Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GnSx9siF1X4RztCY1H5YjGHCYEm8AtiXM56u8itbab8J/1/3139302e38332e35362e302f32322d3332203d3e20323730333534.roa
File:                     3139302e38332e35362e302f32322d3332203d3e20323730333534.roa (raw, json)
Hash identifier:          Lb5+uN/Xx19aCPmiB9TnA8LStQBp9L2ycSRAuX2s2D8=
Subject key identifier:   99:C6:2F:33:E6:9A:24:C4:73:AB:8F:CB:56:D1:D3:14:85:5A:70:78
Certificate issuer:       /CN=736CC7BD00E444B3C507A4A165D0774513CFB15B
Certificate serial:       0E556BB69C76595C63B3100FFDCE6EA34956B30E
Authority key identifier: 73:6C:C7:BD:00:E4:44:B3:C5:07:A4:A1:65:D0:77:45:13:CF:B1:5B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/736CC7BD00E444B3C507A4A165D0774513CFB15B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GnSx9siF1X4RztCY1H5YjGHCYEm8AtiXM56u8itbab8J/1/3139302e38332e35362e302f32322d3332203d3e20323730333534.roa
Signing time:             Wed 03 Apr 2024 23:15:06 +0000
ROA not before:           Wed 03 Apr 2024 23:10:06 +0000
ROA not after:            Wed 02 Apr 2025 23:15:06 +0000
asID:                     270354
IP address blocks:        190.83.56.0/22 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GnSx9siF1X4RztCY1H5YjGHCYEm8AtiXM56u8itbab8J/1/736CC7BD00E444B3C507A4A165D0774513CFB15B.crl
                          rsync://rpki-repo.registro.br/repo/GnSx9siF1X4RztCY1H5YjGHCYEm8AtiXM56u8itbab8J/1/736CC7BD00E444B3C507A4A165D0774513CFB15B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/736CC7BD00E444B3C507A4A165D0774513CFB15B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:55:6b:b6:9c:76:59:5c:63:b3:10:0f:fd:ce:6e:a3:49:56:b3:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=736CC7BD00E444B3C507A4A165D0774513CFB15B
        Validity
            Not Before: Apr  3 23:10:06 2024 GMT
            Not After : Apr  2 23:15:06 2025 GMT
        Subject: CN=99C62F33E69A24C473AB8FCB56D1D314855A7078
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:85:7f:f4:89:75:7f:26:3d:07:a0:4e:cd:bb:
                    3a:45:95:5d:16:29:6a:8a:75:ae:0f:bd:ce:6a:64:
                    77:e0:e6:17:c4:c1:54:63:0f:87:52:df:20:ee:dc:
                    f2:ac:e7:ab:b4:dd:44:4b:a3:a8:cd:0e:20:0f:81:
                    96:74:e6:56:bf:27:56:82:c7:ee:92:ff:61:a1:df:
                    7a:c0:e3:c6:84:23:5a:96:d9:12:f8:0e:50:49:a9:
                    52:11:86:da:cd:c6:58:74:80:28:85:5c:8f:c1:d2:
                    46:d0:0f:ca:fb:2e:81:6e:c4:ad:c3:6f:c8:46:5a:
                    7e:0f:10:1e:c2:f9:a5:bd:90:b4:68:75:14:aa:4b:
                    ff:21:8d:b5:23:ce:61:91:49:39:dc:61:06:56:f3:
                    2e:9a:38:a8:11:d5:d6:ca:49:84:cd:71:8a:cb:53:
                    1e:3b:31:83:bf:8a:8a:86:5c:af:58:e6:3c:8d:e9:
                    a0:63:5e:7e:0a:18:f3:eb:9e:20:f3:e5:f0:6b:58:
                    95:4f:cf:41:62:90:56:29:ec:97:46:d3:cc:f9:35:
                    28:92:ac:5d:01:4f:45:aa:3f:31:34:5d:91:b7:34:
                    a1:b7:5b:2d:d2:f9:57:c9:ab:bc:70:d5:d1:7c:ba:
                    52:83:c1:c0:5a:20:08:ad:65:d7:c3:5e:ed:5d:14:
                    63:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:C6:2F:33:E6:9A:24:C4:73:AB:8F:CB:56:D1:D3:14:85:5A:70:78
            X509v3 Authority Key Identifier:
                keyid:73:6C:C7:BD:00:E4:44:B3:C5:07:A4:A1:65:D0:77:45:13:CF:B1:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GnSx9siF1X4RztCY1H5YjGHCYEm8AtiXM56u8itbab8J/1/736CC7BD00E444B3C507A4A165D0774513CFB15B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/736CC7BD00E444B3C507A4A165D0774513CFB15B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GnSx9siF1X4RztCY1H5YjGHCYEm8AtiXM56u8itbab8J/1/3139302e38332e35362e302f32322d3332203d3e20323730333534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.83.56.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7c:36:9f:2c:60:9c:cd:45:29:6b:6f:13:95:6f:2f:aa:11:23:
         95:e5:b9:8b:08:8d:ea:f5:f7:ea:8d:b1:00:31:51:ea:56:65:
         5c:00:89:d3:a8:f2:11:29:56:9d:d4:2a:d7:5f:25:3b:c4:25:
         b0:4e:27:e0:5b:80:d6:66:dc:c6:c2:b8:83:12:e3:ca:8a:29:
         a3:ef:5c:b3:9e:d9:66:a2:32:cf:7d:d5:cd:b2:6b:8b:05:3e:
         d0:03:26:f3:53:2d:83:e2:b6:8a:21:41:4b:d8:be:f8:c1:f5:
         76:79:eb:72:93:02:f3:01:fb:7b:2b:60:ab:06:b0:80:63:7b:
         b5:80:60:5f:3d:75:14:f8:3e:3c:0a:d6:03:ab:6e:9f:47:7c:
         7c:b6:41:7c:d8:4b:9f:30:e0:ac:5f:1f:93:b0:8d:eb:4e:85:
         32:83:f0:8e:29:18:50:6a:80:70:66:8d:9e:dd:4f:e7:64:d7:
         b3:0b:3f:c0:9a:7b:79:71:41:fc:53:3b:6a:03:5f:39:04:e6:
         1a:d5:3a:24:e9:bf:81:b1:de:8a:e0:2d:10:fe:c1:ea:f4:88:
         14:36:a1:19:99:1f:4e:04:4a:2d:cd:5a:5b:9c:b4:ad:73:67:
         ac:9b:2d:66:b1:c4:55:3d:cd:61:48:b0:74:c7:dd:53:e6:e5:
         ed:db:3c:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 02:30:12 2024 by rpki-client on console-fra.rpki-client.org