Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4HEfp8GZWQqhTxygrRotWAYz1xCGjy2sfRevq1b95xvo/1/3139302e3132332e37322e302f32342d3234203d3e20323731333236.roa
File:                     3139302e3132332e37322e302f32342d3234203d3e20323731333236.roa (raw, json)
Hash identifier:          HtxgOS6w4vKy6/VSwjtIV7s9aIpaqkUUDjdGQuuIaL4=
Subject key identifier:   6C:4C:4F:01:E4:62:E4:E7:B6:F8:70:C6:75:D5:B5:06:DC:CC:71:4B
Certificate issuer:       /CN=E4C75E4DC17EB69E3C5D7F2477A6366C4476ACD5
Certificate serial:       3D303252A464065C608FC2F44F3C027A6CC63DC4
Authority key identifier: E4:C7:5E:4D:C1:7E:B6:9E:3C:5D:7F:24:77:A6:36:6C:44:76:AC:D5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4C75E4DC17EB69E3C5D7F2477A6366C4476ACD5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4HEfp8GZWQqhTxygrRotWAYz1xCGjy2sfRevq1b95xvo/1/3139302e3132332e37322e302f32342d3234203d3e20323731333236.roa
Signing time:             Wed 03 Apr 2024 18:43:10 +0000
ROA not before:           Wed 03 Apr 2024 18:38:10 +0000
ROA not after:            Wed 02 Apr 2025 18:43:10 +0000
asID:                     271326
IP address blocks:        190.123.72.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4HEfp8GZWQqhTxygrRotWAYz1xCGjy2sfRevq1b95xvo/1/E4C75E4DC17EB69E3C5D7F2477A6366C4476ACD5.crl
                          rsync://rpki-repo.registro.br/repo/4HEfp8GZWQqhTxygrRotWAYz1xCGjy2sfRevq1b95xvo/1/E4C75E4DC17EB69E3C5D7F2477A6366C4476ACD5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4C75E4DC17EB69E3C5D7F2477A6366C4476ACD5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 06:14:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:30:32:52:a4:64:06:5c:60:8f:c2:f4:4f:3c:02:7a:6c:c6:3d:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E4C75E4DC17EB69E3C5D7F2477A6366C4476ACD5
        Validity
            Not Before: Apr  3 18:38:10 2024 GMT
            Not After : Apr  2 18:43:10 2025 GMT
        Subject: CN=6C4C4F01E462E4E7B6F870C675D5B506DCCC714B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:de:b2:09:a6:16:3a:24:41:d7:37:c9:c1:a5:
                    6b:fb:1a:66:68:e5:54:08:5a:b6:98:af:12:dc:cd:
                    65:b7:7b:60:ee:f7:1d:24:85:ad:b7:54:2d:1c:91:
                    ea:ec:ae:08:7d:be:c2:8e:7c:e2:b5:e9:4b:bd:4c:
                    c7:84:d9:c8:93:6a:6b:c6:b5:33:be:63:1b:e8:b2:
                    e7:df:64:c0:5e:a1:9c:81:98:4e:68:8a:f4:e8:ca:
                    57:29:0b:40:d4:71:74:a2:7e:ce:b5:f7:e3:d3:7c:
                    61:c7:9f:56:09:b0:e3:62:84:d9:7a:e1:b0:15:74:
                    a1:4a:70:0e:1e:ef:8c:f7:5b:db:fb:43:16:9f:68:
                    c5:29:76:02:f8:c5:bf:04:61:d2:53:5e:5e:74:a5:
                    5d:e5:12:b4:9d:28:e9:52:6e:c2:54:e6:89:7f:5b:
                    d9:60:e2:1b:f0:cb:94:b1:62:a1:ba:91:b4:60:33:
                    7a:af:4b:b5:85:29:7a:af:23:cc:65:68:eb:f7:dd:
                    a0:3f:3b:3b:15:fd:9d:bd:92:9f:3d:0d:a4:a6:05:
                    23:af:45:16:35:8d:6f:66:fc:91:da:4c:60:b8:09:
                    6e:34:ed:b0:0c:57:7b:3a:82:63:b3:a6:07:ea:c1:
                    97:e5:e2:ba:c7:1c:fb:b2:5a:c8:0a:6b:78:59:70:
                    41:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:4C:4F:01:E4:62:E4:E7:B6:F8:70:C6:75:D5:B5:06:DC:CC:71:4B
            X509v3 Authority Key Identifier:
                keyid:E4:C7:5E:4D:C1:7E:B6:9E:3C:5D:7F:24:77:A6:36:6C:44:76:AC:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4HEfp8GZWQqhTxygrRotWAYz1xCGjy2sfRevq1b95xvo/1/E4C75E4DC17EB69E3C5D7F2477A6366C4476ACD5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4C75E4DC17EB69E3C5D7F2477A6366C4476ACD5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4HEfp8GZWQqhTxygrRotWAYz1xCGjy2sfRevq1b95xvo/1/3139302e3132332e37322e302f32342d3234203d3e20323731333236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.123.72.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4b:77:dc:6f:da:ed:dd:14:fb:64:bc:66:2a:2e:ad:93:b4:2f:
         71:7c:02:3c:1d:55:29:77:73:7c:0c:50:a8:01:e2:cf:f4:63:
         ce:9d:ac:f9:23:87:47:17:d3:fd:75:21:fb:f9:ab:07:60:54:
         95:07:23:e0:55:cc:4d:59:f4:b1:4e:22:11:70:ea:76:34:b4:
         90:fc:bc:98:81:0b:3c:d3:d3:0d:31:01:c2:6d:d0:12:4f:1c:
         3b:52:7e:c9:fb:7e:48:51:6f:f0:56:27:f6:89:6e:8a:8a:eb:
         38:28:ab:76:86:3c:aa:25:7d:ac:46:52:16:8e:6a:91:e1:a9:
         d4:b9:24:e3:ff:86:a5:44:ea:00:e9:cc:15:71:bd:a7:e4:f2:
         ee:c4:25:88:e2:3d:01:ad:c8:0b:0f:76:87:34:31:de:2b:54:
         40:52:f8:13:cc:bd:3b:ab:b7:67:33:25:5c:44:ee:e2:12:41:
         4b:ce:de:de:ed:5d:6f:44:96:0e:8b:09:8e:5b:99:da:23:b1:
         6e:9e:20:6b:b0:57:02:e6:35:f5:9b:88:d2:54:18:68:bd:a3:
         df:61:1a:43:6e:fc:78:98:cd:00:72:ed:b4:a4:1b:17:2e:42:
         9d:91:fd:59:3a:53:0a:e3:24:cf:ae:92:cb:43:a2:cc:1d:ee:
         04:b5:a6:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 08:13:07 2024 by rpki-client on console-fra.rpki-client.org