Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ucZ9AL6RHLsP6mNLcUsF8NG7miCS4vDG7xr9TvQ41Cb/0/3138392e39302e3232362e302f32342d3234203d3e20323730373138.roa
File:                     3138392e39302e3232362e302f32342d3234203d3e20323730373138.roa (raw, json)
Hash identifier:          MaPZsgjlKHjkT9SwJtbxjRKbsx3BvxWTGJFDDptoukY=
Subject key identifier:   33:C0:B7:2C:C3:A2:FA:73:A9:B2:A1:62:60:F7:A7:C5:F1:4F:2F:AB
Certificate issuer:       /CN=4A1917AC7DF757D9DC9E7A77602350E7BAFE3F65
Certificate serial:       2E606FD6DD4FEE1B45EC9F8CB833A221A04E9DE5
Authority key identifier: 4A:19:17:AC:7D:F7:57:D9:DC:9E:7A:77:60:23:50:E7:BA:FE:3F:65
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4A1917AC7DF757D9DC9E7A77602350E7BAFE3F65.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ucZ9AL6RHLsP6mNLcUsF8NG7miCS4vDG7xr9TvQ41Cb/0/3138392e39302e3232362e302f32342d3234203d3e20323730373138.roa
Signing time:             Wed 20 Nov 2024 17:58:03 +0000
ROA not before:           Wed 20 Nov 2024 17:53:03 +0000
ROA not after:            Wed 19 Nov 2025 17:58:03 +0000
asID:                     270718
IP address blocks:        189.90.226.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ucZ9AL6RHLsP6mNLcUsF8NG7miCS4vDG7xr9TvQ41Cb/0/4A1917AC7DF757D9DC9E7A77602350E7BAFE3F65.crl
                          rsync://rpki-repo.registro.br/repo/ucZ9AL6RHLsP6mNLcUsF8NG7miCS4vDG7xr9TvQ41Cb/0/4A1917AC7DF757D9DC9E7A77602350E7BAFE3F65.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4A1917AC7DF757D9DC9E7A77602350E7BAFE3F65.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:60:6f:d6:dd:4f:ee:1b:45:ec:9f:8c:b8:33:a2:21:a0:4e:9d:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4A1917AC7DF757D9DC9E7A77602350E7BAFE3F65
        Validity
            Not Before: Nov 20 17:53:03 2024 GMT
            Not After : Nov 19 17:58:03 2025 GMT
        Subject: CN=33C0B72CC3A2FA73A9B2A16260F7A7C5F14F2FAB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:b9:7b:66:ba:fc:2b:0b:6c:92:78:b6:a7:da:
                    91:d6:ce:f5:df:6e:17:23:71:be:c1:c6:f1:30:14:
                    76:3a:a2:51:9d:19:50:ad:7b:48:c3:7d:d1:dd:06:
                    73:51:6e:35:3a:d9:4f:8f:33:35:9c:12:0c:09:48:
                    6b:f8:50:f0:83:8a:fb:7c:24:1a:f3:3c:74:9a:26:
                    21:c8:1d:78:d5:d7:da:7c:9f:12:71:7a:34:83:bb:
                    e5:e2:f9:ad:f2:9c:c3:ba:d0:d7:b2:6e:cd:3d:c5:
                    91:04:eb:7b:87:a4:92:74:a0:a2:0c:63:bf:88:48:
                    83:49:25:3e:8e:ef:90:f3:e3:68:4d:cd:b5:a7:6e:
                    b3:12:5d:25:ae:11:38:b1:82:03:ff:bd:8f:ab:27:
                    b4:8f:19:b0:f0:36:5a:35:40:b2:b0:66:4d:a4:02:
                    82:fd:b8:e1:79:51:ee:c1:e0:8f:38:df:13:24:27:
                    ca:3a:d3:e6:9d:e1:b0:7f:17:2d:2e:38:d6:c2:81:
                    87:23:be:17:03:e6:f4:53:3d:3c:9d:e1:09:c0:52:
                    c4:6f:9e:86:79:c7:28:20:ed:d6:9b:c4:20:4e:40:
                    5e:06:e1:cf:88:c8:a0:89:43:20:55:62:e3:a0:1b:
                    0a:a4:c6:e2:1b:b6:61:9a:81:62:72:a2:00:06:87:
                    b3:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:C0:B7:2C:C3:A2:FA:73:A9:B2:A1:62:60:F7:A7:C5:F1:4F:2F:AB
            X509v3 Authority Key Identifier:
                keyid:4A:19:17:AC:7D:F7:57:D9:DC:9E:7A:77:60:23:50:E7:BA:FE:3F:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ucZ9AL6RHLsP6mNLcUsF8NG7miCS4vDG7xr9TvQ41Cb/0/4A1917AC7DF757D9DC9E7A77602350E7BAFE3F65.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4A1917AC7DF757D9DC9E7A77602350E7BAFE3F65.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ucZ9AL6RHLsP6mNLcUsF8NG7miCS4vDG7xr9TvQ41Cb/0/3138392e39302e3232362e302f32342d3234203d3e20323730373138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.90.226.0/24

    Signature Algorithm: sha256WithRSAEncryption
         95:ec:02:57:cc:65:4f:ff:85:86:17:d1:c2:fc:ba:d0:da:fa:
         e2:01:97:74:2a:42:c7:bc:14:c5:13:48:4d:bb:30:5d:24:6c:
         4b:93:8f:4e:bf:54:0c:6f:4b:52:dc:77:d2:b1:02:1e:ea:ae:
         63:37:7c:3e:a1:92:04:fb:dc:0f:f5:17:72:5c:a3:0d:e9:06:
         d0:09:b4:f2:ba:b1:89:4b:4b:8b:f9:a7:0c:26:3c:e1:e6:0a:
         76:11:66:51:16:47:29:a8:d6:35:06:5b:14:26:fe:e0:e6:3c:
         24:84:74:c0:ed:a8:84:e7:e6:0f:1a:18:8f:33:65:01:02:1d:
         90:e3:4a:68:98:da:66:bf:62:a2:b2:be:14:15:41:8e:9b:3a:
         4c:2b:e3:f3:60:ff:30:83:4c:3b:c0:a6:c6:51:ec:b1:24:13:
         7e:df:91:85:dd:f7:54:41:25:7a:5d:dc:ac:ce:4a:6d:55:fe:
         76:42:34:41:f5:71:b4:18:20:94:04:b3:8c:1b:ef:dc:2f:78:
         dc:6b:e8:69:05:0e:e0:5d:96:11:da:ef:52:66:ca:d7:1a:f1:
         d6:0e:98:a8:6e:13:7d:43:cc:dc:51:9d:b0:d0:80:3a:b2:e2:
         98:23:fa:0e:0d:53:d8:d5:e0:17:0e:06:fb:49:fc:5b:e3:d6:
         ad:77:ea:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 01:25:42 2024 by rpki-client on console-ams.rpki-client.org