Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ucZ9AL6RHLsP6mNLcUsF8NG7miCS4vDG7xr9TvQ41Cb/0/3138392e39302e3232342e302f32342d3234203d3e20323730373138.roa
File:                     3138392e39302e3232342e302f32342d3234203d3e20323730373138.roa (raw, json)
Hash identifier:          lFW3lsng5+Re8wm0d6ZMPSNCSQFAPRRwtCmasca9BtE=
Subject key identifier:   72:68:E4:FC:12:AA:67:0E:89:5D:F0:2A:F9:8B:92:C7:07:3C:F2:28
Certificate issuer:       /CN=4A1917AC7DF757D9DC9E7A77602350E7BAFE3F65
Certificate serial:       7B6C89E63B0E18DF081E42E3AE95554A55B6612D
Authority key identifier: 4A:19:17:AC:7D:F7:57:D9:DC:9E:7A:77:60:23:50:E7:BA:FE:3F:65
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4A1917AC7DF757D9DC9E7A77602350E7BAFE3F65.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ucZ9AL6RHLsP6mNLcUsF8NG7miCS4vDG7xr9TvQ41Cb/0/3138392e39302e3232342e302f32342d3234203d3e20323730373138.roa
Signing time:             Wed 20 Nov 2024 17:58:03 +0000
ROA not before:           Wed 20 Nov 2024 17:53:03 +0000
ROA not after:            Wed 19 Nov 2025 17:58:03 +0000
asID:                     270718
IP address blocks:        189.90.224.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ucZ9AL6RHLsP6mNLcUsF8NG7miCS4vDG7xr9TvQ41Cb/0/4A1917AC7DF757D9DC9E7A77602350E7BAFE3F65.crl
                          rsync://rpki-repo.registro.br/repo/ucZ9AL6RHLsP6mNLcUsF8NG7miCS4vDG7xr9TvQ41Cb/0/4A1917AC7DF757D9DC9E7A77602350E7BAFE3F65.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4A1917AC7DF757D9DC9E7A77602350E7BAFE3F65.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 18:14:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:6c:89:e6:3b:0e:18:df:08:1e:42:e3:ae:95:55:4a:55:b6:61:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4A1917AC7DF757D9DC9E7A77602350E7BAFE3F65
        Validity
            Not Before: Nov 20 17:53:03 2024 GMT
            Not After : Nov 19 17:58:03 2025 GMT
        Subject: CN=7268E4FC12AA670E895DF02AF98B92C7073CF228
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:f5:44:bf:f3:73:4a:60:7e:25:30:fc:e6:89:
                    33:ee:7b:ac:29:d9:06:4c:45:7b:ab:19:72:7c:d2:
                    84:69:b2:b2:0d:e2:1c:25:52:cb:9b:58:80:ab:aa:
                    80:ac:c0:ea:6d:fb:3b:40:11:98:4b:96:9d:46:47:
                    75:25:2f:f7:59:0f:a2:bb:df:bd:0c:0e:e2:0a:71:
                    9f:d3:a3:bf:35:fa:63:55:f7:90:1e:6a:5c:0d:57:
                    f5:5e:7f:87:f9:1c:99:da:6f:66:59:e8:81:59:3d:
                    6b:4e:b4:3e:ba:a1:7e:eb:d2:9e:58:45:c6:fd:61:
                    03:8c:ac:69:b7:bd:84:48:9c:17:3d:e9:2d:4a:57:
                    5b:5f:7d:3f:93:f5:89:d4:f6:c4:62:97:f1:f3:5d:
                    01:8a:46:ed:90:80:64:62:1e:ab:5a:0d:e2:f5:73:
                    0b:da:3d:2c:e9:dc:5b:1c:4a:4e:3a:5b:9f:8f:a3:
                    a5:ee:c5:38:93:92:f6:4f:31:23:cf:c8:11:f2:43:
                    44:31:5c:dd:d7:0e:39:4e:30:74:9d:dd:fd:ed:42:
                    08:b3:95:e5:ef:e3:cc:77:3e:ca:23:e7:f5:36:78:
                    53:9a:39:30:67:ec:19:33:3c:b8:0f:90:e8:5a:93:
                    d9:94:c2:68:58:b9:d4:54:e3:1e:b7:35:46:5d:fe:
                    9f:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:68:E4:FC:12:AA:67:0E:89:5D:F0:2A:F9:8B:92:C7:07:3C:F2:28
            X509v3 Authority Key Identifier:
                keyid:4A:19:17:AC:7D:F7:57:D9:DC:9E:7A:77:60:23:50:E7:BA:FE:3F:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ucZ9AL6RHLsP6mNLcUsF8NG7miCS4vDG7xr9TvQ41Cb/0/4A1917AC7DF757D9DC9E7A77602350E7BAFE3F65.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4A1917AC7DF757D9DC9E7A77602350E7BAFE3F65.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ucZ9AL6RHLsP6mNLcUsF8NG7miCS4vDG7xr9TvQ41Cb/0/3138392e39302e3232342e302f32342d3234203d3e20323730373138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.90.224.0/24

    Signature Algorithm: sha256WithRSAEncryption
         27:17:7d:46:13:a6:ae:d2:c9:1a:bb:f8:d2:95:24:c7:af:c2:
         c2:d1:8e:38:ab:24:25:39:56:d2:f7:c3:15:21:70:99:71:13:
         e4:6f:49:b4:81:81:8e:06:3a:02:17:9c:a4:04:20:66:33:b9:
         89:70:ce:0b:bf:8c:9c:51:07:a9:43:b5:be:88:5d:2f:cf:4c:
         ee:90:30:9c:2f:98:f7:f0:ad:a2:7d:11:29:c1:62:31:18:f9:
         2c:94:ac:7c:2f:b5:3d:44:68:18:7d:eb:f4:47:e3:ed:26:22:
         c6:31:40:c5:ed:3f:bb:d8:86:e6:89:0b:da:bb:2f:01:aa:9e:
         d5:ee:f5:5a:c0:ef:6d:27:65:a2:06:5a:3b:35:33:9c:bc:33:
         cd:a1:89:f0:02:d6:90:68:ac:cd:fe:67:1e:5a:66:3f:12:43:
         b1:47:9b:3a:b9:c7:26:74:5e:26:ab:e0:6c:f1:0c:d5:95:f1:
         63:fd:ae:9b:28:50:4c:95:e0:eb:8f:5c:6c:b2:fb:87:36:fe:
         4d:ee:1b:ee:49:37:82:66:0c:4e:73:66:50:8d:3e:ad:70:a5:
         d9:2e:12:5a:72:5c:17:60:69:84:63:ae:85:96:3c:02:8e:f9:
         92:c2:e9:2b:a2:06:10:50:b8:8b:6b:4a:a8:b4:da:b6:98:1c:
         eb:00:5f:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 17:32:04 2024 by rpki-client on console-fra.rpki-client.org