Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6UZysAyTjx2NJrkHbunyrSpdEkCM69Efmns52PN6QHvC/1/3138392e35312e3136302e302f32322d3234203d3e20323730373835.roa
File:                     3138392e35312e3136302e302f32322d3234203d3e20323730373835.roa (raw, json)
Hash identifier:          //Y3ruiNGezhSkWu0I4k2r6J41KnT26Ig0AcEaZuwoI=
Subject key identifier:   E5:44:7B:E5:E0:EB:A3:CA:FA:D2:4C:73:A5:39:AA:49:D1:CB:A6:1C
Certificate issuer:       /CN=0B141C05E0CD60ABE1A3CDF3C3C64CFB94D06751
Certificate serial:       110BB6CDB626F00F80D5E6223764CE2F5397693C
Authority key identifier: 0B:14:1C:05:E0:CD:60:AB:E1:A3:CD:F3:C3:C6:4C:FB:94:D0:67:51
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0B141C05E0CD60ABE1A3CDF3C3C64CFB94D06751.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6UZysAyTjx2NJrkHbunyrSpdEkCM69Efmns52PN6QHvC/1/3138392e35312e3136302e302f32322d3234203d3e20323730373835.roa
Signing time:             Fri 05 Apr 2024 04:57:41 +0000
ROA not before:           Fri 05 Apr 2024 04:52:41 +0000
ROA not after:            Fri 04 Apr 2025 04:57:41 +0000
asID:                     270785
IP address blocks:        189.51.160.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6UZysAyTjx2NJrkHbunyrSpdEkCM69Efmns52PN6QHvC/1/0B141C05E0CD60ABE1A3CDF3C3C64CFB94D06751.crl
                          rsync://rpki-repo.registro.br/repo/6UZysAyTjx2NJrkHbunyrSpdEkCM69Efmns52PN6QHvC/1/0B141C05E0CD60ABE1A3CDF3C3C64CFB94D06751.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0B141C05E0CD60ABE1A3CDF3C3C64CFB94D06751.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Sep 2024 22:38:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:0b:b6:cd:b6:26:f0:0f:80:d5:e6:22:37:64:ce:2f:53:97:69:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0B141C05E0CD60ABE1A3CDF3C3C64CFB94D06751
        Validity
            Not Before: Apr  5 04:52:41 2024 GMT
            Not After : Apr  4 04:57:41 2025 GMT
        Subject: CN=E5447BE5E0EBA3CAFAD24C73A539AA49D1CBA61C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:7c:e8:c1:99:47:12:f4:c8:84:83:ac:e6:a3:
                    7d:bb:03:7f:bb:f1:66:4f:f4:e4:e5:0e:16:ac:d8:
                    45:00:09:a4:49:45:b5:d3:01:03:ad:8b:ad:26:7e:
                    1d:6b:90:8e:68:bd:0e:08:cd:6e:3c:2d:be:e4:d4:
                    41:66:cb:b5:b1:5a:10:19:5c:6d:24:df:d4:3d:34:
                    4f:e2:77:0d:c2:2e:12:d4:9d:4c:08:17:81:ee:99:
                    94:2c:3d:76:fa:fb:bc:69:90:8d:5c:0f:75:85:67:
                    25:d1:f8:c7:ff:75:82:11:23:e4:eb:b0:1e:21:f8:
                    51:f3:8b:a5:00:bf:8d:31:ed:44:65:01:a1:bc:c5:
                    56:f7:d5:b9:bf:55:0b:c4:3d:44:e9:fe:11:9c:31:
                    ab:d8:21:45:50:cf:ec:b2:85:ca:0a:59:8b:61:47:
                    22:f4:2b:4e:8d:38:c1:82:66:a2:60:ff:27:74:76:
                    62:c6:75:eb:da:24:7b:81:2e:b4:21:de:02:e4:19:
                    75:f4:11:ff:a5:eb:8a:12:78:d5:a0:65:cb:70:4f:
                    7e:eb:f4:99:de:fe:33:1b:4c:88:1b:3c:c7:82:ad:
                    68:50:0b:e9:44:33:2f:c7:48:79:86:22:4d:66:c0:
                    65:57:1d:5b:1e:da:7a:c3:01:95:66:ca:c3:d5:b5:
                    13:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:44:7B:E5:E0:EB:A3:CA:FA:D2:4C:73:A5:39:AA:49:D1:CB:A6:1C
            X509v3 Authority Key Identifier:
                keyid:0B:14:1C:05:E0:CD:60:AB:E1:A3:CD:F3:C3:C6:4C:FB:94:D0:67:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6UZysAyTjx2NJrkHbunyrSpdEkCM69Efmns52PN6QHvC/1/0B141C05E0CD60ABE1A3CDF3C3C64CFB94D06751.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0B141C05E0CD60ABE1A3CDF3C3C64CFB94D06751.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6UZysAyTjx2NJrkHbunyrSpdEkCM69Efmns52PN6QHvC/1/3138392e35312e3136302e302f32322d3234203d3e20323730373835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.51.160.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5d:a6:16:5b:b0:65:4d:63:c5:35:37:e5:e6:98:ff:dc:ba:ea:
         de:64:05:a2:56:f5:c0:23:b0:83:b8:d7:7c:19:15:df:9a:ab:
         12:fa:f4:84:47:38:6b:35:5c:15:24:63:93:4d:58:eb:a7:35:
         cf:b5:e8:e0:2d:9d:b0:5a:22:41:26:ba:2d:a8:0d:73:96:3e:
         c5:ea:a5:00:2e:e2:cf:87:1b:46:ef:9d:9e:07:d9:84:f1:eb:
         72:71:67:20:7a:3e:54:1b:54:2e:05:a1:1f:43:4f:61:f9:25:
         fb:72:30:a3:2c:14:ef:83:a2:3c:60:9c:26:4f:82:71:b2:1b:
         d4:2a:ed:74:6d:7f:ea:68:61:7f:5d:ea:85:92:cd:fc:27:a2:
         7a:90:4b:7f:42:5d:31:65:dc:b2:cb:cf:36:d8:6e:2a:74:64:
         4e:b0:96:b7:b7:a8:b4:bb:f5:de:bb:57:ca:ff:1b:77:60:b0:
         88:1e:fe:eb:96:8b:3f:65:8d:7e:2e:6a:3b:8d:f9:58:17:27:
         ea:66:ae:bd:2e:b8:da:91:8e:1c:1f:30:c7:63:0a:a1:1a:3b:
         f9:03:c3:fc:a2:eb:48:44:65:37:a3:5e:ca:aa:7a:c8:c7:92:
         8c:fe:30:b2:4c:12:c8:92:19:77:f5:61:5c:9e:7a:d7:1f:e6:
         9c:ec:bf:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 20 04:24:30 2024 by rpki-client on console-fra.rpki-client.org