Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3XhyaCuqGV2GdvX8fYyB6u1CHTvRmMa9gVfnKBUepiKj/0/3139302e3130372e3136302e302f32322d3232203d3e20323730343135.roa
File:                     3139302e3130372e3136302e302f32322d3232203d3e20323730343135.roa (raw, json)
Hash identifier:          syjboMW8lXFPItQ5z5SI7nzPeWU8uL/cj/3FCCZhUF4=
Subject key identifier:   57:7C:69:CB:68:34:3D:8A:2C:E0:F6:E5:0C:68:3F:95:C2:BF:EB:65
Certificate issuer:       /CN=CE69E090A3A3C45C3EE3F4A2A4068B58948DC994
Certificate serial:       6CD677B429061E199AE3AACEACA363D3E4185684
Authority key identifier: CE:69:E0:90:A3:A3:C4:5C:3E:E3:F4:A2:A4:06:8B:58:94:8D:C9:94
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE69E090A3A3C45C3EE3F4A2A4068B58948DC994.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3XhyaCuqGV2GdvX8fYyB6u1CHTvRmMa9gVfnKBUepiKj/0/3139302e3130372e3136302e302f32322d3232203d3e20323730343135.roa
Signing time:             Mon 22 Jul 2024 19:37:17 +0000
ROA not before:           Mon 22 Jul 2024 19:32:17 +0000
ROA not after:            Mon 21 Jul 2025 19:37:17 +0000
asID:                     270415
IP address blocks:        190.107.160.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3XhyaCuqGV2GdvX8fYyB6u1CHTvRmMa9gVfnKBUepiKj/0/CE69E090A3A3C45C3EE3F4A2A4068B58948DC994.crl
                          rsync://rpki-repo.registro.br/repo/3XhyaCuqGV2GdvX8fYyB6u1CHTvRmMa9gVfnKBUepiKj/0/CE69E090A3A3C45C3EE3F4A2A4068B58948DC994.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE69E090A3A3C45C3EE3F4A2A4068B58948DC994.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 15:29:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:d6:77:b4:29:06:1e:19:9a:e3:aa:ce:ac:a3:63:d3:e4:18:56:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CE69E090A3A3C45C3EE3F4A2A4068B58948DC994
        Validity
            Not Before: Jul 22 19:32:17 2024 GMT
            Not After : Jul 21 19:37:17 2025 GMT
        Subject: CN=577C69CB68343D8A2CE0F6E50C683F95C2BFEB65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:23:77:45:42:fb:de:66:6d:b0:86:06:7b:16:
                    d9:cd:8e:4c:67:d1:4d:4f:2f:56:11:19:2f:c8:c8:
                    66:1c:cc:a1:b5:58:12:bb:0f:d2:d3:78:f7:d6:a9:
                    5f:dd:eb:42:7b:15:de:0e:2b:e8:f9:f2:f5:dc:12:
                    6f:ba:5f:bf:e1:4c:ff:bf:02:15:6d:03:3b:49:3e:
                    6c:bb:66:95:7f:35:3c:5e:00:c6:ef:49:db:32:18:
                    e9:aa:c9:6e:8f:63:67:3b:ad:6b:bc:e3:1c:3e:8c:
                    19:24:b8:25:aa:65:6a:18:49:bc:33:b3:da:3a:f2:
                    7e:d8:de:88:f7:27:37:38:43:9f:08:31:4a:9b:fa:
                    44:9b:fc:ff:01:fd:bb:f4:67:8a:57:7e:10:b4:15:
                    94:6c:07:ce:41:4e:52:73:fe:c8:0f:83:06:83:c6:
                    5e:c1:43:cd:77:54:4e:34:b4:d4:5c:e0:e0:25:ef:
                    62:8f:eb:9e:d1:ca:31:76:9a:4b:b9:ad:cc:10:39:
                    ac:65:6f:03:f3:66:b4:bd:42:7c:8c:bf:39:a4:55:
                    0a:c2:c4:04:2e:78:66:7a:db:d8:84:7b:67:d9:62:
                    37:6a:35:fb:d5:3c:59:21:76:57:13:c0:bd:f3:ab:
                    fa:99:9e:c4:5d:26:09:cb:d2:ff:63:e6:30:48:44:
                    cd:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:7C:69:CB:68:34:3D:8A:2C:E0:F6:E5:0C:68:3F:95:C2:BF:EB:65
            X509v3 Authority Key Identifier:
                keyid:CE:69:E0:90:A3:A3:C4:5C:3E:E3:F4:A2:A4:06:8B:58:94:8D:C9:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3XhyaCuqGV2GdvX8fYyB6u1CHTvRmMa9gVfnKBUepiKj/0/CE69E090A3A3C45C3EE3F4A2A4068B58948DC994.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE69E090A3A3C45C3EE3F4A2A4068B58948DC994.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3XhyaCuqGV2GdvX8fYyB6u1CHTvRmMa9gVfnKBUepiKj/0/3139302e3130372e3136302e302f32322d3232203d3e20323730343135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.107.160.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8e:0f:ef:f1:7c:37:cb:1c:2c:98:52:e5:30:ed:ae:fd:0d:8f:
         ce:dc:e5:09:8b:f2:d0:69:4f:1a:dd:c9:9b:78:32:13:2d:8f:
         4b:67:94:41:79:61:02:50:3a:61:07:46:73:b3:d6:c2:b3:cb:
         c5:90:1e:d7:12:93:ec:4e:0e:48:e3:27:0e:f0:eb:25:29:c4:
         a4:a0:01:83:af:5e:2f:97:d4:04:9d:8e:9d:b9:0a:1e:19:fb:
         01:c5:bc:99:3e:ac:b7:66:1f:89:7b:40:d5:ef:d7:ff:36:1f:
         cc:92:20:07:99:3f:b5:48:36:61:c6:71:eb:5e:db:19:5d:aa:
         1c:b8:97:0d:33:3d:00:0c:98:3a:cc:37:41:8a:90:60:3d:ce:
         9b:ec:01:60:30:31:3d:6a:d6:e4:59:36:3a:86:ae:4e:d9:82:
         2d:99:41:b8:d9:b5:a8:ea:68:d8:a7:50:fa:ad:b3:2f:3f:37:
         40:27:5e:8f:1e:4f:77:7d:44:8a:48:38:0c:55:ba:57:ec:b5:
         17:87:9c:2d:db:81:d4:63:a0:c2:20:04:5f:ba:53:92:b2:37:
         ef:e4:5a:93:74:f4:9d:2c:95:f4:3d:0f:34:d9:bc:99:c1:c5:
         41:df:ea:d5:14:aa:f3:5e:99:51:35:38:47:4f:c1:32:b8:26:
         0e:71:f7:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 16:21:04 2024 by rpki-client on console-ams.rpki-client.org