Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6zoiLMZgnVXZUddR9hCRUckVikLhP8ehEU5hxReLY7nC/1/3139302e31312e3230382e302f32322d3232203d3e20323730363532.roa
File:                     3139302e31312e3230382e302f32322d3232203d3e20323730363532.roa (raw, json)
Hash identifier:          xVOoFd7RxiVjJcKU6XWo3mgxJS7NubIHKmOa005Akjo=
Subject key identifier:   0B:9D:39:69:69:0D:D2:54:23:B8:8C:21:FC:E7:3B:95:AA:73:64:BA
Certificate issuer:       /CN=0144765DC0A3D9D0EADA845625C5E7F14C552690
Certificate serial:       64B8E848AE16652931719A831A5DF650326867FA
Authority key identifier: 01:44:76:5D:C0:A3:D9:D0:EA:DA:84:56:25:C5:E7:F1:4C:55:26:90
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0144765DC0A3D9D0EADA845625C5E7F14C552690.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6zoiLMZgnVXZUddR9hCRUckVikLhP8ehEU5hxReLY7nC/1/3139302e31312e3230382e302f32322d3232203d3e20323730363532.roa
Signing time:             Wed 03 Apr 2024 22:21:40 +0000
ROA not before:           Wed 03 Apr 2024 22:16:40 +0000
ROA not after:            Wed 02 Apr 2025 22:21:40 +0000
asID:                     270652
IP address blocks:        190.11.208.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6zoiLMZgnVXZUddR9hCRUckVikLhP8ehEU5hxReLY7nC/1/0144765DC0A3D9D0EADA845625C5E7F14C552690.crl
                          rsync://rpki-repo.registro.br/repo/6zoiLMZgnVXZUddR9hCRUckVikLhP8ehEU5hxReLY7nC/1/0144765DC0A3D9D0EADA845625C5E7F14C552690.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0144765DC0A3D9D0EADA845625C5E7F14C552690.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 04:24:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:b8:e8:48:ae:16:65:29:31:71:9a:83:1a:5d:f6:50:32:68:67:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0144765DC0A3D9D0EADA845625C5E7F14C552690
        Validity
            Not Before: Apr  3 22:16:40 2024 GMT
            Not After : Apr  2 22:21:40 2025 GMT
        Subject: CN=0B9D3969690DD25423B88C21FCE73B95AA7364BA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:1c:93:cd:80:9e:d1:e5:9b:24:87:d7:d8:63:
                    b7:8b:c3:b1:d3:5d:86:3c:fc:39:38:6b:36:fc:77:
                    65:f4:0b:30:4d:9a:b4:28:4b:d5:f5:c9:14:f8:76:
                    c1:e9:c7:50:f9:90:06:2a:18:f6:2d:93:62:a5:9d:
                    0e:24:9d:fa:81:82:a9:0d:ab:ee:8b:d4:24:24:5b:
                    26:cb:52:5e:ad:9d:0d:d2:da:45:02:6a:c3:4b:bc:
                    29:6b:8c:7c:82:ea:0d:a7:00:1b:9d:46:2b:30:dd:
                    21:02:1a:ce:6f:a5:1d:63:0b:d7:29:1b:7d:18:ea:
                    54:06:eb:94:14:64:22:fb:40:eb:4c:74:3a:d4:e1:
                    e5:47:c0:16:16:b2:9a:1b:4a:d0:6b:15:d0:ab:0c:
                    40:9c:d8:19:85:4b:47:e3:91:b6:35:2b:72:be:47:
                    ec:ea:44:b7:25:91:65:92:03:94:34:53:89:ad:09:
                    46:11:c5:c5:e7:f7:c6:a5:09:7b:e1:4a:f7:f4:83:
                    0f:ef:29:e8:e6:f3:54:61:dd:75:95:c0:7a:fb:73:
                    6f:e2:79:d5:ff:3d:e7:77:6e:9f:65:3e:29:0a:1b:
                    83:8f:49:39:41:d3:ff:8e:8e:ab:44:06:a7:72:79:
                    39:ce:e2:aa:9a:e1:77:d9:3d:1b:d7:03:b8:cb:0e:
                    07:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:9D:39:69:69:0D:D2:54:23:B8:8C:21:FC:E7:3B:95:AA:73:64:BA
            X509v3 Authority Key Identifier:
                keyid:01:44:76:5D:C0:A3:D9:D0:EA:DA:84:56:25:C5:E7:F1:4C:55:26:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6zoiLMZgnVXZUddR9hCRUckVikLhP8ehEU5hxReLY7nC/1/0144765DC0A3D9D0EADA845625C5E7F14C552690.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0144765DC0A3D9D0EADA845625C5E7F14C552690.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6zoiLMZgnVXZUddR9hCRUckVikLhP8ehEU5hxReLY7nC/1/3139302e31312e3230382e302f32322d3232203d3e20323730363532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.11.208.0/22

    Signature Algorithm: sha256WithRSAEncryption
         24:ef:63:fb:74:57:a7:1d:ee:42:bf:c8:a0:02:83:f0:32:aa:
         71:00:dd:68:80:47:b4:61:e7:bc:c2:1e:50:8b:a1:dd:09:83:
         bf:e4:7b:f3:2f:b7:be:64:4f:2f:1e:8f:43:d5:4c:c4:88:33:
         87:d8:99:2d:70:cd:bf:ef:e6:fe:5a:97:d5:0a:8b:f3:1b:ef:
         34:dc:23:98:02:2d:16:b8:8c:21:d9:81:10:0e:f3:c0:37:93:
         a7:30:22:1d:5b:1f:4f:2a:91:89:b9:db:3d:36:be:23:28:cd:
         38:e1:07:01:b5:3e:7a:a0:20:7e:7a:19:58:cf:79:22:0f:43:
         83:42:fb:3c:a0:cf:ef:fd:fd:a5:21:14:47:98:49:37:18:59:
         7d:dd:bf:a2:b1:0c:98:3d:c6:85:9e:12:36:50:a3:5c:01:19:
         bb:51:a6:e4:d3:43:2c:70:56:d3:19:38:5b:a4:fc:65:a4:4f:
         04:1f:33:7c:2f:4d:7f:84:a0:8f:94:4b:14:08:73:1b:ab:86:
         17:3a:c9:5f:5c:46:d7:13:ec:a5:03:78:0c:68:9f:3e:ba:ea:
         93:2a:5e:7e:6a:d0:1d:d0:f3:be:f9:fe:89:8b:aa:37:03:6e:
         fd:bf:76:a3:33:17:a9:61:3c:e1:4e:80:a5:1d:e4:75:39:f6:
         ef:b1:60:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 04:03:56 2024 by rpki-client on console-fra.rpki-client.org