Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J7DbE98dPZ9CVi2THC1oEUEsrMu5jF5MefnG19nWTzjr/0/3139302e3138302e3134312e302f32342d3234203d3e203532393330.roa
File:                     3139302e3138302e3134312e302f32342d3234203d3e203532393330.roa (raw, json)
Hash identifier:          ZYWi4qKWoIi0nkDe/sErymkgwvQkxQj0VKxNn4xpguA=
Subject key identifier:   16:22:89:E9:5A:D8:41:68:97:03:66:D5:16:F5:F6:9E:AF:3D:22:05
Certificate issuer:       /CN=B0F9F75E2FF219B2BDD625EBBC294A989BAB0EBD
Certificate serial:       6343A107CE2E4F6C7D0EE47E3A3CFCF0AE3F3D62
Authority key identifier: B0:F9:F7:5E:2F:F2:19:B2:BD:D6:25:EB:BC:29:4A:98:9B:AB:0E:BD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B0F9F75E2FF219B2BDD625EBBC294A989BAB0EBD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J7DbE98dPZ9CVi2THC1oEUEsrMu5jF5MefnG19nWTzjr/0/3139302e3138302e3134312e302f32342d3234203d3e203532393330.roa
Signing time:             Fri 17 Jan 2025 16:16:46 +0000
ROA not before:           Fri 17 Jan 2025 16:11:46 +0000
ROA not after:            Fri 16 Jan 2026 16:16:46 +0000
asID:                     52930
IP address blocks:        190.180.141.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/J7DbE98dPZ9CVi2THC1oEUEsrMu5jF5MefnG19nWTzjr/0/B0F9F75E2FF219B2BDD625EBBC294A989BAB0EBD.crl
                          rsync://rpki-repo.registro.br/repo/J7DbE98dPZ9CVi2THC1oEUEsrMu5jF5MefnG19nWTzjr/0/B0F9F75E2FF219B2BDD625EBBC294A989BAB0EBD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B0F9F75E2FF219B2BDD625EBBC294A989BAB0EBD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 17 Feb 2025 20:49:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:43:a1:07:ce:2e:4f:6c:7d:0e:e4:7e:3a:3c:fc:f0:ae:3f:3d:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B0F9F75E2FF219B2BDD625EBBC294A989BAB0EBD
        Validity
            Not Before: Jan 17 16:11:46 2025 GMT
            Not After : Jan 16 16:16:46 2026 GMT
        Subject: CN=162289E95AD84168970366D516F5F69EAF3D2205
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:27:1f:39:ac:34:2e:2d:ae:4a:f5:e7:08:fc:
                    67:6c:f9:fd:0b:de:cc:d3:1b:bd:a7:95:6b:66:81:
                    a5:e2:c6:c0:c0:3a:ef:11:85:d0:fc:54:d9:c7:41:
                    63:47:5a:82:2c:7f:39:a5:de:11:72:8d:09:14:10:
                    69:d1:50:89:ee:01:bb:b2:70:68:07:4d:24:f7:ef:
                    20:34:fa:f7:6a:ed:f4:6d:52:5b:b5:26:60:a9:20:
                    84:76:52:06:f0:0c:b5:5d:d2:08:19:d2:84:ff:4c:
                    92:17:57:5d:cf:d8:8e:08:7e:f8:77:ae:bd:99:46:
                    7c:00:75:c2:49:e7:eb:08:10:20:3e:5c:59:f0:34:
                    08:46:4b:89:15:c3:4e:09:f7:40:17:c8:34:a2:61:
                    38:ac:79:72:ec:f4:f4:d8:86:d9:69:9b:e8:ca:b0:
                    52:1c:21:d6:77:c3:d8:91:22:94:70:2a:1f:10:bc:
                    01:9e:68:28:fa:a5:3e:24:4a:d0:0b:ad:60:e6:ca:
                    76:ff:8f:6c:64:0b:dd:2b:a9:d1:fa:d8:15:70:b1:
                    c3:5c:5b:d6:ed:ce:eb:11:48:a7:b4:72:49:50:0a:
                    00:7e:c2:b9:9d:a8:3b:ab:aa:74:f7:01:b8:b2:c2:
                    17:a3:eb:4a:06:f2:8c:53:8f:4e:8a:ec:90:de:5c:
                    ef:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:22:89:E9:5A:D8:41:68:97:03:66:D5:16:F5:F6:9E:AF:3D:22:05
            X509v3 Authority Key Identifier:
                keyid:B0:F9:F7:5E:2F:F2:19:B2:BD:D6:25:EB:BC:29:4A:98:9B:AB:0E:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J7DbE98dPZ9CVi2THC1oEUEsrMu5jF5MefnG19nWTzjr/0/B0F9F75E2FF219B2BDD625EBBC294A989BAB0EBD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B0F9F75E2FF219B2BDD625EBBC294A989BAB0EBD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J7DbE98dPZ9CVi2THC1oEUEsrMu5jF5MefnG19nWTzjr/0/3139302e3138302e3134312e302f32342d3234203d3e203532393330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.180.141.0/24

    Signature Algorithm: sha256WithRSAEncryption
         50:cf:ad:c1:1f:0d:80:bc:c0:ee:c6:a2:05:08:0e:81:a7:60:
         72:40:f2:c1:1d:70:cf:44:18:e7:cb:f1:1e:65:c5:48:7d:0b:
         81:74:22:9f:5c:33:f7:86:22:c7:ef:41:7c:62:13:4b:5a:86:
         ce:23:50:51:a0:78:b7:58:ee:be:ce:71:09:7b:f4:82:98:35:
         e1:f8:aa:6a:8e:4a:b6:bb:97:18:71:39:8e:3b:9f:b5:be:78:
         e7:c0:9f:54:5d:0e:e3:a6:0b:77:bc:ff:0a:7f:b9:d9:d9:9e:
         9f:84:7f:77:f0:8d:fd:e3:72:1a:48:5c:b8:f6:e4:a1:65:31:
         4b:fd:95:ab:61:49:76:3d:60:b5:a0:85:51:95:2a:b2:20:81:
         69:af:13:02:22:45:2d:16:81:9e:48:e8:12:dd:8d:1a:bb:34:
         73:d4:2b:08:2f:0d:21:d7:56:81:d6:82:70:27:f5:d6:26:40:
         8a:ff:53:da:22:31:e2:c3:b5:83:5a:27:0a:83:97:79:c6:6f:
         93:86:8b:65:7c:d5:2e:5c:16:d8:e4:c1:66:c6:57:4e:0d:cd:
         47:be:18:bf:2e:71:6b:4b:c2:88:11:fb:0a:ed:51:7e:0c:7b:
         91:4a:4f:2b:32:f0:5c:c0:8d:f1:11:12:8e:db:10:23:81:4d:
         d0:4a:ec:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:06:09 2025 by rpki-client