Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6zoiLMZgnVXZUddR9hCRUckVikLhP8ehEU5hxReLY7nC/1/3139302e31312e3231302e302f32332d3233203d3e20323730363532.roa
File:                     3139302e31312e3231302e302f32332d3233203d3e20323730363532.roa (raw, json)
Hash identifier:          BcwV7cUjdWkh+jUTesuATPCy9/y7QRvz03Jq9Y4vnhg=
Subject key identifier:   5F:81:F0:5B:94:7C:26:BB:CB:14:E7:65:3C:FE:FE:D0:25:C0:73:DB
Certificate issuer:       /CN=0144765DC0A3D9D0EADA845625C5E7F14C552690
Certificate serial:       7D73E7FC9A9F22E41CD2B28F5A4ADDB730575E37
Authority key identifier: 01:44:76:5D:C0:A3:D9:D0:EA:DA:84:56:25:C5:E7:F1:4C:55:26:90
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0144765DC0A3D9D0EADA845625C5E7F14C552690.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6zoiLMZgnVXZUddR9hCRUckVikLhP8ehEU5hxReLY7nC/1/3139302e31312e3231302e302f32332d3233203d3e20323730363532.roa
Signing time:             Wed 03 Apr 2024 22:21:40 +0000
ROA not before:           Wed 03 Apr 2024 22:16:40 +0000
ROA not after:            Wed 02 Apr 2025 22:21:40 +0000
asID:                     270652
IP address blocks:        190.11.210.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6zoiLMZgnVXZUddR9hCRUckVikLhP8ehEU5hxReLY7nC/1/0144765DC0A3D9D0EADA845625C5E7F14C552690.crl
                          rsync://rpki-repo.registro.br/repo/6zoiLMZgnVXZUddR9hCRUckVikLhP8ehEU5hxReLY7nC/1/0144765DC0A3D9D0EADA845625C5E7F14C552690.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0144765DC0A3D9D0EADA845625C5E7F14C552690.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:73:e7:fc:9a:9f:22:e4:1c:d2:b2:8f:5a:4a:dd:b7:30:57:5e:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0144765DC0A3D9D0EADA845625C5E7F14C552690
        Validity
            Not Before: Apr  3 22:16:40 2024 GMT
            Not After : Apr  2 22:21:40 2025 GMT
        Subject: CN=5F81F05B947C26BBCB14E7653CFEFED025C073DB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:e6:8b:b3:70:2c:ed:5a:d6:20:09:f0:80:4c:
                    01:64:17:8a:5f:2d:53:fc:4d:b4:c1:c1:62:f6:61:
                    96:99:88:c1:0c:fe:78:52:e7:e7:23:dc:80:ed:58:
                    6a:73:ac:9e:3a:55:f5:bc:cb:d4:7b:12:73:77:67:
                    ec:50:e8:b4:28:88:7d:c3:10:fc:00:77:1d:11:25:
                    d0:31:95:61:28:cd:a5:e4:ed:25:51:36:dc:3a:58:
                    d4:97:ef:4e:26:92:b5:cb:a8:94:c4:81:77:de:b1:
                    ab:56:9f:f4:9a:ea:0b:1d:ab:8f:13:ea:06:5e:4f:
                    5a:6d:20:f0:82:0d:47:ae:a2:1c:ae:c0:99:d5:bd:
                    37:4a:b5:a5:51:0c:8f:09:73:a8:ca:a5:4f:78:5c:
                    d4:fc:69:a2:a7:19:b6:5e:fb:50:95:b6:32:fa:ac:
                    25:cf:b6:db:42:66:2d:ae:78:e7:3d:90:f0:83:be:
                    64:c3:5c:9a:55:ed:39:c7:6a:df:cc:ac:f9:3b:6e:
                    74:32:7e:d5:79:9d:64:07:77:9d:02:cb:09:de:43:
                    39:62:82:67:c8:b3:6f:5b:91:4a:73:ac:0c:0a:ee:
                    02:f0:b9:8e:d7:f6:71:21:03:17:71:af:a2:20:50:
                    ea:98:c3:26:c5:e3:ad:89:68:a1:e4:f9:86:7c:e7:
                    da:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:81:F0:5B:94:7C:26:BB:CB:14:E7:65:3C:FE:FE:D0:25:C0:73:DB
            X509v3 Authority Key Identifier:
                keyid:01:44:76:5D:C0:A3:D9:D0:EA:DA:84:56:25:C5:E7:F1:4C:55:26:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6zoiLMZgnVXZUddR9hCRUckVikLhP8ehEU5hxReLY7nC/1/0144765DC0A3D9D0EADA845625C5E7F14C552690.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0144765DC0A3D9D0EADA845625C5E7F14C552690.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6zoiLMZgnVXZUddR9hCRUckVikLhP8ehEU5hxReLY7nC/1/3139302e31312e3231302e302f32332d3233203d3e20323730363532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.11.210.0/23

    Signature Algorithm: sha256WithRSAEncryption
         09:bb:fa:b7:dc:ab:29:21:17:a9:58:ed:dc:5d:1a:3a:13:b7:
         bf:7d:70:16:68:3b:36:7b:ed:60:d4:78:6c:0f:f3:48:d4:1e:
         77:e2:6e:80:2d:04:42:d4:d9:15:d0:03:ea:bd:9e:bc:fa:2b:
         18:5a:3a:02:8e:ad:ab:5d:1c:2e:91:34:56:28:4e:73:fb:e3:
         76:05:f1:07:16:a6:0e:23:01:96:de:04:ff:5d:b8:67:0a:87:
         af:12:fc:7f:77:7c:46:ed:bb:41:53:01:83:a8:77:25:41:a1:
         bd:fb:5d:97:40:21:8c:bf:c2:8f:dc:7c:99:c8:af:22:80:6b:
         8a:9f:38:e5:26:b5:2d:0a:89:6a:b4:87:f5:9c:dc:76:76:0f:
         6c:71:19:54:67:6d:d0:da:a2:a7:48:d6:a3:00:66:e4:17:7c:
         e2:7d:59:c7:bf:f4:68:e9:d1:2f:c3:5a:9f:37:fa:ec:d7:e8:
         5b:d1:2c:25:00:c8:8d:a9:64:f5:f8:d5:94:12:5d:65:80:69:
         98:98:6f:c7:1d:a2:66:71:27:07:f1:1f:5e:9a:62:9c:0a:dd:
         6b:88:77:24:e0:65:df:fb:d9:ce:7e:45:8a:e9:67:37:f0:52:
         41:a4:69:bd:c1:7a:31:97:74:ee:39:bd:6c:8e:fc:7d:d4:36:
         70:53:6a:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 01:25:33 2024 by rpki-client on console-ams.rpki-client.org