Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DWRkNyV6kLLcFax9mtQQX9LyT8iQuEZZYAhwDZZD6uPm/1/3139302e3131312e3132382e302f32332d3233203d3e20323730333832.roa
File:                     3139302e3131312e3132382e302f32332d3233203d3e20323730333832.roa (raw, json)
Hash identifier:          dwaD504PgcWD5aWJsF2OTpyesNrb85IbiBhZlwOG2Mc=
Subject key identifier:   2C:CA:CC:5A:F2:23:97:33:BE:D3:60:8A:24:26:1C:5D:19:80:66:F7
Certificate issuer:       /CN=B1741A97BC3381123971E501CF06704DBCD89710
Certificate serial:       655BD4349D26588620AB77AE94BBB20B6620E3E2
Authority key identifier: B1:74:1A:97:BC:33:81:12:39:71:E5:01:CF:06:70:4D:BC:D8:97:10
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B1741A97BC3381123971E501CF06704DBCD89710.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DWRkNyV6kLLcFax9mtQQX9LyT8iQuEZZYAhwDZZD6uPm/1/3139302e3131312e3132382e302f32332d3233203d3e20323730333832.roa
Signing time:             Thu 04 Apr 2024 17:02:04 +0000
ROA not before:           Thu 04 Apr 2024 16:57:04 +0000
ROA not after:            Thu 03 Apr 2025 17:02:04 +0000
asID:                     270382
IP address blocks:        190.111.128.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DWRkNyV6kLLcFax9mtQQX9LyT8iQuEZZYAhwDZZD6uPm/1/B1741A97BC3381123971E501CF06704DBCD89710.crl
                          rsync://rpki-repo.registro.br/repo/DWRkNyV6kLLcFax9mtQQX9LyT8iQuEZZYAhwDZZD6uPm/1/B1741A97BC3381123971E501CF06704DBCD89710.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B1741A97BC3381123971E501CF06704DBCD89710.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 30 Jun 2024 03:37:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:5b:d4:34:9d:26:58:86:20:ab:77:ae:94:bb:b2:0b:66:20:e3:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B1741A97BC3381123971E501CF06704DBCD89710
        Validity
            Not Before: Apr  4 16:57:04 2024 GMT
            Not After : Apr  3 17:02:04 2025 GMT
        Subject: CN=2CCACC5AF2239733BED3608A24261C5D198066F7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:0b:76:1c:07:52:71:e6:95:c6:97:d9:51:35:
                    b5:de:06:21:46:d9:8e:bc:51:ef:f8:30:4d:9f:23:
                    3d:28:cf:55:a4:89:ae:9a:48:1c:0c:cb:2a:34:1a:
                    39:c8:68:8d:b3:77:54:d1:f6:16:27:31:73:35:e4:
                    aa:b6:53:e0:c9:5f:3f:6d:68:59:d6:4b:79:ff:96:
                    e9:03:aa:8a:15:ad:a9:61:bc:14:7f:be:c0:06:18:
                    2b:65:c3:28:a1:7a:1e:06:10:cb:d5:6f:d0:eb:97:
                    33:80:c5:9f:72:f9:84:46:90:9b:37:0c:be:ef:7b:
                    5d:84:a6:86:dd:92:59:7e:80:cf:39:8c:34:51:04:
                    ac:10:1c:49:79:e1:97:2f:7c:77:e0:8e:e4:99:ad:
                    37:7c:d7:a5:c5:41:ee:e8:c5:92:32:bd:f6:34:0f:
                    8c:74:04:0b:ad:fe:6d:be:98:c1:8f:ae:80:f7:06:
                    c3:2b:9e:e9:60:94:f1:32:c6:82:71:97:8c:e1:20:
                    2f:93:62:26:ac:ac:a3:79:f5:f3:fb:73:35:10:76:
                    d2:73:89:be:b9:60:c5:d9:75:9a:b3:38:0d:56:c2:
                    42:27:2d:9b:dc:b5:cc:7d:55:02:4c:de:cf:8d:79:
                    73:af:e3:39:f4:f0:a1:d8:8c:2f:21:54:b5:ba:05:
                    69:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:CA:CC:5A:F2:23:97:33:BE:D3:60:8A:24:26:1C:5D:19:80:66:F7
            X509v3 Authority Key Identifier:
                keyid:B1:74:1A:97:BC:33:81:12:39:71:E5:01:CF:06:70:4D:BC:D8:97:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DWRkNyV6kLLcFax9mtQQX9LyT8iQuEZZYAhwDZZD6uPm/1/B1741A97BC3381123971E501CF06704DBCD89710.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B1741A97BC3381123971E501CF06704DBCD89710.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DWRkNyV6kLLcFax9mtQQX9LyT8iQuEZZYAhwDZZD6uPm/1/3139302e3131312e3132382e302f32332d3233203d3e20323730333832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.111.128.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b8:15:60:22:b0:c1:bf:38:93:9b:60:50:80:d8:88:82:e6:c1:
         93:3a:e5:4a:74:c0:ec:aa:97:f1:20:95:6e:52:80:ae:ee:72:
         ff:fc:a3:dc:af:a2:71:ab:02:bc:01:cb:00:fc:f6:52:be:df:
         9b:5f:5b:2e:e5:0c:f3:7a:86:ad:19:1e:a6:e1:37:d7:5d:2e:
         e3:24:a5:c1:0d:35:1c:74:9f:50:44:20:68:b7:73:46:4d:a7:
         95:8d:ea:c0:25:b9:a6:5a:8a:eb:a1:da:32:cf:c6:bc:51:4f:
         9d:6d:72:8a:9e:41:0c:77:cf:02:88:77:7e:59:46:fd:53:f2:
         0e:c3:48:ec:21:d3:e6:3f:2a:35:3a:df:82:25:79:bf:e8:1f:
         c6:17:09:63:27:01:77:9d:5e:8b:cc:0b:93:8d:37:c1:66:c1:
         4c:28:ce:fb:7f:65:d8:0a:a3:01:77:68:69:f1:ea:e4:db:e5:
         66:ac:83:75:e1:73:4c:03:2c:c0:db:06:b9:df:53:1d:c5:f7:
         ca:e0:c4:ef:12:6a:1d:7e:ae:03:61:ac:35:70:eb:72:8f:9f:
         91:c9:fb:c4:5a:d2:d1:47:df:91:b4:af:d4:d2:ed:56:24:2c:
         c7:f8:5c:c5:27:cf:5f:cb:fc:61:e7:20:d3:1f:ff:9c:72:8d:
         ce:87:b9:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 29 03:15:02 2024 by rpki-client on console-fra.rpki-client.org