Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DvGjRXrma7jNGajs6mACSb5kBfYs6kuGt5rTV3exjvH9/1/3139312e33372e3134302e302f32322d3234203d3e20323636333837.roa
File:                     3139312e33372e3134302e302f32322d3234203d3e20323636333837.roa (raw, json)
Hash identifier:          wQCkHbZAt6ae9MMefdVAOvlZlsSrscbeDAaQXwY1pik=
Subject key identifier:   EF:A6:1C:78:09:0F:41:9E:F8:7A:14:92:E9:CD:29:06:40:46:2B:86
Certificate issuer:       /CN=A28F0C1ED18F48A669C76BA34CD72F2A1456A418
Certificate serial:       09A89CF3FF0EFA30E2FF9974E6712CE8B3BAC750
Authority key identifier: A2:8F:0C:1E:D1:8F:48:A6:69:C7:6B:A3:4C:D7:2F:2A:14:56:A4:18
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A28F0C1ED18F48A669C76BA34CD72F2A1456A418.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DvGjRXrma7jNGajs6mACSb5kBfYs6kuGt5rTV3exjvH9/1/3139312e33372e3134302e302f32322d3234203d3e20323636333837.roa
Signing time:             Thu 04 Apr 2024 11:23:13 +0000
ROA not before:           Thu 04 Apr 2024 11:18:13 +0000
ROA not after:            Thu 03 Apr 2025 11:23:13 +0000
asID:                     266387
IP address blocks:        191.37.140.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DvGjRXrma7jNGajs6mACSb5kBfYs6kuGt5rTV3exjvH9/1/A28F0C1ED18F48A669C76BA34CD72F2A1456A418.crl
                          rsync://rpki-repo.registro.br/repo/DvGjRXrma7jNGajs6mACSb5kBfYs6kuGt5rTV3exjvH9/1/A28F0C1ED18F48A669C76BA34CD72F2A1456A418.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A28F0C1ED18F48A669C76BA34CD72F2A1456A418.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 09:17:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:a8:9c:f3:ff:0e:fa:30:e2:ff:99:74:e6:71:2c:e8:b3:ba:c7:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A28F0C1ED18F48A669C76BA34CD72F2A1456A418
        Validity
            Not Before: Apr  4 11:18:13 2024 GMT
            Not After : Apr  3 11:23:13 2025 GMT
        Subject: CN=EFA61C78090F419EF87A1492E9CD290640462B86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:38:68:a8:6b:da:65:a8:83:3e:bc:76:7e:83:
                    b6:e2:fe:3c:07:c9:7a:45:2a:ea:ea:d3:c8:29:e0:
                    e2:45:15:05:8b:26:c3:09:08:96:bb:81:8e:a3:67:
                    48:f4:55:62:16:d1:d9:7a:06:86:d4:f8:18:aa:60:
                    4e:b7:10:81:8f:01:57:33:ca:bc:ff:7e:80:34:1f:
                    92:2c:e3:bf:40:07:ac:6f:1f:e3:4c:33:89:4c:fe:
                    08:0c:47:3a:0c:65:24:03:1a:13:82:51:4e:75:00:
                    31:d2:26:63:44:f2:7b:52:fc:48:1c:16:f5:80:57:
                    ea:ed:9e:4f:07:2e:6d:d5:b3:0f:73:95:2b:d6:4e:
                    61:f4:4a:e0:41:a7:63:3c:e7:5e:96:0d:59:e2:1b:
                    b6:69:1b:a4:92:86:9e:b6:03:15:fc:17:40:37:0c:
                    2e:26:9b:1a:58:ca:e6:8d:3f:3d:cf:b3:c2:25:d6:
                    9a:c5:5d:a6:5f:8a:d8:9a:9d:46:b6:bb:7d:07:bd:
                    9f:ed:90:c5:4a:83:6c:20:1d:96:dc:d5:1f:22:73:
                    f1:37:7e:0d:bd:db:3f:10:3c:e6:ca:51:d0:d4:4d:
                    27:3f:51:32:75:e5:d8:a0:d1:4f:a2:48:ab:73:96:
                    a1:58:f0:b6:7d:9c:95:f5:76:e2:57:51:46:4f:46:
                    79:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:A6:1C:78:09:0F:41:9E:F8:7A:14:92:E9:CD:29:06:40:46:2B:86
            X509v3 Authority Key Identifier:
                keyid:A2:8F:0C:1E:D1:8F:48:A6:69:C7:6B:A3:4C:D7:2F:2A:14:56:A4:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DvGjRXrma7jNGajs6mACSb5kBfYs6kuGt5rTV3exjvH9/1/A28F0C1ED18F48A669C76BA34CD72F2A1456A418.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A28F0C1ED18F48A669C76BA34CD72F2A1456A418.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DvGjRXrma7jNGajs6mACSb5kBfYs6kuGt5rTV3exjvH9/1/3139312e33372e3134302e302f32322d3234203d3e20323636333837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.37.140.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6f:a1:fe:71:1f:c9:cb:7f:f6:3f:f8:cf:23:0c:aa:a3:55:e6:
         ef:bb:b7:a2:89:f5:37:82:73:b1:d4:0e:d1:9a:3b:a5:ed:33:
         ce:ab:ed:e9:da:34:c6:52:bc:be:b0:04:b2:8e:c9:fb:79:0d:
         97:f1:e4:01:28:f3:10:8c:74:49:4c:82:31:d8:4d:29:8c:c3:
         6f:af:d8:41:b3:a0:d4:0b:0c:49:27:27:e2:15:3d:c8:4f:29:
         29:be:ed:c0:83:e7:58:71:43:91:c2:56:c0:3e:df:3e:ec:e1:
         71:d2:6a:de:f4:c2:fb:82:e0:4e:82:03:a2:ad:e8:2f:6d:6c:
         72:70:49:8b:fd:53:69:cf:f9:8b:46:d8:98:f5:c7:4a:73:b5:
         7c:cc:db:b6:99:39:ac:19:d0:01:81:3b:60:b3:01:38:f5:2f:
         1b:75:b5:e8:81:82:7e:66:12:7d:91:84:b9:26:95:28:0e:b9:
         a3:31:25:80:5d:2f:17:8b:4d:7c:bc:0f:90:d6:8b:ff:4a:2d:
         6b:c3:3a:13:4c:a8:14:b7:1d:a3:6c:bd:27:4f:7b:e3:c7:54:
         be:35:7e:ed:80:7b:70:19:fc:ab:fd:54:e8:5b:eb:bd:0a:39:
         1c:96:b2:72:be:33:2f:4f:e8:a6:0b:fe:a5:72:96:43:97:10:
         bd:68:1a:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 10:55:52 2024 by rpki-client on console-ams.rpki-client.org