Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6zoiLMZgnVXZUddR9hCRUckVikLhP8ehEU5hxReLY7nC/1/3139302e31312e3230382e302f32342d3234203d3e20323730363532.roa
File:                     3139302e31312e3230382e302f32342d3234203d3e20323730363532.roa (raw, json)
Hash identifier:          5Miz6m2jKibzta4M7rHcIKVe/Giu9OSORTKOYp68OBA=
Subject key identifier:   20:66:D7:70:E3:B7:73:00:05:6A:58:24:11:C5:C2:79:33:F0:93:63
Certificate issuer:       /CN=0144765DC0A3D9D0EADA845625C5E7F14C552690
Certificate serial:       347102A977107531A8EBD7B5BE270F76CE0CCE51
Authority key identifier: 01:44:76:5D:C0:A3:D9:D0:EA:DA:84:56:25:C5:E7:F1:4C:55:26:90
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0144765DC0A3D9D0EADA845625C5E7F14C552690.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6zoiLMZgnVXZUddR9hCRUckVikLhP8ehEU5hxReLY7nC/1/3139302e31312e3230382e302f32342d3234203d3e20323730363532.roa
Signing time:             Wed 03 Apr 2024 22:21:41 +0000
ROA not before:           Wed 03 Apr 2024 22:16:41 +0000
ROA not after:            Wed 02 Apr 2025 22:21:41 +0000
asID:                     270652
IP address blocks:        190.11.208.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6zoiLMZgnVXZUddR9hCRUckVikLhP8ehEU5hxReLY7nC/1/0144765DC0A3D9D0EADA845625C5E7F14C552690.crl
                          rsync://rpki-repo.registro.br/repo/6zoiLMZgnVXZUddR9hCRUckVikLhP8ehEU5hxReLY7nC/1/0144765DC0A3D9D0EADA845625C5E7F14C552690.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0144765DC0A3D9D0EADA845625C5E7F14C552690.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 22:33:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:71:02:a9:77:10:75:31:a8:eb:d7:b5:be:27:0f:76:ce:0c:ce:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0144765DC0A3D9D0EADA845625C5E7F14C552690
        Validity
            Not Before: Apr  3 22:16:41 2024 GMT
            Not After : Apr  2 22:21:41 2025 GMT
        Subject: CN=2066D770E3B77300056A582411C5C27933F09363
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:ed:4f:2f:6f:73:ce:09:28:cb:58:0d:e3:f6:
                    3f:27:db:05:b4:6d:9c:6a:26:5b:06:bc:ac:c0:16:
                    ab:4d:59:f7:da:bb:cc:ea:0a:2a:26:4a:19:c4:7e:
                    d2:a5:b3:10:74:4b:83:ab:83:73:17:cb:a8:ce:32:
                    51:5d:50:13:c1:ec:ed:aa:4f:31:a4:0e:18:a7:4e:
                    05:3a:80:6d:5c:7d:14:37:7d:4c:ad:68:52:cf:5e:
                    16:52:a2:13:92:a5:df:44:a9:a2:0c:f6:52:af:d5:
                    9b:15:35:a1:bc:56:22:2e:39:16:c2:9b:4a:8b:66:
                    b9:26:eb:bd:4e:84:4b:6e:27:37:37:b4:1f:8e:e3:
                    ce:c1:d3:7f:a8:e7:8e:8c:7e:44:4b:dc:8d:f1:91:
                    7c:a0:ea:17:f0:c4:d2:34:5a:3c:c1:9e:8a:71:ae:
                    d2:45:44:73:88:d0:b0:e7:58:5f:89:a5:85:f8:f4:
                    37:e8:b5:39:a9:85:cf:c1:91:fd:29:a1:00:dd:c0:
                    85:30:8b:3d:9d:67:b5:a1:9b:1a:24:cc:ed:67:02:
                    59:d1:d2:d1:65:ef:b7:81:e1:aa:71:18:9e:48:ad:
                    4c:8f:a9:f6:e2:e9:31:37:78:02:e4:e0:bf:8a:32:
                    e0:ff:3c:71:61:d3:a5:b7:31:cf:2b:e8:98:69:28:
                    7f:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:66:D7:70:E3:B7:73:00:05:6A:58:24:11:C5:C2:79:33:F0:93:63
            X509v3 Authority Key Identifier:
                keyid:01:44:76:5D:C0:A3:D9:D0:EA:DA:84:56:25:C5:E7:F1:4C:55:26:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6zoiLMZgnVXZUddR9hCRUckVikLhP8ehEU5hxReLY7nC/1/0144765DC0A3D9D0EADA845625C5E7F14C552690.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0144765DC0A3D9D0EADA845625C5E7F14C552690.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6zoiLMZgnVXZUddR9hCRUckVikLhP8ehEU5hxReLY7nC/1/3139302e31312e3230382e302f32342d3234203d3e20323730363532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.11.208.0/24

    Signature Algorithm: sha256WithRSAEncryption
         72:2c:bf:8c:80:0f:6a:b5:12:bb:0f:65:78:8b:74:9b:fb:9e:
         17:17:41:52:af:57:c3:a6:6c:66:46:60:42:07:0b:b9:91:39:
         d3:5e:97:1b:43:c6:d4:cc:d4:61:92:d3:a6:b1:fe:75:18:87:
         cf:b7:8e:0d:3d:73:3c:b0:ed:66:1e:27:77:99:e9:39:07:c9:
         7d:fa:13:24:70:9f:31:6d:55:70:bc:22:12:aa:49:41:d5:ac:
         bc:aa:d8:65:e6:43:9d:8a:a1:a3:81:92:8a:ef:74:44:31:dd:
         95:89:7a:5f:1d:5d:97:03:23:fa:f0:fd:0c:d8:f7:38:ed:62:
         3e:d7:ac:51:af:e6:01:b6:8f:ca:81:33:16:d0:2e:75:f5:be:
         30:af:12:7f:e9:ed:da:03:16:5d:b0:b3:f8:e7:54:3a:bb:47:
         47:c9:1a:7a:36:21:41:26:27:ac:4c:af:b5:c5:55:9e:25:3a:
         3c:3a:2e:32:f3:73:5a:a5:3b:af:61:a2:63:23:84:99:06:3e:
         07:61:ee:fe:ff:e7:ec:b3:d3:c5:dd:e7:18:2d:55:bb:ad:8e:
         57:6e:36:b1:a3:5f:8d:8a:f4:a7:84:6e:a5:6d:3b:77:06:90:
         2c:c8:69:6b:29:d3:48:ed:45:ae:30:52:eb:67:1f:66:27:43:
         8d:e7:06:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 23:58:52 2024 by rpki-client on console-fra.rpki-client.org