Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/snFV25XvGkaJxiuUEY188QhAXiw1KPoveBPm89bsVw1/1/3138392e38352e3131322e302f32322d3234203d3e20323730353430.roa
File:                     3138392e38352e3131322e302f32322d3234203d3e20323730353430.roa (raw, json)
Hash identifier:          oHTfIltLW2dp8HnSV0rqK3vlFyCmDv+6xgzQ0YiPvIU=
Subject key identifier:   3A:93:49:67:5E:77:8B:01:59:2A:90:13:BF:7D:EB:13:27:31:60:E4
Certificate issuer:       /CN=73E65EE174B429E845F371CDDD00B81BC489A017
Certificate serial:       26ABFCFA64FC122E46D9C81CE3A4F4E913D63CD8
Authority key identifier: 73:E6:5E:E1:74:B4:29:E8:45:F3:71:CD:DD:00:B8:1B:C4:89:A0:17
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/73E65EE174B429E845F371CDDD00B81BC489A017.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/snFV25XvGkaJxiuUEY188QhAXiw1KPoveBPm89bsVw1/1/3138392e38352e3131322e302f32322d3234203d3e20323730353430.roa
Signing time:             Wed 03 Apr 2024 18:32:23 +0000
ROA not before:           Wed 03 Apr 2024 18:27:23 +0000
ROA not after:            Wed 02 Apr 2025 18:32:23 +0000
asID:                     270540
IP address blocks:        189.85.112.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/snFV25XvGkaJxiuUEY188QhAXiw1KPoveBPm89bsVw1/1/73E65EE174B429E845F371CDDD00B81BC489A017.crl
                          rsync://rpki-repo.registro.br/repo/snFV25XvGkaJxiuUEY188QhAXiw1KPoveBPm89bsVw1/1/73E65EE174B429E845F371CDDD00B81BC489A017.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/73E65EE174B429E845F371CDDD00B81BC489A017.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 10:40:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:ab:fc:fa:64:fc:12:2e:46:d9:c8:1c:e3:a4:f4:e9:13:d6:3c:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73E65EE174B429E845F371CDDD00B81BC489A017
        Validity
            Not Before: Apr  3 18:27:23 2024 GMT
            Not After : Apr  2 18:32:23 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:f2:15:5e:f5:55:30:cf:79:65:db:03:e7:6b:
                    4d:cc:7d:66:32:07:f7:55:1a:8c:bd:6e:2d:f8:07:
                    87:4d:49:87:87:b6:b4:f9:df:8a:41:c0:85:1c:15:
                    1f:d0:d1:fe:64:c2:af:eb:d5:35:08:74:86:3a:28:
                    b6:27:64:2c:f9:bc:8a:e4:b3:e2:81:1e:93:89:57:
                    6d:fa:6e:ef:ca:21:81:8a:27:8b:72:1f:95:12:d1:
                    cb:40:9b:f6:c4:81:73:87:f7:52:1a:24:7c:f5:fe:
                    7e:fc:34:6f:22:d4:3a:03:db:e2:27:1a:94:e1:77:
                    ef:75:b6:50:87:54:4b:4b:09:43:e7:73:0d:f5:7d:
                    3f:94:0c:f2:25:64:25:be:5c:6b:9c:59:e2:2d:e7:
                    21:f0:da:1d:16:71:9a:11:dd:b7:10:fd:ce:f9:c0:
                    96:e7:f5:af:ff:f3:33:98:18:50:bb:01:65:63:95:
                    f2:3d:7b:6c:39:ec:ff:9f:65:56:8d:37:5a:54:5e:
                    17:a9:2a:aa:09:ac:24:ae:7e:75:f8:9f:90:a2:c8:
                    61:ff:11:61:44:67:5c:5f:01:a1:16:25:b6:48:25:
                    0c:ba:00:d0:20:cd:5d:1b:e8:f1:64:8d:db:9e:53:
                    98:70:a2:fd:f1:3c:b0:19:10:0a:24:87:b5:1f:da:
                    0f:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:93:49:67:5E:77:8B:01:59:2A:90:13:BF:7D:EB:13:27:31:60:E4
            X509v3 Authority Key Identifier:
                keyid:73:E6:5E:E1:74:B4:29:E8:45:F3:71:CD:DD:00:B8:1B:C4:89:A0:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/snFV25XvGkaJxiuUEY188QhAXiw1KPoveBPm89bsVw1/1/73E65EE174B429E845F371CDDD00B81BC489A017.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/73E65EE174B429E845F371CDDD00B81BC489A017.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/snFV25XvGkaJxiuUEY188QhAXiw1KPoveBPm89bsVw1/1/3138392e38352e3131322e302f32322d3234203d3e20323730353430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.85.112.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a2:45:ca:6d:61:0c:4d:0f:f7:23:ed:08:1d:ff:8c:ff:ea:d3:
         c3:38:94:fa:47:14:53:fa:56:02:33:ad:2e:b0:08:b9:dd:6c:
         30:34:2e:fe:fe:08:c0:81:4a:5b:38:88:f0:95:3d:3b:4e:c0:
         38:92:2a:63:d3:aa:89:01:3b:d9:a0:db:a5:c8:13:89:45:2e:
         01:95:8d:de:26:3a:94:19:80:07:7e:df:9d:ec:bb:24:2a:03:
         f3:ea:ce:e1:5d:18:c3:0f:73:40:8a:7a:7e:59:c1:e8:74:71:
         d9:d9:f7:f1:7f:4e:65:52:06:30:e0:45:2e:38:04:4f:02:61:
         13:3b:5c:ec:97:21:0a:5a:f3:50:dc:b4:fb:b2:cf:5d:c7:18:
         5f:0f:ff:7b:83:78:66:f2:70:81:ba:ad:97:2b:28:e0:7f:30:
         0c:6f:2c:fe:6e:be:59:45:ec:91:d7:5f:25:f1:76:96:a6:ba:
         70:eb:78:56:43:1b:e6:26:54:7b:41:1a:1e:93:69:a5:27:34:
         06:cd:48:51:e5:45:13:a8:50:c6:7c:a6:6f:22:98:db:b9:2b:
         27:0f:96:dc:48:59:50:14:4b:a7:2a:43:bb:85:15:cb:d5:23:
         df:47:2d:0f:8a:81:f3:e0:43:62:dd:56:aa:d2:7c:e3:f4:28:
         11:38:08:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:15:54 2024 by rpki-client on console-fra.rpki-client.org