Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/RdJn5EfmmgbHnZLC8FZiWuVj6xHDax3MwnWYTaUawyK/0/3139302e332e3136342e302f32342d3234203d3e20323731363033.roa
File:                     3139302e332e3136342e302f32342d3234203d3e20323731363033.roa (raw, json)
Hash identifier:          msgAyNNvQRPv0l8kE70d7l4v19iKAS+gA38asDPC9WQ=
Subject key identifier:   97:43:8D:7C:B5:BA:F7:E9:2F:5D:74:B0:70:4D:02:9D:7F:24:E9:04
Certificate issuer:       /CN=8A93F234754BF521193905D6EAF7AFDBB2811E48
Certificate serial:       451E5213F36DBA848E26E1BDA484C7835B4360D5
Authority key identifier: 8A:93:F2:34:75:4B:F5:21:19:39:05:D6:EA:F7:AF:DB:B2:81:1E:48
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8A93F234754BF521193905D6EAF7AFDBB2811E48.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/RdJn5EfmmgbHnZLC8FZiWuVj6xHDax3MwnWYTaUawyK/0/3139302e332e3136342e302f32342d3234203d3e20323731363033.roa
Signing time:             Wed 28 Aug 2024 00:32:41 +0000
ROA not before:           Wed 28 Aug 2024 00:27:41 +0000
ROA not after:            Wed 27 Aug 2025 00:32:41 +0000
asID:                     271603
IP address blocks:        190.3.164.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/RdJn5EfmmgbHnZLC8FZiWuVj6xHDax3MwnWYTaUawyK/0/8A93F234754BF521193905D6EAF7AFDBB2811E48.crl
                          rsync://rpki-repo.registro.br/repo/RdJn5EfmmgbHnZLC8FZiWuVj6xHDax3MwnWYTaUawyK/0/8A93F234754BF521193905D6EAF7AFDBB2811E48.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8A93F234754BF521193905D6EAF7AFDBB2811E48.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 17 Feb 2025 06:29:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:1e:52:13:f3:6d:ba:84:8e:26:e1:bd:a4:84:c7:83:5b:43:60:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8A93F234754BF521193905D6EAF7AFDBB2811E48
        Validity
            Not Before: Aug 28 00:27:41 2024 GMT
            Not After : Aug 27 00:32:41 2025 GMT
        Subject: CN=97438D7CB5BAF7E92F5D74B0704D029D7F24E904
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:8b:98:a3:92:a5:e0:b0:ba:fb:4d:21:de:a4:
                    62:fb:57:e7:59:10:3a:7a:38:75:8c:ec:4c:29:ec:
                    55:57:d0:2b:d1:93:4e:46:18:57:37:51:7b:b3:52:
                    ad:70:61:1e:18:93:72:9d:8c:a7:74:dd:31:b6:78:
                    a1:40:71:6e:55:b8:8c:e1:9e:a3:11:ac:af:23:d1:
                    d3:4f:cd:d9:47:6f:42:4f:80:b4:3e:ed:53:48:5e:
                    30:6e:8a:d4:bc:c0:91:d3:3a:27:bb:46:0d:e7:8e:
                    65:66:a8:22:fa:56:87:1f:0a:41:7f:43:66:df:aa:
                    cf:ba:08:f5:8c:2c:29:b7:4c:dc:f1:0b:1c:81:e8:
                    32:3c:ab:a6:f1:64:a7:93:2d:af:c4:5c:7e:9c:13:
                    a3:c1:73:55:e2:b9:d5:61:a4:47:af:24:09:64:3c:
                    8f:61:e4:06:8d:fa:c5:5a:10:4a:d2:6d:23:48:5f:
                    45:65:50:6e:31:26:b3:5f:e6:3d:91:ed:55:63:ca:
                    b6:de:a2:35:8a:3b:02:8b:bf:b4:6d:66:37:1d:21:
                    56:42:5a:f9:7a:a9:2d:34:f8:de:55:31:e5:82:0b:
                    b5:7f:50:3f:9e:e1:c0:60:3a:4d:6d:3a:45:9a:26:
                    b9:80:72:50:db:43:c7:51:9f:b6:6d:b6:ff:8e:db:
                    aa:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:43:8D:7C:B5:BA:F7:E9:2F:5D:74:B0:70:4D:02:9D:7F:24:E9:04
            X509v3 Authority Key Identifier:
                keyid:8A:93:F2:34:75:4B:F5:21:19:39:05:D6:EA:F7:AF:DB:B2:81:1E:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/RdJn5EfmmgbHnZLC8FZiWuVj6xHDax3MwnWYTaUawyK/0/8A93F234754BF521193905D6EAF7AFDBB2811E48.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8A93F234754BF521193905D6EAF7AFDBB2811E48.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/RdJn5EfmmgbHnZLC8FZiWuVj6xHDax3MwnWYTaUawyK/0/3139302e332e3136342e302f32342d3234203d3e20323731363033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.3.164.0/24

    Signature Algorithm: sha256WithRSAEncryption
         48:5a:02:d4:15:aa:40:6d:09:15:66:e9:7b:ec:11:ce:c4:b2:
         e2:cc:8d:1c:23:c8:df:ec:32:61:c2:7d:c4:a8:17:86:c0:a4:
         1c:be:42:44:07:b6:9f:12:6c:31:6b:43:75:b9:87:f1:c5:c3:
         4c:68:77:88:56:00:e2:ab:58:d6:73:7f:f3:81:63:38:01:2c:
         59:74:62:0d:8a:19:f9:97:74:59:d7:2e:76:6d:e1:a1:3e:ae:
         4e:d8:d5:92:dc:ea:5b:0f:62:d9:c5:c7:63:00:5c:82:bd:25:
         e7:bf:02:08:12:bf:01:7a:5f:e3:33:21:61:3d:29:58:c5:1b:
         31:b2:72:ea:49:d8:6b:d5:b4:30:22:fe:f3:94:7e:47:16:e4:
         4e:b2:b8:cc:0f:8d:3b:8d:1e:32:42:5e:76:c7:c1:99:94:24:
         14:33:ba:f8:78:d4:e8:4d:42:04:93:7f:e8:2c:d8:0f:68:20:
         51:a1:e2:8e:6a:80:f9:ca:d4:bc:f9:b1:1f:0d:76:65:ad:b7:
         06:99:5f:0a:fb:85:5e:b3:ad:f4:f1:76:88:8e:a4:c1:82:fc:
         f2:b0:d9:3c:94:01:51:ba:91:22:6d:53:41:c6:6c:43:d5:7b:
         a4:62:84:44:1b:2d:67:c1:a2:57:85:f0:3b:0d:bc:bf:a7:cd:
         fb:10:b8:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:03:34 2025 by rpki-client