Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/84p9UnqYUt1tqV4oz8eHtoYiXp9zmtSiSx7BdUmC8eZM/1/3139302e3131352e3231362e302f32322d3332203d3e20323730383435.roa
File:                     3139302e3131352e3231362e302f32322d3332203d3e20323730383435.roa (raw, json)
Hash identifier:          ZjL4VIZfZiq5Rb27Gq7kVIiqAZi8xzlTv/jCR2ON1/k=
Subject key identifier:   6C:DD:4D:8A:87:BC:F9:38:D0:31:B9:46:66:18:46:DF:EC:74:DD:86
Certificate issuer:       /CN=44D163BB7C285498620FF487902FE788F88F4349
Certificate serial:       6199C93B096AA9CD892335A61227908D5485B439
Authority key identifier: 44:D1:63:BB:7C:28:54:98:62:0F:F4:87:90:2F:E7:88:F8:8F:43:49
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/44D163BB7C285498620FF487902FE788F88F4349.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/84p9UnqYUt1tqV4oz8eHtoYiXp9zmtSiSx7BdUmC8eZM/1/3139302e3131352e3231362e302f32322d3332203d3e20323730383435.roa
Signing time:             Thu 04 Apr 2024 17:43:05 +0000
ROA not before:           Thu 04 Apr 2024 17:38:05 +0000
ROA not after:            Thu 03 Apr 2025 17:43:05 +0000
asID:                     270845
IP address blocks:        190.115.216.0/22 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/84p9UnqYUt1tqV4oz8eHtoYiXp9zmtSiSx7BdUmC8eZM/1/44D163BB7C285498620FF487902FE788F88F4349.crl
                          rsync://rpki-repo.registro.br/repo/84p9UnqYUt1tqV4oz8eHtoYiXp9zmtSiSx7BdUmC8eZM/1/44D163BB7C285498620FF487902FE788F88F4349.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/44D163BB7C285498620FF487902FE788F88F4349.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 04:24:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:99:c9:3b:09:6a:a9:cd:89:23:35:a6:12:27:90:8d:54:85:b4:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44D163BB7C285498620FF487902FE788F88F4349
        Validity
            Not Before: Apr  4 17:38:05 2024 GMT
            Not After : Apr  3 17:43:05 2025 GMT
        Subject: CN=6CDD4D8A87BCF938D031B946661846DFEC74DD86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:05:9d:2c:a0:18:21:d8:ae:a1:e7:80:18:e8:
                    ee:78:57:4c:7f:0b:3b:98:5d:24:11:4d:a1:3f:74:
                    95:d2:c2:f2:c0:ea:9e:f1:4a:2c:be:31:92:f3:94:
                    9c:73:37:ef:d9:09:7c:03:1a:65:5a:b6:54:a9:b6:
                    57:93:15:97:ed:85:6e:0b:56:f0:1f:2e:6c:b4:6c:
                    5d:69:31:49:69:a3:db:a0:20:57:6a:38:fd:be:4b:
                    79:08:b6:23:82:e8:d4:9d:48:b1:8a:2b:04:91:84:
                    13:0a:a9:8b:99:6f:83:1d:fc:fa:37:9c:fe:fe:89:
                    f4:82:89:81:4d:f0:a4:8a:35:bf:f7:bd:cb:18:5c:
                    67:18:ad:42:a7:8c:2b:22:ae:09:22:0b:0c:d6:bd:
                    2c:1d:5f:3f:d1:c4:25:39:d2:1f:82:dd:f7:79:d5:
                    f7:f3:35:a5:93:fb:18:55:c1:d9:cc:83:65:17:ae:
                    ac:cc:03:e0:bf:e5:86:23:e3:51:14:6f:36:ac:99:
                    30:22:de:b9:d3:fc:7b:54:00:10:0e:37:34:f8:dc:
                    b9:e7:19:3f:7c:1d:82:89:e4:eb:1f:a4:12:8f:b3:
                    9c:69:df:9e:fa:ee:f4:40:77:32:64:62:e6:9b:f9:
                    86:4e:46:f5:af:cc:14:cf:ca:aa:48:99:a5:9d:9c:
                    d5:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:DD:4D:8A:87:BC:F9:38:D0:31:B9:46:66:18:46:DF:EC:74:DD:86
            X509v3 Authority Key Identifier:
                keyid:44:D1:63:BB:7C:28:54:98:62:0F:F4:87:90:2F:E7:88:F8:8F:43:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/84p9UnqYUt1tqV4oz8eHtoYiXp9zmtSiSx7BdUmC8eZM/1/44D163BB7C285498620FF487902FE788F88F4349.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/44D163BB7C285498620FF487902FE788F88F4349.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/84p9UnqYUt1tqV4oz8eHtoYiXp9zmtSiSx7BdUmC8eZM/1/3139302e3131352e3231362e302f32322d3332203d3e20323730383435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.115.216.0/22

    Signature Algorithm: sha256WithRSAEncryption
         16:99:2f:ed:94:f5:71:e0:40:59:5f:63:2b:96:15:1f:08:ba:
         a6:2d:0f:a2:04:ad:83:1b:50:5f:81:3c:74:9f:70:a0:f3:4d:
         d4:5e:39:5a:d8:4d:2e:d6:6e:06:71:47:b1:4d:b4:25:28:ff:
         98:96:f1:fd:fb:12:19:52:26:46:39:50:f3:fc:67:e1:fc:54:
         89:ee:df:d7:15:b1:c9:9f:d8:54:9f:4f:6b:8d:96:9d:0f:55:
         19:94:ad:ec:c5:5c:f9:7c:5f:78:7a:42:5f:4b:9b:07:2d:b7:
         37:17:e0:27:8a:20:30:11:0b:bf:a8:01:3f:92:58:fe:95:04:
         f2:00:18:8c:3e:37:07:2b:a1:75:d8:df:b6:19:58:5c:e4:67:
         f1:d5:7e:10:c1:6d:1d:f1:d2:6d:e4:36:21:6e:00:66:4c:3c:
         74:0a:3d:71:68:24:dd:d5:9f:fe:e0:f7:0e:93:ea:b0:6f:e2:
         6c:85:95:f9:05:7b:d7:49:24:e2:dd:e2:57:cc:4a:8e:0c:a6:
         01:83:f3:83:b9:67:4c:90:64:bd:90:2e:d9:a6:6a:7d:8b:6b:
         7a:d0:0e:93:5c:37:45:4f:ac:cd:73:eb:bf:64:c3:8c:44:ed:
         6b:3f:2c:1f:ee:ee:5a:5b:03:d8:dc:85:5e:1a:e8:ff:6a:d1:
         a2:11:c9:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 03:38:20 2024 by rpki-client on console-ams.rpki-client.org