Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4CcV8YJG941aM6VsWrpTTUD1owqmAwiXC2fLW9ab2gAH/1/3139302e38392e37322e302f32322d3234203d3e20323730333538.roa
File:                     3139302e38392e37322e302f32322d3234203d3e20323730333538.roa (raw, json)
Hash identifier:          /kaD+eglV+UCS31kU1T/ZKxHyziD3h0rrt4isfD2Yzk=
Subject key identifier:   CE:47:B6:84:38:68:97:99:67:8B:CB:0A:CD:47:43:8D:36:C1:59:6F
Certificate issuer:       /CN=098BEFEB5B1DA45DC7F7619CD01A803EAF391D7E
Certificate serial:       640AB787D8760A99CF9075E331400543D7567E96
Authority key identifier: 09:8B:EF:EB:5B:1D:A4:5D:C7:F7:61:9C:D0:1A:80:3E:AF:39:1D:7E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/098BEFEB5B1DA45DC7F7619CD01A803EAF391D7E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4CcV8YJG941aM6VsWrpTTUD1owqmAwiXC2fLW9ab2gAH/1/3139302e38392e37322e302f32322d3234203d3e20323730333538.roa
Signing time:             Thu 06 Mar 2025 10:43:40 +0000
ROA not before:           Thu 06 Mar 2025 10:38:40 +0000
ROA not after:            Thu 05 Mar 2026 10:43:40 +0000
asID:                     270358
IP address blocks:        190.89.72.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4CcV8YJG941aM6VsWrpTTUD1owqmAwiXC2fLW9ab2gAH/1/098BEFEB5B1DA45DC7F7619CD01A803EAF391D7E.crl
                          rsync://rpki-repo.registro.br/repo/4CcV8YJG941aM6VsWrpTTUD1owqmAwiXC2fLW9ab2gAH/1/098BEFEB5B1DA45DC7F7619CD01A803EAF391D7E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/098BEFEB5B1DA45DC7F7619CD01A803EAF391D7E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Apr 2025 09:05:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:0a:b7:87:d8:76:0a:99:cf:90:75:e3:31:40:05:43:d7:56:7e:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=098BEFEB5B1DA45DC7F7619CD01A803EAF391D7E
        Validity
            Not Before: Mar  6 10:38:40 2025 GMT
            Not After : Mar  5 10:43:40 2026 GMT
        Subject: CN=CE47B68438689799678BCB0ACD47438D36C1596F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:50:47:e6:c5:b2:ff:b7:12:50:de:1b:83:f7:
                    84:07:52:04:d6:d7:20:24:c0:79:aa:87:cd:e4:cb:
                    b3:5c:85:f7:bc:40:f9:58:aa:f8:5e:eb:1d:70:d5:
                    8c:5a:9e:53:c7:0c:40:b5:36:e9:99:34:1c:c0:78:
                    94:0e:c7:12:5b:f9:e1:cb:ed:fc:63:1f:d1:34:15:
                    1a:79:5c:07:8f:94:ae:d3:55:76:94:12:7f:58:44:
                    86:25:4b:ac:b3:01:70:27:75:06:1c:9f:95:d8:76:
                    5e:e1:12:ae:31:eb:b5:8f:17:76:3b:77:5c:7b:d4:
                    cc:ea:b8:aa:06:14:e5:24:bb:22:b6:8b:5b:2d:88:
                    bb:72:aa:76:b9:69:06:d2:17:95:b0:18:91:ae:f1:
                    67:60:a3:60:63:b1:23:86:b1:36:d5:b4:dd:1f:81:
                    81:84:78:94:b1:df:6a:b6:f3:79:c3:5f:c8:54:fc:
                    21:aa:11:44:12:d0:55:27:ac:a9:9b:e7:a4:93:ec:
                    8d:b4:df:6d:f1:15:1b:a0:96:c7:40:1a:30:2d:b3:
                    a6:43:ca:d2:8c:2b:10:07:13:1f:7f:a5:f8:51:f7:
                    15:9c:ad:5b:0f:65:b4:84:2e:0f:11:b5:34:f0:42:
                    d9:f7:96:0d:0c:09:1d:11:5d:50:b4:e8:54:14:f2:
                    bb:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:47:B6:84:38:68:97:99:67:8B:CB:0A:CD:47:43:8D:36:C1:59:6F
            X509v3 Authority Key Identifier:
                keyid:09:8B:EF:EB:5B:1D:A4:5D:C7:F7:61:9C:D0:1A:80:3E:AF:39:1D:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4CcV8YJG941aM6VsWrpTTUD1owqmAwiXC2fLW9ab2gAH/1/098BEFEB5B1DA45DC7F7619CD01A803EAF391D7E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/098BEFEB5B1DA45DC7F7619CD01A803EAF391D7E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4CcV8YJG941aM6VsWrpTTUD1owqmAwiXC2fLW9ab2gAH/1/3139302e38392e37322e302f32322d3234203d3e20323730333538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.89.72.0/22

    Signature Algorithm: sha256WithRSAEncryption
         43:45:7e:1b:60:39:a6:65:cc:c8:d8:4d:02:ee:c7:07:b3:d7:
         39:cd:3c:93:55:6a:21:58:43:ac:84:2d:cf:f6:61:d5:9b:66:
         25:89:28:2f:71:0d:f8:ab:5d:12:c3:19:40:93:07:02:01:e3:
         62:c8:4d:3b:53:da:c3:a2:7d:97:ad:96:33:91:00:a2:ae:40:
         30:fb:1d:c5:4d:42:cc:c4:98:3e:37:d0:16:f9:36:77:49:d7:
         16:b8:1d:9a:a2:1d:cd:58:68:7f:cc:f2:7e:d4:2b:6a:31:a5:
         77:42:8c:eb:38:37:49:ad:75:b9:56:7e:e1:f1:5d:62:29:ad:
         26:2a:ee:bb:42:3e:9b:2d:2b:95:4f:bd:e8:9e:bf:90:9e:83:
         40:99:4d:d7:db:bd:76:03:7b:91:14:74:e2:66:ef:f5:40:6b:
         8a:b5:e8:c4:be:02:a4:18:87:f5:b5:b3:5e:a1:c2:f1:e8:c2:
         da:d5:17:78:83:4e:93:db:b6:c6:0e:45:9a:8b:b1:8e:6f:e3:
         cd:c6:91:eb:8f:2a:44:1d:2a:41:33:b3:03:a5:88:19:30:c8:
         94:8d:68:e1:c8:37:7b:f2:52:25:fe:32:ba:4c:96:57:25:c7:
         35:a2:6f:fe:4a:c1:50:e6:76:43:09:e3:fd:c9:e5:a4:d7:a3:
         11:3c:e7:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:21:56 2025 by rpki-client on console.sobornost.net