Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E5MXgvbHEJwH6anZmRfhWQVQrxxu38gTBA9c63vcsS7T/1/3139302e3138352e39382e302f32332d3332203d3e20323731363931.roa
File:                     3139302e3138352e39382e302f32332d3332203d3e20323731363931.roa (raw, json)
Hash identifier:          hbpQC6oV6hKAi5uOSN0DUlLJnfNXMKEZKouiOS0J/BY=
Subject key identifier:   D4:E4:E9:06:FD:D1:AF:52:20:8B:97:18:23:FF:52:23:FB:CF:8A:21
Certificate issuer:       /CN=45924C2A6FC8004A74776A6A41B211AA62067986
Certificate serial:       2EC9AB738986AD1A6348BC27DAFB49D726BA6516
Authority key identifier: 45:92:4C:2A:6F:C8:00:4A:74:77:6A:6A:41:B2:11:AA:62:06:79:86
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/45924C2A6FC8004A74776A6A41B211AA62067986.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E5MXgvbHEJwH6anZmRfhWQVQrxxu38gTBA9c63vcsS7T/1/3139302e3138352e39382e302f32332d3332203d3e20323731363931.roa
Signing time:             Thu 06 Mar 2025 19:25:46 +0000
ROA not before:           Thu 06 Mar 2025 19:20:46 +0000
ROA not after:            Thu 05 Mar 2026 19:25:46 +0000
asID:                     271691
IP address blocks:        190.185.98.0/23 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/E5MXgvbHEJwH6anZmRfhWQVQrxxu38gTBA9c63vcsS7T/1/45924C2A6FC8004A74776A6A41B211AA62067986.crl
                          rsync://rpki-repo.registro.br/repo/E5MXgvbHEJwH6anZmRfhWQVQrxxu38gTBA9c63vcsS7T/1/45924C2A6FC8004A74776A6A41B211AA62067986.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/45924C2A6FC8004A74776A6A41B211AA62067986.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Apr 2025 13:37:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:c9:ab:73:89:86:ad:1a:63:48:bc:27:da:fb:49:d7:26:ba:65:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45924C2A6FC8004A74776A6A41B211AA62067986
        Validity
            Not Before: Mar  6 19:20:46 2025 GMT
            Not After : Mar  5 19:25:46 2026 GMT
        Subject: CN=D4E4E906FDD1AF52208B971823FF5223FBCF8A21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:a8:46:32:d1:eb:4e:27:cb:a2:00:2c:b5:cc:
                    b2:65:52:86:ae:99:0a:c1:63:d8:51:5b:9d:fb:f2:
                    78:f5:27:cb:c0:a7:95:2b:ad:bc:cb:4f:66:3f:ec:
                    47:64:17:31:fb:fd:8a:15:7c:f2:4d:66:0e:8e:e2:
                    05:d0:fc:e0:85:ab:30:49:a3:37:90:57:0e:91:14:
                    ad:65:f5:52:84:5c:05:02:dd:df:cc:32:b5:53:2c:
                    01:e5:fc:ea:1b:e9:4c:83:95:4d:21:69:a5:ae:0d:
                    ce:3c:6d:3c:20:8b:4d:4e:61:32:c7:4e:39:27:bc:
                    e3:ed:1f:79:1a:13:28:2b:60:62:80:05:cf:57:3a:
                    4c:24:a8:65:e8:fa:70:71:97:e4:1e:a3:f4:9b:63:
                    e1:09:a1:34:df:f8:1c:85:c7:2b:30:45:cf:d5:7e:
                    5b:25:b2:56:be:d4:03:5e:8d:9b:10:05:55:3c:08:
                    02:4e:91:26:b6:20:be:bb:f9:55:4f:37:72:b1:81:
                    91:af:fa:92:7b:85:91:5d:6d:cd:91:4b:7d:18:9c:
                    22:10:9e:50:f8:12:76:60:6d:dc:16:24:a6:62:da:
                    4f:04:5e:8b:41:a7:c9:61:b9:6c:22:62:f6:3b:35:
                    f7:47:11:fb:84:3e:b4:9f:93:f4:0f:72:53:74:d2:
                    26:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:E4:E9:06:FD:D1:AF:52:20:8B:97:18:23:FF:52:23:FB:CF:8A:21
            X509v3 Authority Key Identifier:
                keyid:45:92:4C:2A:6F:C8:00:4A:74:77:6A:6A:41:B2:11:AA:62:06:79:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E5MXgvbHEJwH6anZmRfhWQVQrxxu38gTBA9c63vcsS7T/1/45924C2A6FC8004A74776A6A41B211AA62067986.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/45924C2A6FC8004A74776A6A41B211AA62067986.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E5MXgvbHEJwH6anZmRfhWQVQrxxu38gTBA9c63vcsS7T/1/3139302e3138352e39382e302f32332d3332203d3e20323731363931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.185.98.0/23

    Signature Algorithm: sha256WithRSAEncryption
         54:7d:c1:2d:0a:1c:dc:4c:27:04:26:16:52:4b:29:36:ab:9c:
         44:c4:fd:54:79:fc:7c:5a:f6:9f:63:66:09:56:bb:ee:63:43:
         d5:f0:8d:97:3b:90:23:5a:c2:7c:31:e6:65:98:23:de:22:6e:
         0d:6e:a0:bb:9c:ca:be:b0:e8:e2:46:72:8c:ab:ec:25:67:af:
         ec:15:5e:ea:1e:22:06:25:21:86:c2:1e:f8:08:ae:df:01:4e:
         6e:8c:e8:b3:87:46:79:9d:31:c6:77:fd:e5:6e:48:bc:a7:5a:
         47:21:f3:b4:bf:4a:50:36:1c:a2:9c:d7:62:e3:a9:08:b7:ad:
         70:3a:fe:5e:9e:6f:bb:72:e7:b2:70:4e:c7:50:00:47:0f:69:
         f4:2f:c1:2d:12:60:d5:37:3d:2d:a4:36:c0:66:1c:3a:a5:be:
         bb:5b:99:9a:4e:20:50:55:81:8b:5b:68:2d:0a:e1:13:58:bf:
         83:d6:b0:b7:27:74:4e:ea:9a:f1:8e:9f:12:a3:76:10:4a:91:
         06:1e:b6:c1:a0:52:ae:2b:98:e4:83:49:62:f7:a6:57:e1:e3:
         90:a9:b6:b0:de:c0:72:af:e1:28:02:33:f5:4e:42:fd:cf:23:
         c3:8f:9d:64:c4:4c:94:2c:7d:d5:36:a6:cb:c0:82:a3:f1:14:
         aa:29:e0:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:54:26 2025 by rpki-client on console.sobornost.net