Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EtwW8C42FYNtwWFphu7awD1pS5x4ZeLnkDAmGYpwJXqB/1/3139302e38392e3135382e302f32342d3234203d3e20323730333735.roa
File:                     3139302e38392e3135382e302f32342d3234203d3e20323730333735.roa (raw, json)
Hash identifier:          zlxdQ+W2uzGn3I1VdWV+USAkRcpeo0CkD3khDoyJPkI=
Subject key identifier:   10:CF:8B:91:03:8A:04:8D:65:92:E2:12:FC:64:83:78:91:2B:2C:55
Certificate issuer:       /CN=729E2197FDAAE4A2E93BC258E258A5D2C023B204
Certificate serial:       2973FF8523BDAF1CFF159E44FA0274D11996A98F
Authority key identifier: 72:9E:21:97:FD:AA:E4:A2:E9:3B:C2:58:E2:58:A5:D2:C0:23:B2:04
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/729E2197FDAAE4A2E93BC258E258A5D2C023B204.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EtwW8C42FYNtwWFphu7awD1pS5x4ZeLnkDAmGYpwJXqB/1/3139302e38392e3135382e302f32342d3234203d3e20323730333735.roa
Signing time:             Tue 09 Apr 2024 14:19:51 +0000
ROA not before:           Tue 09 Apr 2024 14:14:51 +0000
ROA not after:            Tue 08 Apr 2025 14:19:51 +0000
asID:                     270375
IP address blocks:        190.89.158.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EtwW8C42FYNtwWFphu7awD1pS5x4ZeLnkDAmGYpwJXqB/1/729E2197FDAAE4A2E93BC258E258A5D2C023B204.crl
                          rsync://rpki-repo.registro.br/repo/EtwW8C42FYNtwWFphu7awD1pS5x4ZeLnkDAmGYpwJXqB/1/729E2197FDAAE4A2E93BC258E258A5D2C023B204.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/729E2197FDAAE4A2E93BC258E258A5D2C023B204.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 20 May 2024 17:42:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:73:ff:85:23:bd:af:1c:ff:15:9e:44:fa:02:74:d1:19:96:a9:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=729E2197FDAAE4A2E93BC258E258A5D2C023B204
        Validity
            Not Before: Apr  9 14:14:51 2024 GMT
            Not After : Apr  8 14:19:51 2025 GMT
        Subject: CN=10CF8B91038A048D6592E212FC648378912B2C55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:80:c1:76:c6:c6:e6:13:cf:a9:5a:42:ea:79:
                    1a:37:01:c5:7f:96:eb:31:6f:83:3e:ad:9a:44:65:
                    54:2a:82:14:e3:05:db:9f:de:41:18:76:c0:8a:05:
                    53:19:54:72:05:77:8f:31:85:bc:54:aa:1f:48:d8:
                    df:25:9e:7c:ba:f3:84:cb:23:4e:56:50:41:d3:1c:
                    c3:57:0f:2d:fa:19:84:8e:93:0f:2b:89:e1:3d:d0:
                    2d:bb:54:de:4e:0f:f7:54:2c:df:5c:9a:92:98:62:
                    e2:71:5d:21:c7:fc:d0:a4:cb:64:f0:1c:45:3c:f1:
                    93:44:1e:d6:ca:0d:9f:7b:ff:f3:46:29:e9:2e:91:
                    ae:4c:3e:50:8a:31:f0:35:5d:a8:b8:78:1b:28:38:
                    17:08:42:9f:53:5f:fc:e6:7f:db:76:52:75:b2:c7:
                    b8:58:7a:e2:a9:51:43:7a:cc:90:00:ba:98:1a:d2:
                    1c:a0:2d:ff:7c:24:57:37:06:c8:a3:79:29:f0:af:
                    97:77:f4:f9:3a:44:28:13:3a:c2:0b:51:18:42:ab:
                    ed:17:6f:8d:05:5f:72:f9:98:9d:48:07:fb:78:f1:
                    64:ab:3f:cd:c1:72:0c:13:61:04:6c:6e:0e:b2:61:
                    49:6a:0d:bc:7c:aa:95:44:46:fb:8b:ca:86:00:31:
                    42:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:CF:8B:91:03:8A:04:8D:65:92:E2:12:FC:64:83:78:91:2B:2C:55
            X509v3 Authority Key Identifier:
                keyid:72:9E:21:97:FD:AA:E4:A2:E9:3B:C2:58:E2:58:A5:D2:C0:23:B2:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EtwW8C42FYNtwWFphu7awD1pS5x4ZeLnkDAmGYpwJXqB/1/729E2197FDAAE4A2E93BC258E258A5D2C023B204.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/729E2197FDAAE4A2E93BC258E258A5D2C023B204.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EtwW8C42FYNtwWFphu7awD1pS5x4ZeLnkDAmGYpwJXqB/1/3139302e38392e3135382e302f32342d3234203d3e20323730333735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.89.158.0/24

    Signature Algorithm: sha256WithRSAEncryption
         00:e6:b9:f9:32:29:fc:14:ff:de:45:61:b7:87:8c:22:e9:d5:
         71:aa:88:ba:01:d0:6a:ea:fa:b6:47:f5:80:35:82:c3:72:41:
         16:27:80:a5:8a:b6:a5:eb:9a:0b:4c:48:00:9c:e4:7f:8f:35:
         c5:5a:54:4b:07:e5:9c:35:53:40:01:8a:ed:fc:56:a1:24:31:
         23:67:a6:48:2a:03:38:88:8e:a9:34:c4:2e:f6:44:03:f7:53:
         5c:33:a5:b4:68:89:83:b1:d6:23:13:8f:71:23:26:15:b8:23:
         32:96:76:81:70:e6:97:4b:5d:18:82:96:74:a4:05:72:c8:53:
         32:38:df:4f:3c:e6:43:8b:97:0d:9b:89:99:24:a6:fe:15:06:
         76:43:29:92:ce:09:d4:0e:89:69:3c:68:bc:55:1b:4c:0a:3e:
         9c:67:fd:f2:ab:e2:c5:e7:78:7b:7a:e0:35:89:85:e8:24:e0:
         62:a5:28:ad:b3:83:10:35:06:59:40:9e:62:a4:da:fa:50:9d:
         87:9b:07:40:eb:48:82:0f:a3:31:86:4c:3d:17:42:74:bc:8d:
         8e:7b:0a:39:cd:81:a9:04:07:ba:13:6e:ed:8c:36:88:68:c6:
         75:6b:36:54:0a:97:07:12:a2:50:44:f8:92:c6:ff:00:18:26:
         94:d1:db:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 17:53:57 2024 by rpki-client on console-fra.rpki-client.org