Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7sJpx1DJz5t7V4itgR9VrFS8KHNAfoNZYZ2s3F2Jvp2B/1/3139302e3132332e3139362e302f32322d3234203d3e20323636323034.roa
File:                     3139302e3132332e3139362e302f32322d3234203d3e20323636323034.roa (raw, json)
Hash identifier:          x+7z18XjyZJD9k2q/7qQkLE3Q+pwUi6j4lxOjhW64hk=
Subject key identifier:   E9:C4:97:20:76:B0:71:EC:1D:EE:F2:55:AE:4A:09:E6:9D:E0:68:03
Certificate issuer:       /CN=3E9ABEDC7E771B85710E3E49ED20657F04DA1797
Certificate serial:       051D377A6E353793993EDB50B0328E3E4E304849
Authority key identifier: 3E:9A:BE:DC:7E:77:1B:85:71:0E:3E:49:ED:20:65:7F:04:DA:17:97
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3E9ABEDC7E771B85710E3E49ED20657F04DA1797.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7sJpx1DJz5t7V4itgR9VrFS8KHNAfoNZYZ2s3F2Jvp2B/1/3139302e3132332e3139362e302f32322d3234203d3e20323636323034.roa
Signing time:             Fri 07 Mar 2025 03:52:32 +0000
ROA not before:           Fri 07 Mar 2025 03:47:32 +0000
ROA not after:            Fri 06 Mar 2026 03:52:32 +0000
asID:                     266204
IP address blocks:        190.123.196.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7sJpx1DJz5t7V4itgR9VrFS8KHNAfoNZYZ2s3F2Jvp2B/1/3E9ABEDC7E771B85710E3E49ED20657F04DA1797.crl
                          rsync://rpki-repo.registro.br/repo/7sJpx1DJz5t7V4itgR9VrFS8KHNAfoNZYZ2s3F2Jvp2B/1/3E9ABEDC7E771B85710E3E49ED20657F04DA1797.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3E9ABEDC7E771B85710E3E49ED20657F04DA1797.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 16:54:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:1d:37:7a:6e:35:37:93:99:3e:db:50:b0:32:8e:3e:4e:30:48:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3E9ABEDC7E771B85710E3E49ED20657F04DA1797
        Validity
            Not Before: Mar  7 03:47:32 2025 GMT
            Not After : Mar  6 03:52:32 2026 GMT
        Subject: CN=E9C4972076B071EC1DEEF255AE4A09E69DE06803
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:7b:78:98:86:94:0f:9c:fa:29:c9:62:4b:48:
                    b3:57:eb:61:51:06:36:1c:20:01:fc:93:7b:bc:2f:
                    ae:6c:d0:48:95:89:3b:f2:3d:c2:93:95:10:f7:67:
                    62:f4:f6:e8:95:4c:97:03:40:ad:a4:d5:1f:f1:6e:
                    bf:6c:60:58:5e:70:7b:40:b2:ad:6c:db:73:0c:a0:
                    23:b8:2f:46:87:28:e4:e8:f8:53:0f:e0:a8:cb:0d:
                    d8:b7:80:8a:07:24:c9:31:c5:23:90:ac:dd:34:b8:
                    dc:7e:a7:cf:4f:b1:20:6a:91:3d:07:75:d6:63:5d:
                    0e:dc:08:ae:7a:8a:f0:cd:2c:05:64:cc:15:a2:2b:
                    bb:c4:2a:12:9b:10:bf:26:78:f6:84:fa:a7:f2:c7:
                    a1:96:68:c6:87:f3:13:1a:b1:83:7a:3f:bd:80:08:
                    20:84:bb:17:9c:7d:c2:20:1c:6d:8c:ae:aa:50:83:
                    eb:d5:d5:e6:90:c8:ef:90:f2:5b:00:92:39:0d:aa:
                    d1:e1:0f:91:14:21:1f:86:28:63:c8:e2:25:d4:06:
                    1d:c7:53:f9:e3:74:f6:e4:29:85:9b:5a:d6:fc:81:
                    b1:b6:f7:5b:73:50:fe:f6:7e:3a:81:99:6d:e2:ca:
                    31:3e:c9:8d:4b:15:32:98:2b:fd:43:2c:8b:85:7a:
                    a4:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:C4:97:20:76:B0:71:EC:1D:EE:F2:55:AE:4A:09:E6:9D:E0:68:03
            X509v3 Authority Key Identifier:
                keyid:3E:9A:BE:DC:7E:77:1B:85:71:0E:3E:49:ED:20:65:7F:04:DA:17:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7sJpx1DJz5t7V4itgR9VrFS8KHNAfoNZYZ2s3F2Jvp2B/1/3E9ABEDC7E771B85710E3E49ED20657F04DA1797.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3E9ABEDC7E771B85710E3E49ED20657F04DA1797.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7sJpx1DJz5t7V4itgR9VrFS8KHNAfoNZYZ2s3F2Jvp2B/1/3139302e3132332e3139362e302f32322d3234203d3e20323636323034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.123.196.0/22

    Signature Algorithm: sha256WithRSAEncryption
         c2:3c:08:9a:44:6d:40:a6:f0:ce:dc:a3:18:d1:89:75:b1:df:
         a7:4a:87:15:35:e9:79:1a:da:cc:31:fa:d7:fc:72:67:59:ab:
         59:9a:c2:44:f0:ac:82:8d:2d:8b:23:24:73:d4:47:68:d0:98:
         fe:47:d0:40:07:f6:f7:26:c6:77:bc:e0:dc:ed:01:91:4f:00:
         d2:92:27:8e:60:03:19:6a:af:fd:84:87:6c:44:57:16:a7:d0:
         43:68:df:ac:46:a5:3d:b5:96:01:13:e6:63:d7:3e:dc:bb:15:
         57:18:65:1e:73:39:42:ac:c4:2a:4d:6c:c5:ec:20:e7:b1:96:
         3c:a9:e2:0e:61:57:16:3b:43:25:ed:da:d3:0e:d8:71:70:55:
         72:ed:db:c4:0f:25:70:e4:9d:3a:ae:c1:bb:c6:76:8a:e6:a4:
         c3:c8:c9:5c:23:a8:d1:b5:bd:31:57:53:6a:a8:ee:65:b3:52:
         ea:bf:5d:e3:cc:54:5f:c2:10:24:94:af:56:bd:7e:11:e6:50:
         32:86:6c:5e:ad:f2:9b:60:13:f8:f1:1d:fa:8e:c8:d7:84:38:
         45:c3:37:ac:78:71:3b:76:96:51:a6:87:01:2a:78:d4:16:b7:
         dd:d2:82:b9:15:9d:c3:b6:72:ea:78:3a:e5:e0:c6:3f:9d:a9:
         b3:e8:f4:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 17:37:56 2025 by rpki-client on console.sobornost.net