Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/WSxxAn3UtmrYsXRXmUnPj6ZjioavzKUqkWzvnNrBGyw/1/3139322e3134302e3130332e302f32342d3234203d3e20323636323536.roa
File:                     3139322e3134302e3130332e302f32342d3234203d3e20323636323536.roa (raw, json)
Hash identifier:          iDmbCBxD2mpLU6xfI6iFGCnI5aly5VlTx+aSJK1iPwM=
Subject key identifier:   F5:4B:5E:EE:74:05:FA:BA:D9:2A:36:6E:14:43:86:AB:E0:39:02:60
Certificate issuer:       /CN=98A11CF45A997CA909604F2E4619398BBAA2D923
Certificate serial:       4D1331E17F84E8D7E7A86760C472322FA546DDA7
Authority key identifier: 98:A1:1C:F4:5A:99:7C:A9:09:60:4F:2E:46:19:39:8B:BA:A2:D9:23
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/98A11CF45A997CA909604F2E4619398BBAA2D923.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/WSxxAn3UtmrYsXRXmUnPj6ZjioavzKUqkWzvnNrBGyw/1/3139322e3134302e3130332e302f32342d3234203d3e20323636323536.roa
Signing time:             Thu 04 Apr 2024 02:15:59 +0000
ROA not before:           Thu 04 Apr 2024 02:10:59 +0000
ROA not after:            Thu 03 Apr 2025 02:15:59 +0000
asID:                     266256
IP address blocks:        192.140.103.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/WSxxAn3UtmrYsXRXmUnPj6ZjioavzKUqkWzvnNrBGyw/1/98A11CF45A997CA909604F2E4619398BBAA2D923.crl
                          rsync://rpki-repo.registro.br/repo/WSxxAn3UtmrYsXRXmUnPj6ZjioavzKUqkWzvnNrBGyw/1/98A11CF45A997CA909604F2E4619398BBAA2D923.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/98A11CF45A997CA909604F2E4619398BBAA2D923.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 11:21:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:13:31:e1:7f:84:e8:d7:e7:a8:67:60:c4:72:32:2f:a5:46:dd:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98A11CF45A997CA909604F2E4619398BBAA2D923
        Validity
            Not Before: Apr  4 02:10:59 2024 GMT
            Not After : Apr  3 02:15:59 2025 GMT
        Subject: CN=F54B5EEE7405FABAD92A366E144386ABE0390260
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:85:4a:5a:b1:5e:74:65:81:be:fc:50:f9:f3:
                    4a:30:a3:a3:1a:dd:98:9e:d9:f2:e1:59:62:47:2a:
                    67:a6:8a:5c:94:83:06:48:eb:84:fd:98:81:44:a6:
                    0a:59:fe:da:dd:76:c0:3d:74:0e:13:13:09:4a:20:
                    89:c6:10:3b:ed:bb:eb:1b:44:2e:25:77:2b:19:62:
                    1c:3f:58:e6:04:5d:d2:be:e0:2e:54:da:ae:28:a3:
                    d4:e8:46:ec:83:69:41:36:8a:af:fb:6b:c1:33:64:
                    f5:9c:b6:cf:12:b2:e1:75:27:af:21:2a:07:c9:95:
                    20:be:e6:64:6c:b8:ab:f3:4d:a1:e2:79:0a:2d:ca:
                    a6:c1:9e:84:79:4b:04:98:cd:15:2e:ae:88:16:3b:
                    e2:57:19:90:53:2e:9d:a7:a2:d6:9c:ad:94:d5:c6:
                    9e:78:44:88:ba:cc:48:55:82:1b:16:78:09:69:0d:
                    96:f5:b6:a8:c1:c0:99:27:98:ea:d1:28:a8:3d:dc:
                    98:71:87:7b:53:70:e7:83:a4:4b:d9:6f:d2:7a:fc:
                    5d:be:cf:6e:72:5d:b9:bf:36:a5:e3:e2:21:d3:fa:
                    cb:d5:1f:a6:4f:dd:58:ae:a5:0b:bf:cc:82:f3:26:
                    bb:1e:bd:98:40:a6:06:42:cf:97:76:f5:36:16:29:
                    87:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:4B:5E:EE:74:05:FA:BA:D9:2A:36:6E:14:43:86:AB:E0:39:02:60
            X509v3 Authority Key Identifier:
                keyid:98:A1:1C:F4:5A:99:7C:A9:09:60:4F:2E:46:19:39:8B:BA:A2:D9:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/WSxxAn3UtmrYsXRXmUnPj6ZjioavzKUqkWzvnNrBGyw/1/98A11CF45A997CA909604F2E4619398BBAA2D923.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/98A11CF45A997CA909604F2E4619398BBAA2D923.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/WSxxAn3UtmrYsXRXmUnPj6ZjioavzKUqkWzvnNrBGyw/1/3139322e3134302e3130332e302f32342d3234203d3e20323636323536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.140.103.0/24

    Signature Algorithm: sha256WithRSAEncryption
         10:a1:69:db:12:72:c1:14:5b:a8:78:e0:3e:19:e5:7f:7b:ae:
         b5:11:e6:e0:f7:0d:49:d4:79:e6:9c:99:c2:be:cb:1d:5f:68:
         e6:df:0a:37:6a:5d:da:22:b6:cf:e2:79:66:b4:06:41:a4:3d:
         16:b8:19:18:b7:ab:26:86:46:8e:eb:07:3a:a6:60:b6:b4:4a:
         16:e6:bc:b9:22:e9:76:ab:17:e6:8a:8b:0f:68:f2:a4:cb:c3:
         f1:30:d6:d9:cc:74:39:1b:cd:f9:71:ba:0f:60:4a:e7:5c:25:
         fc:9f:79:97:7f:dc:2d:7a:6a:b6:5b:bd:03:5d:e1:d4:e5:2e:
         0c:bf:a1:c4:1d:95:7a:32:85:86:24:f1:ae:bd:5f:38:21:99:
         9b:a9:50:87:df:9f:93:58:f9:4f:f1:17:94:36:54:ee:b1:73:
         bc:a0:9e:2b:44:1e:1e:30:09:45:af:ba:ca:26:90:5e:75:97:
         41:9a:62:b0:07:34:48:73:81:af:47:30:90:2e:a4:8b:58:cc:
         82:e7:a6:ae:50:7e:1b:cd:35:b1:a6:90:21:21:b3:9e:61:c1:
         eb:08:e8:a9:1b:e3:eb:48:b3:98:c2:f3:ed:59:f9:b9:07:6a:
         3d:9d:3b:ca:c0:d4:7b:08:da:dc:8b:1b:2d:0a:70:e3:47:25:
         d9:01:ce:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:30:14 2024 by rpki-client on console-fra.rpki-client.org