Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ba3idfAfcLggDMCqw9AGLKJ8fxDjaTnmPoq3xisU33Us/1/3139302e3131312e3130382e302f32332d3234203d3e20323730343137.roa
File:                     3139302e3131312e3130382e302f32332d3234203d3e20323730343137.roa (raw, json)
Hash identifier:          2EYnHnVhjiZXCnI44SwO8bYc1WkvGfizvdbp/Wrb4jk=
Subject key identifier:   CC:3A:4C:07:9D:E4:51:6D:81:11:95:A1:9C:0C:A4:63:5C:7F:B6:59
Certificate issuer:       /CN=4DE454FF1B8BF0DF2AC7FEC8E0AD68782B7D8519
Certificate serial:       70FDB4876C9DAA2D38E18DA2F07219B95AC2CA90
Authority key identifier: 4D:E4:54:FF:1B:8B:F0:DF:2A:C7:FE:C8:E0:AD:68:78:2B:7D:85:19
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4DE454FF1B8BF0DF2AC7FEC8E0AD68782B7D8519.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ba3idfAfcLggDMCqw9AGLKJ8fxDjaTnmPoq3xisU33Us/1/3139302e3131312e3130382e302f32332d3234203d3e20323730343137.roa
Signing time:             Tue 13 Aug 2024 18:20:48 +0000
ROA not before:           Tue 13 Aug 2024 18:15:48 +0000
ROA not after:            Tue 12 Aug 2025 18:20:48 +0000
asID:                     270417
IP address blocks:        190.111.108.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ba3idfAfcLggDMCqw9AGLKJ8fxDjaTnmPoq3xisU33Us/1/4DE454FF1B8BF0DF2AC7FEC8E0AD68782B7D8519.crl
                          rsync://rpki-repo.registro.br/repo/Ba3idfAfcLggDMCqw9AGLKJ8fxDjaTnmPoq3xisU33Us/1/4DE454FF1B8BF0DF2AC7FEC8E0AD68782B7D8519.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4DE454FF1B8BF0DF2AC7FEC8E0AD68782B7D8519.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 17:36:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:fd:b4:87:6c:9d:aa:2d:38:e1:8d:a2:f0:72:19:b9:5a:c2:ca:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4DE454FF1B8BF0DF2AC7FEC8E0AD68782B7D8519
        Validity
            Not Before: Aug 13 18:15:48 2024 GMT
            Not After : Aug 12 18:20:48 2025 GMT
        Subject: CN=CC3A4C079DE4516D811195A19C0CA4635C7FB659
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:02:4b:71:95:8c:d3:fe:e5:ae:af:4a:5c:dd:
                    b5:f7:5e:6d:5d:9d:f2:09:3c:98:02:e3:25:75:8c:
                    43:00:e5:1e:5e:1e:44:37:6f:68:fb:e6:a3:59:cd:
                    98:2b:88:01:c6:53:d7:12:09:5a:ff:d6:6e:6f:60:
                    e4:34:c0:35:51:e5:d4:24:e8:78:68:2e:f9:47:e0:
                    64:af:d5:ca:86:63:96:9f:92:f0:64:c7:07:83:21:
                    3c:d0:a1:e2:91:3e:97:10:72:62:e7:2e:bc:23:bf:
                    f3:3f:46:b0:7c:30:2d:ac:16:c8:5d:5c:98:75:71:
                    c2:57:7c:2d:27:56:e0:ff:b7:45:bc:99:fb:f9:0a:
                    5a:3a:74:bc:7d:60:d8:9b:34:29:d1:fc:1b:c1:49:
                    2a:5a:c0:f0:09:05:18:2e:17:5a:02:f0:b7:e4:59:
                    e7:06:c2:70:95:ed:78:65:78:72:18:e9:1a:4b:80:
                    f2:a9:28:ea:d5:4b:93:63:93:38:07:84:3d:5b:bd:
                    2d:88:64:33:91:6d:90:de:51:41:c5:88:a2:b3:fa:
                    d1:7b:3f:17:36:dc:ed:a9:23:1c:33:f7:bf:a9:cb:
                    95:d1:3c:ff:a2:93:42:da:ae:19:31:6b:b6:6e:d7:
                    94:18:55:26:8a:e0:bf:c3:65:04:75:e1:c6:d4:8f:
                    0a:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:3A:4C:07:9D:E4:51:6D:81:11:95:A1:9C:0C:A4:63:5C:7F:B6:59
            X509v3 Authority Key Identifier:
                keyid:4D:E4:54:FF:1B:8B:F0:DF:2A:C7:FE:C8:E0:AD:68:78:2B:7D:85:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ba3idfAfcLggDMCqw9AGLKJ8fxDjaTnmPoq3xisU33Us/1/4DE454FF1B8BF0DF2AC7FEC8E0AD68782B7D8519.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4DE454FF1B8BF0DF2AC7FEC8E0AD68782B7D8519.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ba3idfAfcLggDMCqw9AGLKJ8fxDjaTnmPoq3xisU33Us/1/3139302e3131312e3130382e302f32332d3234203d3e20323730343137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.111.108.0/23

    Signature Algorithm: sha256WithRSAEncryption
         01:6c:ea:63:c9:e1:c6:c6:81:16:d8:87:8f:2e:0c:73:69:6b:
         ee:4e:1c:c0:9c:07:f5:72:cf:73:08:e2:6a:84:bb:ea:df:7f:
         a3:7c:eb:1c:9a:71:46:01:30:95:77:c4:27:c5:a6:ac:33:fe:
         57:7f:db:dd:f8:0e:38:d9:ba:68:9a:59:dc:48:a2:5e:ba:b2:
         11:b7:c5:01:56:b2:37:02:5c:97:88:92:1c:2f:b7:da:45:32:
         ea:3e:a0:66:8f:ea:fa:52:0e:56:f4:85:7f:c8:94:d9:0d:26:
         46:0a:32:c5:41:e9:5f:37:7f:a4:63:14:13:38:a0:c8:01:c2:
         a9:c4:55:05:65:da:24:09:64:aa:28:60:a0:00:23:2c:df:fe:
         ed:56:47:79:4d:cb:61:15:7e:c1:61:8b:94:cf:d8:b1:74:7e:
         9b:a5:bd:17:7e:b5:00:23:6c:29:c8:43:23:81:c6:a8:63:f3:
         a6:bc:06:f8:93:57:59:ea:f5:ff:cf:12:66:97:cf:90:1e:86:
         d0:76:74:d8:f8:7c:75:77:b2:b9:9b:6b:f8:75:70:d8:a7:3c:
         16:cc:7d:d1:8b:13:87:a0:b4:03:8d:be:42:b9:e3:36:62:e0:
         2d:b3:82:7f:4f:4e:19:eb:d6:81:f1:67:e3:c2:d9:80:cd:29:
         7a:0f:f2:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 17:50:28 2024 by rpki-client on console-fra.rpki-client.org