Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4HEfp8GZWQqhTxygrRotWAYz1xCGjy2sfRevq1b95xvo/1/3139302e3132332e37352e302f32342d3234203d3e20323731333236.roa
File:                     3139302e3132332e37352e302f32342d3234203d3e20323731333236.roa (raw, json)
Hash identifier:          ST8zf0ELQMJQZsNbNWM8cWUHeP7STpzaBbwZbsUfddo=
Subject key identifier:   B8:3D:FD:A1:47:00:ED:33:BF:8C:BC:38:75:31:D2:D7:8E:33:D1:8D
Certificate issuer:       /CN=E4C75E4DC17EB69E3C5D7F2477A6366C4476ACD5
Certificate serial:       7B937FABAFF9AEF0B06F411FAEE90A4D496287AC
Authority key identifier: E4:C7:5E:4D:C1:7E:B6:9E:3C:5D:7F:24:77:A6:36:6C:44:76:AC:D5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4C75E4DC17EB69E3C5D7F2477A6366C4476ACD5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4HEfp8GZWQqhTxygrRotWAYz1xCGjy2sfRevq1b95xvo/1/3139302e3132332e37352e302f32342d3234203d3e20323731333236.roa
Signing time:             Wed 03 Apr 2024 18:43:09 +0000
ROA not before:           Wed 03 Apr 2024 18:38:09 +0000
ROA not after:            Wed 02 Apr 2025 18:43:09 +0000
asID:                     271326
IP address blocks:        190.123.75.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4HEfp8GZWQqhTxygrRotWAYz1xCGjy2sfRevq1b95xvo/1/E4C75E4DC17EB69E3C5D7F2477A6366C4476ACD5.crl
                          rsync://rpki-repo.registro.br/repo/4HEfp8GZWQqhTxygrRotWAYz1xCGjy2sfRevq1b95xvo/1/E4C75E4DC17EB69E3C5D7F2477A6366C4476ACD5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4C75E4DC17EB69E3C5D7F2477A6366C4476ACD5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 06:14:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:93:7f:ab:af:f9:ae:f0:b0:6f:41:1f:ae:e9:0a:4d:49:62:87:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E4C75E4DC17EB69E3C5D7F2477A6366C4476ACD5
        Validity
            Not Before: Apr  3 18:38:09 2024 GMT
            Not After : Apr  2 18:43:09 2025 GMT
        Subject: CN=B83DFDA14700ED33BF8CBC387531D2D78E33D18D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:14:ff:cc:da:26:9d:05:89:97:89:69:99:e8:
                    62:c0:bf:7f:cb:c3:64:b1:8f:aa:0d:5b:0b:aa:2f:
                    0e:6d:95:20:84:8b:2a:4d:80:cc:f7:ba:b7:64:ae:
                    27:93:a7:30:c7:30:e2:8c:9a:bc:a2:58:3b:a5:48:
                    39:4d:72:c8:e8:e0:0a:e7:d0:3e:b3:30:77:a4:d6:
                    82:cb:25:d2:f8:8a:88:bb:64:c1:fd:b5:24:d9:9a:
                    9a:8d:d3:cd:fa:10:df:37:2c:6a:1b:93:a0:3e:42:
                    7a:3f:46:01:90:41:14:08:6d:74:de:69:3e:88:19:
                    5a:92:2f:29:68:7b:fb:ce:02:e2:b9:02:56:bc:41:
                    05:f3:1e:ed:22:4b:19:b7:af:45:41:1e:4d:75:1c:
                    44:94:1c:9c:a3:11:11:c5:e8:ce:ad:fa:ed:8b:af:
                    ce:6d:9f:08:d2:f2:95:8e:d3:ba:4c:b5:19:c8:47:
                    70:1d:25:fa:d4:d7:ef:f2:bb:c8:f7:eb:e6:51:0b:
                    55:ec:13:09:3a:55:a0:07:a5:b9:ef:06:a2:4e:97:
                    cc:4a:90:8c:e5:bf:69:40:62:a4:7a:79:e9:ce:42:
                    cb:e1:8e:ac:1e:0d:2a:44:dc:97:97:cc:1f:1a:2f:
                    f5:3b:14:85:5c:91:e8:91:6d:f7:83:b0:70:40:a1:
                    5d:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:3D:FD:A1:47:00:ED:33:BF:8C:BC:38:75:31:D2:D7:8E:33:D1:8D
            X509v3 Authority Key Identifier:
                keyid:E4:C7:5E:4D:C1:7E:B6:9E:3C:5D:7F:24:77:A6:36:6C:44:76:AC:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4HEfp8GZWQqhTxygrRotWAYz1xCGjy2sfRevq1b95xvo/1/E4C75E4DC17EB69E3C5D7F2477A6366C4476ACD5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4C75E4DC17EB69E3C5D7F2477A6366C4476ACD5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4HEfp8GZWQqhTxygrRotWAYz1xCGjy2sfRevq1b95xvo/1/3139302e3132332e37352e302f32342d3234203d3e20323731333236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.123.75.0/24

    Signature Algorithm: sha256WithRSAEncryption
         34:6f:a6:8c:f6:e7:ab:b1:0c:a0:71:3a:91:4b:0e:45:37:9a:
         b4:94:cd:d0:cf:39:ea:8f:79:24:ac:3e:97:32:b7:c9:ee:c9:
         5c:94:dd:68:30:15:77:cf:37:f2:62:93:07:be:e4:43:7a:45:
         e1:3c:ba:13:31:01:a5:f9:8b:b1:83:dd:ba:91:04:df:15:20:
         62:5b:58:43:85:5d:4c:e1:49:3b:8e:fe:82:e3:31:89:a9:40:
         72:69:21:5f:46:4d:bb:28:f1:d4:7c:21:99:26:59:8e:a2:ca:
         85:f6:ac:af:49:52:12:03:fb:21:55:9f:57:f1:68:43:b0:c0:
         8a:61:54:eb:95:65:c1:d9:7b:f4:54:55:19:a0:2a:65:2a:9c:
         ac:e2:c3:6a:06:1f:e3:de:f0:6e:97:6a:2a:a4:2b:5c:b1:37:
         e0:4e:a4:12:31:21:13:cc:bd:e3:b5:3c:fc:a2:8e:b5:b1:90:
         23:16:54:d6:ca:88:15:56:89:75:52:e7:65:b8:c3:ef:d1:e8:
         49:28:64:89:49:71:52:35:d2:69:ac:8b:61:9f:4e:88:a2:cd:
         cd:4e:d4:99:5b:37:1b:fb:fa:de:10:ab:c5:77:c9:26:c1:48:
         b6:49:2b:13:9e:7d:c4:9e:6c:db:66:4f:8b:94:57:e4:71:a8:
         c9:c3:e5:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 08:00:13 2024 by rpki-client on console-ams.rpki-client.org