Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BBHySkcYiPccNotMWwsEfNhUZy2JzV3SUC55JXQtk3Jv/1/3139302e31312e3231322e302f32322d3234203d3e20323730363533.roa
File:                     3139302e31312e3231322e302f32322d3234203d3e20323730363533.roa (raw, json)
Hash identifier:          fBwNAH5ytixbHhdOeHYFDzyTkBk5Gm9OfwYEeprD/Pc=
Subject key identifier:   67:20:4C:BB:C5:46:67:EF:A5:B4:88:40:41:DB:9B:8C:6F:20:7E:C8
Certificate issuer:       /CN=E9FF1AE11B5DC620AA131FF8B371B9CF5E7868CF
Certificate serial:       0775DDE5C0465BB1BF9F299ED976ACC369BDCEB1
Authority key identifier: E9:FF:1A:E1:1B:5D:C6:20:AA:13:1F:F8:B3:71:B9:CF:5E:78:68:CF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E9FF1AE11B5DC620AA131FF8B371B9CF5E7868CF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BBHySkcYiPccNotMWwsEfNhUZy2JzV3SUC55JXQtk3Jv/1/3139302e31312e3231322e302f32322d3234203d3e20323730363533.roa
Signing time:             Wed 03 Apr 2024 18:30:48 +0000
ROA not before:           Wed 03 Apr 2024 18:25:48 +0000
ROA not after:            Wed 02 Apr 2025 18:30:48 +0000
asID:                     270653
IP address blocks:        190.11.212.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BBHySkcYiPccNotMWwsEfNhUZy2JzV3SUC55JXQtk3Jv/1/E9FF1AE11B5DC620AA131FF8B371B9CF5E7868CF.crl
                          rsync://rpki-repo.registro.br/repo/BBHySkcYiPccNotMWwsEfNhUZy2JzV3SUC55JXQtk3Jv/1/E9FF1AE11B5DC620AA131FF8B371B9CF5E7868CF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E9FF1AE11B5DC620AA131FF8B371B9CF5E7868CF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 17:42:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:75:dd:e5:c0:46:5b:b1:bf:9f:29:9e:d9:76:ac:c3:69:bd:ce:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E9FF1AE11B5DC620AA131FF8B371B9CF5E7868CF
        Validity
            Not Before: Apr  3 18:25:48 2024 GMT
            Not After : Apr  2 18:30:48 2025 GMT
        Subject: CN=67204CBBC54667EFA5B4884041DB9B8C6F207EC8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:05:05:17:a8:12:45:72:1f:7c:bb:ec:b6:75:
                    d6:98:41:b6:c2:be:75:ff:1a:93:65:76:16:19:9b:
                    56:c4:69:34:15:60:15:a0:13:e4:8f:af:7a:b7:c4:
                    bd:af:22:27:37:b6:71:60:c2:7b:79:ee:60:a9:2a:
                    21:72:8b:0d:93:d0:f6:1f:7c:58:d6:cd:3a:34:94:
                    57:f2:95:09:0e:ae:3f:99:28:3c:b8:a4:a5:cd:3f:
                    3a:b0:18:83:2c:3b:7f:1b:3a:af:c6:98:4e:d6:34:
                    6d:20:2f:b9:1b:f0:32:72:4c:29:3d:3d:cb:a8:f0:
                    25:b6:77:3a:8e:1f:94:a4:0e:c5:b3:2d:d7:98:dd:
                    d5:c1:b5:b9:d3:f2:98:c3:e0:18:7b:08:cc:a6:b8:
                    6d:29:cd:1b:dc:60:f9:96:d8:0d:09:90:2b:19:d4:
                    23:c6:d3:d8:b9:8f:51:4c:2c:52:b0:99:b4:55:58:
                    e1:de:e6:6a:a0:61:1e:33:cc:85:c7:20:ef:e4:ea:
                    22:00:e6:37:63:3a:df:5c:04:ea:d9:1b:38:20:a1:
                    45:90:4f:c3:27:68:c6:e6:6f:1c:f5:5c:5c:6c:92:
                    ff:b2:32:6a:e8:89:0b:e5:7d:de:34:f3:f8:fc:d9:
                    58:0e:78:54:ed:91:55:3b:05:c1:be:98:31:47:fe:
                    fb:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:20:4C:BB:C5:46:67:EF:A5:B4:88:40:41:DB:9B:8C:6F:20:7E:C8
            X509v3 Authority Key Identifier:
                keyid:E9:FF:1A:E1:1B:5D:C6:20:AA:13:1F:F8:B3:71:B9:CF:5E:78:68:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BBHySkcYiPccNotMWwsEfNhUZy2JzV3SUC55JXQtk3Jv/1/E9FF1AE11B5DC620AA131FF8B371B9CF5E7868CF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E9FF1AE11B5DC620AA131FF8B371B9CF5E7868CF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BBHySkcYiPccNotMWwsEfNhUZy2JzV3SUC55JXQtk3Jv/1/3139302e31312e3231322e302f32322d3234203d3e20323730363533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.11.212.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6b:fb:18:27:d0:e9:ac:f0:32:83:7f:0c:7f:53:76:25:2a:33:
         f6:f8:79:d6:d0:3a:a4:b7:e9:11:bf:8b:98:66:45:5b:4b:60:
         32:fe:c3:1e:43:7e:bf:b1:d8:c8:6c:5f:7e:5f:a1:a3:d1:71:
         af:67:9a:a2:f4:4f:9b:c2:22:94:5c:7d:22:7b:6b:b8:0d:19:
         fd:ea:2c:e2:ad:30:76:38:33:d6:67:45:d2:31:6c:f7:cd:6b:
         e7:9b:79:b2:2a:f1:0e:3e:37:2c:97:85:68:fa:61:7a:23:34:
         ea:05:07:86:b6:3e:52:e7:f8:8f:6a:c5:e9:6e:45:d5:57:32:
         32:3b:a9:0c:4d:7d:18:a6:0f:a1:01:5e:d9:58:47:d7:80:bd:
         da:a0:6f:d1:ce:25:7a:fd:f9:04:4c:35:94:76:34:2c:e1:f8:
         b6:92:cf:40:6b:55:c4:db:b3:5f:95:82:23:46:1b:f3:46:48:
         aa:9a:29:29:5a:2e:6c:83:fc:ff:58:1c:e2:85:aa:18:eb:de:
         9f:f1:35:d1:0c:7a:70:95:d1:f7:09:c9:5b:53:15:23:7b:42:
         f8:59:2c:ad:37:34:82:ac:27:a5:ad:54:1c:df:56:a1:50:7a:
         8d:f2:6a:49:ff:7a:28:df:d1:9c:79:c5:f3:68:bd:5b:5b:45:
         53:96:c8:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:44:02 2024 by rpki-client on console-ams.rpki-client.org