Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DdPBJF5vS1itxFLQxz99XyuJVAZyaXPzsUE9bHw37a3n/1/3138392e39302e3233352e302f32342d3234203d3e20323636333132.roa
File:                     3138392e39302e3233352e302f32342d3234203d3e20323636333132.roa (raw, json)
Hash identifier:          jMUUt4n/4abfVTIqxbP5/IhQ1uBN2BW8CZMQQsb0U90=
Subject key identifier:   83:BE:A3:B2:DE:31:BC:45:B9:6F:C6:64:62:9E:69:20:15:24:EF:F0
Certificate issuer:       /CN=0A2DC9F591D32599C3AB0561CB8DEF59C396C055
Certificate serial:       1AF726E0888066CE980BBD477CE4A44913A7FD08
Authority key identifier: 0A:2D:C9:F5:91:D3:25:99:C3:AB:05:61:CB:8D:EF:59:C3:96:C0:55
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0A2DC9F591D32599C3AB0561CB8DEF59C396C055.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DdPBJF5vS1itxFLQxz99XyuJVAZyaXPzsUE9bHw37a3n/1/3138392e39302e3233352e302f32342d3234203d3e20323636333132.roa
Signing time:             Wed 16 Oct 2024 03:37:27 +0000
ROA not before:           Wed 16 Oct 2024 03:32:27 +0000
ROA not after:            Wed 15 Oct 2025 03:37:27 +0000
asID:                     266312
IP address blocks:        189.90.235.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DdPBJF5vS1itxFLQxz99XyuJVAZyaXPzsUE9bHw37a3n/1/0A2DC9F591D32599C3AB0561CB8DEF59C396C055.crl
                          rsync://rpki-repo.registro.br/repo/DdPBJF5vS1itxFLQxz99XyuJVAZyaXPzsUE9bHw37a3n/1/0A2DC9F591D32599C3AB0561CB8DEF59C396C055.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0A2DC9F591D32599C3AB0561CB8DEF59C396C055.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 14:26:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:f7:26:e0:88:80:66:ce:98:0b:bd:47:7c:e4:a4:49:13:a7:fd:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0A2DC9F591D32599C3AB0561CB8DEF59C396C055
        Validity
            Not Before: Oct 16 03:32:27 2024 GMT
            Not After : Oct 15 03:37:27 2025 GMT
        Subject: CN=83BEA3B2DE31BC45B96FC664629E69201524EFF0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:f3:8d:a4:2b:68:12:54:d1:2d:2e:2a:75:7a:
                    8c:d2:d1:6b:4b:c5:97:37:a0:8f:65:54:59:75:78:
                    8a:fd:ae:49:5b:7f:a7:c8:c6:34:68:a2:a8:cb:e4:
                    c4:46:bc:c2:75:4e:4d:aa:7f:7d:19:e2:e5:02:3e:
                    20:31:27:ab:eb:31:2c:96:dd:12:c9:18:5d:47:5c:
                    3e:d2:be:28:f2:2b:23:60:cf:e0:f6:d6:7d:c7:2b:
                    b8:d8:4a:45:67:a9:62:ba:d2:7f:65:41:8a:0a:88:
                    3d:9e:12:85:1a:c1:b0:fa:50:5a:8e:46:a4:42:66:
                    d7:ae:79:04:a2:94:f2:29:15:b5:bb:ee:08:3f:e4:
                    19:62:65:c3:b5:c2:b4:5d:b1:fa:7d:b8:76:0c:47:
                    71:cc:fc:f0:4b:01:dd:4c:ef:46:d3:64:d6:af:e2:
                    32:08:9e:83:d1:8d:ae:2d:95:57:1b:07:8b:1d:18:
                    92:9f:56:65:26:fa:d5:f4:97:52:d1:46:52:14:c7:
                    2c:d4:b0:66:2f:84:af:aa:ae:1e:b0:9b:6a:9d:9b:
                    94:d9:2f:85:d8:3c:8c:c8:d4:43:1c:85:2d:24:95:
                    fb:20:6b:21:33:60:09:89:a6:e7:3c:74:c5:bf:9a:
                    9b:c1:0c:fc:c4:22:e3:70:63:8c:d1:5b:01:06:0c:
                    7f:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:BE:A3:B2:DE:31:BC:45:B9:6F:C6:64:62:9E:69:20:15:24:EF:F0
            X509v3 Authority Key Identifier:
                keyid:0A:2D:C9:F5:91:D3:25:99:C3:AB:05:61:CB:8D:EF:59:C3:96:C0:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DdPBJF5vS1itxFLQxz99XyuJVAZyaXPzsUE9bHw37a3n/1/0A2DC9F591D32599C3AB0561CB8DEF59C396C055.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0A2DC9F591D32599C3AB0561CB8DEF59C396C055.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DdPBJF5vS1itxFLQxz99XyuJVAZyaXPzsUE9bHw37a3n/1/3138392e39302e3233352e302f32342d3234203d3e20323636333132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.90.235.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7e:e3:96:bf:1a:1c:ef:4c:26:23:4a:64:0e:71:a5:f9:ae:28:
         af:0f:d9:83:c2:85:06:6f:58:a8:0b:ff:22:8f:f5:e0:1a:50:
         cd:69:8d:ce:2c:1f:16:f2:cd:f0:9f:f5:c4:e4:c4:de:35:f0:
         20:11:01:e6:02:aa:7b:f1:52:06:e4:0a:13:33:d5:4e:db:99:
         3d:08:3c:16:5e:dc:a8:7e:b1:56:7f:e8:3a:02:33:c9:b9:4e:
         5f:a1:0d:7e:28:41:d4:0f:be:f5:c2:4f:7e:01:9b:62:7a:1f:
         6f:97:02:7f:19:7b:05:28:7b:a8:bb:4d:86:76:09:4b:a2:95:
         79:2c:5a:c0:84:ba:47:75:bb:75:a1:ed:49:6d:03:91:dc:60:
         5b:6c:6c:c6:b0:6b:ea:50:68:e7:5c:e3:3b:3c:cb:67:97:6f:
         15:12:69:fd:6e:1a:9b:df:be:8d:3c:fe:dd:d8:5e:57:66:3c:
         0d:57:da:5b:85:38:77:2e:d4:84:e0:a7:ae:ea:1e:94:a1:3b:
         d8:53:63:5f:d7:d1:7f:c8:1b:dd:a5:7c:10:7a:ca:d4:0b:9b:
         65:f6:ab:82:d7:99:9e:65:94:94:53:30:1b:26:13:35:1b:b8:
         f0:7d:4f:3d:60:59:af:9d:7a:2b:55:5d:de:1b:0e:62:44:55:
         46:25:b1:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 14:45:07 2024 by rpki-client on console-fra.rpki-client.org