Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AcdyncNupH9agc8MshBdbtDX7BC3S4PPBShoTbjSs6FE/2/3139302e38332e34382e302f32332d3234203d3e20323730333337.roa
File:                     3139302e38332e34382e302f32332d3234203d3e20323730333337.roa (raw, json)
Hash identifier:          ojY0MGKi2Xgl9h8SbadUHB0V4ICGPJmhIQDapGjNHrw=
Subject key identifier:   AC:AD:AD:36:47:61:1A:99:32:8E:DA:5D:E0:69:19:7E:6A:A1:A1:41
Certificate issuer:       /CN=102E8D201FEFBD18DA17FA1622858BB27784D51F
Certificate serial:       643A89D5AF161D7B97D7E6847D980D3260F11B84
Authority key identifier: 10:2E:8D:20:1F:EF:BD:18:DA:17:FA:16:22:85:8B:B2:77:84:D5:1F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/102E8D201FEFBD18DA17FA1622858BB27784D51F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AcdyncNupH9agc8MshBdbtDX7BC3S4PPBShoTbjSs6FE/2/3139302e38332e34382e302f32332d3234203d3e20323730333337.roa
Signing time:             Thu 04 Apr 2024 14:46:45 +0000
ROA not before:           Thu 04 Apr 2024 14:41:45 +0000
ROA not after:            Thu 03 Apr 2025 14:46:45 +0000
asID:                     270337
IP address blocks:        190.83.48.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AcdyncNupH9agc8MshBdbtDX7BC3S4PPBShoTbjSs6FE/2/102E8D201FEFBD18DA17FA1622858BB27784D51F.crl
                          rsync://rpki-repo.registro.br/repo/AcdyncNupH9agc8MshBdbtDX7BC3S4PPBShoTbjSs6FE/2/102E8D201FEFBD18DA17FA1622858BB27784D51F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/102E8D201FEFBD18DA17FA1622858BB27784D51F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 19:40:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:3a:89:d5:af:16:1d:7b:97:d7:e6:84:7d:98:0d:32:60:f1:1b:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=102E8D201FEFBD18DA17FA1622858BB27784D51F
        Validity
            Not Before: Apr  4 14:41:45 2024 GMT
            Not After : Apr  3 14:46:45 2025 GMT
        Subject: CN=ACADAD3647611A99328EDA5DE069197E6AA1A141
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:a8:ef:a9:d4:a8:97:a8:95:dc:be:11:c9:c4:
                    e3:19:c2:a6:78:77:f4:95:df:41:43:26:97:5d:c2:
                    68:c0:16:58:88:57:52:ad:e3:f4:1b:1f:67:04:c1:
                    eb:e3:9d:9d:cd:75:1c:d1:21:80:13:d8:c3:25:c7:
                    29:a2:87:bd:f5:ba:c8:60:00:8f:e7:c7:44:41:0d:
                    e7:57:9a:7b:ed:73:a2:e4:99:a1:93:34:39:bf:2d:
                    81:77:14:75:52:2a:16:72:3f:82:81:11:ef:3d:80:
                    86:aa:dc:ec:0b:5a:db:99:a1:12:f4:2e:f5:4a:d6:
                    52:87:c0:f2:e8:55:dc:bb:ed:06:1e:2e:a9:86:21:
                    82:a0:9f:5d:df:71:3e:d6:38:7b:cb:9c:4b:26:f0:
                    ee:58:96:d6:41:13:25:1a:45:b9:b8:f1:a7:67:b3:
                    09:3b:9b:7d:ac:60:9e:36:66:93:c5:e9:59:d3:22:
                    c1:1d:db:54:f2:2b:4e:cd:c0:d5:b5:da:f4:72:55:
                    05:c7:25:ed:53:a7:67:e4:a4:1a:6d:78:76:93:42:
                    49:0b:80:5a:57:a4:9a:7b:44:4c:2c:41:e4:fe:ba:
                    7f:2f:ec:d8:77:56:a5:5c:82:17:0a:72:c2:74:01:
                    27:de:5c:50:9d:97:91:2a:24:70:2a:67:92:2c:70:
                    d6:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:AD:AD:36:47:61:1A:99:32:8E:DA:5D:E0:69:19:7E:6A:A1:A1:41
            X509v3 Authority Key Identifier:
                keyid:10:2E:8D:20:1F:EF:BD:18:DA:17:FA:16:22:85:8B:B2:77:84:D5:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AcdyncNupH9agc8MshBdbtDX7BC3S4PPBShoTbjSs6FE/2/102E8D201FEFBD18DA17FA1622858BB27784D51F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/102E8D201FEFBD18DA17FA1622858BB27784D51F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AcdyncNupH9agc8MshBdbtDX7BC3S4PPBShoTbjSs6FE/2/3139302e38332e34382e302f32332d3234203d3e20323730333337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.83.48.0/23

    Signature Algorithm: sha256WithRSAEncryption
         87:50:b2:1a:95:69:a3:a9:0d:ce:4e:e0:a2:f6:05:4b:6e:a1:
         e9:ff:a3:08:e1:b5:04:2a:d0:bc:d3:59:bd:ed:d1:3c:fe:d2:
         ff:67:c1:7a:9b:48:72:35:c5:fb:60:00:01:96:98:d2:d2:92:
         81:ce:db:ad:21:08:d6:2e:e7:19:a8:70:f0:1c:8c:a2:d6:e9:
         32:b8:d3:00:a7:12:04:ba:34:14:8c:17:01:69:4c:f5:c6:ef:
         58:a6:dd:26:42:ba:d1:d0:5a:fb:d9:91:d5:9f:c4:a0:f2:11:
         ef:49:2c:07:38:d9:a9:eb:94:73:32:7a:37:2e:18:47:fe:b6:
         9e:de:e2:be:e2:27:c6:a0:36:8f:04:5d:ed:aa:03:77:80:23:
         d8:b1:6b:56:41:b1:46:d7:00:6f:6d:f2:4c:d0:bb:0c:0b:1c:
         69:ee:c9:13:b8:01:f9:a4:60:19:8b:00:22:22:51:ff:3f:dc:
         96:93:97:65:15:04:66:9d:c6:6e:2e:1c:0f:c4:f6:54:c4:fd:
         1b:82:d1:81:46:37:38:2a:35:5e:3a:cf:d7:96:f0:09:50:3d:
         e5:2a:da:80:25:e3:53:06:d0:32:04:b2:88:a4:5c:2e:46:53:
         b2:0c:1f:50:6e:59:12:ce:fe:4e:ca:a3:26:7c:9b:2b:a3:8d:
         e9:8c:ea:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:44:23 2024 by rpki-client on console-ams.rpki-client.org