Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ba3idfAfcLggDMCqw9AGLKJ8fxDjaTnmPoq3xisU33Us/1/3139302e3131312e3131302e302f32332d3233203d3e20323730343137.roa
File:                     3139302e3131312e3131302e302f32332d3233203d3e20323730343137.roa (raw, json)
Hash identifier:          JCn5xP4XMxZeZSud6HxzlLMZkCQIhUsr7raoIHJB0gU=
Subject key identifier:   47:CF:39:08:33:4B:10:F7:B9:77:00:E6:68:E5:1F:18:98:2B:80:6D
Certificate issuer:       /CN=4DE454FF1B8BF0DF2AC7FEC8E0AD68782B7D8519
Certificate serial:       2035256CBB1EEC1074EE24817C6AF2A520313C10
Authority key identifier: 4D:E4:54:FF:1B:8B:F0:DF:2A:C7:FE:C8:E0:AD:68:78:2B:7D:85:19
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4DE454FF1B8BF0DF2AC7FEC8E0AD68782B7D8519.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ba3idfAfcLggDMCqw9AGLKJ8fxDjaTnmPoq3xisU33Us/1/3139302e3131312e3131302e302f32332d3233203d3e20323730343137.roa
Signing time:             Tue 13 Aug 2024 18:20:51 +0000
ROA not before:           Tue 13 Aug 2024 18:15:51 +0000
ROA not after:            Tue 12 Aug 2025 18:20:51 +0000
asID:                     270417
IP address blocks:        190.111.110.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ba3idfAfcLggDMCqw9AGLKJ8fxDjaTnmPoq3xisU33Us/1/4DE454FF1B8BF0DF2AC7FEC8E0AD68782B7D8519.crl
                          rsync://rpki-repo.registro.br/repo/Ba3idfAfcLggDMCqw9AGLKJ8fxDjaTnmPoq3xisU33Us/1/4DE454FF1B8BF0DF2AC7FEC8E0AD68782B7D8519.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4DE454FF1B8BF0DF2AC7FEC8E0AD68782B7D8519.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 17:36:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:35:25:6c:bb:1e:ec:10:74:ee:24:81:7c:6a:f2:a5:20:31:3c:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4DE454FF1B8BF0DF2AC7FEC8E0AD68782B7D8519
        Validity
            Not Before: Aug 13 18:15:51 2024 GMT
            Not After : Aug 12 18:20:51 2025 GMT
        Subject: CN=47CF3908334B10F7B97700E668E51F18982B806D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:51:34:43:86:12:9c:52:bc:0b:87:b4:52:b2:
                    fe:86:72:72:51:69:bf:24:b2:60:83:fa:de:6b:65:
                    32:74:7a:cb:c6:1a:c0:2b:ba:b4:94:9d:cf:a0:3f:
                    8c:d3:81:f8:7c:95:12:d6:5d:97:f7:dc:aa:88:fe:
                    89:90:68:2e:e4:3a:3a:17:c5:4e:89:35:d6:8b:d2:
                    37:43:dd:89:0f:18:be:ab:65:3c:f3:ee:1c:e6:a3:
                    f1:0a:be:94:09:6d:47:59:41:3c:9c:62:c0:27:f5:
                    14:d6:e9:7b:eb:ad:26:be:f0:f8:ee:f4:71:a5:24:
                    7f:b4:37:62:d1:ef:9b:30:69:54:bf:f1:a1:1b:9b:
                    97:b3:7b:f9:5e:a9:0b:b0:e5:b3:e1:84:72:30:96:
                    0a:8a:47:b5:b3:8f:42:67:0c:7a:45:6e:c0:c4:d7:
                    ed:92:25:4a:f3:76:87:3b:4b:49:27:96:f0:7f:8a:
                    d0:6f:d7:c9:7b:eb:2f:59:ab:47:50:56:72:e0:1e:
                    1e:a9:8b:06:5e:04:10:0d:8a:f8:96:1d:71:0c:ff:
                    9f:b7:b7:a3:72:6f:2b:4b:82:05:f6:58:49:14:c7:
                    67:28:c0:a0:7d:de:5c:6a:c8:b7:f1:ae:4f:81:59:
                    fe:55:bb:5a:2d:33:99:fc:67:d3:c5:45:bf:9e:17:
                    b6:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:CF:39:08:33:4B:10:F7:B9:77:00:E6:68:E5:1F:18:98:2B:80:6D
            X509v3 Authority Key Identifier:
                keyid:4D:E4:54:FF:1B:8B:F0:DF:2A:C7:FE:C8:E0:AD:68:78:2B:7D:85:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ba3idfAfcLggDMCqw9AGLKJ8fxDjaTnmPoq3xisU33Us/1/4DE454FF1B8BF0DF2AC7FEC8E0AD68782B7D8519.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4DE454FF1B8BF0DF2AC7FEC8E0AD68782B7D8519.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ba3idfAfcLggDMCqw9AGLKJ8fxDjaTnmPoq3xisU33Us/1/3139302e3131312e3131302e302f32332d3233203d3e20323730343137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.111.110.0/23

    Signature Algorithm: sha256WithRSAEncryption
         71:f5:b0:3e:cb:a0:da:d8:5f:bd:8b:cc:85:47:c9:b7:c9:70:
         3f:ee:b9:06:55:cf:76:8e:f8:22:88:70:88:fa:df:87:55:5c:
         a9:72:32:14:15:39:6a:78:e9:c8:42:ad:b3:db:81:61:30:69:
         9b:db:6e:df:cf:7d:66:7b:b8:0c:58:dd:f8:7b:d0:b9:82:d0:
         02:01:20:ed:f6:65:e6:71:f0:4e:0d:40:32:6e:bd:35:75:32:
         58:1e:13:3d:75:22:98:c6:af:77:a1:d7:98:9c:47:ab:bc:1d:
         24:3b:57:60:f9:30:62:9f:c2:1f:b0:d5:90:3a:ea:4a:a2:25:
         0f:11:42:17:f1:5b:1a:2a:96:f3:e3:6d:90:84:ba:9e:2e:22:
         46:5d:db:c0:d3:13:11:3a:ca:d0:1d:26:00:b7:24:ad:a6:76:
         61:49:15:db:b7:da:4b:45:30:c2:b5:37:0e:a0:31:7a:d7:51:
         71:85:19:b3:bd:f9:ff:8d:3e:34:b5:42:10:f8:d8:eb:c7:34:
         5f:47:8c:80:e3:c2:60:24:8a:17:53:ef:6f:b1:0d:2a:88:57:
         d2:f3:75:ae:f0:eb:29:fa:c2:fc:45:ed:8e:27:79:f5:7c:41:
         e2:d6:6a:69:01:1e:8e:b4:0d:5d:a8:71:f8:a6:de:01:86:c2:
         3a:65:dc:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 17:50:28 2024 by rpki-client on console-fra.rpki-client.org