Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4v1ArkdPciMWNVFLkx6xFwscab1Q3jHJwBRHgUaREqqM/1/3139302e3130332e3137322e302f32322d3332203d3e20323632393839.roa
File:                     3139302e3130332e3137322e302f32322d3332203d3e20323632393839.roa (raw, json)
Hash identifier:          I+xwzeQGsbLaV1eYERtASTdumLpxgsKvN2nAQUSWk7A=
Subject key identifier:   27:5B:4D:E3:58:C0:ED:5F:8E:F0:6C:AA:AD:5B:F4:C3:97:CB:6D:F9
Certificate issuer:       /CN=D322281463F194BEAD29926EC73A0E7378D1F259
Certificate serial:       6898B3714A0F806B5E8147446C17BF28CDF3F0D2
Authority key identifier: D3:22:28:14:63:F1:94:BE:AD:29:92:6E:C7:3A:0E:73:78:D1:F2:59
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D322281463F194BEAD29926EC73A0E7378D1F259.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4v1ArkdPciMWNVFLkx6xFwscab1Q3jHJwBRHgUaREqqM/1/3139302e3130332e3137322e302f32322d3332203d3e20323632393839.roa
Signing time:             Thu 04 Apr 2024 19:59:13 +0000
ROA not before:           Thu 04 Apr 2024 19:54:13 +0000
ROA not after:            Thu 03 Apr 2025 19:59:13 +0000
asID:                     262989
IP address blocks:        190.103.172.0/22 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4v1ArkdPciMWNVFLkx6xFwscab1Q3jHJwBRHgUaREqqM/1/D322281463F194BEAD29926EC73A0E7378D1F259.crl
                          rsync://rpki-repo.registro.br/repo/4v1ArkdPciMWNVFLkx6xFwscab1Q3jHJwBRHgUaREqqM/1/D322281463F194BEAD29926EC73A0E7378D1F259.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D322281463F194BEAD29926EC73A0E7378D1F259.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 17:29:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:98:b3:71:4a:0f:80:6b:5e:81:47:44:6c:17:bf:28:cd:f3:f0:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D322281463F194BEAD29926EC73A0E7378D1F259
        Validity
            Not Before: Apr  4 19:54:13 2024 GMT
            Not After : Apr  3 19:59:13 2025 GMT
        Subject: CN=275B4DE358C0ED5F8EF06CAAAD5BF4C397CB6DF9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:f4:73:13:66:26:35:31:13:95:ba:f3:62:7a:
                    c2:bc:d6:7c:e4:b9:43:7b:1f:df:c5:7c:e0:32:e7:
                    62:63:5a:2e:5d:ff:b6:a7:6e:3e:f5:fd:6d:43:6b:
                    64:0c:00:d2:1b:16:dc:79:3d:30:ce:45:53:8e:fb:
                    43:43:3d:d9:46:02:09:bc:5a:97:41:68:57:9f:bd:
                    c4:6a:fe:16:07:c6:04:52:af:69:60:43:88:59:31:
                    29:7f:cb:a5:cb:f7:5f:90:b3:aa:ae:dd:9d:df:64:
                    7b:45:d0:35:28:66:3f:bf:86:1b:5a:74:73:64:d3:
                    9b:b1:0b:c2:88:30:db:73:6f:08:2a:5f:88:64:95:
                    4b:97:82:fb:05:83:4a:51:25:cf:7f:55:6b:11:11:
                    cb:e0:e8:4c:22:13:be:8f:4f:71:dd:d7:8e:9b:36:
                    9a:bb:3e:a5:9d:10:d6:ff:75:46:47:29:10:ed:d6:
                    c0:73:b3:ab:37:b8:41:9d:a7:3d:43:46:90:d9:58:
                    5a:ca:69:e2:8d:90:1c:87:86:d8:c2:5a:9a:a3:99:
                    02:45:9f:55:ea:5e:14:d6:3d:81:5a:0e:ef:95:db:
                    2a:da:b4:15:6b:f9:f7:c5:d3:26:3e:7d:94:33:a0:
                    9d:8a:ba:b1:b5:15:2c:6a:fb:a4:e4:c0:55:93:f4:
                    7a:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:5B:4D:E3:58:C0:ED:5F:8E:F0:6C:AA:AD:5B:F4:C3:97:CB:6D:F9
            X509v3 Authority Key Identifier:
                keyid:D3:22:28:14:63:F1:94:BE:AD:29:92:6E:C7:3A:0E:73:78:D1:F2:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4v1ArkdPciMWNVFLkx6xFwscab1Q3jHJwBRHgUaREqqM/1/D322281463F194BEAD29926EC73A0E7378D1F259.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D322281463F194BEAD29926EC73A0E7378D1F259.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4v1ArkdPciMWNVFLkx6xFwscab1Q3jHJwBRHgUaREqqM/1/3139302e3130332e3137322e302f32322d3332203d3e20323632393839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.103.172.0/22

    Signature Algorithm: sha256WithRSAEncryption
         35:47:4c:5b:b0:c3:d1:01:04:1b:93:db:09:56:3b:7b:42:72:
         5b:95:a2:1c:0c:0c:c3:18:ea:42:c6:66:f6:c1:19:e7:c0:29:
         83:2b:31:7c:35:49:f1:6b:f0:61:1d:c2:21:12:ac:b3:04:27:
         65:4a:24:45:33:ce:3b:20:c9:a6:3a:fc:28:21:de:06:cd:c9:
         44:28:96:58:e8:85:d2:98:3d:57:d4:62:3b:90:bd:97:76:8e:
         21:a7:a2:1d:25:4f:52:2f:ad:74:17:b3:c2:f7:c4:54:94:0e:
         61:94:fb:af:32:0e:1c:fb:cc:37:7d:8d:22:5c:34:7d:4d:cd:
         63:e3:42:c4:7b:76:60:ce:60:42:8e:e3:23:e3:45:ed:7c:71:
         34:e6:5b:df:da:db:b8:15:95:a3:0b:a1:2a:72:ca:bc:51:03:
         7b:e6:2d:1f:5c:20:dd:b6:f1:6d:fa:fd:36:05:1c:d0:92:eb:
         7c:34:a8:87:3d:04:64:58:d2:2b:60:ac:07:c1:76:07:91:f5:
         ff:4e:d4:c6:ec:b4:ff:9e:80:40:d8:85:91:6e:af:fa:da:03:
         2d:d4:05:6e:cc:7f:6d:e2:98:35:3a:0c:39:22:43:20:ab:2c:
         98:d5:bc:26:65:85:03:ff:f5:7b:b1:9f:15:29:b5:30:cd:26:
         6c:f0:9b:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:42:15 2024 by rpki-client on console-fra.rpki-client.org