Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8K4odna7GTW6fU9pGGS5MTqNFh4cuSezZK8vBAR6HB5q/1/3139302e3131322e3230342e302f32322d3234203d3e203631393139.roa
File:                     3139302e3131322e3230342e302f32322d3234203d3e203631393139.roa (raw, json)
Hash identifier:          WVPJ6oUx/Dc4idXamPo8T6OUCp61WOZ72XTLoqGDbR4=
Subject key identifier:   7F:5B:13:B6:CB:35:39:CC:D8:17:F7:7A:78:C4:1A:F2:AD:AB:94:74
Certificate issuer:       /CN=0DB751E0CAE739A39DF93010294055009B1755DA
Certificate serial:       1D12F60C04BBE7CCCF859A559A76B768D73C777E
Authority key identifier: 0D:B7:51:E0:CA:E7:39:A3:9D:F9:30:10:29:40:55:00:9B:17:55:DA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0DB751E0CAE739A39DF93010294055009B1755DA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8K4odna7GTW6fU9pGGS5MTqNFh4cuSezZK8vBAR6HB5q/1/3139302e3131322e3230342e302f32322d3234203d3e203631393139.roa
Signing time:             Thu 04 Apr 2024 15:04:47 +0000
ROA not before:           Thu 04 Apr 2024 14:59:47 +0000
ROA not after:            Thu 03 Apr 2025 15:04:47 +0000
asID:                     61919
IP address blocks:        190.112.204.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8K4odna7GTW6fU9pGGS5MTqNFh4cuSezZK8vBAR6HB5q/1/0DB751E0CAE739A39DF93010294055009B1755DA.crl
                          rsync://rpki-repo.registro.br/repo/8K4odna7GTW6fU9pGGS5MTqNFh4cuSezZK8vBAR6HB5q/1/0DB751E0CAE739A39DF93010294055009B1755DA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0DB751E0CAE739A39DF93010294055009B1755DA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 09:17:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:12:f6:0c:04:bb:e7:cc:cf:85:9a:55:9a:76:b7:68:d7:3c:77:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0DB751E0CAE739A39DF93010294055009B1755DA
        Validity
            Not Before: Apr  4 14:59:47 2024 GMT
            Not After : Apr  3 15:04:47 2025 GMT
        Subject: CN=7F5B13B6CB3539CCD817F77A78C41AF2ADAB9474
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:0c:e6:10:15:80:e1:91:06:56:26:7f:85:ba:
                    9e:f3:e3:10:d3:85:9c:7e:7e:fc:fc:3f:cf:8d:03:
                    f1:1f:48:80:48:8c:f0:93:f1:9d:6b:28:3e:b8:ca:
                    a1:4a:95:a0:32:57:43:ef:fa:bb:0c:0b:ad:de:e3:
                    dd:43:fc:a0:2e:ba:85:3c:b4:a1:a7:58:29:b8:12:
                    58:b9:0a:44:36:d3:ab:5d:e8:36:64:3d:5a:2a:01:
                    8e:23:1b:d2:e2:c0:7b:a7:6a:e2:65:59:75:d8:20:
                    e9:d6:0c:d8:4c:ff:de:be:87:9b:b7:bc:c8:e7:bd:
                    86:ee:0d:5c:0b:d6:96:89:90:c4:f2:a1:62:e7:89:
                    02:80:ae:80:68:eb:3c:5b:4b:0c:21:20:6f:a6:a3:
                    bd:50:a5:34:63:6f:1d:88:de:f1:43:03:23:fc:fc:
                    96:a5:03:92:bf:5e:2f:f8:e0:c7:b5:91:98:67:67:
                    98:9b:c6:05:8b:4b:0a:51:4e:47:97:71:77:ec:ed:
                    e4:ef:86:89:a5:0c:f3:e2:73:3f:52:16:52:64:85:
                    b7:61:09:86:89:64:87:30:19:55:6f:50:ea:14:46:
                    b6:1f:0b:35:63:ee:b8:c2:c4:9d:9d:42:5d:bc:c4:
                    a0:c2:40:31:ee:30:bb:b5:c3:c5:43:72:0b:8a:4c:
                    1c:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:5B:13:B6:CB:35:39:CC:D8:17:F7:7A:78:C4:1A:F2:AD:AB:94:74
            X509v3 Authority Key Identifier:
                keyid:0D:B7:51:E0:CA:E7:39:A3:9D:F9:30:10:29:40:55:00:9B:17:55:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8K4odna7GTW6fU9pGGS5MTqNFh4cuSezZK8vBAR6HB5q/1/0DB751E0CAE739A39DF93010294055009B1755DA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0DB751E0CAE739A39DF93010294055009B1755DA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8K4odna7GTW6fU9pGGS5MTqNFh4cuSezZK8vBAR6HB5q/1/3139302e3131322e3230342e302f32322d3234203d3e203631393139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.112.204.0/22

    Signature Algorithm: sha256WithRSAEncryption
         07:07:34:44:51:51:bf:a6:3c:1b:81:eb:c1:82:10:19:bb:8d:
         25:bf:5b:fc:8e:f5:da:33:b5:34:c2:35:ac:cb:85:f5:ba:85:
         f3:9e:a2:6b:1b:aa:b0:2f:7e:12:36:5c:d0:fb:26:41:9b:1e:
         2d:bd:d8:9e:1e:63:e0:62:92:96:47:69:01:07:6c:66:26:50:
         48:33:cb:61:50:f0:39:10:de:20:9c:09:29:6d:56:8b:35:a0:
         57:b7:30:6d:8c:73:f7:ce:43:3b:21:c2:e3:bb:f7:30:47:f7:
         53:72:01:4d:40:dd:24:41:66:40:01:ca:47:15:f5:f2:84:55:
         9a:d0:9f:c4:50:0d:2c:f5:ea:61:d5:ae:be:c6:61:cc:3a:4f:
         5c:0e:25:33:65:b4:fb:7d:26:a7:b7:67:7d:6f:be:95:5f:3a:
         bc:c4:b2:0c:87:96:a9:41:29:b9:43:ef:47:fd:1f:85:0b:58:
         59:7d:f9:a7:db:c4:3b:07:22:e2:b0:e0:e7:72:3c:78:ad:84:
         32:a1:63:19:8a:5a:87:85:ce:d2:59:11:4e:25:a9:9e:69:aa:
         e0:a8:e8:ba:29:3c:89:6f:16:ad:00:e3:a4:23:50:96:37:3f:
         82:6c:b7:a9:46:f5:82:bb:ba:fd:ee:32:6e:87:74:eb:8d:db:
         37:1a:95:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 10:49:43 2024 by rpki-client on console-fra.rpki-client.org