Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EtwW8C42FYNtwWFphu7awD1pS5x4ZeLnkDAmGYpwJXqB/1/3139302e38392e3135362e302f32342d3234203d3e20323730333735.roa
File:                     3139302e38392e3135362e302f32342d3234203d3e20323730333735.roa (raw, json)
Hash identifier:          bkieGc5Vf5t2tKyuM9lhHuANFVWRtHxQt8Qc04Y31oU=
Subject key identifier:   69:D3:5D:D0:C4:B0:85:14:88:92:C8:AD:68:82:C4:9F:C5:DD:E4:D0
Certificate issuer:       /CN=729E2197FDAAE4A2E93BC258E258A5D2C023B204
Certificate serial:       3EB21C09146542B22261F4D9555D90FE19D0DD5D
Authority key identifier: 72:9E:21:97:FD:AA:E4:A2:E9:3B:C2:58:E2:58:A5:D2:C0:23:B2:04
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/729E2197FDAAE4A2E93BC258E258A5D2C023B204.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EtwW8C42FYNtwWFphu7awD1pS5x4ZeLnkDAmGYpwJXqB/1/3139302e38392e3135362e302f32342d3234203d3e20323730333735.roa
Signing time:             Tue 09 Apr 2024 14:19:13 +0000
ROA not before:           Tue 09 Apr 2024 14:14:13 +0000
ROA not after:            Tue 08 Apr 2025 14:19:13 +0000
asID:                     270375
IP address blocks:        190.89.156.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EtwW8C42FYNtwWFphu7awD1pS5x4ZeLnkDAmGYpwJXqB/1/729E2197FDAAE4A2E93BC258E258A5D2C023B204.crl
                          rsync://rpki-repo.registro.br/repo/EtwW8C42FYNtwWFphu7awD1pS5x4ZeLnkDAmGYpwJXqB/1/729E2197FDAAE4A2E93BC258E258A5D2C023B204.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/729E2197FDAAE4A2E93BC258E258A5D2C023B204.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 29 May 2024 20:45:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:b2:1c:09:14:65:42:b2:22:61:f4:d9:55:5d:90:fe:19:d0:dd:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=729E2197FDAAE4A2E93BC258E258A5D2C023B204
        Validity
            Not Before: Apr  9 14:14:13 2024 GMT
            Not After : Apr  8 14:19:13 2025 GMT
        Subject: CN=69D35DD0C4B085148892C8AD6882C49FC5DDE4D0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:9c:57:ff:3a:42:30:1c:11:33:26:86:a3:f9:
                    c4:01:a9:6e:15:96:2f:3d:7f:b2:64:07:cd:de:0f:
                    2e:54:e4:cd:ef:b9:33:bb:70:57:16:86:27:a3:3d:
                    a9:66:b3:d4:4d:3e:cd:05:7e:4a:9e:24:9b:ed:d7:
                    28:a0:56:44:8a:63:ba:55:5e:f1:fe:11:71:2f:bb:
                    a8:36:c8:c0:18:27:3e:8c:8d:ed:83:ce:b7:4d:c0:
                    b3:2f:42:91:93:30:f4:bc:67:59:f1:b0:ce:f5:47:
                    9a:2c:69:d5:27:f8:ca:84:10:e2:eb:3a:9a:ea:6f:
                    92:52:0b:c9:12:ac:36:1f:12:f9:a6:5e:cd:a3:50:
                    0b:3a:06:6c:79:5c:d3:7f:64:f1:15:3b:68:33:e6:
                    50:de:e9:b2:6e:cc:05:bd:84:49:a4:17:e9:7e:d7:
                    cd:b4:e6:d6:1c:aa:57:57:2f:97:67:31:c7:71:e4:
                    7b:30:6e:40:b8:a7:86:81:0f:af:72:c0:74:de:b0:
                    e8:3d:26:eb:48:38:ba:38:e9:66:3a:26:6b:4e:63:
                    a0:fc:35:cb:31:c8:bd:d0:5c:27:a0:bc:fd:0b:54:
                    04:6f:16:4f:6b:67:ce:9c:a0:3d:77:df:e8:d4:0f:
                    c9:38:ce:cd:5a:5f:4a:0e:7c:37:a2:5e:3f:e3:d9:
                    39:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:D3:5D:D0:C4:B0:85:14:88:92:C8:AD:68:82:C4:9F:C5:DD:E4:D0
            X509v3 Authority Key Identifier:
                keyid:72:9E:21:97:FD:AA:E4:A2:E9:3B:C2:58:E2:58:A5:D2:C0:23:B2:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EtwW8C42FYNtwWFphu7awD1pS5x4ZeLnkDAmGYpwJXqB/1/729E2197FDAAE4A2E93BC258E258A5D2C023B204.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/729E2197FDAAE4A2E93BC258E258A5D2C023B204.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EtwW8C42FYNtwWFphu7awD1pS5x4ZeLnkDAmGYpwJXqB/1/3139302e38392e3135362e302f32342d3234203d3e20323730333735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.89.156.0/24

    Signature Algorithm: sha256WithRSAEncryption
         25:2c:56:6c:0c:50:e4:dc:a8:2b:1f:ea:c7:74:ce:26:b2:ca:
         65:3c:75:1e:c7:75:e3:ae:d4:b7:4a:45:cc:66:34:8c:76:14:
         b5:0f:a3:00:35:e9:04:62:1e:6d:17:a6:87:9c:63:58:c8:a6:
         f6:62:62:0d:c6:61:a5:a0:32:31:b0:40:fd:3d:3b:94:1d:24:
         6e:2a:10:77:05:b1:79:2d:55:4a:35:08:65:97:39:35:2e:6f:
         3e:a5:0c:b4:23:1c:56:a4:77:74:1d:65:3a:5e:b0:a8:6a:7b:
         f5:ed:c5:20:56:5d:33:51:ed:88:17:e9:7a:c0:a1:5a:19:ef:
         d6:ad:49:bf:ec:51:90:9a:38:60:c8:75:a0:31:ff:5c:7a:f1:
         87:e6:8c:76:4e:e5:06:dd:87:99:1f:ad:7a:d4:a3:c5:c5:c3:
         a1:4e:a6:23:4d:b5:61:3e:cf:f4:6f:89:69:40:a8:cd:5e:d2:
         3c:40:21:75:77:20:59:2c:cc:b6:57:d8:a0:9b:06:5b:20:76:
         d8:a7:29:f2:74:21:5c:6f:bd:58:9b:a3:a8:3b:d4:b2:5e:88:
         d3:4a:57:c3:18:28:30:6e:94:b0:4a:89:85:dd:82:a0:f8:ee:
         0f:d0:5a:b1:8c:63:46:0a:47:d0:95:73:d6:55:a1:85:4c:07:
         7c:c9:cb:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 28 22:49:24 2024 by rpki-client on console-ams.rpki-client.org