Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GGYNqeQXGCurWd1wvSaAhh1iM3EyCEtmvZDDS8Vt4Psg/0/3139302e3137312e37322e302f32322d3234203d3e20323731323338.roa
File:                     3139302e3137312e37322e302f32322d3234203d3e20323731323338.roa (raw, json)
Hash identifier:          KMmSTVTjbGIRUDXwi8v73vR5K69QjfR9LlPXX/IBXiY=
Subject key identifier:   4C:E4:8D:A1:2A:5F:1C:35:DD:2E:62:54:2A:9A:74:EE:8E:65:07:2E
Certificate issuer:       /CN=488D61367F4C42E03AE5C5AE8BE0076E4961BE71
Certificate serial:       7120A867E9552E4C25B4C38AD6E3E5EB0893C2B6
Authority key identifier: 48:8D:61:36:7F:4C:42:E0:3A:E5:C5:AE:8B:E0:07:6E:49:61:BE:71
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/488D61367F4C42E03AE5C5AE8BE0076E4961BE71.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GGYNqeQXGCurWd1wvSaAhh1iM3EyCEtmvZDDS8Vt4Psg/0/3139302e3137312e37322e302f32322d3234203d3e20323731323338.roa
Signing time:             Wed 07 Aug 2024 22:28:41 +0000
ROA not before:           Wed 07 Aug 2024 22:23:41 +0000
ROA not after:            Wed 06 Aug 2025 22:28:41 +0000
asID:                     271238
IP address blocks:        190.171.72.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GGYNqeQXGCurWd1wvSaAhh1iM3EyCEtmvZDDS8Vt4Psg/0/488D61367F4C42E03AE5C5AE8BE0076E4961BE71.crl
                          rsync://rpki-repo.registro.br/repo/GGYNqeQXGCurWd1wvSaAhh1iM3EyCEtmvZDDS8Vt4Psg/0/488D61367F4C42E03AE5C5AE8BE0076E4961BE71.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/488D61367F4C42E03AE5C5AE8BE0076E4961BE71.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 23 Apr 2025 00:09:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:20:a8:67:e9:55:2e:4c:25:b4:c3:8a:d6:e3:e5:eb:08:93:c2:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=488D61367F4C42E03AE5C5AE8BE0076E4961BE71
        Validity
            Not Before: Aug  7 22:23:41 2024 GMT
            Not After : Aug  6 22:28:41 2025 GMT
        Subject: CN=4CE48DA12A5F1C35DD2E62542A9A74EE8E65072E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:17:28:bb:8c:07:ab:83:f4:2a:bc:3b:4a:fe:
                    ca:f1:f0:a2:10:6e:65:1a:ec:f2:5a:0d:f8:ea:f8:
                    e9:e9:90:19:46:0a:95:59:ce:7b:e7:7f:b6:a3:11:
                    6a:7b:1c:ca:9f:bc:e7:82:4c:56:0a:5d:fa:16:f0:
                    fa:bd:ba:53:de:cf:96:a9:5a:0c:6a:41:01:5a:3e:
                    39:bd:6b:bb:d7:46:77:8b:7c:e8:f4:d6:9b:1f:04:
                    87:5d:1e:87:4e:99:24:31:ca:6a:c8:50:7c:db:2e:
                    a3:5e:58:99:9c:47:14:6a:6e:52:cb:c3:77:44:28:
                    cb:db:2c:85:21:44:df:73:14:df:52:81:ba:48:71:
                    83:8f:21:a6:a5:c9:98:6c:7d:42:cc:70:5b:42:17:
                    c9:45:9e:50:57:94:82:7c:71:1b:79:81:d2:0c:d2:
                    31:9b:a9:09:96:cc:84:d6:d3:65:72:72:02:45:b2:
                    61:8b:14:57:17:7e:0a:0b:9b:dd:cf:4e:8a:8e:16:
                    9c:a2:4c:4e:25:54:08:34:f7:a4:29:5d:c9:f2:e2:
                    35:cd:cb:ec:83:4b:f7:d7:60:a3:a6:ea:00:b2:95:
                    64:70:1c:19:74:56:27:55:de:c7:c8:ed:5b:e8:bc:
                    e5:bf:82:f4:57:b0:41:7a:41:80:9e:5e:6a:b4:e7:
                    95:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:E4:8D:A1:2A:5F:1C:35:DD:2E:62:54:2A:9A:74:EE:8E:65:07:2E
            X509v3 Authority Key Identifier:
                keyid:48:8D:61:36:7F:4C:42:E0:3A:E5:C5:AE:8B:E0:07:6E:49:61:BE:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GGYNqeQXGCurWd1wvSaAhh1iM3EyCEtmvZDDS8Vt4Psg/0/488D61367F4C42E03AE5C5AE8BE0076E4961BE71.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/488D61367F4C42E03AE5C5AE8BE0076E4961BE71.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GGYNqeQXGCurWd1wvSaAhh1iM3EyCEtmvZDDS8Vt4Psg/0/3139302e3137312e37322e302f32322d3234203d3e20323731323338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.171.72.0/22

    Signature Algorithm: sha256WithRSAEncryption
         79:7d:87:84:c7:35:4e:7f:fa:62:ac:d7:50:4c:32:c4:81:fe:
         18:1d:fc:8e:57:15:c3:eb:49:6e:65:88:67:b9:2f:c0:5c:40:
         51:c3:85:85:c1:2b:dc:6b:72:1f:51:f2:56:eb:7d:6e:7e:f9:
         76:d8:0f:9e:23:d2:05:1b:e2:df:f2:ef:65:d8:27:f5:55:98:
         d6:6d:55:6d:eb:c6:ec:08:61:69:6f:7f:f4:16:68:5b:28:cf:
         a7:dd:55:28:a0:b1:6c:0d:62:93:87:8a:8f:c5:65:87:9a:17:
         0f:99:84:21:ce:18:f0:fd:93:89:13:1f:d7:c4:4b:eb:3a:a1:
         7b:77:d1:9c:70:1f:b7:37:bc:9c:0e:e9:c3:0b:26:f4:ea:28:
         41:f9:00:9e:86:70:ce:3e:6c:81:07:80:27:01:a3:63:c5:1d:
         0c:1a:50:81:74:a6:60:79:54:3e:38:75:82:c2:95:3a:65:ec:
         10:0a:07:ac:89:23:2a:5f:8c:60:91:4e:eb:0d:5e:4d:41:07:
         91:57:e1:05:d4:1a:f8:2c:46:77:8d:45:8b:5a:a0:13:16:74:
         59:e8:33:ac:7b:d4:3c:e8:00:29:04:35:13:95:9a:4b:fc:cd:
         5e:94:77:c5:47:81:7b:f7:c8:6e:ea:c1:bd:34:09:e5:58:b0:
         ba:4c:ca:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 05:40:22 2025 by rpki-client