Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E43GdbmixcPX87xiAS3ytWjff4subBukg6tocUDLGgDw/0/3139312e372e3130342e302f32322d3234203d3e20323731303134.roa
File:                     3139312e372e3130342e302f32322d3234203d3e20323731303134.roa (raw, json)
Hash identifier:          XUsSySj6ADF+27v7JUTc9Ng2e8dEvdj+QtYffBX/3BM=
Subject key identifier:   34:41:97:F9:AF:13:E6:B2:8A:10:67:F3:AA:51:89:EB:7A:D9:BB:F5
Certificate issuer:       /CN=107956E9CD07A3AAE9EFEBAEA7DDFB1C27A116D2
Certificate serial:       24F0C58854089D7991155A4B5F8C61CD09DF951C
Authority key identifier: 10:79:56:E9:CD:07:A3:AA:E9:EF:EB:AE:A7:DD:FB:1C:27:A1:16:D2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/107956E9CD07A3AAE9EFEBAEA7DDFB1C27A116D2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E43GdbmixcPX87xiAS3ytWjff4subBukg6tocUDLGgDw/0/3139312e372e3130342e302f32322d3234203d3e20323731303134.roa
Signing time:             Fri 24 Jan 2025 15:29:17 +0000
ROA not before:           Fri 24 Jan 2025 15:24:17 +0000
ROA not after:            Fri 23 Jan 2026 15:29:17 +0000
asID:                     271014
IP address blocks:        191.7.104.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/E43GdbmixcPX87xiAS3ytWjff4subBukg6tocUDLGgDw/0/107956E9CD07A3AAE9EFEBAEA7DDFB1C27A116D2.crl
                          rsync://rpki-repo.registro.br/repo/E43GdbmixcPX87xiAS3ytWjff4subBukg6tocUDLGgDw/0/107956E9CD07A3AAE9EFEBAEA7DDFB1C27A116D2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/107956E9CD07A3AAE9EFEBAEA7DDFB1C27A116D2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 19 Feb 2025 07:30:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:f0:c5:88:54:08:9d:79:91:15:5a:4b:5f:8c:61:cd:09:df:95:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=107956E9CD07A3AAE9EFEBAEA7DDFB1C27A116D2
        Validity
            Not Before: Jan 24 15:24:17 2025 GMT
            Not After : Jan 23 15:29:17 2026 GMT
        Subject: CN=3082010A0282010100BF205C368C009D0B8AA934A2B6043AC7F7E49FC05B5250D1C1686351E52AFCC76927B3E6012AFBC33ECA0600041ADFD51ADCA7026EB58E2DEC7E2AF9D0D08E9456F9DC94FB6BFB9417303C88174281401CFD4416C0FD266FF36001E5D3695CF5941DC9C1284C852E2AAA8CE57D54D9E0D0E53DD2B4050D2A4BCF485F6EA7407AFFD3A99E58C6EF6A7E4D93FF1308DB5FCEB96A4E1169C9FC9F56F5FC8F239924FCF91C79C0027F1E4B9872104B2B5E890FEC275E65E6D547450372CE4C05BA59B23D79EEF16C95EFBFD98551A63D08681308F2F2B925A7CF13C6C732A08330A5D99E53C654C3F259905933AB0658C633B61C3BBDAFC942C461FD3FAF4228F1970203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:20:5c:36:8c:00:9d:0b:8a:a9:34:a2:b6:04:
                    3a:c7:f7:e4:9f:c0:5b:52:50:d1:c1:68:63:51:e5:
                    2a:fc:c7:69:27:b3:e6:01:2a:fb:c3:3e:ca:06:00:
                    04:1a:df:d5:1a:dc:a7:02:6e:b5:8e:2d:ec:7e:2a:
                    f9:d0:d0:8e:94:56:f9:dc:94:fb:6b:fb:94:17:30:
                    3c:88:17:42:81:40:1c:fd:44:16:c0:fd:26:6f:f3:
                    60:01:e5:d3:69:5c:f5:94:1d:c9:c1:28:4c:85:2e:
                    2a:aa:8c:e5:7d:54:d9:e0:d0:e5:3d:d2:b4:05:0d:
                    2a:4b:cf:48:5f:6e:a7:40:7a:ff:d3:a9:9e:58:c6:
                    ef:6a:7e:4d:93:ff:13:08:db:5f:ce:b9:6a:4e:11:
                    69:c9:fc:9f:56:f5:fc:8f:23:99:24:fc:f9:1c:79:
                    c0:02:7f:1e:4b:98:72:10:4b:2b:5e:89:0f:ec:27:
                    5e:65:e6:d5:47:45:03:72:ce:4c:05:ba:59:b2:3d:
                    79:ee:f1:6c:95:ef:bf:d9:85:51:a6:3d:08:68:13:
                    08:f2:f2:b9:25:a7:cf:13:c6:c7:32:a0:83:30:a5:
                    d9:9e:53:c6:54:c3:f2:59:90:59:33:ab:06:58:c6:
                    33:b6:1c:3b:bd:af:c9:42:c4:61:fd:3f:af:42:28:
                    f1:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:41:97:F9:AF:13:E6:B2:8A:10:67:F3:AA:51:89:EB:7A:D9:BB:F5
            X509v3 Authority Key Identifier:
                keyid:10:79:56:E9:CD:07:A3:AA:E9:EF:EB:AE:A7:DD:FB:1C:27:A1:16:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E43GdbmixcPX87xiAS3ytWjff4subBukg6tocUDLGgDw/0/107956E9CD07A3AAE9EFEBAEA7DDFB1C27A116D2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/107956E9CD07A3AAE9EFEBAEA7DDFB1C27A116D2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E43GdbmixcPX87xiAS3ytWjff4subBukg6tocUDLGgDw/0/3139312e372e3130342e302f32322d3234203d3e20323731303134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.7.104.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3b:51:15:1e:6f:54:67:a0:44:e1:1d:0f:25:07:d7:54:d5:04:
         52:21:59:1f:5f:08:be:e1:06:b2:e3:8f:71:a0:08:b5:ac:9e:
         51:43:8d:79:5c:7d:a3:ee:f3:78:c5:c2:ba:ae:7e:83:f0:fe:
         04:1c:85:88:79:11:b2:62:c6:fa:d3:fc:ff:dd:67:bc:ad:f4:
         82:57:f4:8a:ea:ed:20:4f:80:c9:70:91:f4:d3:fa:25:94:e6:
         f7:1f:9e:ed:f2:c4:a8:93:ed:00:e0:99:3a:5a:f5:85:7d:2f:
         c2:b6:5b:64:0b:22:ac:58:48:c7:30:38:2e:1e:48:08:c3:e9:
         95:19:7c:d4:85:21:e2:c8:d7:65:9a:d7:22:fe:25:76:4a:21:
         de:99:04:e5:c3:e8:3f:76:cc:01:66:36:69:87:56:94:80:e1:
         2a:e1:8f:cb:87:ad:cb:c6:c5:69:37:8b:ba:54:e6:cb:ef:39:
         a7:dd:b7:09:aa:64:48:92:ca:5d:b5:e6:5b:0d:fc:64:1c:ce:
         73:f5:1d:20:bd:17:b9:b7:b2:78:48:0c:9f:17:57:ff:7e:de:
         57:ed:1f:3f:31:5f:80:2a:c7:9f:c5:a2:b2:9a:65:99:05:66:
         1b:22:e2:86:99:1e:80:48:5b:07:3b:18:70:4c:5c:a5:34:b3:
         33:2f:b9:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:30:38 2025 by rpki-client