Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4HEfp8GZWQqhTxygrRotWAYz1xCGjy2sfRevq1b95xvo/1/3139302e3132332e37342e302f32342d3234203d3e20323731333236.roa
File:                     3139302e3132332e37342e302f32342d3234203d3e20323731333236.roa (raw, json)
Hash identifier:          UDFXHWGw+i38AZy+nU+6S55RGBleI8eB5R0v58sUJhQ=
Subject key identifier:   9E:02:E4:C1:72:96:8F:61:D0:A1:D6:AE:4F:38:D3:6A:50:DB:83:B1
Certificate issuer:       /CN=E4C75E4DC17EB69E3C5D7F2477A6366C4476ACD5
Certificate serial:       1DE31D4131282403FFDA3571454E02C6A3B3D868
Authority key identifier: E4:C7:5E:4D:C1:7E:B6:9E:3C:5D:7F:24:77:A6:36:6C:44:76:AC:D5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4C75E4DC17EB69E3C5D7F2477A6366C4476ACD5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4HEfp8GZWQqhTxygrRotWAYz1xCGjy2sfRevq1b95xvo/1/3139302e3132332e37342e302f32342d3234203d3e20323731333236.roa
Signing time:             Wed 03 Apr 2024 18:43:11 +0000
ROA not before:           Wed 03 Apr 2024 18:38:11 +0000
ROA not after:            Wed 02 Apr 2025 18:43:11 +0000
asID:                     271326
IP address blocks:        190.123.74.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4HEfp8GZWQqhTxygrRotWAYz1xCGjy2sfRevq1b95xvo/1/E4C75E4DC17EB69E3C5D7F2477A6366C4476ACD5.crl
                          rsync://rpki-repo.registro.br/repo/4HEfp8GZWQqhTxygrRotWAYz1xCGjy2sfRevq1b95xvo/1/E4C75E4DC17EB69E3C5D7F2477A6366C4476ACD5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4C75E4DC17EB69E3C5D7F2477A6366C4476ACD5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 06:14:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:e3:1d:41:31:28:24:03:ff:da:35:71:45:4e:02:c6:a3:b3:d8:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E4C75E4DC17EB69E3C5D7F2477A6366C4476ACD5
        Validity
            Not Before: Apr  3 18:38:11 2024 GMT
            Not After : Apr  2 18:43:11 2025 GMT
        Subject: CN=9E02E4C172968F61D0A1D6AE4F38D36A50DB83B1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:8f:2a:6a:ab:81:7e:93:17:50:61:f5:b7:e7:
                    ed:f8:6d:ce:da:81:d4:b8:39:59:1a:06:1b:cb:8a:
                    b1:1c:38:4f:a2:ea:75:df:c0:66:81:3e:b2:da:dd:
                    90:a0:3c:04:6f:87:26:7e:f0:e9:d7:6c:d7:79:9b:
                    0b:7d:00:df:64:33:f4:0b:17:49:7a:d9:1b:07:45:
                    b6:8e:d2:82:8f:14:fa:55:2d:9d:43:8d:07:aa:3c:
                    4b:9e:c9:fa:dd:43:ef:88:ec:5c:03:24:e2:ab:87:
                    a9:07:e8:aa:62:f6:33:07:6c:f0:0c:d8:46:9e:94:
                    c7:05:48:07:57:3a:50:c5:d1:a8:93:a4:d1:34:c3:
                    03:65:e8:fe:dd:70:e0:7a:38:29:48:0a:ba:33:d2:
                    ec:b0:b5:28:be:1b:5c:fd:c9:e2:bb:9f:a7:99:9c:
                    e9:c6:47:ab:af:2f:56:91:f1:36:18:65:92:5d:3e:
                    ed:1a:00:c6:38:de:67:dc:05:17:76:aa:b1:2e:d4:
                    f1:7d:be:f5:f0:ba:2d:7f:f4:08:8c:a7:1e:ac:0f:
                    3d:38:02:18:37:d0:0a:c6:05:f5:15:5a:fc:65:c2:
                    e4:30:f0:65:0c:71:ec:a5:81:16:64:d3:e4:40:b3:
                    6c:d4:c5:dd:f7:d0:ea:c4:ed:c7:59:54:15:d8:2a:
                    21:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:02:E4:C1:72:96:8F:61:D0:A1:D6:AE:4F:38:D3:6A:50:DB:83:B1
            X509v3 Authority Key Identifier:
                keyid:E4:C7:5E:4D:C1:7E:B6:9E:3C:5D:7F:24:77:A6:36:6C:44:76:AC:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4HEfp8GZWQqhTxygrRotWAYz1xCGjy2sfRevq1b95xvo/1/E4C75E4DC17EB69E3C5D7F2477A6366C4476ACD5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4C75E4DC17EB69E3C5D7F2477A6366C4476ACD5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4HEfp8GZWQqhTxygrRotWAYz1xCGjy2sfRevq1b95xvo/1/3139302e3132332e37342e302f32342d3234203d3e20323731333236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.123.74.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1a:8a:c7:80:94:6d:6a:ce:e4:eb:b3:9d:a1:f2:59:43:85:a1:
         8b:c2:05:5f:56:58:b0:ff:f3:c3:48:9e:35:a7:59:05:a0:cb:
         a4:1f:9b:90:38:6a:6b:ce:fe:c2:ca:31:73:0b:92:3a:63:1d:
         84:ee:0b:81:27:4b:07:71:79:ba:c9:77:8e:6d:4f:0a:e3:b8:
         c3:f3:71:02:e2:ab:95:65:34:ed:b6:81:e3:f6:21:b2:e0:3f:
         c5:2c:cb:69:55:90:04:17:2d:6f:f1:d6:ad:8c:f7:5e:c7:8c:
         50:30:37:71:ff:d6:9d:db:6b:f4:01:da:17:63:f6:94:8b:d3:
         05:51:3b:0d:d7:03:80:55:be:4b:65:71:64:3d:69:79:32:0a:
         b0:88:73:dc:68:e6:00:b5:4d:b5:32:03:ef:22:3f:0a:76:71:
         73:19:45:51:4a:3c:75:9d:4c:35:7c:5c:3c:cb:4a:e5:ba:2f:
         6a:79:0c:01:18:d1:d5:3b:84:9b:a2:11:17:68:09:8c:ce:e4:
         41:fa:42:39:a6:5e:eb:ba:41:e5:88:7e:19:30:61:f7:e9:de:
         7e:fc:68:bf:51:bc:13:26:eb:58:8c:b5:eb:05:d7:92:b2:b7:
         eb:67:88:c9:8e:4e:ec:4f:92:c0:e2:2f:7c:55:50:67:68:66:
         14:36:45:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 08:13:07 2024 by rpki-client on console-fra.rpki-client.org