Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EYeycohVJ5C2Jx64GyyVMrtHXyK9kA8AXGerGkycon1N/1/3138392e38352e34342e302f32322d3234203d3e20323730363434.roa
File:                     3138392e38352e34342e302f32322d3234203d3e20323730363434.roa (raw, json)
Hash identifier:          1qAwuQYkN7Aq4Inx7Cq6l2XiZ0j+sZWAngbj0uCacy0=
Subject key identifier:   C3:84:50:E5:6D:40:45:1F:FA:F8:FD:E6:8A:94:28:8C:D1:F3:FF:0A
Certificate issuer:       /CN=92A3C27E684BD91C2CF684E7FDDD48433051191D
Certificate serial:       294EDF02957BEE59F50E04E0709D90862E847026
Authority key identifier: 92:A3:C2:7E:68:4B:D9:1C:2C:F6:84:E7:FD:DD:48:43:30:51:19:1D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/92A3C27E684BD91C2CF684E7FDDD48433051191D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EYeycohVJ5C2Jx64GyyVMrtHXyK9kA8AXGerGkycon1N/1/3138392e38352e34342e302f32322d3234203d3e20323730363434.roa
Signing time:             Thu 04 Apr 2024 16:12:10 +0000
ROA not before:           Thu 04 Apr 2024 16:07:10 +0000
ROA not after:            Thu 03 Apr 2025 16:12:10 +0000
asID:                     270644
IP address blocks:        189.85.44.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EYeycohVJ5C2Jx64GyyVMrtHXyK9kA8AXGerGkycon1N/1/92A3C27E684BD91C2CF684E7FDDD48433051191D.crl
                          rsync://rpki-repo.registro.br/repo/EYeycohVJ5C2Jx64GyyVMrtHXyK9kA8AXGerGkycon1N/1/92A3C27E684BD91C2CF684E7FDDD48433051191D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/92A3C27E684BD91C2CF684E7FDDD48433051191D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 19:40:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:4e:df:02:95:7b:ee:59:f5:0e:04:e0:70:9d:90:86:2e:84:70:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92A3C27E684BD91C2CF684E7FDDD48433051191D
        Validity
            Not Before: Apr  4 16:07:10 2024 GMT
            Not After : Apr  3 16:12:10 2025 GMT
        Subject: CN=C38450E56D40451FFAF8FDE68A94288CD1F3FF0A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:bf:7e:d5:8c:c6:cb:2d:5a:1b:a4:ff:8c:58:
                    69:22:f2:2a:27:c6:39:a9:73:9f:51:17:35:ad:66:
                    a1:45:d6:25:f5:89:ed:d0:38:86:65:31:32:5e:d5:
                    b9:f3:d9:53:28:e5:29:84:2b:21:58:61:1c:5c:4c:
                    42:3a:81:42:21:5f:8e:ee:b9:42:ed:38:ac:9b:a8:
                    b9:6f:a5:d2:11:e0:d2:89:66:d2:96:08:cb:44:7c:
                    75:b1:26:77:dd:74:c2:de:aa:6d:6b:6e:a9:6b:e8:
                    9c:8a:7a:0d:8a:5f:0c:85:36:99:02:c6:0b:24:4f:
                    03:e8:4e:ff:d8:9a:71:d2:05:88:96:63:41:63:38:
                    a8:d2:ce:3b:ee:b0:1d:01:55:20:7b:34:b0:63:1a:
                    24:2f:2b:1d:58:41:4e:32:23:b5:90:fa:1b:95:34:
                    0f:5f:20:14:94:8a:23:d5:85:7c:f2:6c:47:80:8d:
                    8b:69:44:26:de:3b:60:6f:60:b7:b1:5d:b3:17:6c:
                    e4:11:d2:d3:1c:12:fa:6c:67:5f:53:e6:77:6e:8f:
                    c3:7a:80:9c:92:59:ad:97:5d:59:db:6b:4c:a6:33:
                    10:44:ea:15:02:a5:a1:51:9f:04:cc:2d:fa:a3:4c:
                    89:6c:de:42:4e:b6:9d:31:45:eb:f6:fe:c6:32:15:
                    d4:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:84:50:E5:6D:40:45:1F:FA:F8:FD:E6:8A:94:28:8C:D1:F3:FF:0A
            X509v3 Authority Key Identifier:
                keyid:92:A3:C2:7E:68:4B:D9:1C:2C:F6:84:E7:FD:DD:48:43:30:51:19:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EYeycohVJ5C2Jx64GyyVMrtHXyK9kA8AXGerGkycon1N/1/92A3C27E684BD91C2CF684E7FDDD48433051191D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/92A3C27E684BD91C2CF684E7FDDD48433051191D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EYeycohVJ5C2Jx64GyyVMrtHXyK9kA8AXGerGkycon1N/1/3138392e38352e34342e302f32322d3234203d3e20323730363434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.85.44.0/22

    Signature Algorithm: sha256WithRSAEncryption
         73:7c:4a:74:b1:7a:58:00:36:f1:5c:42:3d:d3:67:af:dd:74:
         20:b2:ee:14:90:5f:c8:a5:96:e4:e0:3f:c1:46:0a:53:56:51:
         06:03:9e:be:e3:c8:81:fd:c8:0b:63:9c:f0:b7:db:92:d7:e7:
         9f:c3:09:c1:eb:ec:b0:38:04:e5:c2:41:c5:43:37:6a:eb:36:
         96:a3:bd:f7:57:96:ea:15:c2:23:b5:ef:13:dc:d2:ea:bf:50:
         38:10:1e:9a:c7:f0:25:ff:bb:ab:ba:d5:02:e0:91:b9:16:b6:
         a6:1c:1a:8e:2f:dd:ba:96:55:28:b8:f9:da:57:68:3b:c0:1f:
         6d:40:5f:ad:af:74:02:50:d0:58:fb:76:e9:27:59:0f:64:a9:
         4a:3d:a1:78:51:2a:5e:69:53:15:aa:05:00:15:d2:b5:b8:1b:
         a2:22:4f:ad:60:51:40:b2:4f:07:9e:e8:fa:76:31:8a:0f:09:
         6a:42:68:f3:13:e9:3a:5e:e4:86:01:ed:9c:de:9d:5b:e9:59:
         ca:d8:b8:0e:4b:4b:e6:c1:7e:40:ad:21:44:07:d6:cd:6e:30:
         38:de:dc:0c:af:71:7d:8b:76:47:70:2b:f3:34:e3:46:e2:17:
         6f:34:bb:5a:11:81:76:2f:61:df:fe:8e:86:1e:81:ec:f5:a5:
         af:9e:df:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:42:21 2024 by rpki-client on console-fra.rpki-client.org