Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DWRkNyV6kLLcFax9mtQQX9LyT8iQuEZZYAhwDZZD6uPm/1/3139302e3131312e3132382e302f32342d3234203d3e20323730333832.roa
File:                     3139302e3131312e3132382e302f32342d3234203d3e20323730333832.roa (raw, json)
Hash identifier:          ZeTnFFbpkkwa43kq761n2GAAZNpc1aBmU8OXXU87dMU=
Subject key identifier:   F2:49:32:18:B1:27:0D:63:83:5D:22:69:F6:39:05:2E:1F:3C:04:B7
Certificate issuer:       /CN=B1741A97BC3381123971E501CF06704DBCD89710
Certificate serial:       4FCABA6BD66B9A46E4E10CAA3C4A9BC638649760
Authority key identifier: B1:74:1A:97:BC:33:81:12:39:71:E5:01:CF:06:70:4D:BC:D8:97:10
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B1741A97BC3381123971E501CF06704DBCD89710.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DWRkNyV6kLLcFax9mtQQX9LyT8iQuEZZYAhwDZZD6uPm/1/3139302e3131312e3132382e302f32342d3234203d3e20323730333832.roa
Signing time:             Thu 04 Apr 2024 17:02:04 +0000
ROA not before:           Thu 04 Apr 2024 16:57:04 +0000
ROA not after:            Thu 03 Apr 2025 17:02:04 +0000
asID:                     270382
IP address blocks:        190.111.128.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DWRkNyV6kLLcFax9mtQQX9LyT8iQuEZZYAhwDZZD6uPm/1/B1741A97BC3381123971E501CF06704DBCD89710.crl
                          rsync://rpki-repo.registro.br/repo/DWRkNyV6kLLcFax9mtQQX9LyT8iQuEZZYAhwDZZD6uPm/1/B1741A97BC3381123971E501CF06704DBCD89710.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B1741A97BC3381123971E501CF06704DBCD89710.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 06:14:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:ca:ba:6b:d6:6b:9a:46:e4:e1:0c:aa:3c:4a:9b:c6:38:64:97:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B1741A97BC3381123971E501CF06704DBCD89710
        Validity
            Not Before: Apr  4 16:57:04 2024 GMT
            Not After : Apr  3 17:02:04 2025 GMT
        Subject: CN=F2493218B1270D63835D2269F639052E1F3C04B7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:34:f2:77:8e:0d:c2:d7:c2:9e:01:11:7b:9f:
                    13:2d:cb:d2:d9:2a:26:dc:78:e2:e2:6f:fd:f8:ca:
                    8a:b6:cd:c3:60:a4:aa:0b:ec:3f:b3:e2:ea:b0:68:
                    a7:77:7d:e6:a9:91:6c:90:72:20:87:b1:e3:85:e8:
                    5e:e0:40:27:70:0c:45:48:e3:a1:78:48:d7:bd:c8:
                    e3:d6:7e:fa:55:70:c7:14:9e:92:94:01:27:b0:21:
                    47:3b:1e:cd:6c:72:3f:5e:40:98:18:0b:c3:0c:fa:
                    e8:e8:b0:f0:15:20:eb:c8:0e:99:3a:fe:3e:ed:a4:
                    41:17:dd:63:a2:c9:b5:0a:ad:9e:c4:c1:ea:44:84:
                    a4:1f:b6:61:92:7a:62:1c:4e:bb:49:15:2a:fb:77:
                    74:6c:b8:9c:a4:b5:8c:83:ef:45:be:a0:af:1b:f5:
                    a8:cd:f2:95:d0:ed:00:71:e9:52:a1:90:43:94:4e:
                    2f:67:dc:79:4e:75:81:d4:45:77:f2:c3:98:58:77:
                    db:f5:bb:d0:a4:d7:7e:ff:30:66:14:23:0b:a7:29:
                    1c:d5:2c:a3:19:46:0f:b0:e8:36:a9:ff:9b:43:47:
                    1f:a6:34:64:3c:1f:ca:ed:e1:2a:a0:0b:09:4a:7d:
                    af:cb:e9:d6:76:7c:82:de:c2:7a:90:69:09:74:86:
                    26:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:49:32:18:B1:27:0D:63:83:5D:22:69:F6:39:05:2E:1F:3C:04:B7
            X509v3 Authority Key Identifier:
                keyid:B1:74:1A:97:BC:33:81:12:39:71:E5:01:CF:06:70:4D:BC:D8:97:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DWRkNyV6kLLcFax9mtQQX9LyT8iQuEZZYAhwDZZD6uPm/1/B1741A97BC3381123971E501CF06704DBCD89710.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B1741A97BC3381123971E501CF06704DBCD89710.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DWRkNyV6kLLcFax9mtQQX9LyT8iQuEZZYAhwDZZD6uPm/1/3139302e3131312e3132382e302f32342d3234203d3e20323730333832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.111.128.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0a:2c:f3:6a:01:ed:46:bb:94:4c:60:56:ec:d6:98:b8:e4:8d:
         54:7b:26:b6:3f:bf:37:ef:e1:fa:28:2e:e0:36:59:43:37:9e:
         88:4e:8f:c2:86:48:36:18:af:6c:3e:de:76:64:a0:d4:56:7b:
         e2:cf:67:3f:47:84:db:9e:21:51:12:91:14:0f:a8:44:c1:e9:
         f4:7f:ad:12:88:0d:6f:6e:d6:49:7d:25:2c:40:59:5b:42:f6:
         bc:8c:75:8d:6e:17:b6:df:10:a1:72:ac:c0:40:69:0a:b9:39:
         21:16:40:a6:ca:4b:17:a5:82:87:d3:84:08:3f:94:54:a8:14:
         56:79:43:17:23:eb:47:4d:ca:77:fe:60:ef:53:b6:da:86:e1:
         d0:98:89:e1:ce:43:af:c6:b6:ec:ad:f8:87:53:38:e5:3d:fc:
         0a:85:f3:5c:96:11:d0:8c:d7:2e:e9:30:81:ff:94:ea:9c:c9:
         2c:ae:cb:37:0e:30:69:a5:4d:e4:a3:95:cc:79:b2:46:39:a9:
         fc:4a:54:09:2e:1d:8f:df:f9:a7:f9:61:2a:84:eb:af:b8:9a:
         65:4a:68:ff:8b:3e:b3:f0:ba:0d:c7:4b:d6:1a:11:db:9c:8a:
         89:e6:ef:e7:c8:7e:f3:ad:f0:f2:29:ec:14:7a:b5:d8:1e:fb:
         28:63:24:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 05:01:03 2024 by rpki-client on console-fra.rpki-client.org