Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3VgsyGpsJ4HYXkrn1HzzNbewZYej2jzUKA8ymbGw1T5V/0/3139302e382e32382e302f32322d3332203d3e20323633353833.roa
File:                     3139302e382e32382e302f32322d3332203d3e20323633353833.roa (raw, json)
Hash identifier:          GKNOlP0JQj/PIDb59+/P076Q24YQhJp5duDZSWj++hg=
Subject key identifier:   50:A5:1B:F3:F0:4F:CD:AC:BC:41:AA:B8:05:86:DF:70:8C:0B:EF:16
Certificate issuer:       /CN=C4B19BCE1E9AB5297235D80B57CF3DD82FEED751
Certificate serial:       6085963F4142B792B5CC3F6AA7AE9EC5CA50AA10
Authority key identifier: C4:B1:9B:CE:1E:9A:B5:29:72:35:D8:0B:57:CF:3D:D8:2F:EE:D7:51
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C4B19BCE1E9AB5297235D80B57CF3DD82FEED751.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3VgsyGpsJ4HYXkrn1HzzNbewZYej2jzUKA8ymbGw1T5V/0/3139302e382e32382e302f32322d3332203d3e20323633353833.roa
Signing time:             Fri 01 Nov 2024 20:28:36 +0000
ROA not before:           Fri 01 Nov 2024 20:23:36 +0000
ROA not after:            Fri 31 Oct 2025 20:28:36 +0000
asID:                     263583
IP address blocks:        190.8.28.0/22 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3VgsyGpsJ4HYXkrn1HzzNbewZYej2jzUKA8ymbGw1T5V/0/C4B19BCE1E9AB5297235D80B57CF3DD82FEED751.crl
                          rsync://rpki-repo.registro.br/repo/3VgsyGpsJ4HYXkrn1HzzNbewZYej2jzUKA8ymbGw1T5V/0/C4B19BCE1E9AB5297235D80B57CF3DD82FEED751.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C4B19BCE1E9AB5297235D80B57CF3DD82FEED751.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 06:14:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:85:96:3f:41:42:b7:92:b5:cc:3f:6a:a7:ae:9e:c5:ca:50:aa:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C4B19BCE1E9AB5297235D80B57CF3DD82FEED751
        Validity
            Not Before: Nov  1 20:23:36 2024 GMT
            Not After : Oct 31 20:28:36 2025 GMT
        Subject: CN=50A51BF3F04FCDACBC41AAB80586DF708C0BEF16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:04:98:0c:16:60:a7:85:73:f6:b7:2d:4f:fa:
                    5c:a1:f7:b3:e0:24:4a:62:7d:97:61:46:54:d0:33:
                    17:73:01:84:59:0b:d4:c1:0b:3d:8b:7b:79:55:53:
                    54:04:7d:64:2d:5f:48:aa:a1:d4:8e:9d:38:97:03:
                    db:4d:d7:1b:5e:6e:bc:c3:81:16:10:81:11:ef:0a:
                    be:58:e7:e9:76:d2:54:cf:e6:40:49:fe:21:4c:26:
                    f8:ff:a2:a1:b6:4e:54:da:26:83:fc:f2:98:7d:8f:
                    3e:06:b9:1b:de:54:44:d7:62:71:09:c7:03:48:89:
                    01:0a:5d:e2:1d:cb:ff:37:e9:6a:62:93:56:19:80:
                    af:f8:a7:e2:95:6d:b3:cf:18:50:91:e5:0a:25:68:
                    8d:96:4c:30:7d:0d:3e:63:4d:94:bc:de:93:91:aa:
                    cf:95:b2:b6:c5:fd:6e:9a:ab:d8:67:14:5e:9b:76:
                    5d:dc:20:ed:74:37:2b:8b:ea:63:02:33:41:85:c8:
                    73:dd:b4:68:62:9c:41:fc:47:46:09:01:fb:58:bf:
                    13:0c:28:2c:8f:23:80:7b:ac:b3:63:ea:79:3f:e9:
                    8f:bb:48:ad:2b:33:04:40:07:9e:ba:ad:3c:84:cf:
                    93:d7:2b:bc:5d:65:f3:37:e9:66:f2:21:36:ab:7d:
                    08:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:A5:1B:F3:F0:4F:CD:AC:BC:41:AA:B8:05:86:DF:70:8C:0B:EF:16
            X509v3 Authority Key Identifier:
                keyid:C4:B1:9B:CE:1E:9A:B5:29:72:35:D8:0B:57:CF:3D:D8:2F:EE:D7:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3VgsyGpsJ4HYXkrn1HzzNbewZYej2jzUKA8ymbGw1T5V/0/C4B19BCE1E9AB5297235D80B57CF3DD82FEED751.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C4B19BCE1E9AB5297235D80B57CF3DD82FEED751.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3VgsyGpsJ4HYXkrn1HzzNbewZYej2jzUKA8ymbGw1T5V/0/3139302e382e32382e302f32322d3332203d3e20323633353833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.8.28.0/22

    Signature Algorithm: sha256WithRSAEncryption
         85:59:31:2e:c2:e8:f1:48:5f:c4:72:9f:01:c4:b5:67:f5:39:
         b2:f1:7c:bb:94:1b:dc:40:25:fe:da:8d:70:6d:4e:e7:56:2a:
         3e:e0:75:0c:21:a8:00:11:ca:bc:85:02:a6:17:81:f3:cf:0e:
         1d:2c:79:0b:4c:2a:46:a8:ba:c8:49:dc:83:8c:f4:51:14:6c:
         db:58:45:dd:85:e9:c5:fa:29:a4:1c:97:d8:80:9a:98:a2:c4:
         30:79:d2:1c:7a:b2:c0:cd:2d:1c:ef:58:cd:ed:f1:a4:84:3d:
         d8:d3:21:97:bf:55:39:68:6b:d5:6a:0c:ac:aa:14:d0:c8:2e:
         08:dd:90:1f:a3:3f:99:6d:23:b1:c0:ed:60:cf:c3:0e:79:5b:
         f9:bb:87:06:29:f9:0b:1a:ed:ec:a8:3e:01:93:2d:76:e4:8a:
         cd:74:3d:35:e5:ff:35:f0:18:97:54:1f:d5:e9:1f:70:9b:bc:
         ad:95:f2:ff:12:88:0f:c8:d4:8a:40:ad:29:8d:4e:93:f1:04:
         82:d8:1d:58:e1:ea:1c:b5:1c:b9:17:1d:94:61:63:46:6b:a6:
         b9:d8:a3:8f:ea:47:2b:28:ae:e5:e9:3b:a7:b5:84:00:f9:84:
         e0:c1:1f:3f:24:37:c2:59:b6:b7:72:55:a1:47:1f:d0:1c:d1:
         e6:59:4f:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 08:00:13 2024 by rpki-client on console-ams.rpki-client.org