Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4v1ArkdPciMWNVFLkx6xFwscab1Q3jHJwBRHgUaREqqM/1/3139302e3130332e3137312e302f32342d3332203d3e20323632393839.roa
File:                     3139302e3130332e3137312e302f32342d3332203d3e20323632393839.roa (raw, json)
Hash identifier:          BYHKfoIH9Q8/WqSNYtPwXbgkHQn6YmiXx2VvhO2HVf0=
Subject key identifier:   9A:47:0E:BE:68:B2:33:9B:E6:58:E3:8F:D1:54:53:FF:12:02:4C:AC
Certificate issuer:       /CN=D322281463F194BEAD29926EC73A0E7378D1F259
Certificate serial:       4A1E7B85608EEF280F9692F75C4C909BD6042DF2
Authority key identifier: D3:22:28:14:63:F1:94:BE:AD:29:92:6E:C7:3A:0E:73:78:D1:F2:59
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D322281463F194BEAD29926EC73A0E7378D1F259.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4v1ArkdPciMWNVFLkx6xFwscab1Q3jHJwBRHgUaREqqM/1/3139302e3130332e3137312e302f32342d3332203d3e20323632393839.roa
Signing time:             Thu 04 Apr 2024 19:59:11 +0000
ROA not before:           Thu 04 Apr 2024 19:54:11 +0000
ROA not after:            Thu 03 Apr 2025 19:59:11 +0000
asID:                     262989
IP address blocks:        190.103.171.0/24 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4v1ArkdPciMWNVFLkx6xFwscab1Q3jHJwBRHgUaREqqM/1/D322281463F194BEAD29926EC73A0E7378D1F259.crl
                          rsync://rpki-repo.registro.br/repo/4v1ArkdPciMWNVFLkx6xFwscab1Q3jHJwBRHgUaREqqM/1/D322281463F194BEAD29926EC73A0E7378D1F259.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D322281463F194BEAD29926EC73A0E7378D1F259.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 17:29:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:1e:7b:85:60:8e:ef:28:0f:96:92:f7:5c:4c:90:9b:d6:04:2d:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D322281463F194BEAD29926EC73A0E7378D1F259
        Validity
            Not Before: Apr  4 19:54:11 2024 GMT
            Not After : Apr  3 19:59:11 2025 GMT
        Subject: CN=9A470EBE68B2339BE658E38FD15453FF12024CAC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:ec:36:98:d4:e6:dd:24:2d:ea:2d:8f:b5:d9:
                    bd:4e:ca:1a:23:ea:25:7d:fd:21:23:5e:65:9e:a2:
                    a1:00:a3:0b:1f:af:e4:47:e4:e1:be:61:06:7d:27:
                    d4:83:28:1d:bb:79:89:81:a4:77:b9:0e:be:e0:2e:
                    09:ac:9c:0c:12:72:8d:80:24:73:4b:1c:54:c5:fb:
                    80:7e:e1:27:78:25:4b:51:fc:e4:9e:73:dc:57:da:
                    79:d9:58:ca:3f:e6:96:0e:75:c5:60:88:61:0f:93:
                    24:09:03:41:1f:7e:32:f3:8d:66:95:02:f4:36:fc:
                    a5:5f:be:f0:a6:15:7a:f7:49:3e:c5:0b:53:31:3f:
                    fa:f7:1d:4c:81:b2:a4:af:2b:44:5f:a7:64:94:58:
                    4f:89:99:d1:55:fe:a6:6d:46:bf:04:73:6c:97:d8:
                    39:5f:ee:f3:c8:f1:96:12:61:6d:65:71:15:a4:a1:
                    f8:63:66:b5:18:ff:f9:de:13:6d:2c:ba:4d:54:83:
                    f9:91:8e:10:e9:23:23:a5:74:a5:81:a7:67:c0:cb:
                    bb:d9:1c:73:af:6a:a3:d6:88:a8:e4:d1:68:95:c2:
                    06:f1:85:92:cd:82:0d:c6:b6:3d:67:ce:19:7e:c9:
                    b3:00:97:ff:f0:64:64:40:51:f4:70:4d:bd:fd:bc:
                    67:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:47:0E:BE:68:B2:33:9B:E6:58:E3:8F:D1:54:53:FF:12:02:4C:AC
            X509v3 Authority Key Identifier:
                keyid:D3:22:28:14:63:F1:94:BE:AD:29:92:6E:C7:3A:0E:73:78:D1:F2:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4v1ArkdPciMWNVFLkx6xFwscab1Q3jHJwBRHgUaREqqM/1/D322281463F194BEAD29926EC73A0E7378D1F259.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D322281463F194BEAD29926EC73A0E7378D1F259.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4v1ArkdPciMWNVFLkx6xFwscab1Q3jHJwBRHgUaREqqM/1/3139302e3130332e3137312e302f32342d3332203d3e20323632393839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.103.171.0/24

    Signature Algorithm: sha256WithRSAEncryption
         23:7d:da:5b:ce:76:de:8b:b6:f5:be:54:c6:45:44:a3:54:bb:
         26:cd:78:45:70:3a:82:6b:4f:84:17:9e:36:37:64:48:19:b3:
         23:4a:48:ff:b0:c7:53:9f:7c:02:fd:c3:33:74:41:73:e0:1b:
         41:b5:cb:b4:9b:5e:40:b3:31:2c:6c:76:85:1b:ea:00:07:b4:
         27:95:ae:9f:09:e7:7a:2b:dd:70:e3:e1:d2:df:ba:6c:d4:41:
         d6:ee:c2:60:f0:3c:52:6b:96:d1:ce:c7:14:50:47:b7:1f:b2:
         0d:58:27:6f:9f:94:06:e2:46:dd:39:60:e6:e1:47:5a:cd:ab:
         15:e0:9c:04:96:c3:e1:d3:bc:d7:fc:a4:91:a9:57:03:a9:5e:
         bf:65:56:c6:84:1c:d7:7d:5f:62:b8:4a:a3:91:3f:f2:b4:28:
         30:c1:40:a1:1c:62:2d:ee:b1:5c:14:f6:32:e9:82:cc:79:d7:
         19:17:be:62:84:f1:af:6a:9b:f9:ec:e3:92:52:be:52:97:75:
         30:b2:6f:1e:ba:5e:57:69:d1:67:df:e1:8c:3a:3a:a7:39:82:
         a5:1b:47:e9:12:14:58:df:67:c7:73:3e:7a:60:40:cf:d0:40:
         ee:90:ec:01:97:3d:a9:f6:86:cc:96:a8:6b:75:d0:55:54:e8:
         6b:8d:0b:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:42:15 2024 by rpki-client on console-fra.rpki-client.org