6:84:40:14:51:7d:7b:c1:26:
         67:98:68:98:36:32:ad:45:05:6b:cb:ce:5c:65:51:0d:62:aa:
         35:45:37:27:53:d9:c5:4a:f9:7d:ad:2e:d9:4b:a8:a7:2a:3c:
         50:57:6f:1e:2e:59:66:fc:59:b1:cf:39:c1:7c:8e:d7:81:22:
         16:db:a6:8f:4b:3d:e7:ac:31:28:9a:20:17:ad:53:55:60:cf:
         b9:89:c3:0e:d2:94:50:3b:da:3a:42:e5:32:19:6e:5c:ed:0a:
         1e:b8:d3:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 13:25:00 2024 by rpki-client on console-ams.rpki-client.org