Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6dtszounT6BZQxXzrXU9KcqkWVG5rSYeYNRVC2ieH4oo/1/3139302e38392e3233332e302f32342d3234203d3e20323730333937.roa
File:                     3139302e38392e3233332e302f32342d3234203d3e20323730333937.roa (raw, json)
Hash identifier:          bjTYl6JP90Kgg4Rc8OksnQH7gKTAuHmNCJ46NtrkOLs=
Subject key identifier:   24:BC:C6:85:AC:47:BC:C0:BF:D7:2D:D4:F1:75:D4:B3:54:54:F3:41
Certificate issuer:       /CN=1673423E2B1CFB67A429872716AC44E11E27EBE3
Certificate serial:       252886C371A02314FA378F60F1B545A07E34AC75
Authority key identifier: 16:73:42:3E:2B:1C:FB:67:A4:29:87:27:16:AC:44:E1:1E:27:EB:E3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1673423E2B1CFB67A429872716AC44E11E27EBE3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6dtszounT6BZQxXzrXU9KcqkWVG5rSYeYNRVC2ieH4oo/1/3139302e38392e3233332e302f32342d3234203d3e20323730333937.roa
Signing time:             Thu 04 Apr 2024 07:18:15 +0000
ROA not before:           Thu 04 Apr 2024 07:13:15 +0000
ROA not after:            Thu 03 Apr 2025 07:18:15 +0000
asID:                     270397
IP address blocks:        190.89.233.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6dtszounT6BZQxXzrXU9KcqkWVG5rSYeYNRVC2ieH4oo/1/1673423E2B1CFB67A429872716AC44E11E27EBE3.crl
                          rsync://rpki-repo.registro.br/repo/6dtszounT6BZQxXzrXU9KcqkWVG5rSYeYNRVC2ieH4oo/1/1673423E2B1CFB67A429872716AC44E11E27EBE3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1673423E2B1CFB67A429872716AC44E11E27EBE3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 00:21:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:28:86:c3:71:a0:23:14:fa:37:8f:60:f1:b5:45:a0:7e:34:ac:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1673423E2B1CFB67A429872716AC44E11E27EBE3
        Validity
            Not Before: Apr  4 07:13:15 2024 GMT
            Not After : Apr  3 07:18:15 2025 GMT
        Subject: CN=24BCC685AC47BCC0BFD72DD4F175D4B35454F341
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:4a:98:47:a3:f3:e7:3b:41:0a:f7:55:e9:7b:
                    5b:70:bc:47:a4:02:a1:9e:2b:c5:e0:75:37:03:d2:
                    8e:2e:dc:e2:76:d3:77:90:b2:d2:a3:04:22:f2:dc:
                    23:7e:30:4f:cd:cc:89:c3:8d:58:5a:d5:f3:07:31:
                    0b:7a:05:0e:93:f4:da:60:a4:d5:5e:05:ed:3a:28:
                    19:46:c6:88:e3:d2:21:cd:f1:9f:9c:7e:ac:d1:03:
                    4d:80:22:c4:81:d6:8b:e1:92:ac:e0:b4:0e:5b:eb:
                    a4:9f:85:fe:76:bd:04:64:4e:1b:2d:28:7c:b1:d6:
                    18:d4:d1:e3:21:fa:bb:90:38:54:22:a8:e5:2a:f0:
                    8e:5a:6b:a3:5a:66:f8:e9:e5:2f:f0:74:14:6e:91:
                    76:78:da:f9:32:6a:9f:a1:89:90:c7:8a:d6:fc:f0:
                    51:47:99:d2:bc:51:45:ac:15:8e:a7:76:63:9c:13:
                    55:ba:05:66:7f:94:e7:12:aa:bf:ed:fc:7e:e5:88:
                    a2:e6:d0:b2:f3:a4:59:e7:6d:72:e6:ee:9d:55:4b:
                    81:59:6e:02:b3:9d:24:9b:fa:1d:01:bc:a9:e8:c3:
                    42:e3:c3:bd:2f:12:1b:30:87:cb:1d:16:14:85:e2:
                    d7:03:10:47:3f:e0:23:c3:63:3e:ae:dc:c9:d2:c4:
                    32:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:BC:C6:85:AC:47:BC:C0:BF:D7:2D:D4:F1:75:D4:B3:54:54:F3:41
            X509v3 Authority Key Identifier:
                keyid:16:73:42:3E:2B:1C:FB:67:A4:29:87:27:16:AC:44:E1:1E:27:EB:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6dtszounT6BZQxXzrXU9KcqkWVG5rSYeYNRVC2ieH4oo/1/1673423E2B1CFB67A429872716AC44E11E27EBE3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1673423E2B1CFB67A429872716AC44E11E27EBE3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6dtszounT6BZQxXzrXU9KcqkWVG5rSYeYNRVC2ieH4oo/1/3139302e38392e3233332e302f32342d3234203d3e20323730333937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.89.233.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3a:67:4c:f5:b0:81:0d:fa:d7:c8:fd:06:51:3f:be:2e:1d:1a:
         46:06:6d:4c:1f:a8:8a:07:7a:21:0f:c4:6d:4c:b1:bf:48:0d:
         3c:58:4f:5b:37:ea:bf:13:df:74:4b:62:f1:c4:98:5e:99:cb:
         78:01:c2:dd:b9:c3:1c:99:5f:ca:26:fd:0e:1f:18:84:80:fa:
         66:6e:21:c1:b3:d9:3f:6d:79:ce:5c:da:d1:e5:b3:45:67:3c:
         bb:5e:49:5e:be:48:c2:c1:4e:49:e8:0b:7b:2b:4a:05:69:dc:
         b2:a1:fe:80:f9:47:56:70:d4:4b:a2:e5:51:d8:92:89:14:b0:
         51:dd:b6:e2:ca:51:62:60:b0:11:3c:93:51:0b:80:5e:d1:99:
         1c:87:22:8d:d5:b7:c4:40:92:1b:ea:48:b7:7f:ee:21:92:79:
         82:3d:f1:c0:5c:e6:33:f2:e6:d9:32:15:7e:65:7d:4c:46:38:
         db:57:87:4f:e8:38:4a:7a:a4:2e:9a:b7:a7:b8:d4:5c:bd:8c:
         ea:c6:4e:cf:f2:42:cf:54:94:cb:31:af:30:b5:19:4a:db:dc:
         79:80:d5:17:2a:91:cf:51:35:b2:1b:37:a1:44:dd:3a:a3:77:
         0b:cc:d0:ff:ae:e7:ee:a1:f1:3b:52:b5:f0:1c:46:76:7e:59:
         5f:d1:71:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 03:12:52 2024 by rpki-client on console-fra.rpki-client.org