Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ucZ9AL6RHLsP6mNLcUsF8NG7miCS4vDG7xr9TvQ41Cb/0/3138392e39302e3232342e302f32322d3232203d3e20323730373138.roa
File:                     3138392e39302e3232342e302f32322d3232203d3e20323730373138.roa (raw, json)
Hash identifier:          w9fKXJR8qRK402WTd1FB1iwO0DS1m1fP0U7fMcw1Va4=
Subject key identifier:   22:C1:DD:2A:92:9D:4F:36:CA:AD:C5:6A:C1:8B:40:4B:DD:57:48:2A
Certificate issuer:       /CN=4A1917AC7DF757D9DC9E7A77602350E7BAFE3F65
Certificate serial:       260A34C195D4B3165A066BB3D08523F69C03E746
Authority key identifier: 4A:19:17:AC:7D:F7:57:D9:DC:9E:7A:77:60:23:50:E7:BA:FE:3F:65
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4A1917AC7DF757D9DC9E7A77602350E7BAFE3F65.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ucZ9AL6RHLsP6mNLcUsF8NG7miCS4vDG7xr9TvQ41Cb/0/3138392e39302e3232342e302f32322d3232203d3e20323730373138.roa
Signing time:             Wed 20 Nov 2024 17:58:06 +0000
ROA not before:           Wed 20 Nov 2024 17:53:06 +0000
ROA not after:            Wed 19 Nov 2025 17:58:06 +0000
asID:                     270718
IP address blocks:        189.90.224.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ucZ9AL6RHLsP6mNLcUsF8NG7miCS4vDG7xr9TvQ41Cb/0/4A1917AC7DF757D9DC9E7A77602350E7BAFE3F65.crl
                          rsync://rpki-repo.registro.br/repo/ucZ9AL6RHLsP6mNLcUsF8NG7miCS4vDG7xr9TvQ41Cb/0/4A1917AC7DF757D9DC9E7A77602350E7BAFE3F65.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4A1917AC7DF757D9DC9E7A77602350E7BAFE3F65.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 18:14:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:0a:34:c1:95:d4:b3:16:5a:06:6b:b3:d0:85:23:f6:9c:03:e7:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4A1917AC7DF757D9DC9E7A77602350E7BAFE3F65
        Validity
            Not Before: Nov 20 17:53:06 2024 GMT
            Not After : Nov 19 17:58:06 2025 GMT
        Subject: CN=22C1DD2A929D4F36CAADC56AC18B404BDD57482A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fb:b0:c7:9c:d6:77:f4:70:b3:86:3e:56:87:e8:
                    d5:62:d2:5f:9c:30:c3:e3:9f:29:77:9c:e4:90:48:
                    14:01:ee:69:aa:0f:d7:e6:91:03:3d:5d:40:d2:99:
                    04:f7:fe:25:a2:2e:d6:0f:41:92:69:8c:4d:ac:3d:
                    8f:21:a7:f3:97:e1:ac:e6:3e:36:d3:cd:93:2f:73:
                    aa:60:e8:87:7e:4d:7d:ee:f2:4c:a2:18:38:13:16:
                    76:13:e4:33:4c:69:7f:50:ea:97:96:45:5c:9e:6a:
                    64:b1:c9:92:a0:85:66:94:72:22:0b:77:fd:7f:21:
                    bb:dc:c9:d2:44:6a:c7:4e:cc:16:07:1a:66:1e:d0:
                    57:01:24:d3:b3:56:4e:fd:ac:a1:b2:f0:89:f6:70:
                    6b:76:14:69:07:8e:30:ba:3b:9c:29:2a:1b:91:e4:
                    6e:bf:ed:97:8d:52:07:9a:d1:ed:f6:07:fa:eb:a6:
                    3c:61:f0:18:80:ad:93:f6:fc:18:11:de:09:f2:ff:
                    2e:a6:22:84:5a:f5:42:2e:05:b0:59:c7:e4:44:be:
                    44:4a:4c:3e:0c:f2:c8:05:08:3b:df:ac:7d:c3:a0:
                    42:df:38:c9:dc:b7:e9:a0:e0:97:84:11:73:3c:a5:
                    ea:98:d6:42:c7:27:96:98:91:2d:00:56:c9:d4:d3:
                    9f:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:C1:DD:2A:92:9D:4F:36:CA:AD:C5:6A:C1:8B:40:4B:DD:57:48:2A
            X509v3 Authority Key Identifier:
                keyid:4A:19:17:AC:7D:F7:57:D9:DC:9E:7A:77:60:23:50:E7:BA:FE:3F:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ucZ9AL6RHLsP6mNLcUsF8NG7miCS4vDG7xr9TvQ41Cb/0/4A1917AC7DF757D9DC9E7A77602350E7BAFE3F65.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4A1917AC7DF757D9DC9E7A77602350E7BAFE3F65.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ucZ9AL6RHLsP6mNLcUsF8NG7miCS4vDG7xr9TvQ41Cb/0/3138392e39302e3232342e302f32322d3232203d3e20323730373138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.90.224.0/22

    Signature Algorithm: sha256WithRSAEncryption
         54:91:27:52:18:cf:7f:ef:4d:4a:36:7f:52:60:fe:e3:9c:6c:
         5e:27:f2:d6:53:67:d5:f4:ff:69:57:d8:f3:9d:14:ee:84:ea:
         e7:c6:e7:b6:70:be:f6:b5:9a:e8:da:f4:64:a8:51:45:91:08:
         44:35:59:5e:4c:cf:bd:89:f6:76:50:bd:b8:9a:39:71:83:00:
         95:e7:f1:06:c7:4f:0d:9d:e3:ed:0d:04:f3:b3:e1:88:b5:64:
         9d:db:32:41:3b:5d:10:c6:0a:9c:de:46:a6:e8:b4:52:c6:66:
         3f:17:d1:48:0f:ab:b3:a4:4f:09:7c:6a:58:83:7d:ef:d6:4f:
         24:b6:71:b9:6a:78:d2:26:f5:f8:ba:2d:15:73:3b:01:4b:ce:
         24:2c:df:cf:d6:a3:ca:49:66:d2:f4:26:ab:0b:ee:9f:b2:d7:
         67:35:6f:4e:60:b3:80:42:80:d0:95:68:ec:b5:b5:c9:ed:06:
         2d:c8:5c:b6:30:f2:71:32:dd:97:a0:e8:76:c6:c0:5f:71:c3:
         ac:26:83:23:cf:52:fc:f5:ac:06:a5:a1:31:86:d0:e4:30:4f:
         6a:6b:76:b8:31:a0:21:07:1c:77:09:6e:a5:10:30:95:59:ff:
         a2:c5:6b:d0:d6:45:69:63:11:e2:ab:ed:98:eb:0e:65:89:fe:
         18:57:e2:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 17:32:04 2024 by rpki-client on console-fra.rpki-client.org