Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5kRMj74TSwTDw6GKdLpnH27zszNMscVsZczDwvYqb1Rm/2/3139302e38392e37362e302f32322d3332203d3e20323730333539.roa
File:                     3139302e38392e37362e302f32322d3332203d3e20323730333539.roa (raw, json)
Hash identifier:          xOkvovkBgousDSBM2Xj0040WvqZr5djjhNlm/OFf1JE=
Subject key identifier:   31:FC:7B:30:BC:D1:88:E8:0D:E1:6F:76:52:8F:54:4F:97:1D:E0:ED
Certificate issuer:       /CN=16F81DF06319D01EB676C8B7D68D31AD3664B3B9
Certificate serial:       6C7350E4DFD692F27985C70FE3E6546CE45796B0
Authority key identifier: 16:F8:1D:F0:63:19:D0:1E:B6:76:C8:B7:D6:8D:31:AD:36:64:B3:B9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/16F81DF06319D01EB676C8B7D68D31AD3664B3B9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5kRMj74TSwTDw6GKdLpnH27zszNMscVsZczDwvYqb1Rm/2/3139302e38392e37362e302f32322d3332203d3e20323730333539.roa
Signing time:             Thu 04 Apr 2024 10:25:19 +0000
ROA not before:           Thu 04 Apr 2024 10:20:19 +0000
ROA not after:            Thu 03 Apr 2025 10:25:19 +0000
asID:                     270359
IP address blocks:        190.89.76.0/22 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5kRMj74TSwTDw6GKdLpnH27zszNMscVsZczDwvYqb1Rm/2/16F81DF06319D01EB676C8B7D68D31AD3664B3B9.crl
                          rsync://rpki-repo.registro.br/repo/5kRMj74TSwTDw6GKdLpnH27zszNMscVsZczDwvYqb1Rm/2/16F81DF06319D01EB676C8B7D68D31AD3664B3B9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/16F81DF06319D01EB676C8B7D68D31AD3664B3B9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 11:41:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:73:50:e4:df:d6:92:f2:79:85:c7:0f:e3:e6:54:6c:e4:57:96:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16F81DF06319D01EB676C8B7D68D31AD3664B3B9
        Validity
            Not Before: Apr  4 10:20:19 2024 GMT
            Not After : Apr  3 10:25:19 2025 GMT
        Subject: CN=31FC7B30BCD188E80DE16F76528F544F971DE0ED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:23:e1:e9:78:ed:5d:7f:6d:56:66:0d:7e:bc:
                    1c:3b:da:d2:c2:cf:d5:97:b8:ae:3a:2a:22:99:1a:
                    15:20:ec:84:4c:04:2f:3b:84:91:c2:fd:1a:ab:a4:
                    1a:76:77:46:f9:29:46:6f:48:6c:34:1e:53:c4:34:
                    c3:f2:d6:b9:da:11:5b:2f:67:31:b5:33:e9:68:c4:
                    d3:0f:b4:8c:18:9f:b6:45:cf:1d:1f:9f:61:79:1b:
                    ff:bf:9a:2a:10:93:dd:da:01:f3:f6:1c:96:39:59:
                    6b:54:0a:b5:46:fb:8a:57:36:2c:d9:8d:2a:21:5a:
                    80:6c:9c:c1:42:21:32:a9:51:11:5c:53:fd:21:e5:
                    08:89:17:d9:d7:49:41:b1:59:32:9d:d9:0a:66:18:
                    4f:b9:df:88:3a:b2:77:1c:79:8c:b1:ac:1d:f5:28:
                    dc:30:8c:8e:cf:9d:68:9f:9b:9a:70:65:6b:f6:3c:
                    61:9b:99:e3:01:77:94:85:14:8e:e8:2e:dc:29:3e:
                    35:e4:be:f9:80:91:18:d2:6d:61:29:ec:c0:63:ca:
                    2f:ad:4f:04:3a:cf:ee:95:a8:33:28:f0:39:28:4c:
                    57:b4:e6:0a:19:59:35:90:d0:b5:8a:c6:ee:cc:09:
                    e2:70:64:5f:2d:ac:1d:68:60:ba:6e:ba:ed:1b:bc:
                    da:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:FC:7B:30:BC:D1:88:E8:0D:E1:6F:76:52:8F:54:4F:97:1D:E0:ED
            X509v3 Authority Key Identifier:
                keyid:16:F8:1D:F0:63:19:D0:1E:B6:76:C8:B7:D6:8D:31:AD:36:64:B3:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5kRMj74TSwTDw6GKdLpnH27zszNMscVsZczDwvYqb1Rm/2/16F81DF06319D01EB676C8B7D68D31AD3664B3B9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/16F81DF06319D01EB676C8B7D68D31AD3664B3B9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5kRMj74TSwTDw6GKdLpnH27zszNMscVsZczDwvYqb1Rm/2/3139302e38392e37362e302f32322d3332203d3e20323730333539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.89.76.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7f:ea:79:37:fd:25:16:bd:3c:59:e9:c0:e2:24:69:21:de:c6:
         c6:cf:f7:8d:9c:a8:53:0b:ff:23:e9:42:01:58:c1:3a:50:8b:
         58:e9:a9:a3:6b:d0:e3:6e:b3:29:e0:43:79:7f:6a:e8:11:a8:
         d7:df:23:34:2e:2b:92:f3:d9:6c:f1:bf:e0:8c:31:53:8b:77:
         f4:96:a3:00:ea:25:69:aa:b4:35:95:d5:75:d4:5a:e5:d4:7d:
         2d:7e:21:09:ab:de:cf:39:19:7b:33:88:bf:7f:a0:b8:a6:bb:
         42:e8:4c:17:c8:81:b4:c4:3a:bb:ac:a1:18:48:5c:74:57:17:
         9e:51:bf:11:cf:a8:cc:08:7a:a1:58:d1:74:a7:f3:bf:eb:fd:
         40:c9:c7:e7:9d:15:5a:04:d6:5b:9a:29:0d:b4:a5:96:a7:fe:
         c9:63:0c:f9:c1:03:dc:f4:d5:4e:31:90:69:78:d5:0a:af:20:
         54:81:62:25:4c:8b:5e:78:61:c1:fb:d2:31:09:ff:81:dd:dd:
         f5:74:e8:91:c1:76:68:45:8d:a9:f0:8f:76:0b:85:a4:e1:7e:
         44:81:31:f1:6c:bf:8e:0f:d0:b0:41:7c:41:56:ca:e8:19:ca:
         7b:ea:b0:5e:f1:55:e1:69:ed:d5:e5:f2:14:57:e6:51:5f:58:
         20:7a:ee:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 11:59:54 2024 by rpki-client on console-fra.rpki-client.org