Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4v1ArkdPciMWNVFLkx6xFwscab1Q3jHJwBRHgUaREqqM/1/3139302e3130332e3137302e302f32342d3332203d3e20323632393839.roa
File:                     3139302e3130332e3137302e302f32342d3332203d3e20323632393839.roa (raw, json)
Hash identifier:          9by0Csufd8SO7B3w8Rptbit+t6aRlGLsD2ZiWq3VQhU=
Subject key identifier:   7C:A5:E9:08:2F:91:CA:43:09:69:98:95:53:25:80:4A:87:1D:40:E6
Certificate issuer:       /CN=D322281463F194BEAD29926EC73A0E7378D1F259
Certificate serial:       4ACCCEC027C18B9AA5069FA42FB794DDEF9B9E1B
Authority key identifier: D3:22:28:14:63:F1:94:BE:AD:29:92:6E:C7:3A:0E:73:78:D1:F2:59
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D322281463F194BEAD29926EC73A0E7378D1F259.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4v1ArkdPciMWNVFLkx6xFwscab1Q3jHJwBRHgUaREqqM/1/3139302e3130332e3137302e302f32342d3332203d3e20323632393839.roa
Signing time:             Thu 04 Apr 2024 19:59:12 +0000
ROA not before:           Thu 04 Apr 2024 19:54:12 +0000
ROA not after:            Thu 03 Apr 2025 19:59:12 +0000
asID:                     262989
IP address blocks:        190.103.170.0/24 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4v1ArkdPciMWNVFLkx6xFwscab1Q3jHJwBRHgUaREqqM/1/D322281463F194BEAD29926EC73A0E7378D1F259.crl
                          rsync://rpki-repo.registro.br/repo/4v1ArkdPciMWNVFLkx6xFwscab1Q3jHJwBRHgUaREqqM/1/D322281463F194BEAD29926EC73A0E7378D1F259.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D322281463F194BEAD29926EC73A0E7378D1F259.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 17:29:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:cc:ce:c0:27:c1:8b:9a:a5:06:9f:a4:2f:b7:94:dd:ef:9b:9e:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D322281463F194BEAD29926EC73A0E7378D1F259
        Validity
            Not Before: Apr  4 19:54:12 2024 GMT
            Not After : Apr  3 19:59:12 2025 GMT
        Subject: CN=7CA5E9082F91CA43096998955325804A871D40E6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:b3:07:87:e6:2f:b0:51:7a:a7:81:0a:fc:00:
                    99:d5:11:aa:63:3a:05:6c:d4:89:b8:27:86:b9:c3:
                    95:bd:b4:72:67:b6:26:d8:e6:b7:97:8d:37:29:60:
                    5c:bf:91:70:eb:80:e4:07:d4:af:5c:ec:47:2a:c1:
                    f7:0c:d9:02:7b:69:21:6c:13:86:1e:ca:6e:e4:e5:
                    29:03:66:49:86:aa:ae:99:3b:b9:3d:04:c7:13:bc:
                    b7:ab:66:b5:9c:63:d2:1c:a9:6e:43:34:cd:fe:9c:
                    29:99:da:0a:e5:ca:90:35:ca:92:d0:1c:93:39:f1:
                    8c:1f:a1:10:db:f6:bc:ed:e1:7b:94:34:cc:9e:ed:
                    08:84:2a:b1:fa:82:07:79:61:1f:d8:76:01:28:87:
                    2c:6c:68:58:93:5b:d2:73:ec:0c:2d:40:e0:49:d7:
                    e8:01:95:38:88:eb:1f:26:67:58:09:e2:81:be:cc:
                    22:86:f8:9b:13:75:8b:1d:ad:34:fc:87:8e:6c:da:
                    c1:ac:ff:e2:b6:5c:80:bf:80:99:a6:db:67:c2:5e:
                    c7:3c:ad:6c:0f:71:5a:46:14:22:8c:87:93:cb:34:
                    35:1b:18:6d:df:f8:ed:ec:7c:e0:a0:ee:a3:fe:1b:
                    7a:45:9b:a2:7e:80:66:26:f3:4f:16:19:56:3c:1a:
                    eb:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:A5:E9:08:2F:91:CA:43:09:69:98:95:53:25:80:4A:87:1D:40:E6
            X509v3 Authority Key Identifier:
                keyid:D3:22:28:14:63:F1:94:BE:AD:29:92:6E:C7:3A:0E:73:78:D1:F2:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4v1ArkdPciMWNVFLkx6xFwscab1Q3jHJwBRHgUaREqqM/1/D322281463F194BEAD29926EC73A0E7378D1F259.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D322281463F194BEAD29926EC73A0E7378D1F259.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4v1ArkdPciMWNVFLkx6xFwscab1Q3jHJwBRHgUaREqqM/1/3139302e3130332e3137302e302f32342d3332203d3e20323632393839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.103.170.0/24

    Signature Algorithm: sha256WithRSAEncryption
         17:8a:1d:f6:a9:46:38:1b:58:dc:dd:c8:3a:5b:58:fb:7d:ab:
         6a:a4:94:71:2e:7d:88:2d:84:0b:d5:54:33:b8:73:79:fd:9f:
         d4:ab:eb:61:af:1b:ae:7a:5a:dc:01:48:2e:36:e2:c7:1c:e8:
         ac:5d:15:7e:55:60:3e:db:34:ce:be:85:e5:a7:85:cb:e3:ae:
         96:a6:11:39:43:44:ad:6c:53:45:d5:96:c7:28:2a:8f:3a:a1:
         8a:7b:be:e1:bb:a7:54:89:88:27:69:68:d3:d4:ef:92:59:9c:
         17:9d:05:fe:23:66:92:60:fb:04:4e:78:83:1b:62:38:3f:ea:
         8c:9f:59:d7:37:87:7c:72:14:e7:86:49:91:fd:f7:81:bf:49:
         bf:62:27:c6:5d:a4:07:5c:5b:a8:b2:79:5e:2c:1b:1b:22:ed:
         42:f0:c7:b1:dc:2e:96:42:1c:6b:56:44:a8:ee:c5:2d:89:a9:
         a4:63:29:40:c6:c1:e1:ac:92:ba:2d:64:c9:eb:9c:59:5f:4b:
         87:92:52:99:48:cb:2f:0d:4b:37:c4:14:71:08:b4:a0:0f:13:
         b0:fd:a9:a4:00:91:05:7e:f9:df:49:08:d6:4b:a2:2d:0b:04:
         0a:49:3f:5c:07:6a:d3:10:11:20:d3:75:5f:49:e6:0d:74:7e:
         1f:89:58:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:42:15 2024 by rpki-client on console-fra.rpki-client.org