Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ej7a3Nm1RhSVJP2sg3tFaJhMxFNnWagr78T1mpuuC2Hc/1/3139302e3132302e33322e302f32322d3233203d3e20323730363930.roa
File:                     3139302e3132302e33322e302f32322d3233203d3e20323730363930.roa (raw, json)
Hash identifier:          Ay4joyJxsmY4H/p+308DDuVZiTqclKcwywwW+3JrmRE=
Subject key identifier:   51:83:E2:63:7A:C3:9B:AC:02:71:DE:67:D7:49:AD:37:2C:39:68:D7
Certificate issuer:       /CN=296B5A42104756A14E2651E7EAC81D02EA0F7531
Certificate serial:       475F97CF96D27BAE12F7DDEF7238F3CB73202595
Authority key identifier: 29:6B:5A:42:10:47:56:A1:4E:26:51:E7:EA:C8:1D:02:EA:0F:75:31
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/296B5A42104756A14E2651E7EAC81D02EA0F7531.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ej7a3Nm1RhSVJP2sg3tFaJhMxFNnWagr78T1mpuuC2Hc/1/3139302e3132302e33322e302f32322d3233203d3e20323730363930.roa
Signing time:             Wed 03 Apr 2024 18:38:15 +0000
ROA not before:           Wed 03 Apr 2024 18:33:15 +0000
ROA not after:            Wed 02 Apr 2025 18:38:15 +0000
asID:                     270690
IP address blocks:        190.120.32.0/22 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ej7a3Nm1RhSVJP2sg3tFaJhMxFNnWagr78T1mpuuC2Hc/1/296B5A42104756A14E2651E7EAC81D02EA0F7531.crl
                          rsync://rpki-repo.registro.br/repo/Ej7a3Nm1RhSVJP2sg3tFaJhMxFNnWagr78T1mpuuC2Hc/1/296B5A42104756A14E2651E7EAC81D02EA0F7531.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/296B5A42104756A14E2651E7EAC81D02EA0F7531.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:5f:97:cf:96:d2:7b:ae:12:f7:dd:ef:72:38:f3:cb:73:20:25:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=296B5A42104756A14E2651E7EAC81D02EA0F7531
        Validity
            Not Before: Apr  3 18:33:15 2024 GMT
            Not After : Apr  2 18:38:15 2025 GMT
        Subject: CN=5183E2637AC39BAC0271DE67D749AD372C3968D7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:60:4e:65:7d:5b:da:a7:a4:4e:90:3a:66:7b:
                    a1:7f:ee:08:6d:58:ef:23:2f:23:b3:7f:54:97:cb:
                    00:3f:28:db:2b:55:b4:78:3a:2c:ed:2d:b8:1f:10:
                    64:8f:d1:90:ac:f0:e6:fb:0b:f2:a0:0b:4c:e1:d2:
                    e3:95:09:94:60:7b:02:42:3d:51:b8:ad:66:48:cb:
                    aa:4c:e8:fd:21:98:f0:aa:2c:0e:2e:e2:fd:65:8c:
                    dd:ea:95:4f:74:39:04:ae:24:c2:fe:9e:b0:07:9b:
                    79:b4:86:62:9e:ab:f1:08:24:34:fa:4b:15:64:64:
                    d7:ec:8f:c5:fd:4c:49:e1:3e:27:13:b0:3d:d5:b4:
                    b4:08:11:96:ca:c6:10:8e:3b:1b:36:f9:46:b7:85:
                    52:d8:91:46:9f:88:91:8b:5c:3f:8f:e4:2c:3c:78:
                    ba:9c:21:d2:b8:94:d6:90:8d:db:d5:dd:d6:d7:8e:
                    15:00:99:f1:e9:3b:88:9b:71:9c:d1:8a:1a:af:94:
                    86:b8:99:b5:21:ee:85:ed:4a:14:07:0a:d9:d7:d7:
                    13:36:0f:a3:99:03:be:7b:63:3a:32:3f:cd:49:23:
                    da:52:2e:85:3c:0d:82:c5:20:8a:b2:e9:d9:ba:0c:
                    90:77:ad:dd:3b:27:c8:b3:2a:e7:2c:f0:18:3e:63:
                    a7:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:83:E2:63:7A:C3:9B:AC:02:71:DE:67:D7:49:AD:37:2C:39:68:D7
            X509v3 Authority Key Identifier:
                keyid:29:6B:5A:42:10:47:56:A1:4E:26:51:E7:EA:C8:1D:02:EA:0F:75:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ej7a3Nm1RhSVJP2sg3tFaJhMxFNnWagr78T1mpuuC2Hc/1/296B5A42104756A14E2651E7EAC81D02EA0F7531.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/296B5A42104756A14E2651E7EAC81D02EA0F7531.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ej7a3Nm1RhSVJP2sg3tFaJhMxFNnWagr78T1mpuuC2Hc/1/3139302e3132302e33322e302f32322d3233203d3e20323730363930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.120.32.0/22

    Signature Algorithm: sha256WithRSAEncryption
         65:f5:bc:3f:31:7c:9b:ac:7a:a9:91:42:c7:1a:91:25:7a:7a:
         6d:6d:3a:11:f5:8b:99:15:5b:b5:87:2d:30:c9:5a:44:25:0a:
         2d:ef:a0:f1:1b:5b:fe:61:8b:f5:bf:a3:d7:cb:81:6b:44:70:
         15:dc:37:c4:0a:af:53:0f:55:22:c7:85:3b:ba:ef:a8:97:eb:
         38:92:cf:22:ed:93:6e:02:d1:76:3b:e7:e8:a8:7a:d9:0b:27:
         3d:6c:0f:d7:b8:51:11:d6:14:58:c3:be:d3:54:ad:7a:e4:25:
         66:8f:bb:2a:84:2c:0a:5a:33:c0:ae:2c:1e:07:bb:7b:ba:91:
         78:dd:bc:e8:ae:8a:ed:5f:a1:c9:85:ce:70:0e:ad:41:d4:18:
         db:7f:ae:10:33:fc:8b:bf:7e:86:ae:fd:37:a5:82:4e:47:39:
         7e:42:cb:92:e1:b7:a2:be:90:df:55:e6:b8:a3:31:75:15:59:
         c4:88:18:ac:fd:0c:7f:78:8a:f1:9f:0c:d8:de:04:75:f8:9c:
         c6:63:0b:9a:c3:cc:93:06:bb:36:3d:00:e9:c2:0b:e1:0c:34:
         47:be:b5:fc:07:9a:74:5a:79:50:c6:08:00:60:fb:ce:63:fe:
         23:17:c4:52:be:05:29:ad:6b:10:e2:5e:10:01:82:cf:2c:e6:
         43:e6:13:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 09:08:12 2024 by rpki-client on console-ams.rpki-client.org