Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J7DbE98dPZ9CVi2THC1oEUEsrMu5jF5MefnG19nWTzjr/0/3139302e3138302e3132382e302f32302d3234203d3e203532393330.roa
File:                     3139302e3138302e3132382e302f32302d3234203d3e203532393330.roa (raw, json)
Hash identifier:          BnE1GUeIWWOo1A+rGMpsHQS+tUdDY6fl/QVf7/iLK1k=
Subject key identifier:   08:FB:DF:D6:1A:96:42:C0:A1:A9:8E:45:D0:0F:9D:ED:3D:63:B6:51
Certificate issuer:       /CN=970474B9CE8B496D78F2C3EE0924C68FCD29262D
Certificate serial:       5B2B09EB53297B3341FDC240602B1ED58333F971
Authority key identifier: 97:04:74:B9:CE:8B:49:6D:78:F2:C3:EE:09:24:C6:8F:CD:29:26:2D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/970474B9CE8B496D78F2C3EE0924C68FCD29262D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J7DbE98dPZ9CVi2THC1oEUEsrMu5jF5MefnG19nWTzjr/0/3139302e3138302e3132382e302f32302d3234203d3e203532393330.roa
Signing time:             Wed 10 Apr 2024 15:51:22 +0000
ROA not before:           Wed 10 Apr 2024 15:46:22 +0000
ROA not after:            Wed 09 Apr 2025 15:51:22 +0000
asID:                     52930
IP address blocks:        190.180.128.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/J7DbE98dPZ9CVi2THC1oEUEsrMu5jF5MefnG19nWTzjr/0/970474B9CE8B496D78F2C3EE0924C68FCD29262D.crl
                          rsync://rpki-repo.registro.br/repo/J7DbE98dPZ9CVi2THC1oEUEsrMu5jF5MefnG19nWTzjr/0/970474B9CE8B496D78F2C3EE0924C68FCD29262D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/970474B9CE8B496D78F2C3EE0924C68FCD29262D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 11:34:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:2b:09:eb:53:29:7b:33:41:fd:c2:40:60:2b:1e:d5:83:33:f9:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=970474B9CE8B496D78F2C3EE0924C68FCD29262D
        Validity
            Not Before: Apr 10 15:46:22 2024 GMT
            Not After : Apr  9 15:51:22 2025 GMT
        Subject: CN=08FBDFD61A9642C0A1A98E45D00F9DED3D63B651
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:10:3a:bb:4e:7a:be:77:25:17:c2:b2:97:7a:
                    6f:34:e6:17:88:b3:bd:cf:e9:a2:1b:ef:c2:11:cf:
                    25:58:f3:be:c4:a4:c7:f5:86:20:3a:e1:28:bc:98:
                    eb:29:e3:1c:da:e1:95:0b:af:d9:78:7d:ee:e5:fc:
                    79:60:78:0b:6f:6d:82:80:b5:12:b0:5d:22:50:d5:
                    d3:bb:ba:b0:45:5d:8f:e7:b5:c2:e2:9e:61:79:5b:
                    a1:8a:65:69:25:1e:7d:95:8f:88:df:fc:09:e6:84:
                    cd:b5:0f:27:95:03:e8:20:11:f8:a1:5b:66:49:ac:
                    c3:19:f9:e3:3f:0c:71:07:55:b1:1a:78:5e:89:bd:
                    da:c1:a3:23:39:5a:cd:06:f3:ef:00:f4:81:ea:cb:
                    7f:03:b4:b4:eb:f2:e6:98:d3:a2:a2:58:26:40:49:
                    6f:57:cc:2e:a9:56:2d:c1:a8:ba:e2:3e:b3:39:8f:
                    4b:ac:13:2a:d4:cb:12:0e:06:4f:c2:c1:2a:72:f0:
                    11:bc:8a:a5:ef:7c:c8:64:17:2c:d6:43:3e:31:0f:
                    99:26:46:f6:3e:48:e1:77:84:a4:da:87:97:81:d5:
                    a6:98:88:3d:3f:2e:6c:61:2e:7a:c3:e7:ee:32:e5:
                    39:06:c5:b4:43:c8:d8:2d:26:13:1f:33:22:e8:69:
                    d1:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:FB:DF:D6:1A:96:42:C0:A1:A9:8E:45:D0:0F:9D:ED:3D:63:B6:51
            X509v3 Authority Key Identifier:
                keyid:97:04:74:B9:CE:8B:49:6D:78:F2:C3:EE:09:24:C6:8F:CD:29:26:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J7DbE98dPZ9CVi2THC1oEUEsrMu5jF5MefnG19nWTzjr/0/970474B9CE8B496D78F2C3EE0924C68FCD29262D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/970474B9CE8B496D78F2C3EE0924C68FCD29262D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J7DbE98dPZ9CVi2THC1oEUEsrMu5jF5MefnG19nWTzjr/0/3139302e3138302e3132382e302f32302d3234203d3e203532393330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.180.128.0/20

    Signature Algorithm: sha256WithRSAEncryption
         18:72:98:fc:17:2d:ef:15:38:32:21:8e:a1:cc:ec:7b:28:07:
         54:34:56:4f:ae:c0:ab:02:f7:12:9f:36:0e:e0:74:13:c9:0d:
         16:78:11:c9:0c:4e:c4:df:22:a9:28:cc:99:dd:85:ce:7f:90:
         50:17:71:c9:1b:eb:4e:8d:91:57:4a:6a:24:3e:1a:0c:7e:b0:
         94:77:49:ba:4c:49:0a:33:57:74:1d:48:8c:5f:0b:65:0d:d6:
         28:88:c8:ea:d2:c8:91:1e:02:59:39:65:ab:0d:9e:e8:f2:3f:
         48:e9:50:0b:5b:dd:54:90:c5:6a:87:bb:5b:54:31:65:0b:48:
         34:41:10:92:d1:1d:7f:f1:28:7e:8c:d6:8a:5b:b4:ca:fe:21:
         0f:03:a9:56:71:e2:2b:b3:9b:85:4e:14:d1:7b:3c:95:e8:4d:
         fe:20:c6:7b:3b:92:b7:2b:8e:29:67:e3:02:de:a5:12:05:1b:
         84:98:89:30:4f:30:2c:12:39:2d:c8:5b:70:34:10:3b:79:24:
         de:72:1d:f3:06:30:23:f1:ea:76:21:2b:b4:56:13:1c:79:fa:
         f2:4b:9f:ef:6f:4b:04:f3:19:df:01:dc:ca:f8:63:f6:78:3f:
         13:ff:cd:02:90:1c:99:da:c9:ca:07:2e:5d:e6:5c:e8:a3:95:
         21:3b:8f:04
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUWysJ61MpezNB/cJAYCse1YMz+XEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTcwNDc0QjlDRThCNDk2RDc4RjJDM0VFMDkyNEM2OEZD
RDI5MjYyRDAeFw0yNDA0MTAxNTQ2MjJaFw0yNTA0MDkxNTUxMjJaMDMxMTAvBgNV
BAMTKDA4RkJERkQ2MUE5NjQyQzBBMUE5OEU0NUQwMEY5REVEM0Q2M0I2NTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZEDq7Tnq+dyUXwrKXem805heI
s73P6aIb78IRzyVY877EpMf1hiA64Si8mOsp4xza4ZULr9l4fe7l/HlgeAtvbYKA
tRKwXSJQ1dO7urBFXY/ntcLinmF5W6GKZWklHn2Vj4jf/AnmhM21DyeVA+ggEfih
W2ZJrMMZ+eM/DHEHVbEaeF6JvdrBoyM5Ws0G8+8A9IHqy38DtLTr8uaY06KiWCZA
SW9XzC6pVi3BqLriPrM5j0usEyrUyxIOBk/CwSpy8BG8iqXvfMhkFyzWQz4xD5km
RvY+SOF3hKTah5eB1aaYiD0/LmxhLnrD5+4y5TkGxbRDyNgtJhMfMyLoadHRAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUCPvf1hqWQsChqY5F0A+d7T1jtlEwHwYDVR0j
BBgwFoAUlwR0uc6LSW148sPuCSTGj80pJi0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSjdEYkU5OGRQWjlDVmkyVEhDMW9FVUVzck11NWpGNU1lZm5HMTluV1R6
anIvMC85NzA0NzRCOUNFOEI0OTZENzhGMkMzRUUwOTI0QzY4RkNEMjkyNjJELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzk3MDQ3NEI5Q0U4QjQ5NkQ3
OEYyQzNFRTA5MjRDNjhGQ0QyOTI2MkQuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0o3RGJFOThkUFo5Q1ZpMlRIQzFvRVVFc3JNdTVqRjVNZWZuRzE5bldUempyLzAv
MzEzOTMwMmUzMTM4MzAyZTMxMzIzODJlMzAyZjMyMzAyZDMyMzQyMDNkM2UyMDM1
MzIzOTMzMzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAS+tIAwDQYJKoZIhvcNAQELBQADggEBABhymPwX
Le8VODIhjqHM7HsoB1Q0Vk+uwKsC9xKfNg7gdBPJDRZ4EckMTsTfIqkozJndhc5/
kFAXcckb606NkVdKaiQ+Ggx+sJR3SbpMSQozV3QdSIxfC2UN1iiIyOrSyJEeAlk5
ZasNnujyP0jpUAtb3VSQxWqHu1tUMWULSDRBEJLRHX/xKH6M1opbtMr+IQ8DqVZx
4iuzm4VOFNF7PJXoTf4gxns7krcrjiln4wLepRIFG4SYiTBPMCwSOS3IW3A0EDt5
JN5yHfMGMCPx6nYhK7RWExx5+vJLn+9vSwTzGd8B3Mr4Y/Z4PxP/zQKQHJnaycoH
Ll3mXOijlSE7jwQ=
-----END CERTIFICATE-----
Generated at Fri Jun 28 13:25:24 2024 by rpki-client on console-ams.rpki-client.org