Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3SVwRaxD3SwZpEtuLdFMLcNzwaC3FBurWUANdW7m4LNr/1/3139302e3130392e38302e302f32322d3234203d3e203532393133.roa
File:                     3139302e3130392e38302e302f32322d3234203d3e203532393133.roa (raw, json)
Hash identifier:          KBKf+/Qevujhk42l2QwVZocEnpKDDMhbt2v7hUmGz6g=
Subject key identifier:   D1:D9:FC:FC:40:44:A0:A3:4F:D2:76:50:55:C4:9F:CF:3F:F0:2E:87
Certificate issuer:       /CN=8204A8F62764E655E183BB09417B0875F11B3A7D
Certificate serial:       78020FFD681E2679A21DBFBBB0AA86CFAE47BBD0
Authority key identifier: 82:04:A8:F6:27:64:E6:55:E1:83:BB:09:41:7B:08:75:F1:1B:3A:7D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8204A8F62764E655E183BB09417B0875F11B3A7D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3SVwRaxD3SwZpEtuLdFMLcNzwaC3FBurWUANdW7m4LNr/1/3139302e3130392e38302e302f32322d3234203d3e203532393133.roa
Signing time:             Thu 04 Apr 2024 09:45:17 +0000
ROA not before:           Thu 04 Apr 2024 09:40:17 +0000
ROA not after:            Thu 03 Apr 2025 09:45:17 +0000
asID:                     52913
IP address blocks:        190.109.80.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3SVwRaxD3SwZpEtuLdFMLcNzwaC3FBurWUANdW7m4LNr/1/8204A8F62764E655E183BB09417B0875F11B3A7D.crl
                          rsync://rpki-repo.registro.br/repo/3SVwRaxD3SwZpEtuLdFMLcNzwaC3FBurWUANdW7m4LNr/1/8204A8F62764E655E183BB09417B0875F11B3A7D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8204A8F62764E655E183BB09417B0875F11B3A7D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:02:0f:fd:68:1e:26:79:a2:1d:bf:bb:b0:aa:86:cf:ae:47:bb:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8204A8F62764E655E183BB09417B0875F11B3A7D
        Validity
            Not Before: Apr  4 09:40:17 2024 GMT
            Not After : Apr  3 09:45:17 2025 GMT
        Subject: CN=D1D9FCFC4044A0A34FD2765055C49FCF3FF02E87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:5b:a1:41:c2:5c:25:db:a0:5a:85:38:8a:4c:
                    8a:3f:9a:fa:95:37:32:1a:24:b1:c5:78:41:32:93:
                    3c:eb:ca:20:45:44:20:0f:e6:db:c0:a8:33:b4:57:
                    16:6d:35:42:d9:60:22:c7:e5:8b:74:9a:ec:03:6e:
                    13:f4:07:74:65:94:e2:b0:ec:fa:54:e9:6b:c8:45:
                    47:08:0f:2f:76:64:ff:79:0c:9c:39:bd:fc:5d:e5:
                    ae:f5:30:11:ca:46:d2:10:5a:b2:da:12:03:4a:9b:
                    92:0f:28:e4:46:9d:11:92:c8:92:23:cd:b6:ff:27:
                    6d:04:ee:4e:81:52:14:d1:e5:5c:b3:f5:7c:49:b7:
                    d0:ff:e3:e6:b0:77:02:01:66:bb:c6:1a:77:56:92:
                    09:16:37:7c:f6:ac:d4:9c:92:10:99:8b:c3:46:74:
                    0b:10:7e:30:c8:85:f2:1e:b4:1f:dc:bc:87:71:23:
                    54:71:7b:01:ba:0f:af:69:bb:bc:17:65:4b:08:d8:
                    21:72:6e:6d:ed:93:6c:d1:8f:70:fc:88:5d:c5:3d:
                    e1:6f:a1:bf:4c:f7:c4:1f:a5:40:f1:be:80:ab:26:
                    65:4d:10:21:e7:27:0b:42:b5:fd:f8:7e:41:0f:ac:
                    49:d2:91:da:2d:c5:af:4f:59:9a:bc:fa:70:48:06:
                    02:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:D9:FC:FC:40:44:A0:A3:4F:D2:76:50:55:C4:9F:CF:3F:F0:2E:87
            X509v3 Authority Key Identifier:
                keyid:82:04:A8:F6:27:64:E6:55:E1:83:BB:09:41:7B:08:75:F1:1B:3A:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3SVwRaxD3SwZpEtuLdFMLcNzwaC3FBurWUANdW7m4LNr/1/8204A8F62764E655E183BB09417B0875F11B3A7D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8204A8F62764E655E183BB09417B0875F11B3A7D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3SVwRaxD3SwZpEtuLdFMLcNzwaC3FBurWUANdW7m4LNr/1/3139302e3130392e38302e302f32322d3234203d3e203532393133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.109.80.0/22

    Signature Algorithm: sha256WithRSAEncryption
         98:c4:db:f0:54:7a:41:36:6b:44:8b:1e:2f:9d:72:38:02:8c:
         c5:d5:26:43:16:33:03:b0:a1:f6:ef:4d:62:71:be:18:f5:52:
         1d:f5:4e:fa:bd:76:db:71:6d:0d:01:0b:b5:5f:11:0c:0d:52:
         20:b0:ea:ef:8e:a5:fd:69:0c:63:55:a9:a8:96:a5:e0:63:26:
         96:0d:9f:a2:88:ea:00:63:ed:a2:1c:7c:fb:8f:7b:ec:48:34:
         66:9f:a5:1a:16:2f:23:65:09:2e:19:7a:04:93:fd:b4:bc:61:
         00:4c:fa:e9:ce:75:6f:aa:3c:1a:c8:0b:36:74:e0:38:4a:56:
         b3:14:85:89:1c:f5:f4:cd:fa:31:d8:84:67:7e:3a:d4:23:ad:
         b6:eb:67:87:a5:cf:0e:39:24:4e:67:79:0b:8f:c2:b4:e6:a0:
         85:4f:ba:df:97:6c:1d:57:23:59:4f:e8:c3:fb:c8:99:27:81:
         aa:95:6e:ca:ee:85:64:d3:ec:b1:7b:d6:5b:6a:f2:9b:f3:32:
         39:6a:7f:aa:e4:f8:14:6f:96:46:0d:d9:91:cf:81:3e:d0:65:
         a0:a9:09:75:21:12:b2:ec:b0:3f:35:3c:ad:57:5b:aa:71:6e:
         9b:6d:4d:8b:dc:69:aa:55:8e:1a:b4:96:ef:00:a4:1f:b5:b8:
         a8:13:c1:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 13:12:15 2024 by rpki-client on console-fra.rpki-client.org