Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C514coYEexrxv39oTKuNiJmKkE1Mhqyja9Ns3stH3x3C/1/3139302e38392e3235322e302f32322d3234203d3e20323730343134.roa
File:                     3139302e38392e3235322e302f32322d3234203d3e20323730343134.roa (raw, json)
Hash identifier:          cpfGKojxVOinFK4iai8xILKMsC/7T+CX5eCdPbiFfBM=
Subject key identifier:   25:BD:B1:02:B9:0B:E8:D8:37:E1:28:F7:25:C0:F4:88:8A:66:FD:A4
Certificate issuer:       /CN=C95BCD8741F1697313471305FEAAAF3DA02061D6
Certificate serial:       6A4CE0F689274143C7DC346F5222E9F8FD6B67F7
Authority key identifier: C9:5B:CD:87:41:F1:69:73:13:47:13:05:FE:AA:AF:3D:A0:20:61:D6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C95BCD8741F1697313471305FEAAAF3DA02061D6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C514coYEexrxv39oTKuNiJmKkE1Mhqyja9Ns3stH3x3C/1/3139302e38392e3235322e302f32322d3234203d3e20323730343134.roa
Signing time:             Thu 04 Apr 2024 16:11:19 +0000
ROA not before:           Thu 04 Apr 2024 16:06:19 +0000
ROA not after:            Thu 03 Apr 2025 16:11:19 +0000
asID:                     270414
IP address blocks:        190.89.252.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/C514coYEexrxv39oTKuNiJmKkE1Mhqyja9Ns3stH3x3C/1/C95BCD8741F1697313471305FEAAAF3DA02061D6.crl
                          rsync://rpki-repo.registro.br/repo/C514coYEexrxv39oTKuNiJmKkE1Mhqyja9Ns3stH3x3C/1/C95BCD8741F1697313471305FEAAAF3DA02061D6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C95BCD8741F1697313471305FEAAAF3DA02061D6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 14:53:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:4c:e0:f6:89:27:41:43:c7:dc:34:6f:52:22:e9:f8:fd:6b:67:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C95BCD8741F1697313471305FEAAAF3DA02061D6
        Validity
            Not Before: Apr  4 16:06:19 2024 GMT
            Not After : Apr  3 16:11:19 2025 GMT
        Subject: CN=25BDB102B90BE8D837E128F725C0F4888A66FDA4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:ad:36:aa:7f:78:c7:e7:5a:b1:99:d1:f9:dd:
                    c3:93:9e:0f:67:55:21:df:0f:1d:64:d3:ae:c7:fd:
                    cd:7f:d6:0b:f3:3c:60:3e:6e:86:05:20:d0:f7:0c:
                    ce:c1:56:82:a4:f9:f8:59:4b:31:5f:0e:58:db:05:
                    2b:07:bd:d6:53:72:f8:cf:e3:5a:9c:4f:6e:14:45:
                    0e:dc:3e:8e:cb:de:f5:49:f0:07:df:d0:c1:86:57:
                    43:50:f8:00:00:6f:7b:c6:86:5d:2c:bf:ff:30:83:
                    bf:97:3c:28:b5:ef:bb:bb:e8:20:15:8f:e7:0e:21:
                    84:49:4c:21:1f:11:62:01:fe:b0:03:75:08:cf:e4:
                    19:20:82:18:c9:f8:03:3a:0a:cb:73:f3:88:5d:de:
                    90:70:fe:8c:c8:36:14:20:69:17:68:2f:ea:bf:e1:
                    23:17:a9:34:bb:15:41:57:65:52:c4:05:f1:31:7c:
                    ef:db:8b:fb:09:15:bf:15:d8:f1:54:24:23:61:5f:
                    43:45:c3:40:f2:c4:fb:fa:7f:43:18:6e:ee:78:ae:
                    44:2e:e0:be:aa:4a:a0:0b:87:e4:24:c9:58:b1:fe:
                    15:ad:b2:d5:79:ce:f1:8e:e5:0e:89:bf:8f:ce:2c:
                    2d:8d:55:a1:ff:33:4f:4f:03:5c:16:4b:bd:f6:57:
                    fc:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:BD:B1:02:B9:0B:E8:D8:37:E1:28:F7:25:C0:F4:88:8A:66:FD:A4
            X509v3 Authority Key Identifier:
                keyid:C9:5B:CD:87:41:F1:69:73:13:47:13:05:FE:AA:AF:3D:A0:20:61:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C514coYEexrxv39oTKuNiJmKkE1Mhqyja9Ns3stH3x3C/1/C95BCD8741F1697313471305FEAAAF3DA02061D6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C95BCD8741F1697313471305FEAAAF3DA02061D6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C514coYEexrxv39oTKuNiJmKkE1Mhqyja9Ns3stH3x3C/1/3139302e38392e3235322e302f32322d3234203d3e20323730343134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.89.252.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5f:65:44:aa:bd:31:de:16:cf:04:8d:25:42:b0:4c:bf:bc:2e:
         6a:2d:d5:34:68:9d:d6:6e:54:c2:a4:03:37:fa:c2:21:b3:21:
         4b:21:f7:74:8f:89:07:38:57:09:cb:e3:39:b8:74:71:8b:57:
         66:10:16:9f:49:61:51:49:82:cc:dc:b9:0c:2d:36:fa:ca:d4:
         2c:98:30:6a:0d:e2:9d:07:ca:09:b5:86:92:17:a9:03:55:e3:
         e9:47:00:a5:85:28:a8:1a:aa:99:1a:4f:3c:a8:13:66:e3:bf:
         53:cd:ad:bc:c8:da:7f:d9:1c:f7:ba:12:54:2a:ef:e2:91:24:
         bb:00:dd:8a:20:c6:c5:88:b8:06:60:89:67:5b:0d:c0:0e:47:
         5a:f2:bb:63:1c:34:69:ec:13:4c:3b:68:14:07:e6:b9:21:77:
         67:a5:37:93:dc:69:e7:20:6f:1b:39:2d:e0:63:bf:10:dc:16:
         9e:bd:2c:98:a1:42:a7:4c:a5:d4:c9:c4:b4:33:b6:be:23:b9:
         8d:12:27:30:3a:9f:99:fe:db:5b:46:ca:9d:ed:33:ee:dc:93:
         6b:83:3b:ee:ea:39:a8:cb:40:e6:fd:8a:97:58:4d:5b:68:18:
         e6:ba:1e:73:a0:3f:93:be:3d:f6:56:3e:ac:95:d3:c7:b1:29:
         79:8b:8c:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 15:22:41 2024 by rpki-client on console-fra.rpki-client.org