Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C5dtmGrGuHeSd3Doj2nctxHPfNarwTqDRjgX8E5Zozra/1/3139302e38332e302e302f32342d3234203d3e20323730333139.roa
File:                     3139302e38332e302e302f32342d3234203d3e20323730333139.roa (raw, json)
Hash identifier:          575sxfdCFIj87IHHGahoaAcn1Ya9k5jzPxhbp6YegG8=
Subject key identifier:   2F:D4:77:C1:E9:22:A8:9D:BE:30:F0:F4:DC:7E:FA:39:B3:6D:EB:A3
Certificate issuer:       /CN=478BC91388C024F294F7E5E2E54CFF21D18A626D
Certificate serial:       12CC1009111C349539AF1A1AD8C4AE38D07E6277
Authority key identifier: 47:8B:C9:13:88:C0:24:F2:94:F7:E5:E2:E5:4C:FF:21:D1:8A:62:6D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/478BC91388C024F294F7E5E2E54CFF21D18A626D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C5dtmGrGuHeSd3Doj2nctxHPfNarwTqDRjgX8E5Zozra/1/3139302e38332e302e302f32342d3234203d3e20323730333139.roa
Signing time:             Wed 03 Apr 2024 20:38:49 +0000
ROA not before:           Wed 03 Apr 2024 20:33:49 +0000
ROA not after:            Wed 02 Apr 2025 20:38:49 +0000
asID:                     270319
IP address blocks:        190.83.0.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/C5dtmGrGuHeSd3Doj2nctxHPfNarwTqDRjgX8E5Zozra/1/478BC91388C024F294F7E5E2E54CFF21D18A626D.crl
                          rsync://rpki-repo.registro.br/repo/C5dtmGrGuHeSd3Doj2nctxHPfNarwTqDRjgX8E5Zozra/1/478BC91388C024F294F7E5E2E54CFF21D18A626D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/478BC91388C024F294F7E5E2E54CFF21D18A626D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 14:32:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:cc:10:09:11:1c:34:95:39:af:1a:1a:d8:c4:ae:38:d0:7e:62:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=478BC91388C024F294F7E5E2E54CFF21D18A626D
        Validity
            Not Before: Apr  3 20:33:49 2024 GMT
            Not After : Apr  2 20:38:49 2025 GMT
        Subject: CN=2FD477C1E922A89DBE30F0F4DC7EFA39B36DEBA3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:85:3c:c6:00:18:3b:20:73:0d:38:3c:8b:83:
                    09:e6:54:bb:a6:2b:d1:e1:19:e0:c5:1f:33:9c:f9:
                    a4:84:cb:e9:cd:7c:04:38:81:cc:ba:2d:23:47:20:
                    d7:d4:31:fb:ba:8d:02:59:3c:2d:40:8e:ba:bf:f0:
                    23:5c:9a:62:fe:60:d5:ca:fc:64:b4:9c:a9:3b:8f:
                    b0:90:4b:d9:8f:1f:20:d2:13:be:45:d1:2a:83:d3:
                    4d:2f:71:a2:37:ae:9a:ae:7e:71:ee:d8:d7:d6:9e:
                    34:b0:25:bb:34:3c:5f:71:a3:c6:ff:cc:9a:25:1b:
                    52:74:7c:8f:61:19:46:8c:43:f4:00:dc:6a:94:a2:
                    d6:39:ef:53:59:c9:ad:7d:ea:9f:ae:40:10:92:8f:
                    7d:a5:3c:4b:cf:d7:fe:30:e4:57:39:18:fe:5e:31:
                    e4:08:a1:7b:59:d9:6e:5c:7d:c0:bd:5a:cd:2b:0c:
                    de:e2:b8:e9:c7:c1:92:85:c3:f5:e8:37:57:4a:9e:
                    46:96:de:7b:bf:e3:71:9a:0e:f0:14:4d:39:ff:41:
                    4d:9f:ed:f2:00:a8:5a:76:be:d1:58:6e:ca:c8:20:
                    f0:a1:17:8b:d4:91:71:3d:4d:07:f0:43:73:b5:b0:
                    4f:52:8f:ad:ad:24:e5:24:29:e9:4a:c4:e1:e1:39:
                    e3:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:D4:77:C1:E9:22:A8:9D:BE:30:F0:F4:DC:7E:FA:39:B3:6D:EB:A3
            X509v3 Authority Key Identifier:
                keyid:47:8B:C9:13:88:C0:24:F2:94:F7:E5:E2:E5:4C:FF:21:D1:8A:62:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C5dtmGrGuHeSd3Doj2nctxHPfNarwTqDRjgX8E5Zozra/1/478BC91388C024F294F7E5E2E54CFF21D18A626D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/478BC91388C024F294F7E5E2E54CFF21D18A626D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C5dtmGrGuHeSd3Doj2nctxHPfNarwTqDRjgX8E5Zozra/1/3139302e38332e302e302f32342d3234203d3e20323730333139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.83.0.0/24

    Signature Algorithm: sha256WithRSAEncryption
         52:2c:c6:87:05:12:ea:ff:38:ba:ef:0d:60:8c:9c:8e:87:d6:
         42:95:d2:86:50:b2:40:80:8c:61:7e:22:e4:8d:dd:f8:3c:94:
         91:9f:6d:9c:cf:d5:a9:57:6a:52:ed:b4:8f:e6:05:d3:e8:c9:
         9f:9a:c2:a2:41:c2:54:d4:9f:05:7b:8a:2f:ef:24:fb:23:c4:
         d1:9d:7d:d7:10:ab:2b:2e:43:e2:78:e4:6b:8e:b0:6c:34:c9:
         f5:eb:8d:fe:bb:12:c8:bd:a0:07:5c:8e:e8:b5:1f:1f:c6:6c:
         9b:af:2b:a2:5b:36:e8:2a:d1:b6:56:1f:c8:47:26:0f:ae:e6:
         06:46:2d:75:64:32:dc:d2:7e:54:94:85:0f:d0:ad:4e:59:c0:
         5f:56:f7:f7:37:63:f6:26:7a:e2:fa:98:fb:e6:25:dc:11:f2:
         86:fa:bf:c6:a1:0e:66:7a:42:87:39:26:d6:e5:2b:99:06:28:
         d0:09:b1:eb:f0:5a:e7:0d:c2:ce:51:ab:8b:e7:6d:28:8d:24:
         5c:ef:94:b8:84:03:ff:7e:83:fa:1d:34:fd:23:8f:2b:a9:39:
         34:c5:b7:82:e8:d6:1f:70:61:a0:24:4d:05:63:d0:c3:e4:40:
         24:c8:ad:cf:36:e9:3c:85:2a:95:60:30:08:46:f7:3f:ce:95:
         12:35:e7:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 14:19:47 2024 by rpki-client on console-ams.rpki-client.org