Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8SiqKYL1KfpUrxQE23uNkuUGhf7j3qCfr2jy4oFXsTrB/1/3138392e3132372e3135302e302f32342d3234203d3e20323730373035.roa
File:                     3138392e3132372e3135302e302f32342d3234203d3e20323730373035.roa (raw, json)
Hash identifier:          fmEWyjsGgG02IEroDdC8hUBKa12IkyUjv4GyYTDn4oY=
Subject key identifier:   A3:23:A2:14:21:7C:16:5D:8E:BA:F0:EF:2F:59:C8:97:7F:28:72:E4
Certificate issuer:       /CN=0390EEC2B0EA8004D4BCF7E734A7D597D30C52AF
Certificate serial:       737D75ECAB3000CA3C70450D4693286622321A8B
Authority key identifier: 03:90:EE:C2:B0:EA:80:04:D4:BC:F7:E7:34:A7:D5:97:D3:0C:52:AF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0390EEC2B0EA8004D4BCF7E734A7D597D30C52AF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8SiqKYL1KfpUrxQE23uNkuUGhf7j3qCfr2jy4oFXsTrB/1/3138392e3132372e3135302e302f32342d3234203d3e20323730373035.roa
Signing time:             Thu 04 Apr 2024 03:52:31 +0000
ROA not before:           Thu 04 Apr 2024 03:47:31 +0000
ROA not after:            Thu 03 Apr 2025 03:52:31 +0000
asID:                     270705
IP address blocks:        189.127.150.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8SiqKYL1KfpUrxQE23uNkuUGhf7j3qCfr2jy4oFXsTrB/1/0390EEC2B0EA8004D4BCF7E734A7D597D30C52AF.crl
                          rsync://rpki-repo.registro.br/repo/8SiqKYL1KfpUrxQE23uNkuUGhf7j3qCfr2jy4oFXsTrB/1/0390EEC2B0EA8004D4BCF7E734A7D597D30C52AF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0390EEC2B0EA8004D4BCF7E734A7D597D30C52AF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 19:40:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:7d:75:ec:ab:30:00:ca:3c:70:45:0d:46:93:28:66:22:32:1a:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0390EEC2B0EA8004D4BCF7E734A7D597D30C52AF
        Validity
            Not Before: Apr  4 03:47:31 2024 GMT
            Not After : Apr  3 03:52:31 2025 GMT
        Subject: CN=A323A214217C165D8EBAF0EF2F59C8977F2872E4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:c6:76:f8:48:2f:1c:45:81:2e:b3:c8:1d:66:
                    70:d8:80:93:62:d0:76:1c:12:77:f1:f8:e0:aa:ce:
                    87:34:02:f0:b5:18:ce:7f:be:6f:84:0a:85:db:d8:
                    71:b1:71:9e:2f:3a:cc:75:6c:fa:15:26:05:89:db:
                    9e:c1:1a:46:13:60:a3:a9:8a:b9:09:6f:24:56:05:
                    84:fc:5d:b4:4a:03:1a:cf:d4:05:69:7c:f9:ae:0a:
                    e5:c3:0f:6b:16:2b:78:1a:7d:d6:ae:c5:ea:5c:27:
                    1c:ea:f0:63:55:3f:c9:f7:65:cf:8b:dd:61:47:32:
                    00:68:87:43:d9:46:fe:56:9c:c4:33:2f:8a:49:67:
                    19:a4:ab:6e:63:7e:c4:0a:19:c6:9c:f6:ee:16:c4:
                    e8:85:e7:f3:1f:d5:43:14:e9:a9:3a:50:99:ca:3a:
                    12:6e:3e:5c:f2:75:2b:b1:6c:4d:4a:37:9b:b1:be:
                    0b:e8:8c:c4:f4:d2:4b:4c:b9:de:68:af:4f:96:88:
                    dc:76:cc:2c:71:08:f5:b7:85:65:e7:c3:67:25:5d:
                    86:fe:50:e6:fb:b6:bf:91:97:9b:71:43:d7:e5:1d:
                    91:91:77:d0:f6:6b:45:71:4a:95:ee:59:2e:00:45:
                    74:eb:26:88:19:1d:ed:1a:7c:39:b8:f8:d5:d1:d3:
                    49:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:23:A2:14:21:7C:16:5D:8E:BA:F0:EF:2F:59:C8:97:7F:28:72:E4
            X509v3 Authority Key Identifier:
                keyid:03:90:EE:C2:B0:EA:80:04:D4:BC:F7:E7:34:A7:D5:97:D3:0C:52:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8SiqKYL1KfpUrxQE23uNkuUGhf7j3qCfr2jy4oFXsTrB/1/0390EEC2B0EA8004D4BCF7E734A7D597D30C52AF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0390EEC2B0EA8004D4BCF7E734A7D597D30C52AF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8SiqKYL1KfpUrxQE23uNkuUGhf7j3qCfr2jy4oFXsTrB/1/3138392e3132372e3135302e302f32342d3234203d3e20323730373035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.127.150.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5b:eb:74:87:ba:ba:fb:fe:0a:dd:0a:9f:e5:67:fc:36:d9:20:
         10:80:8c:15:28:a5:59:bf:01:dd:e1:ee:6b:9a:51:a5:4e:1f:
         26:d1:00:d0:70:ec:19:1c:14:f3:60:62:2b:5c:39:0c:0c:90:
         b1:ea:22:29:d6:61:94:a0:ed:19:13:66:7d:a6:27:a8:bc:3a:
         80:a8:fd:66:63:12:a1:ce:c7:be:63:38:28:f7:95:63:93:bc:
         60:42:7e:94:5b:2e:0b:4c:f1:03:b4:ed:53:d4:47:86:e7:31:
         a9:b3:44:64:4a:f1:7d:42:44:47:76:45:c2:8c:8c:34:1b:0b:
         c3:fd:b1:43:65:4e:d1:68:b1:b8:0b:20:76:7b:a5:c3:49:8d:
         9a:b0:44:46:02:a9:b7:5b:32:e2:42:0c:aa:a1:f6:e0:96:6c:
         2a:1b:55:89:ac:45:0a:f1:e7:58:05:fd:52:bc:1d:e8:9c:b5:
         fb:6d:d2:4f:0d:c3:df:16:b3:95:cd:54:b9:37:95:43:9c:d7:
         b4:fa:0a:5c:b4:ce:0b:c1:ba:9a:e8:fe:f2:4c:fa:05:7d:15:
         f2:f6:e6:fb:66:32:db:e4:93:25:fa:e2:10:81:82:85:c0:54:
         0f:94:6b:36:e8:a0:7e:46:0f:82:04:ce:1a:1c:91:f4:ef:a7:
         32:29:8d:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:44:19 2024 by rpki-client on console-ams.rpki-client.org