Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EtwW8C42FYNtwWFphu7awD1pS5x4ZeLnkDAmGYpwJXqB/1/3139302e38392e3135392e302f32342d3234203d3e20323730333735.roa
File:                     3139302e38392e3135392e302f32342d3234203d3e20323730333735.roa (raw, json)
Hash identifier:          cZF0XiDEaNeHzcGgV7CqRv1z81OQgNu41nY7X+e1iAw=
Subject key identifier:   D5:9E:79:A7:18:C7:78:25:D0:58:22:12:A1:D1:E9:8C:AF:94:91:91
Certificate issuer:       /CN=729E2197FDAAE4A2E93BC258E258A5D2C023B204
Certificate serial:       288208C2AD36C77FE019A025120B21598D2034D9
Authority key identifier: 72:9E:21:97:FD:AA:E4:A2:E9:3B:C2:58:E2:58:A5:D2:C0:23:B2:04
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/729E2197FDAAE4A2E93BC258E258A5D2C023B204.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EtwW8C42FYNtwWFphu7awD1pS5x4ZeLnkDAmGYpwJXqB/1/3139302e38392e3135392e302f32342d3234203d3e20323730333735.roa
Signing time:             Thu 04 Apr 2024 12:59:51 +0000
ROA not before:           Thu 04 Apr 2024 12:54:51 +0000
ROA not after:            Thu 03 Apr 2025 12:59:51 +0000
asID:                     270375
IP address blocks:        190.89.159.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EtwW8C42FYNtwWFphu7awD1pS5x4ZeLnkDAmGYpwJXqB/1/729E2197FDAAE4A2E93BC258E258A5D2C023B204.crl
                          rsync://rpki-repo.registro.br/repo/EtwW8C42FYNtwWFphu7awD1pS5x4ZeLnkDAmGYpwJXqB/1/729E2197FDAAE4A2E93BC258E258A5D2C023B204.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/729E2197FDAAE4A2E93BC258E258A5D2C023B204.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 20 May 2024 17:42:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:82:08:c2:ad:36:c7:7f:e0:19:a0:25:12:0b:21:59:8d:20:34:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=729E2197FDAAE4A2E93BC258E258A5D2C023B204
        Validity
            Not Before: Apr  4 12:54:51 2024 GMT
            Not After : Apr  3 12:59:51 2025 GMT
        Subject: CN=D59E79A718C77825D0582212A1D1E98CAF949191
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:d2:18:dc:56:19:a0:01:08:3c:e5:b3:29:66:
                    27:43:c4:93:89:02:eb:1d:9a:fb:79:23:0e:84:13:
                    e9:c2:34:3b:24:ff:e7:ec:8f:5d:b9:d5:89:5b:c0:
                    5b:5a:95:45:e2:b3:59:25:27:7b:9f:bd:e6:c5:7b:
                    b1:25:9b:7b:9f:3b:9c:fc:62:cc:93:12:08:8f:6c:
                    30:07:b4:75:da:69:74:09:3a:2e:b8:9d:94:7a:ad:
                    c4:d4:dc:0b:11:c3:91:d8:b4:b1:0b:ed:13:ae:78:
                    0b:c3:29:a1:19:1d:0c:98:cb:5d:e6:79:fe:14:2e:
                    6a:72:d4:5a:d3:76:7c:7c:8d:bd:25:1c:8d:e3:7e:
                    31:05:d8:ed:cd:82:dd:ee:d0:d1:1d:f0:21:5d:bc:
                    28:4b:28:de:d9:a1:3f:58:59:1d:84:84:7c:a8:cb:
                    db:7f:b6:af:c2:df:1d:ee:eb:33:c9:0f:b4:52:e8:
                    52:9c:0c:87:22:08:90:3c:01:ae:ef:03:3b:99:57:
                    88:de:cf:42:48:66:9c:19:26:89:cb:4b:2f:a4:ec:
                    17:d5:1d:75:74:84:7c:e7:d4:e4:cb:dc:ed:86:d7:
                    b3:42:30:1c:cb:42:79:8d:f9:d9:65:d9:51:7e:ae:
                    7a:bc:54:88:b7:3b:d3:27:e4:e1:07:27:da:a8:55:
                    bc:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:9E:79:A7:18:C7:78:25:D0:58:22:12:A1:D1:E9:8C:AF:94:91:91
            X509v3 Authority Key Identifier:
                keyid:72:9E:21:97:FD:AA:E4:A2:E9:3B:C2:58:E2:58:A5:D2:C0:23:B2:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EtwW8C42FYNtwWFphu7awD1pS5x4ZeLnkDAmGYpwJXqB/1/729E2197FDAAE4A2E93BC258E258A5D2C023B204.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/729E2197FDAAE4A2E93BC258E258A5D2C023B204.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EtwW8C42FYNtwWFphu7awD1pS5x4ZeLnkDAmGYpwJXqB/1/3139302e38392e3135392e302f32342d3234203d3e20323730333735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.89.159.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6c:7a:99:70:61:30:bc:a7:be:e0:a8:b4:da:5a:f7:00:3f:59:
         87:46:14:2a:c8:be:c3:20:2a:ce:45:47:29:4d:62:e4:2a:ba:
         4b:31:bf:b0:9b:6e:d0:c9:73:3b:83:85:b0:ee:71:9a:94:c7:
         66:37:b4:31:dd:49:8f:8f:68:90:e1:ed:17:ca:4b:fe:fa:5a:
         12:70:69:49:30:2e:10:54:c1:2f:28:f6:03:ec:42:10:c7:3d:
         6d:f6:41:cf:d0:c6:5c:fa:8e:ce:54:17:fb:64:39:de:55:4a:
         9d:b5:bb:dd:4a:ca:2e:88:bc:c5:87:9c:02:76:41:df:17:82:
         38:e7:25:9c:4b:67:da:77:0e:d7:09:1d:d3:2c:d7:04:cb:08:
         13:34:a0:ac:c1:84:1d:7a:ba:d4:33:e6:c9:e6:10:ae:9a:8b:
         2c:d9:9f:da:f3:78:95:0a:fb:ae:8a:d9:e8:c7:ad:20:1e:61:
         e1:e9:88:46:41:55:31:c0:a6:33:41:07:1d:51:b9:9b:4c:76:
         3a:aa:2c:2e:05:d9:35:b8:c2:d9:38:46:4a:74:cc:d6:b1:f2:
         4d:73:3e:2a:5f:2c:0c:d2:86:a8:21:77:10:30:ef:d1:6d:25:
         55:4a:bb:4d:16:6d:b6:f9:ef:87:7f:45:cd:3f:e1:44:2a:12:
         38:7e:13:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 17:53:57 2024 by rpki-client on console-fra.rpki-client.org