Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5tMbZuqVvLqzsUbt5hpkTU7R7s2j79XtEcGouBeLMGv3/1/3139302e3131332e3234302e302f32322d3332203d3e20323731323732.roa
File:                     3139302e3131332e3234302e302f32322d3332203d3e20323731323732.roa (raw, json)
Hash identifier:          8HyScDUOhry4hcLlXGlwgOBf6Y3WvEd248pYOAh6Le4=
Subject key identifier:   83:D4:85:82:6E:8D:97:DB:62:3F:3D:31:DB:DE:FB:F6:4A:C7:28:F6
Certificate issuer:       /CN=D6592886C2264A6296BF445F0FA4EF8CF71BB049
Certificate serial:       1DCE1F669B22D7D3842AA64D2A13058BCE9909FB
Authority key identifier: D6:59:28:86:C2:26:4A:62:96:BF:44:5F:0F:A4:EF:8C:F7:1B:B0:49
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D6592886C2264A6296BF445F0FA4EF8CF71BB049.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5tMbZuqVvLqzsUbt5hpkTU7R7s2j79XtEcGouBeLMGv3/1/3139302e3131332e3234302e302f32322d3332203d3e20323731323732.roa
Signing time:             Thu 06 Mar 2025 09:00:38 +0000
ROA not before:           Thu 06 Mar 2025 08:55:38 +0000
ROA not after:            Thu 05 Mar 2026 09:00:38 +0000
asID:                     271272
IP address blocks:        190.113.240.0/22 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5tMbZuqVvLqzsUbt5hpkTU7R7s2j79XtEcGouBeLMGv3/1/D6592886C2264A6296BF445F0FA4EF8CF71BB049.crl
                          rsync://rpki-repo.registro.br/repo/5tMbZuqVvLqzsUbt5hpkTU7R7s2j79XtEcGouBeLMGv3/1/D6592886C2264A6296BF445F0FA4EF8CF71BB049.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D6592886C2264A6296BF445F0FA4EF8CF71BB049.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 19:59:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:ce:1f:66:9b:22:d7:d3:84:2a:a6:4d:2a:13:05:8b:ce:99:09:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D6592886C2264A6296BF445F0FA4EF8CF71BB049
        Validity
            Not Before: Mar  6 08:55:38 2025 GMT
            Not After : Mar  5 09:00:38 2026 GMT
        Subject: CN=83D485826E8D97DB623F3D31DBDEFBF64AC728F6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:3c:94:03:1f:36:fe:ce:3d:36:45:5e:c6:ff:
                    07:e8:17:d4:83:83:53:66:8a:38:2d:22:85:24:2c:
                    2b:e0:58:2f:84:ac:98:8c:5c:b8:11:5c:8c:d9:00:
                    5b:19:c1:8b:32:31:73:a1:bf:0a:f9:ed:d4:3a:7b:
                    fd:02:0d:1e:ba:84:17:1f:03:ce:51:e4:72:0f:aa:
                    b8:25:87:a8:c4:e1:09:b8:aa:db:49:29:30:9f:a6:
                    dd:e5:8b:e7:fd:ff:0c:71:e5:cb:51:78:22:75:85:
                    05:c3:52:06:f5:5e:54:e1:f4:be:cd:3c:fa:6b:ef:
                    31:36:c3:60:8f:20:1a:10:c5:92:34:ec:c5:cc:23:
                    0c:e0:c6:68:33:ff:33:66:65:dd:41:e3:1b:a3:1d:
                    e6:ad:af:dc:74:a7:22:55:ac:3f:37:b4:76:d0:d8:
                    9b:12:0b:17:bd:b2:4c:e2:f9:a0:39:65:23:e2:7c:
                    67:e4:5f:ef:d3:f7:53:f6:14:f4:5b:06:ff:9f:9b:
                    3c:d0:b2:c5:58:a8:8b:c6:cb:67:21:33:28:3a:a6:
                    a1:03:24:ff:2e:ca:7f:d6:28:01:88:2a:ce:ed:32:
                    04:a7:9f:1e:d3:26:c9:d8:1b:89:f9:90:ec:21:22:
                    b9:cb:8a:f7:b7:48:bd:6f:71:89:5e:2c:7c:94:3b:
                    34:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:D4:85:82:6E:8D:97:DB:62:3F:3D:31:DB:DE:FB:F6:4A:C7:28:F6
            X509v3 Authority Key Identifier:
                keyid:D6:59:28:86:C2:26:4A:62:96:BF:44:5F:0F:A4:EF:8C:F7:1B:B0:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5tMbZuqVvLqzsUbt5hpkTU7R7s2j79XtEcGouBeLMGv3/1/D6592886C2264A6296BF445F0FA4EF8CF71BB049.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D6592886C2264A6296BF445F0FA4EF8CF71BB049.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5tMbZuqVvLqzsUbt5hpkTU7R7s2j79XtEcGouBeLMGv3/1/3139302e3131332e3234302e302f32322d3332203d3e20323731323732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.113.240.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ae:88:ef:e4:89:92:82:e3:f4:91:92:3b:3e:76:ab:56:68:4e:
         29:20:8f:df:b8:17:32:cb:be:c2:c8:dd:20:7b:3a:79:04:d1:
         9c:37:ac:70:72:27:a2:64:c7:20:75:f6:27:08:98:58:c3:ab:
         26:18:ad:a1:81:3f:82:64:aa:ca:aa:34:74:8a:d3:8e:06:ee:
         df:8d:47:1d:ac:b3:cc:e3:69:39:fd:eb:5b:45:de:61:d9:f4:
         a5:67:5c:45:f5:39:97:97:82:25:67:b1:3b:ec:fe:72:04:42:
         8f:4e:90:ff:d3:6b:89:90:f7:e3:29:72:bf:99:a9:40:6a:34:
         cf:60:83:4f:00:87:25:49:b1:95:d3:5f:8f:62:10:cd:20:77:
         f3:41:bd:30:ba:b6:b5:f6:72:0c:fa:c2:e7:7f:9b:2c:36:04:
         c4:ce:97:9f:2c:e1:33:7b:7a:22:91:48:85:c5:91:4a:c8:ac:
         22:4b:85:0b:89:b6:4f:d4:d9:80:dc:3b:1d:f4:77:ed:1c:10:
         f2:fc:02:09:8d:4b:86:c3:7b:85:0b:85:88:16:2d:84:36:5a:
         53:c4:c1:19:12:08:a6:ca:40:a6:49:ef:fa:4c:7e:78:83:9e:
         e8:6a:c2:98:d6:d9:db:80:0e:3c:1c:02:92:21:34:68:ad:72:
         9e:40:ca:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 20:06:38 2025 by rpki-client on console.sobornost.net