Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J7DbE98dPZ9CVi2THC1oEUEsrMu5jF5MefnG19nWTzjr/0/3139302e3138302e3132382e302f32302d3332203d3e203532393330.roa
File:                     3139302e3138302e3132382e302f32302d3332203d3e203532393330.roa (raw, json)
Hash identifier:          yN5zVnMbgU6tpT9kv6Blq8TfrEd2HnZ+GTfv1x5/VTM=
Subject key identifier:   32:C5:D8:0C:EF:0A:16:5C:A2:D7:9A:91:40:00:32:A2:51:5E:A3:42
Certificate issuer:       /CN=6736156E675A917970802E9BE2FD1DDCB869A61B
Certificate serial:       7B7A15DA7C1C5F430746964459FA9CACA56386BF
Authority key identifier: 67:36:15:6E:67:5A:91:79:70:80:2E:9B:E2:FD:1D:DC:B8:69:A6:1B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6736156E675A917970802E9BE2FD1DDCB869A61B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J7DbE98dPZ9CVi2THC1oEUEsrMu5jF5MefnG19nWTzjr/0/3139302e3138302e3132382e302f32302d3332203d3e203532393330.roa
Signing time:             Sun 22 Sep 2024 19:43:46 +0000
ROA not before:           Sun 22 Sep 2024 19:38:46 +0000
ROA not after:            Sun 21 Sep 2025 19:43:46 +0000
asID:                     52930
IP address blocks:        190.180.128.0/20 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/J7DbE98dPZ9CVi2THC1oEUEsrMu5jF5MefnG19nWTzjr/0/6736156E675A917970802E9BE2FD1DDCB869A61B.crl
                          rsync://rpki-repo.registro.br/repo/J7DbE98dPZ9CVi2THC1oEUEsrMu5jF5MefnG19nWTzjr/0/6736156E675A917970802E9BE2FD1DDCB869A61B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6736156E675A917970802E9BE2FD1DDCB869A61B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 10:42:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:7a:15:da:7c:1c:5f:43:07:46:96:44:59:fa:9c:ac:a5:63:86:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6736156E675A917970802E9BE2FD1DDCB869A61B
        Validity
            Not Before: Sep 22 19:38:46 2024 GMT
            Not After : Sep 21 19:43:46 2025 GMT
        Subject: CN=32C5D80CEF0A165CA2D79A91400032A2515EA342
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:f4:9a:a4:a3:43:94:84:7f:41:11:16:c7:77:
                    7a:65:ed:df:b7:cc:70:02:1c:fc:5a:3f:10:8a:59:
                    de:95:61:6d:10:57:25:37:02:95:03:0a:99:cb:52:
                    7b:b2:62:7a:3d:62:f9:1b:b3:c8:0c:eb:cd:9f:00:
                    aa:c0:41:8b:71:ea:0e:4c:33:82:79:9d:5e:ae:c8:
                    6d:20:ab:ff:2a:ea:41:60:ec:68:5f:4f:5b:94:34:
                    0f:54:2e:61:81:fd:40:60:54:d3:4d:e5:f8:14:fa:
                    2a:67:25:a4:15:d0:89:11:0c:52:c6:b4:32:21:c0:
                    b4:66:80:c3:1b:4e:40:a5:f5:d4:fc:ba:8c:32:a0:
                    31:02:8f:59:05:1d:66:f3:c6:43:9e:b7:f0:48:fd:
                    ff:b9:91:1e:45:91:bd:b0:f2:34:77:34:e9:d4:bd:
                    2d:59:c2:2d:f9:86:af:d1:e9:56:c0:a0:7a:54:09:
                    6e:53:ef:d1:38:1c:ff:6b:b4:38:f2:89:fa:ac:e8:
                    93:91:a8:b9:7b:6c:7a:a2:b9:8e:b5:c8:d4:81:d8:
                    df:89:b7:cd:1b:ac:99:a9:6a:40:cd:93:df:f6:11:
                    05:19:06:df:f0:9e:82:f0:6a:36:e1:11:d8:37:54:
                    23:33:da:26:d6:a0:a2:33:2d:a4:f6:31:69:17:79:
                    f5:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:C5:D8:0C:EF:0A:16:5C:A2:D7:9A:91:40:00:32:A2:51:5E:A3:42
            X509v3 Authority Key Identifier:
                keyid:67:36:15:6E:67:5A:91:79:70:80:2E:9B:E2:FD:1D:DC:B8:69:A6:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J7DbE98dPZ9CVi2THC1oEUEsrMu5jF5MefnG19nWTzjr/0/6736156E675A917970802E9BE2FD1DDCB869A61B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6736156E675A917970802E9BE2FD1DDCB869A61B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J7DbE98dPZ9CVi2THC1oEUEsrMu5jF5MefnG19nWTzjr/0/3139302e3138302e3132382e302f32302d3332203d3e203532393330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.180.128.0/20

    Signature Algorithm: sha256WithRSAEncryption
         28:f2:a8:3b:86:47:fb:37:32:a4:1a:cc:69:6c:ad:d1:11:86:
         97:db:c9:83:82:e2:8f:1d:12:c8:d2:02:c8:66:26:76:9e:ab:
         9a:47:cd:cb:31:5d:88:73:1b:b3:de:47:74:31:ca:be:54:25:
         fb:58:57:dc:c4:91:9e:8f:3d:e2:37:12:1c:a4:0d:b1:91:13:
         0a:bf:48:d9:87:37:17:45:2f:d6:1f:6d:68:a2:49:52:9a:f8:
         58:c1:25:ea:da:43:ac:82:4e:a2:81:97:f9:a0:a5:8f:f1:78:
         7e:d5:1c:d3:f8:a8:54:91:26:49:6c:07:64:46:e2:ec:07:cc:
         3c:dc:7c:c5:3d:f9:31:77:38:74:b7:1b:fc:90:bf:f9:f1:e7:
         c6:be:2a:d8:16:ae:af:dd:e9:98:0b:b9:fa:c7:d1:2b:3e:af:
         2c:e8:3b:08:14:0a:b9:a4:8b:e5:c7:51:c7:2c:72:43:19:a0:
         7d:c8:ff:2a:49:ff:61:0f:c9:55:92:0d:3b:20:15:ed:c3:e0:
         a4:27:c6:de:d8:89:6f:99:e3:b3:5d:fc:c1:f5:70:5b:a4:30:
         22:97:8b:35:fc:25:d9:2d:8a:b9:6a:d2:58:18:86:7d:ae:b2:
         b9:3f:2d:3b:05:31:61:e9:f5:a1:5b:a0:7b:64:69:6c:6e:cc:
         87:54:07:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:39:28 2024 by rpki-client on console-ams.rpki-client.org