Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ci2asP92eqLcwrdLEBntbeFepcmJVTx7jUsZJdccZSG/0/3139302e392e3130362e302f32332d3233203d3e20323731363037.roa
File:                     3139302e392e3130362e302f32332d3233203d3e20323731363037.roa (raw, json)
Hash identifier:          7AJ4ukouUHMQI0TFkluJjzRbDhk3CsGJptvn55SvMdI=
Subject key identifier:   ED:3B:85:11:B5:37:AB:2A:FD:C1:33:A4:E8:95:B6:FA:D4:8A:FD:D9
Certificate issuer:       /CN=175384092ABAD3D152DCA97639AC5068FE84B741
Certificate serial:       3E7D7CFF4E4F8DC211D7CCC5D202CC905F22C3AA
Authority key identifier: 17:53:84:09:2A:BA:D3:D1:52:DC:A9:76:39:AC:50:68:FE:84:B7:41
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/175384092ABAD3D152DCA97639AC5068FE84B741.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ci2asP92eqLcwrdLEBntbeFepcmJVTx7jUsZJdccZSG/0/3139302e392e3130362e302f32332d3233203d3e20323731363037.roa
Signing time:             Wed 09 Apr 2025 18:46:03 +0000
ROA not before:           Wed 09 Apr 2025 18:41:03 +0000
ROA not after:            Wed 08 Apr 2026 18:46:03 +0000
asID:                     271607
IP address blocks:        190.9.106.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ci2asP92eqLcwrdLEBntbeFepcmJVTx7jUsZJdccZSG/0/175384092ABAD3D152DCA97639AC5068FE84B741.crl
                          rsync://rpki-repo.registro.br/repo/Ci2asP92eqLcwrdLEBntbeFepcmJVTx7jUsZJdccZSG/0/175384092ABAD3D152DCA97639AC5068FE84B741.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/175384092ABAD3D152DCA97639AC5068FE84B741.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 25 Apr 2025 20:12:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:7d:7c:ff:4e:4f:8d:c2:11:d7:cc:c5:d2:02:cc:90:5f:22:c3:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=175384092ABAD3D152DCA97639AC5068FE84B741
        Validity
            Not Before: Apr  9 18:41:03 2025 GMT
            Not After : Apr  8 18:46:03 2026 GMT
        Subject: CN=ED3B8511B537AB2AFDC133A4E895B6FAD48AFDD9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:3e:85:76:f9:86:d9:70:8e:0c:1f:24:40:d8:
                    50:e0:8e:4f:4d:3b:c2:81:97:e0:fa:76:4d:8e:08:
                    19:45:f9:50:a1:d0:db:a9:86:aa:a9:4c:f4:f8:f9:
                    45:d3:05:fd:1a:d5:54:65:38:6b:84:75:0f:7a:9c:
                    2f:2e:cb:dc:dd:ed:2d:f9:cc:b8:bb:c9:07:71:97:
                    82:c9:ba:2d:35:97:7f:f9:50:92:22:86:e1:27:8c:
                    6a:d2:dd:d9:06:5e:fd:a5:5b:d2:18:f9:9f:0f:e9:
                    78:9b:1a:54:13:c3:64:62:ab:e3:fb:d8:ee:7f:be:
                    17:fd:c5:b2:fc:aa:62:6f:7f:ff:67:bf:5f:71:2d:
                    39:88:bb:5e:a3:55:5b:e2:ac:b8:c3:e1:10:b9:79:
                    3a:89:15:de:f7:c1:1d:98:78:23:6b:a0:f2:a1:79:
                    9d:aa:a2:a8:08:4b:66:37:19:7d:b4:80:33:48:94:
                    10:c7:85:66:01:82:29:77:18:72:23:1c:ea:77:e9:
                    e6:f3:93:c6:99:bd:d9:9f:ff:6e:c1:71:74:70:eb:
                    01:0e:66:1e:56:b1:3a:aa:75:f9:9f:fa:33:fa:1f:
                    11:a2:4c:c7:96:c9:d8:c9:9b:36:3b:84:54:98:f8:
                    1b:d8:41:a6:cb:5d:66:4b:f0:c6:1d:ff:d9:9a:54:
                    1c:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:3B:85:11:B5:37:AB:2A:FD:C1:33:A4:E8:95:B6:FA:D4:8A:FD:D9
            X509v3 Authority Key Identifier:
                keyid:17:53:84:09:2A:BA:D3:D1:52:DC:A9:76:39:AC:50:68:FE:84:B7:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ci2asP92eqLcwrdLEBntbeFepcmJVTx7jUsZJdccZSG/0/175384092ABAD3D152DCA97639AC5068FE84B741.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/175384092ABAD3D152DCA97639AC5068FE84B741.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ci2asP92eqLcwrdLEBntbeFepcmJVTx7jUsZJdccZSG/0/3139302e392e3130362e302f32332d3233203d3e20323731363037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.9.106.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2b:69:ed:50:1a:0b:b8:36:93:15:99:e0:28:dd:29:8f:4e:c1:
         64:2e:23:04:c3:0f:a5:3e:ef:10:77:0c:53:be:ee:52:e2:62:
         b2:fe:24:c6:62:d8:85:b3:d3:e2:27:8e:0d:2f:fa:a4:aa:ac:
         25:cd:53:ec:5f:9e:57:b7:7a:18:98:14:f3:52:e1:b1:74:ae:
         4d:fe:9a:46:5b:02:e6:55:63:a5:fe:5e:1d:bc:8d:68:3b:20:
         dc:9f:70:f3:76:d9:d3:26:dd:65:b9:72:3e:0c:4a:55:2f:6a:
         8f:aa:bc:d5:48:09:4f:45:bb:c1:00:aa:1b:62:ec:87:1f:01:
         81:45:83:44:8c:79:e9:52:9f:1c:d5:6e:33:3f:09:6f:02:18:
         a1:93:cf:96:06:62:dc:51:20:3c:f2:9f:75:4a:1d:31:9d:ae:
         da:ad:76:8b:ed:7b:8f:d9:c1:bd:b6:93:84:25:85:95:8d:38:
         a5:e6:57:a9:00:e7:a5:56:a3:ec:e2:fe:97:42:55:a2:41:0c:
         21:0c:30:cf:39:63:5d:8c:a1:4a:86:0c:40:b5:27:47:0e:7d:
         42:8d:30:d1:aa:be:49:cb:36:85:b2:ad:62:b8:59:f9:e2:ea:
         d4:d0:c7:21:d5:a6:1e:5c:f0:d7:f9:a1:c1:6e:34:13:d9:83:
         f2:bc:18:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:06:53 2025 by rpki-client on console.sobornost.net