Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C5dtmGrGuHeSd3Doj2nctxHPfNarwTqDRjgX8E5Zozra/1/3139302e38332e312e302f32342d3234203d3e20323730333139.roa
File:                     3139302e38332e312e302f32342d3234203d3e20323730333139.roa (raw, json)
Hash identifier:          OnJzi3k+0tsxsxuqW8e7NU2flDZx8LEHHW4xrRib2do=
Subject key identifier:   24:68:67:B3:A9:F4:D0:1A:88:4A:8A:C6:B3:F4:33:A8:2D:6C:8C:A1
Certificate issuer:       /CN=478BC91388C024F294F7E5E2E54CFF21D18A626D
Certificate serial:       0CAF3DE983E19C8ACAC61B8D3C485688E7F4E3A3
Authority key identifier: 47:8B:C9:13:88:C0:24:F2:94:F7:E5:E2:E5:4C:FF:21:D1:8A:62:6D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/478BC91388C024F294F7E5E2E54CFF21D18A626D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C5dtmGrGuHeSd3Doj2nctxHPfNarwTqDRjgX8E5Zozra/1/3139302e38332e312e302f32342d3234203d3e20323730333139.roa
Signing time:             Wed 03 Apr 2024 20:38:48 +0000
ROA not before:           Wed 03 Apr 2024 20:33:48 +0000
ROA not after:            Wed 02 Apr 2025 20:38:48 +0000
asID:                     270319
IP address blocks:        190.83.1.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/C5dtmGrGuHeSd3Doj2nctxHPfNarwTqDRjgX8E5Zozra/1/478BC91388C024F294F7E5E2E54CFF21D18A626D.crl
                          rsync://rpki-repo.registro.br/repo/C5dtmGrGuHeSd3Doj2nctxHPfNarwTqDRjgX8E5Zozra/1/478BC91388C024F294F7E5E2E54CFF21D18A626D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/478BC91388C024F294F7E5E2E54CFF21D18A626D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 14:32:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:af:3d:e9:83:e1:9c:8a:ca:c6:1b:8d:3c:48:56:88:e7:f4:e3:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=478BC91388C024F294F7E5E2E54CFF21D18A626D
        Validity
            Not Before: Apr  3 20:33:48 2024 GMT
            Not After : Apr  2 20:38:48 2025 GMT
        Subject: CN=246867B3A9F4D01A884A8AC6B3F433A82D6C8CA1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:f8:67:b6:f4:bb:f0:3a:15:86:b6:6e:5c:d6:
                    11:c3:80:48:53:83:54:3d:d2:b1:e2:b1:2c:74:4f:
                    4b:19:8f:6d:e5:6c:96:45:58:4a:a4:10:c4:c2:0b:
                    d4:f9:63:09:66:33:cf:09:39:c0:94:fd:44:13:8a:
                    82:b9:5e:d8:c6:5a:0f:50:1a:4e:56:30:ab:eb:77:
                    bc:24:49:55:da:69:3e:be:ba:af:d8:e5:1a:86:0e:
                    1b:33:d1:0d:6d:82:2e:2a:4b:6b:8c:80:56:03:52:
                    fd:4e:fd:6e:8d:3f:9b:a0:79:82:51:0e:86:50:bc:
                    b1:3f:3b:b7:55:27:82:9b:c7:c4:ee:6b:bc:c2:7e:
                    da:02:ec:7e:d6:f4:61:5b:85:cd:89:09:dc:51:be:
                    0e:e8:c1:41:0a:f7:42:99:38:f8:09:4e:56:81:01:
                    3b:30:46:99:07:13:45:0f:f9:9c:6a:c9:42:88:61:
                    f8:78:d2:49:1a:48:e7:2b:68:64:07:e0:e0:80:ec:
                    d3:1a:79:ce:9a:1f:26:c0:77:50:27:17:6f:2d:1c:
                    9d:d2:31:37:aa:18:f1:0a:b2:64:e4:cc:d1:16:e0:
                    78:f5:eb:9b:99:53:a4:4e:ac:a8:06:b8:08:99:d1:
                    78:b0:9b:a3:03:d6:23:84:49:8a:6c:7b:e2:58:13:
                    73:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:68:67:B3:A9:F4:D0:1A:88:4A:8A:C6:B3:F4:33:A8:2D:6C:8C:A1
            X509v3 Authority Key Identifier:
                keyid:47:8B:C9:13:88:C0:24:F2:94:F7:E5:E2:E5:4C:FF:21:D1:8A:62:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C5dtmGrGuHeSd3Doj2nctxHPfNarwTqDRjgX8E5Zozra/1/478BC91388C024F294F7E5E2E54CFF21D18A626D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/478BC91388C024F294F7E5E2E54CFF21D18A626D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C5dtmGrGuHeSd3Doj2nctxHPfNarwTqDRjgX8E5Zozra/1/3139302e38332e312e302f32342d3234203d3e20323730333139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.83.1.0/24

    Signature Algorithm: sha256WithRSAEncryption
         86:76:71:9d:b1:e2:25:d7:99:b0:65:14:73:97:9a:64:c8:82:
         a7:0d:99:47:65:9a:f2:02:8c:07:68:f6:0b:34:3f:a7:fa:4c:
         44:23:4e:82:5c:73:f5:cd:08:7a:1f:43:e7:9a:9e:b8:b0:1d:
         20:10:58:b9:f1:fa:77:49:29:d6:04:f8:a4:fb:c0:c0:0d:02:
         6f:05:15:51:27:f8:a2:c6:ad:57:83:76:0a:14:81:72:19:4b:
         80:30:07:bc:a7:dd:a9:67:a7:ba:ee:24:ce:59:29:b9:bf:8a:
         59:57:4f:fa:34:9c:7e:dc:b1:b5:7b:a4:d2:11:93:71:bb:35:
         84:26:01:7e:d8:32:5c:28:f6:17:c8:57:0f:54:ef:97:af:42:
         a7:15:ab:a1:bc:9d:f4:c2:48:62:c5:00:ff:8f:d4:79:67:6e:
         41:44:f5:b1:3a:0b:6f:61:b7:1e:40:14:fd:16:e6:63:43:dd:
         70:87:5f:c2:5c:8a:5b:a6:38:2a:48:ec:fd:23:77:74:f2:f7:
         78:00:41:49:14:0a:c4:ee:84:c3:76:40:b9:d9:20:cb:09:b6:
         2a:d9:bc:c8:84:8c:29:70:76:44:63:01:a5:0e:c6:4a:61:6f:
         5b:8b:3c:51:99:b8:60:54:1c:ec:1a:db:e7:ad:19:ef:e5:9c:
         29:11:0e:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 15:22:41 2024 by rpki-client on console-fra.rpki-client.org