Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ci2asP92eqLcwrdLEBntbeFepcmJVTx7jUsZJdccZSG/0/3139302e392e3130342e302f32322d3232203d3e20323731363037.roa
File:                     3139302e392e3130342e302f32322d3232203d3e20323731363037.roa (raw, json)
Hash identifier:          88vp8Zcrf96SR08U2TEpLlsCijma//CZC9EKBqReIUw=
Subject key identifier:   9C:E9:54:50:73:0D:EF:D9:2D:10:1B:B8:42:32:4E:96:AC:0E:A6:F6
Certificate issuer:       /CN=175384092ABAD3D152DCA97639AC5068FE84B741
Certificate serial:       0B39F559480FE21044115B36B147748546792AD2
Authority key identifier: 17:53:84:09:2A:BA:D3:D1:52:DC:A9:76:39:AC:50:68:FE:84:B7:41
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/175384092ABAD3D152DCA97639AC5068FE84B741.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ci2asP92eqLcwrdLEBntbeFepcmJVTx7jUsZJdccZSG/0/3139302e392e3130342e302f32322d3232203d3e20323731363037.roa
Signing time:             Wed 09 Apr 2025 18:46:03 +0000
ROA not before:           Wed 09 Apr 2025 18:41:03 +0000
ROA not after:            Wed 08 Apr 2026 18:46:03 +0000
asID:                     271607
IP address blocks:        190.9.104.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ci2asP92eqLcwrdLEBntbeFepcmJVTx7jUsZJdccZSG/0/175384092ABAD3D152DCA97639AC5068FE84B741.crl
                          rsync://rpki-repo.registro.br/repo/Ci2asP92eqLcwrdLEBntbeFepcmJVTx7jUsZJdccZSG/0/175384092ABAD3D152DCA97639AC5068FE84B741.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/175384092ABAD3D152DCA97639AC5068FE84B741.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 25 Apr 2025 20:12:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:39:f5:59:48:0f:e2:10:44:11:5b:36:b1:47:74:85:46:79:2a:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=175384092ABAD3D152DCA97639AC5068FE84B741
        Validity
            Not Before: Apr  9 18:41:03 2025 GMT
            Not After : Apr  8 18:46:03 2026 GMT
        Subject: CN=9CE95450730DEFD92D101BB842324E96AC0EA6F6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:f3:12:0e:d7:90:19:6a:29:55:ac:2d:66:b6:
                    05:2b:49:08:8a:3b:a9:38:7f:16:2f:19:b5:e7:92:
                    84:3f:60:22:58:6a:59:05:3c:9e:87:7f:5c:77:f9:
                    65:ac:af:c0:09:ca:7d:e2:70:c6:31:bd:39:43:c2:
                    1c:89:84:de:c6:d2:4a:f5:77:f8:e4:27:7c:00:ac:
                    3b:df:9d:67:da:6c:e7:9a:85:fd:16:48:70:b6:d0:
                    30:df:e5:75:fa:23:27:f4:21:07:e7:cf:a7:45:46:
                    75:df:60:1a:11:ec:e6:d4:17:fe:f6:a5:b1:ce:b2:
                    be:7a:90:56:61:1f:38:2a:b5:47:d4:2f:e7:c5:cc:
                    8c:4e:eb:e8:3e:9c:ab:99:54:be:f4:bb:0b:16:32:
                    3a:d9:05:e4:6f:2e:05:6e:44:c0:70:b9:55:df:0d:
                    85:fb:4f:e8:0f:89:7c:bb:4a:4a:a4:f5:fa:6a:99:
                    e9:d7:c8:48:59:dc:f5:45:39:86:79:a3:b8:e0:ab:
                    c0:07:99:95:f8:f5:70:a0:d1:0c:b0:4d:34:96:61:
                    dc:ed:7f:5c:ba:21:00:5e:02:19:47:9f:4f:e4:88:
                    ed:67:c8:57:3c:e5:6d:c5:15:ed:3a:50:74:9d:53:
                    6d:9b:6e:11:7c:86:79:e9:de:3f:c7:4e:2e:7d:68:
                    6a:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:E9:54:50:73:0D:EF:D9:2D:10:1B:B8:42:32:4E:96:AC:0E:A6:F6
            X509v3 Authority Key Identifier:
                keyid:17:53:84:09:2A:BA:D3:D1:52:DC:A9:76:39:AC:50:68:FE:84:B7:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ci2asP92eqLcwrdLEBntbeFepcmJVTx7jUsZJdccZSG/0/175384092ABAD3D152DCA97639AC5068FE84B741.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/175384092ABAD3D152DCA97639AC5068FE84B741.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ci2asP92eqLcwrdLEBntbeFepcmJVTx7jUsZJdccZSG/0/3139302e392e3130342e302f32322d3232203d3e20323731363037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.9.104.0/22

    Signature Algorithm: sha256WithRSAEncryption
         55:7e:36:b2:74:b6:1b:77:76:fe:fb:93:1b:64:db:68:43:4a:
         9b:9f:7b:41:91:5e:0d:c9:90:7e:90:66:fa:6c:9b:52:51:b6:
         eb:f1:3d:06:b2:23:cf:46:9b:ea:5b:9f:c7:6e:10:97:42:47:
         68:f5:b8:80:fe:73:f8:66:4b:af:39:5a:3a:a6:4b:6b:6d:6d:
         21:ac:f1:bd:06:a1:9c:da:18:61:38:78:e0:0b:74:c3:57:3b:
         e4:5e:23:0d:65:50:0c:47:3a:1c:1f:ba:2b:13:2b:c7:6d:9e:
         fa:75:8e:50:15:13:db:09:b6:2b:d6:51:d1:6f:91:90:3a:1d:
         3e:98:6d:d4:a4:b4:fd:34:66:9d:40:2f:c5:1f:02:9d:c5:a0:
         94:56:fa:a2:59:2b:b5:ef:00:ed:83:38:3d:cb:ad:63:fc:d4:
         c6:be:66:42:a2:a1:c2:a4:90:2f:f6:12:fc:68:91:7b:99:64:
         53:3b:5f:aa:aa:a7:5d:c7:7b:a3:de:84:cb:8e:62:dd:7c:ff:
         bb:6a:ce:93:e4:63:b9:46:7d:7c:fe:5a:80:d5:60:65:c9:e2:
         a3:a9:87:5a:bf:b8:9e:cf:a6:de:b4:60:81:6d:30:d2:8c:12:
         f2:a6:98:30:27:5b:37:a4:88:c1:23:83:e7:28:95:39:b9:12:
         27:5a:b2:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:06:53 2025 by rpki-client on console.sobornost.net