Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5tMbZuqVvLqzsUbt5hpkTU7R7s2j79XtEcGouBeLMGv3/1/3139302e3131332e3234302e302f32322d3332203d3e20323731323732.roa
File:                     3139302e3131332e3234302e302f32322d3332203d3e20323731323732.roa (raw, json)
Hash identifier:          FK2lEl63qCYxJQT/NbwhKwAp5SkK1w0k/b9zg9hBoy0=
Subject key identifier:   D4:C9:71:7C:C4:40:C9:D8:8C:05:0B:57:F5:E8:5F:FF:B2:88:DB:55
Certificate issuer:       /CN=D6592886C2264A6296BF445F0FA4EF8CF71BB049
Certificate serial:       2582284361B98D799ACC4E1E769F146E0689D64C
Authority key identifier: D6:59:28:86:C2:26:4A:62:96:BF:44:5F:0F:A4:EF:8C:F7:1B:B0:49
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D6592886C2264A6296BF445F0FA4EF8CF71BB049.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5tMbZuqVvLqzsUbt5hpkTU7R7s2j79XtEcGouBeLMGv3/1/3139302e3131332e3234302e302f32322d3332203d3e20323731323732.roa
Signing time:             Thu 04 Apr 2024 09:00:19 +0000
ROA not before:           Thu 04 Apr 2024 08:55:19 +0000
ROA not after:            Thu 03 Apr 2025 09:00:19 +0000
asID:                     271272
IP address blocks:        190.113.240.0/22 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5tMbZuqVvLqzsUbt5hpkTU7R7s2j79XtEcGouBeLMGv3/1/D6592886C2264A6296BF445F0FA4EF8CF71BB049.crl
                          rsync://rpki-repo.registro.br/repo/5tMbZuqVvLqzsUbt5hpkTU7R7s2j79XtEcGouBeLMGv3/1/D6592886C2264A6296BF445F0FA4EF8CF71BB049.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D6592886C2264A6296BF445F0FA4EF8CF71BB049.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 16:13:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:82:28:43:61:b9:8d:79:9a:cc:4e:1e:76:9f:14:6e:06:89:d6:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D6592886C2264A6296BF445F0FA4EF8CF71BB049
        Validity
            Not Before: Apr  4 08:55:19 2024 GMT
            Not After : Apr  3 09:00:19 2025 GMT
        Subject: CN=D4C9717CC440C9D88C050B57F5E85FFFB288DB55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:be:93:a4:6a:5e:cf:cd:2a:15:d8:07:d7:8f:
                    ef:5c:d2:a5:2d:46:e0:ce:8e:8e:86:25:f6:eb:72:
                    76:f7:63:76:ce:18:c4:c8:d9:a4:06:05:61:98:aa:
                    24:79:e1:f5:c3:bb:b3:05:78:0b:9c:67:ca:04:b1:
                    a5:1e:af:24:9d:b9:e0:87:b1:b9:3b:b2:b9:93:4f:
                    50:4e:40:d8:4a:b3:8c:4e:be:57:f9:bf:61:28:ac:
                    b6:b6:2f:b3:c3:4c:26:6a:22:aa:de:14:4f:d8:2a:
                    c7:53:42:68:e4:d7:2b:16:b8:e1:85:c0:98:28:79:
                    cf:92:3e:53:95:8f:8c:b4:a0:03:04:43:03:9a:c4:
                    25:c2:b2:76:de:b8:39:87:2e:52:2a:34:48:8d:69:
                    8c:ab:ab:53:68:bd:5a:bf:1c:21:c5:b5:da:86:99:
                    68:ef:70:2d:a2:b8:05:27:9f:6f:10:57:8a:b1:d8:
                    75:b0:d6:41:01:01:02:84:a6:8f:60:12:93:94:93:
                    58:61:62:b1:2a:91:00:e9:cd:df:87:b0:6c:38:db:
                    2c:0a:b8:8b:5d:d3:78:14:6e:76:f1:08:9e:54:70:
                    53:a1:d3:b6:28:51:a5:47:e8:f6:df:e4:c0:27:a4:
                    db:53:ac:e7:14:54:3f:ae:a0:c1:9d:d6:6c:c3:f9:
                    43:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:C9:71:7C:C4:40:C9:D8:8C:05:0B:57:F5:E8:5F:FF:B2:88:DB:55
            X509v3 Authority Key Identifier:
                keyid:D6:59:28:86:C2:26:4A:62:96:BF:44:5F:0F:A4:EF:8C:F7:1B:B0:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5tMbZuqVvLqzsUbt5hpkTU7R7s2j79XtEcGouBeLMGv3/1/D6592886C2264A6296BF445F0FA4EF8CF71BB049.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D6592886C2264A6296BF445F0FA4EF8CF71BB049.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5tMbZuqVvLqzsUbt5hpkTU7R7s2j79XtEcGouBeLMGv3/1/3139302e3131332e3234302e302f32322d3332203d3e20323731323732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.113.240.0/22

    Signature Algorithm: sha256WithRSAEncryption
         99:56:b0:ae:37:b1:1c:17:69:80:8d:81:ef:93:a2:da:3b:93:
         fe:a7:47:67:53:0f:a1:fc:f3:ce:e6:fd:8a:98:7a:3c:16:7c:
         65:f2:75:d9:40:3d:41:01:63:23:4d:9e:10:07:46:ce:5b:0f:
         7b:b0:73:52:48:56:24:58:a4:6f:0a:8b:04:1d:68:5d:14:e2:
         74:3c:63:60:37:3a:dd:ee:18:c5:40:1a:7d:da:98:a4:db:ed:
         f0:26:cb:9c:57:23:f1:ba:0a:25:89:9e:44:9f:52:0a:d2:22:
         21:07:c4:13:3f:32:43:13:30:f0:de:81:99:7b:98:99:8c:33:
         db:87:81:db:b8:dd:1c:d9:b8:01:41:f3:c1:9e:19:be:2d:a9:
         2d:ff:36:81:9f:4e:8a:69:52:7c:45:1a:ae:37:09:76:46:5c:
         3d:ea:e1:fa:a8:e8:68:3c:d8:8f:f4:69:76:48:05:e9:78:74:
         26:6b:e7:de:3f:57:41:c7:ee:21:16:96:c0:97:a3:c2:92:26:
         43:54:5c:d4:04:87:5c:ad:dc:18:a7:2c:e2:3a:63:44:cf:a3:
         c5:9e:1c:85:24:d2:5c:9a:04:1e:01:46:83:94:c9:2c:81:08:
         77:03:2a:f7:31:6b:07:07:ee:ee:92:ca:8b:2d:69:23:bc:a0:
         db:19:dd:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:43:58 2024 by rpki-client on console-ams.rpki-client.org