Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9SF3ELzzbBNW2b1uf6GK8c5oSGQAtxHXCQoNZnvBarQE/1/3137392e39372e39302e302f32332d3233203d3e20323633343133.roa
File:                     3137392e39372e39302e302f32332d3233203d3e20323633343133.roa (raw, json)
Hash identifier:          5yKthW3/bP0uGAhViQo77WQe0mY9WAiMWX+ctJ8wFEU=
Subject key identifier:   2B:4E:62:C2:D4:1A:B0:AC:05:B4:B0:BD:65:B0:50:0B:F7:DB:48:85
Certificate issuer:       /CN=E1989BB07C22369442D0A08B2212D584A657A415
Certificate serial:       7874391DBF87930AF152DA1D086BE3529426F748
Authority key identifier: E1:98:9B:B0:7C:22:36:94:42:D0:A0:8B:22:12:D5:84:A6:57:A4:15
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E1989BB07C22369442D0A08B2212D584A657A415.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9SF3ELzzbBNW2b1uf6GK8c5oSGQAtxHXCQoNZnvBarQE/1/3137392e39372e39302e302f32332d3233203d3e20323633343133.roa
Signing time:             Thu 04 Apr 2024 10:21:41 +0000
ROA not before:           Thu 04 Apr 2024 10:16:41 +0000
ROA not after:            Thu 03 Apr 2025 10:21:41 +0000
asID:                     263413
IP address blocks:        179.97.90.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9SF3ELzzbBNW2b1uf6GK8c5oSGQAtxHXCQoNZnvBarQE/1/E1989BB07C22369442D0A08B2212D584A657A415.crl
                          rsync://rpki-repo.registro.br/repo/9SF3ELzzbBNW2b1uf6GK8c5oSGQAtxHXCQoNZnvBarQE/1/E1989BB07C22369442D0A08B2212D584A657A415.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E1989BB07C22369442D0A08B2212D584A657A415.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 28 Sep 2024 09:23:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:74:39:1d:bf:87:93:0a:f1:52:da:1d:08:6b:e3:52:94:26:f7:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E1989BB07C22369442D0A08B2212D584A657A415
        Validity
            Not Before: Apr  4 10:16:41 2024 GMT
            Not After : Apr  3 10:21:41 2025 GMT
        Subject: CN=2B4E62C2D41AB0AC05B4B0BD65B0500BF7DB4885
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:a7:fb:6c:67:3c:9a:ae:c7:bf:37:88:d9:a4:
                    18:4c:59:ed:79:6c:d5:af:ec:0b:2c:ad:2a:a3:a1:
                    94:2e:95:83:97:b7:d4:12:67:8b:66:44:78:71:a4:
                    b5:6c:96:e2:3c:5e:63:14:6e:f1:03:1f:db:d1:54:
                    7d:05:ba:2d:a1:6e:d1:d6:2e:48:c5:2c:63:6f:d2:
                    60:93:0c:40:e3:af:fc:35:10:c6:29:ac:62:86:5a:
                    e8:f5:e6:ea:1c:97:de:e2:cf:8a:27:29:e4:81:09:
                    45:8d:19:43:05:cd:95:d2:13:43:ac:85:9e:34:64:
                    ab:07:ae:42:b8:8e:26:10:94:41:fd:05:b9:91:4a:
                    bd:a7:c1:ac:0c:34:b6:56:a1:a0:53:08:8a:65:6f:
                    f5:5c:c7:94:cf:59:d2:69:6f:4c:e8:58:c7:a6:14:
                    54:fe:0f:4d:01:2b:76:7d:9f:45:f0:33:c3:6a:cf:
                    ea:80:70:f8:23:da:0d:51:c8:5c:c5:64:3b:01:d5:
                    00:36:91:bc:b3:ac:0e:1f:4b:81:d9:43:c4:77:1a:
                    99:61:51:eb:5b:54:cb:96:0a:7d:02:a9:7c:4a:8d:
                    45:01:5b:99:ef:49:92:2a:6d:f6:17:95:ad:56:e6:
                    a6:a4:a7:22:f5:e2:fc:b6:88:3c:db:36:f6:b6:07:
                    dc:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:4E:62:C2:D4:1A:B0:AC:05:B4:B0:BD:65:B0:50:0B:F7:DB:48:85
            X509v3 Authority Key Identifier:
                keyid:E1:98:9B:B0:7C:22:36:94:42:D0:A0:8B:22:12:D5:84:A6:57:A4:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9SF3ELzzbBNW2b1uf6GK8c5oSGQAtxHXCQoNZnvBarQE/1/E1989BB07C22369442D0A08B2212D584A657A415.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E1989BB07C22369442D0A08B2212D584A657A415.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9SF3ELzzbBNW2b1uf6GK8c5oSGQAtxHXCQoNZnvBarQE/1/3137392e39372e39302e302f32332d3233203d3e20323633343133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.97.90.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1a:b3:a6:c0:da:78:ba:2e:a2:6f:d1:c6:16:bf:7b:57:eb:e7:
         45:ae:5a:ed:e3:eb:17:8e:ab:34:1a:64:0d:1e:06:21:aa:88:
         d2:d8:8f:d0:cf:f4:c9:f2:44:3d:75:90:b9:6e:0d:b0:94:d5:
         ae:8a:20:f3:3e:75:c0:aa:c5:3f:22:99:ae:99:87:9f:c8:9b:
         76:24:11:6b:fd:6c:75:25:2b:31:c3:65:b6:32:e2:d2:2f:1d:
         4b:38:8d:fe:95:53:4b:b3:4c:65:34:11:24:18:d6:de:c5:8c:
         51:38:d7:d3:af:54:7a:9f:f8:1f:dd:b8:a9:07:26:1a:80:64:
         ee:7a:65:2e:4b:50:3e:9b:6c:3d:92:68:86:56:b6:c1:f8:ef:
         6d:e4:4b:2e:73:fe:56:8c:78:f5:37:27:3a:94:65:94:76:cc:
         dd:7b:ca:33:14:63:b0:0e:53:6b:e0:fc:4c:ff:5e:e5:1a:09:
         27:6f:4f:5b:b3:2e:b7:f1:0b:c4:d9:8a:d2:64:72:b6:fd:27:
         fd:6e:12:a1:14:2d:a1:85:86:e8:5e:42:54:1f:0d:67:db:90:
         d0:da:7f:3f:3e:61:ff:db:25:5e:cb:5e:47:a1:5a:a0:bb:08:
         09:fa:36:81:e5:78:5d:41:98:ef:b3:f9:a8:b8:e2:a9:ab:60:
         88:a9:eb:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 27 09:15:44 2024 by rpki-client on console-fra.rpki-client.org