Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6NgZYnCg4ZPjTneR4Lt5Y3rL1PcQpPqpZDagsBSG6haB/1/3139302e38392e3234352e302f32342d3234203d3e20323730343133.roa
File:                     3139302e38392e3234352e302f32342d3234203d3e20323730343133.roa (raw, json)
Hash identifier:          AMZKPKLdn4yyvcg7HGarBnQjZzvlRlzVVqS4aRZuiqc=
Subject key identifier:   4D:37:C3:51:62:86:41:BC:18:80:CD:6F:B6:5A:EC:51:E3:69:D3:06
Certificate issuer:       /CN=BE6164348043E6AA537C7ED74D50CC40298757FC
Certificate serial:       46669ED08B2B4F7F36CD37BB87ADCD783E2F45D1
Authority key identifier: BE:61:64:34:80:43:E6:AA:53:7C:7E:D7:4D:50:CC:40:29:87:57:FC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BE6164348043E6AA537C7ED74D50CC40298757FC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6NgZYnCg4ZPjTneR4Lt5Y3rL1PcQpPqpZDagsBSG6haB/1/3139302e38392e3234352e302f32342d3234203d3e20323730343133.roa
Signing time:             Thu 04 Apr 2024 00:25:31 +0000
ROA not before:           Thu 04 Apr 2024 00:20:31 +0000
ROA not after:            Thu 03 Apr 2025 00:25:31 +0000
asID:                     270413
IP address blocks:        190.89.245.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6NgZYnCg4ZPjTneR4Lt5Y3rL1PcQpPqpZDagsBSG6haB/1/BE6164348043E6AA537C7ED74D50CC40298757FC.crl
                          rsync://rpki-repo.registro.br/repo/6NgZYnCg4ZPjTneR4Lt5Y3rL1PcQpPqpZDagsBSG6haB/1/BE6164348043E6AA537C7ED74D50CC40298757FC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BE6164348043E6AA537C7ED74D50CC40298757FC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 19:26:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:66:9e:d0:8b:2b:4f:7f:36:cd:37:bb:87:ad:cd:78:3e:2f:45:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BE6164348043E6AA537C7ED74D50CC40298757FC
        Validity
            Not Before: Apr  4 00:20:31 2024 GMT
            Not After : Apr  3 00:25:31 2025 GMT
        Subject: CN=4D37C351628641BC1880CD6FB65AEC51E369D306
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:16:a4:5b:e2:a6:c0:c6:50:6d:a7:e4:a0:4b:
                    0a:01:b0:df:b1:ff:9d:14:19:78:a4:78:a2:10:98:
                    69:b9:8e:a7:e5:d0:9c:70:38:48:61:e1:03:a0:86:
                    44:ac:4e:9b:18:42:d4:d1:6c:c4:fa:10:a3:84:b1:
                    a7:d9:b3:1b:2c:d8:ac:6e:96:97:2f:40:7c:90:6e:
                    d1:6b:5a:1c:96:fe:77:e3:c4:22:34:1d:cf:77:61:
                    ec:da:d1:51:0f:fb:59:9d:34:35:9a:b3:9f:1d:74:
                    8e:88:25:d4:1b:87:8a:9a:f1:a8:26:82:30:b2:2d:
                    99:17:f3:19:61:6e:87:ab:13:5b:8e:b8:39:e7:7f:
                    8f:30:7d:8d:11:d5:e2:4f:6e:a7:58:3a:f9:d8:8b:
                    69:82:b7:22:1c:b3:5b:de:37:48:fc:93:a1:91:37:
                    ff:b3:35:7a:d9:03:70:c1:b6:65:83:01:8e:76:91:
                    9b:bd:41:6a:a9:5a:84:31:62:df:fd:c6:2e:9f:01:
                    61:8b:e5:27:f1:01:21:5a:ac:69:83:40:3f:85:ca:
                    ee:65:f0:9c:89:74:b5:bb:7b:b4:d0:1a:5f:ab:4f:
                    b5:c8:60:53:d8:6c:21:98:d6:1e:fa:8d:4d:9b:2b:
                    f3:c4:50:86:bd:8d:58:7d:78:9f:a5:e3:da:76:9b:
                    c8:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:37:C3:51:62:86:41:BC:18:80:CD:6F:B6:5A:EC:51:E3:69:D3:06
            X509v3 Authority Key Identifier:
                keyid:BE:61:64:34:80:43:E6:AA:53:7C:7E:D7:4D:50:CC:40:29:87:57:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6NgZYnCg4ZPjTneR4Lt5Y3rL1PcQpPqpZDagsBSG6haB/1/BE6164348043E6AA537C7ED74D50CC40298757FC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BE6164348043E6AA537C7ED74D50CC40298757FC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6NgZYnCg4ZPjTneR4Lt5Y3rL1PcQpPqpZDagsBSG6haB/1/3139302e38392e3234352e302f32342d3234203d3e20323730343133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.89.245.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3c:c9:48:b5:f3:3e:bf:42:92:d5:5a:1a:e9:8e:35:4c:f5:63:
         25:26:6c:f0:da:f3:ff:30:e9:e4:17:fc:7f:83:47:0d:05:f7:
         fe:83:56:85:a1:d0:32:52:69:85:f2:bb:87:72:41:4e:8b:aa:
         0d:0a:89:4a:15:38:e9:5c:84:e4:7b:24:ff:e7:74:b1:d8:e7:
         8d:db:42:80:3d:f3:eb:9c:53:e4:cc:19:ca:91:f3:f1:24:30:
         12:32:63:05:48:51:85:a9:5a:a7:b8:d7:0d:3c:07:94:17:32:
         e8:65:43:f9:f5:3d:6f:72:6d:eb:d0:cd:e2:19:3e:0d:05:59:
         ca:25:e4:35:cd:ad:86:3d:29:fb:ed:41:51:92:15:c2:00:66:
         5a:8c:f6:6c:42:4c:eb:21:73:28:94:0a:87:74:90:b9:03:dd:
         cd:5e:cb:84:65:4b:f6:e7:8f:7d:83:ca:28:30:80:4e:b8:e7:
         22:f7:b4:f5:93:98:b5:72:33:94:06:b3:07:46:f6:98:0f:ed:
         a4:64:b4:de:34:04:7c:36:92:50:32:56:d5:02:2d:1a:32:5f:
         0d:b7:dc:d0:21:c1:6a:d9:f8:29:88:2e:a1:21:80:b2:d6:f5:
         1b:01:6a:4d:8b:7f:09:cb:36:e8:b1:6c:aa:3f:f9:51:14:d4:
         c8:58:64:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:42:16 2024 by rpki-client on console-fra.rpki-client.org