Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6zoiLMZgnVXZUddR9hCRUckVikLhP8ehEU5hxReLY7nC/1/3139302e31312e3231302e302f32342d3234203d3e20323730363532.roa
File:                     3139302e31312e3231302e302f32342d3234203d3e20323730363532.roa (raw, json)
Hash identifier:          podtjkFBF1ulNDCSJhLHSJp+U4LFjW6jyjF7kkxgjJY=
Subject key identifier:   80:EF:63:6D:30:3F:8E:A8:CC:5A:15:E0:27:C1:43:C9:89:DA:51:A9
Certificate issuer:       /CN=0144765DC0A3D9D0EADA845625C5E7F14C552690
Certificate serial:       6B78FF502493BA40A4BA1CD866F12304447F4FE6
Authority key identifier: 01:44:76:5D:C0:A3:D9:D0:EA:DA:84:56:25:C5:E7:F1:4C:55:26:90
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0144765DC0A3D9D0EADA845625C5E7F14C552690.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6zoiLMZgnVXZUddR9hCRUckVikLhP8ehEU5hxReLY7nC/1/3139302e31312e3231302e302f32342d3234203d3e20323730363532.roa
Signing time:             Wed 03 Apr 2024 22:21:41 +0000
ROA not before:           Wed 03 Apr 2024 22:16:41 +0000
ROA not after:            Wed 02 Apr 2025 22:21:41 +0000
asID:                     270652
IP address blocks:        190.11.210.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6zoiLMZgnVXZUddR9hCRUckVikLhP8ehEU5hxReLY7nC/1/0144765DC0A3D9D0EADA845625C5E7F14C552690.crl
                          rsync://rpki-repo.registro.br/repo/6zoiLMZgnVXZUddR9hCRUckVikLhP8ehEU5hxReLY7nC/1/0144765DC0A3D9D0EADA845625C5E7F14C552690.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0144765DC0A3D9D0EADA845625C5E7F14C552690.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:78:ff:50:24:93:ba:40:a4:ba:1c:d8:66:f1:23:04:44:7f:4f:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0144765DC0A3D9D0EADA845625C5E7F14C552690
        Validity
            Not Before: Apr  3 22:16:41 2024 GMT
            Not After : Apr  2 22:21:41 2025 GMT
        Subject: CN=80EF636D303F8EA8CC5A15E027C143C989DA51A9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:d1:13:8b:8c:55:2e:1d:66:7c:14:25:2d:26:
                    d9:41:8b:3f:47:db:21:00:af:7d:f3:67:8d:1e:66:
                    d5:ed:63:95:ed:8b:d0:99:da:c9:5b:84:c4:c5:cd:
                    af:6c:f6:4a:98:21:7b:57:42:ec:47:1b:1d:ba:b7:
                    65:f7:e6:95:b1:7b:a2:b9:e6:b5:b7:0d:3d:9c:dc:
                    e4:9c:a5:53:03:4e:a2:79:7b:f7:5e:4f:43:ef:d9:
                    b4:0c:6c:42:fe:d2:15:a4:19:22:cc:33:0c:c3:fb:
                    f8:93:e0:4f:08:0b:2d:3c:c5:a6:28:27:56:fc:f7:
                    b8:b5:e9:0e:2f:fa:07:f1:9c:60:7b:7c:08:2e:02:
                    cb:7e:f8:37:6d:4e:51:32:e4:44:c7:f9:88:c1:d7:
                    03:ae:f5:04:26:a5:00:69:87:e3:2f:85:78:0d:35:
                    99:6b:20:b2:33:f9:a5:15:f3:88:0e:83:b1:09:f8:
                    c2:78:fa:d8:ed:a5:fe:d4:74:d3:c0:45:f7:86:d8:
                    a0:c7:e0:6e:94:62:d6:d5:91:d5:dc:36:aa:1c:63:
                    f7:c5:7e:1c:05:87:47:d1:a3:04:d7:fa:83:89:23:
                    96:ab:49:57:34:8d:6d:f6:7d:e8:f5:d5:af:fa:7d:
                    9e:51:b8:88:fb:2c:de:55:32:26:b1:a7:5b:e1:6f:
                    6d:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:EF:63:6D:30:3F:8E:A8:CC:5A:15:E0:27:C1:43:C9:89:DA:51:A9
            X509v3 Authority Key Identifier:
                keyid:01:44:76:5D:C0:A3:D9:D0:EA:DA:84:56:25:C5:E7:F1:4C:55:26:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6zoiLMZgnVXZUddR9hCRUckVikLhP8ehEU5hxReLY7nC/1/0144765DC0A3D9D0EADA845625C5E7F14C552690.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0144765DC0A3D9D0EADA845625C5E7F14C552690.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6zoiLMZgnVXZUddR9hCRUckVikLhP8ehEU5hxReLY7nC/1/3139302e31312e3231302e302f32342d3234203d3e20323730363532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.11.210.0/24

    Signature Algorithm: sha256WithRSAEncryption
         29:88:a9:b7:dc:86:f4:d2:66:b3:05:3e:98:40:e3:be:08:4a:
         a5:80:ec:2c:c8:9a:a7:57:5d:d6:67:b7:bd:ed:ed:17:cf:5a:
         2d:5c:a6:20:00:85:42:35:e2:4c:05:c4:01:52:73:d2:55:d6:
         69:22:2b:87:5f:3b:9b:8c:6c:7b:2f:6f:a5:c7:ab:51:61:3e:
         5e:08:5a:b9:a4:70:44:a3:8c:fb:a9:86:2b:58:2e:d8:ce:5a:
         64:f5:38:2f:92:41:05:55:91:29:c2:ed:c1:d4:8a:fd:46:35:
         42:ca:79:05:2e:33:51:cb:e4:1c:2f:5b:d7:8b:f5:20:57:35:
         2f:9a:af:bc:d4:b4:ee:b9:a3:b4:4c:70:56:2d:77:78:5b:3d:
         5d:b6:7d:db:39:0c:40:9e:45:6f:30:4c:86:50:4f:15:85:bc:
         af:94:86:e3:47:f0:c4:07:46:6b:64:87:4a:a8:87:5e:f2:dd:
         22:4b:25:69:ab:9b:3c:46:91:76:b9:5e:43:97:59:5d:f5:9e:
         ab:95:45:79:60:25:83:2a:7e:bc:40:26:ac:f6:83:68:1a:65:
         4c:1f:88:f8:94:e1:a6:8f:89:ab:0c:89:ad:9c:69:66:d6:35:
         b9:50:20:05:47:d9:84:0c:46:7f:56:2c:c3:22:bf:d8:e5:23:
         90:0e:d5:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 00:48:16 2024 by rpki-client on console-fra.rpki-client.org