Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/68bEC1wWogkFoTJqmtJhcDg38B4BisDD7Ztxq7syE998/1/3139302e372e3137362e302f32302d3234203d3e20323632353032.roa
File:                     3139302e372e3137362e302f32302d3234203d3e20323632353032.roa (raw, json)
Hash identifier:          BuBFNqHWZ54/7Rx46q+xRum8k+OOF/qWDKdkwmEIXK4=
Subject key identifier:   72:8C:06:B4:AE:3D:B9:41:B8:03:CE:24:6D:DB:2C:47:AC:D5:5E:A7
Certificate issuer:       /CN=B083E1F6554A0DAB0E83AC5CDA1783B3B5A995C8
Certificate serial:       6AEA7564B0713761AD43B7FDA665F0101A53BE7E
Authority key identifier: B0:83:E1:F6:55:4A:0D:AB:0E:83:AC:5C:DA:17:83:B3:B5:A9:95:C8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B083E1F6554A0DAB0E83AC5CDA1783B3B5A995C8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/68bEC1wWogkFoTJqmtJhcDg38B4BisDD7Ztxq7syE998/1/3139302e372e3137362e302f32302d3234203d3e20323632353032.roa
Signing time:             Thu 04 Apr 2024 12:33:46 +0000
ROA not before:           Thu 04 Apr 2024 12:28:46 +0000
ROA not after:            Thu 03 Apr 2025 12:33:46 +0000
asID:                     262502
IP address blocks:        190.7.176.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/68bEC1wWogkFoTJqmtJhcDg38B4BisDD7Ztxq7syE998/1/B083E1F6554A0DAB0E83AC5CDA1783B3B5A995C8.crl
                          rsync://rpki-repo.registro.br/repo/68bEC1wWogkFoTJqmtJhcDg38B4BisDD7Ztxq7syE998/1/B083E1F6554A0DAB0E83AC5CDA1783B3B5A995C8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B083E1F6554A0DAB0E83AC5CDA1783B3B5A995C8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 21:15:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:ea:75:64:b0:71:37:61:ad:43:b7:fd:a6:65:f0:10:1a:53:be:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B083E1F6554A0DAB0E83AC5CDA1783B3B5A995C8
        Validity
            Not Before: Apr  4 12:28:46 2024 GMT
            Not After : Apr  3 12:33:46 2025 GMT
        Subject: CN=728C06B4AE3DB941B803CE246DDB2C47ACD55EA7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:13:ef:4f:61:c1:93:51:99:4e:fa:55:35:ab:
                    36:db:b1:7e:4c:27:56:b8:1b:c3:17:5d:ef:84:d6:
                    81:8e:02:c6:c5:93:6a:2b:24:c1:fb:17:74:a2:c2:
                    34:d7:52:6d:8a:58:24:ae:1b:95:94:78:90:39:03:
                    c9:09:c4:10:4c:10:de:4d:74:4f:f5:d0:f7:bc:59:
                    79:62:15:3d:8b:e7:b4:d4:20:89:a0:a5:f7:0d:28:
                    c5:f1:c3:d0:dc:fa:ea:bc:4e:f7:6c:48:8a:1c:af:
                    cc:cd:fd:e1:95:78:65:48:af:26:2e:46:ad:1c:65:
                    1c:d4:46:34:85:40:3c:ca:cd:85:16:14:ca:72:ba:
                    f8:11:59:eb:60:54:3c:07:a3:a2:5b:c9:51:6d:3a:
                    ef:87:12:a2:ef:c9:f1:51:fd:07:fe:1e:06:17:c3:
                    57:85:14:db:ce:12:e4:15:83:1c:76:05:93:43:fb:
                    6b:cd:36:48:ec:79:ca:f0:25:d0:d5:ef:b8:6e:13:
                    14:b5:b2:03:37:35:c3:8b:e7:53:66:06:d3:60:a9:
                    84:96:0c:7c:4e:d5:1e:bb:60:c6:19:ca:26:7d:96:
                    04:fe:d7:82:82:ac:71:bd:42:fb:a3:94:fa:fb:11:
                    02:45:b6:8f:a6:02:7a:af:52:a1:16:88:72:b7:1f:
                    c5:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:8C:06:B4:AE:3D:B9:41:B8:03:CE:24:6D:DB:2C:47:AC:D5:5E:A7
            X509v3 Authority Key Identifier:
                keyid:B0:83:E1:F6:55:4A:0D:AB:0E:83:AC:5C:DA:17:83:B3:B5:A9:95:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/68bEC1wWogkFoTJqmtJhcDg38B4BisDD7Ztxq7syE998/1/B083E1F6554A0DAB0E83AC5CDA1783B3B5A995C8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B083E1F6554A0DAB0E83AC5CDA1783B3B5A995C8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/68bEC1wWogkFoTJqmtJhcDg38B4BisDD7Ztxq7syE998/1/3139302e372e3137362e302f32302d3234203d3e20323632353032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.7.176.0/20

    Signature Algorithm: sha256WithRSAEncryption
         8d:d2:10:5f:e7:4d:ab:22:d0:92:55:79:3c:c9:01:4b:ba:b9:
         2f:8d:b9:71:a9:46:c7:c7:9d:c5:de:04:5c:1b:c9:dd:f4:a5:
         4f:03:9e:57:c3:c7:7c:70:40:5a:4e:fd:ea:24:d7:34:b7:32:
         5c:81:26:07:44:87:d6:21:48:b0:07:a4:ec:08:93:4a:d4:97:
         72:c6:50:68:13:87:74:e2:9c:28:e2:46:58:52:07:88:6f:f8:
         b4:90:d3:da:e9:91:a9:e9:19:4c:06:ad:ca:e1:a7:67:bc:91:
         e4:fc:76:c9:26:0e:23:ab:9b:bb:63:cf:5c:24:87:03:f7:bd:
         fc:81:07:32:bd:6f:c9:1f:68:19:24:6d:dd:6e:a8:48:8a:37:
         78:9f:c4:e5:be:25:1b:6c:3c:1d:fd:28:bc:bb:c2:6c:ed:1f:
         c8:90:45:30:b4:f0:e5:ee:6d:cb:b0:30:dd:57:ee:ee:46:35:
         f2:9c:7f:40:18:7f:6d:cd:e6:ab:d2:41:36:e0:7c:71:59:49:
         c6:10:b3:33:05:92:99:be:f7:75:cf:b2:9a:b4:d7:a5:05:11:
         9f:15:b4:19:9f:f9:ed:ca:c6:c4:9c:fe:ee:86:75:e3:6d:83:
         db:38:b0:3b:25:34:fc:59:1a:b0:2b:5e:44:e8:c5:0d:6a:ea:
         d0:a0:49:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 21:52:36 2024 by rpki-client on console-fra.rpki-client.org