Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ci2asP92eqLcwrdLEBntbeFepcmJVTx7jUsZJdccZSG/1/3139302e392e3130362e302f32332d3233203d3e20323731363037.roa
File:                     3139302e392e3130362e302f32332d3233203d3e20323731363037.roa (raw, json)
Hash identifier:          LgkkCiFdiXEgieCdL7hdt/XdXoO5ts0Mff4KIibIMOI=
Subject key identifier:   3D:3C:2E:2C:AE:5F:4B:7B:CD:16:EB:C9:26:8E:51:AD:A4:D4:FD:31
Certificate issuer:       /CN=893D95ADA38B2A288C03DAA99290D5110510F8E7
Certificate serial:       2045C661B0771A45D7DD81E95C06DE8C6624884F
Authority key identifier: 89:3D:95:AD:A3:8B:2A:28:8C:03:DA:A9:92:90:D5:11:05:10:F8:E7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/893D95ADA38B2A288C03DAA99290D5110510F8E7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ci2asP92eqLcwrdLEBntbeFepcmJVTx7jUsZJdccZSG/1/3139302e392e3130362e302f32332d3233203d3e20323731363037.roa
Signing time:             Wed 03 Apr 2024 20:23:10 +0000
ROA not before:           Wed 03 Apr 2024 20:18:10 +0000
ROA not after:            Wed 02 Apr 2025 20:23:10 +0000
asID:                     271607
IP address blocks:        190.9.106.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ci2asP92eqLcwrdLEBntbeFepcmJVTx7jUsZJdccZSG/1/893D95ADA38B2A288C03DAA99290D5110510F8E7.crl
                          rsync://rpki-repo.registro.br/repo/Ci2asP92eqLcwrdLEBntbeFepcmJVTx7jUsZJdccZSG/1/893D95ADA38B2A288C03DAA99290D5110510F8E7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/893D95ADA38B2A288C03DAA99290D5110510F8E7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 18:25:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:45:c6:61:b0:77:1a:45:d7:dd:81:e9:5c:06:de:8c:66:24:88:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=893D95ADA38B2A288C03DAA99290D5110510F8E7
        Validity
            Not Before: Apr  3 20:18:10 2024 GMT
            Not After : Apr  2 20:23:10 2025 GMT
        Subject: CN=3D3C2E2CAE5F4B7BCD16EBC9268E51ADA4D4FD31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:19:75:b7:d5:d1:c5:e9:5f:0e:d3:e7:8e:2c:
                    bf:03:a9:79:85:e4:17:81:39:04:39:92:8c:db:d5:
                    3c:e2:ba:b3:4b:55:45:7c:de:76:60:74:c6:e0:ab:
                    cb:ef:60:b8:45:00:17:ce:63:05:00:a8:8d:43:6e:
                    48:68:6e:0f:16:49:96:7c:ae:d8:5c:e8:60:61:ca:
                    ba:ac:7b:83:38:07:d5:0c:05:1c:27:84:fc:f4:2e:
                    cf:ae:ec:36:c3:c4:72:e5:37:44:cd:0b:2c:07:c6:
                    c4:1f:7d:f0:bf:5f:38:77:53:dc:14:ea:f1:b1:70:
                    ea:e9:bf:22:79:3f:fd:89:38:11:88:cc:ac:89:7b:
                    a9:7b:68:4d:d6:f1:50:88:54:53:07:3e:0f:1b:99:
                    58:c3:c9:61:f7:9d:36:eb:87:72:28:13:58:16:52:
                    a2:94:23:61:07:d2:56:4a:2d:ce:87:40:7c:21:98:
                    b6:fe:30:b3:6d:61:83:9c:38:bf:d4:60:b9:6e:70:
                    ba:3d:2a:d1:e2:81:e8:3e:e2:1a:6e:f7:d4:02:00:
                    f0:1f:69:7a:8e:01:66:46:80:c3:76:0e:b0:f6:dc:
                    36:1f:ec:a9:bf:2c:09:f9:e8:58:0f:a8:96:b0:7a:
                    cc:50:ff:2b:c3:f2:46:2a:43:1f:cf:d9:05:ee:c4:
                    ac:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:3C:2E:2C:AE:5F:4B:7B:CD:16:EB:C9:26:8E:51:AD:A4:D4:FD:31
            X509v3 Authority Key Identifier:
                keyid:89:3D:95:AD:A3:8B:2A:28:8C:03:DA:A9:92:90:D5:11:05:10:F8:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ci2asP92eqLcwrdLEBntbeFepcmJVTx7jUsZJdccZSG/1/893D95ADA38B2A288C03DAA99290D5110510F8E7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/893D95ADA38B2A288C03DAA99290D5110510F8E7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ci2asP92eqLcwrdLEBntbeFepcmJVTx7jUsZJdccZSG/1/3139302e392e3130362e302f32332d3233203d3e20323731363037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.9.106.0/23

    Signature Algorithm: sha256WithRSAEncryption
         28:8d:52:6a:43:08:f4:02:1a:af:0f:87:4c:dc:be:af:95:2e:
         27:50:f1:67:be:12:c9:b4:01:94:20:13:fa:da:ed:92:3d:ae:
         61:66:ea:da:4f:6e:bb:24:c8:5a:0e:e8:6a:ca:09:e1:67:ba:
         7a:e4:20:9f:ac:88:18:f2:1b:d8:5c:d1:87:59:fe:24:f4:44:
         e6:14:f8:f7:98:e8:bf:15:1d:fb:e8:fe:6a:ae:ae:e7:c7:0f:
         da:79:c3:14:2f:53:45:d1:99:e6:5d:f3:fd:a0:3d:1b:4c:68:
         1f:06:f3:41:53:48:11:f1:f5:97:a1:dd:78:ef:35:87:64:54:
         52:a9:ed:6e:04:b4:48:92:2a:a1:5b:3e:16:9a:43:c7:84:50:
         ea:31:0c:39:b6:ff:a1:a7:e6:93:a4:f2:71:78:bd:4d:0a:29:
         b8:57:82:09:01:80:83:32:c6:86:da:a0:10:41:bf:48:16:83:
         a1:26:28:14:d8:cc:1b:37:fa:75:64:44:88:cb:96:d4:c6:b9:
         3b:81:2d:92:9d:2c:b5:c7:17:de:0a:23:6f:5d:5d:71:61:0a:
         67:82:59:28:5e:12:8f:97:fe:9f:75:c0:98:bd:dd:63:21:17:
         1d:59:0e:ae:47:61:97:cf:fd:7a:f5:dd:57:93:f7:8d:fd:90:
         57:a4:74:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 17:27:52 2024 by rpki-client on console-fra.rpki-client.org