Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/w7Ru1NCChTdoP95njCnfUZDw7eSimv34VzxZ1RoAbyM/0/3139302e392e3132372e302f32342d3234203d3e20323731363733.roa
File:                     3139302e392e3132372e302f32342d3234203d3e20323731363733.roa (raw, json)
Hash identifier:          4StaB59EY0ZxZlFd3R7wiaZpyvhlkpyMcN6GzNOcihE=
Subject key identifier:   9A:CB:B3:4D:38:23:A6:8C:4B:2E:6E:19:F3:D2:09:EE:DC:01:F2:8C
Certificate issuer:       /CN=DBA9F43AF1C5D6D4190A213B715CCCCD8870B214
Certificate serial:       4EA4D3E87FAB844A1525BCD51C1EED0C71C9CBC1
Authority key identifier: DB:A9:F4:3A:F1:C5:D6:D4:19:0A:21:3B:71:5C:CC:CD:88:70:B2:14
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DBA9F43AF1C5D6D4190A213B715CCCCD8870B214.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/w7Ru1NCChTdoP95njCnfUZDw7eSimv34VzxZ1RoAbyM/0/3139302e392e3132372e302f32342d3234203d3e20323731363733.roa
Signing time:             Fri 17 Jan 2025 18:14:01 +0000
ROA not before:           Fri 17 Jan 2025 18:09:01 +0000
ROA not after:            Fri 16 Jan 2026 18:14:01 +0000
asID:                     271673
IP address blocks:        190.9.127.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/w7Ru1NCChTdoP95njCnfUZDw7eSimv34VzxZ1RoAbyM/0/DBA9F43AF1C5D6D4190A213B715CCCCD8870B214.crl
                          rsync://rpki-repo.registro.br/repo/w7Ru1NCChTdoP95njCnfUZDw7eSimv34VzxZ1RoAbyM/0/DBA9F43AF1C5D6D4190A213B715CCCCD8870B214.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DBA9F43AF1C5D6D4190A213B715CCCCD8870B214.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 14 Mar 2025 16:42:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:a4:d3:e8:7f:ab:84:4a:15:25:bc:d5:1c:1e:ed:0c:71:c9:cb:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DBA9F43AF1C5D6D4190A213B715CCCCD8870B214
        Validity
            Not Before: Jan 17 18:09:01 2025 GMT
            Not After : Jan 16 18:14:01 2026 GMT
        Subject: CN=9ACBB34D3823A68C4B2E6E19F3D209EEDC01F28C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:ba:e8:39:67:84:51:08:0d:a0:ac:bb:7d:a5:
                    db:62:cd:04:e3:13:81:2a:14:94:1d:4d:04:f1:8d:
                    2b:30:de:39:cf:c0:7a:63:4e:01:81:07:c1:10:6a:
                    ff:96:f6:d0:6f:41:0f:a2:da:27:a0:58:53:d7:b8:
                    3d:6f:53:62:f0:95:da:b2:61:f4:df:00:91:83:fa:
                    ed:b8:f8:04:ec:b9:46:18:f1:f0:82:7a:0a:bb:37:
                    f6:c1:f6:b0:0c:fb:60:c3:b9:8a:f9:fb:7b:b1:ad:
                    ed:2b:f5:f5:0a:26:19:e9:94:d7:2b:30:66:df:0f:
                    3d:ce:cc:f4:a8:3b:ec:0d:d3:18:1d:45:79:46:e8:
                    f7:09:60:82:a0:4d:16:be:58:74:41:42:b4:7a:47:
                    ba:c1:72:da:4f:f5:be:57:8d:f6:d8:12:89:11:78:
                    0e:82:e3:3b:de:53:ee:06:c8:6b:7e:c3:48:f3:59:
                    ca:17:4f:87:43:c1:15:16:1d:af:7d:1a:bf:3b:40:
                    14:ce:57:e6:6d:f4:03:3f:16:b5:8e:c3:27:cf:a0:
                    5e:95:52:dd:9d:a1:9b:93:2e:77:4b:e2:23:c7:8b:
                    c9:01:21:eb:9b:ad:57:3a:1f:f2:2d:63:f5:18:78:
                    fc:f7:d9:9d:75:46:40:8b:ba:60:0b:07:87:49:b3:
                    c7:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:CB:B3:4D:38:23:A6:8C:4B:2E:6E:19:F3:D2:09:EE:DC:01:F2:8C
            X509v3 Authority Key Identifier:
                keyid:DB:A9:F4:3A:F1:C5:D6:D4:19:0A:21:3B:71:5C:CC:CD:88:70:B2:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/w7Ru1NCChTdoP95njCnfUZDw7eSimv34VzxZ1RoAbyM/0/DBA9F43AF1C5D6D4190A213B715CCCCD8870B214.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DBA9F43AF1C5D6D4190A213B715CCCCD8870B214.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/w7Ru1NCChTdoP95njCnfUZDw7eSimv34VzxZ1RoAbyM/0/3139302e392e3132372e302f32342d3234203d3e20323731363733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.9.127.0/24

    Signature Algorithm: sha256WithRSAEncryption
         72:7e:10:8f:fa:04:18:f1:c7:2f:0c:2a:57:a5:d8:e9:25:10:
         73:6d:52:12:5d:8c:77:50:6e:5a:8b:dd:b0:96:82:2d:9f:2e:
         0f:67:61:51:13:18:3f:eb:d3:38:e8:37:37:05:c2:aa:e5:f7:
         3c:80:12:15:51:3f:62:b3:25:d4:fd:fa:8f:23:cd:ed:d9:30:
         c2:65:f4:27:56:71:92:5f:75:12:39:49:18:cd:25:6b:a0:81:
         9b:e4:5b:62:9f:2b:85:0c:62:aa:69:8a:e5:82:aa:10:4a:14:
         27:8d:cc:9e:e0:57:5b:99:d3:8e:8e:e9:73:d4:0a:b0:43:6f:
         81:8d:8e:aa:87:0b:c9:e9:78:a1:b4:3c:a6:a4:3e:c0:7a:56:
         7a:fa:bc:1f:73:a6:14:06:d9:4f:73:a3:5d:de:15:d5:62:e2:
         1e:a3:d6:1e:92:fb:3c:4a:43:c6:23:91:d3:82:e4:b4:96:56:
         b5:e4:ff:99:7a:07:c7:a5:59:a9:68:bc:10:b3:c0:97:ad:ca:
         2e:ea:59:2a:2d:14:26:b2:0c:e4:85:ea:de:3a:be:c6:01:60:
         45:46:8d:1b:53:a9:ba:f1:61:4d:5b:1e:fa:da:a0:1f:63:a0:
         18:6d:63:2a:10:91:9f:03:8a:f6:0d:66:93:df:c8:ed:38:23:
         c6:d3:23:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 03:01:28 2025 by rpki-client