Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3bNJ2KjrPijeatbPwFrQ1yiPeq2RCw6v9TEintWgHNBL/1/3139302e3132342e3234342e302f32322d3232203d3e20323730383630.roa
File:                     3139302e3132342e3234342e302f32322d3232203d3e20323730383630.roa (raw, json)
Hash identifier:          HCtVfxUGWKX/P37KryMpWD7YUyuPozAqIIArorHwkqU=
Subject key identifier:   F6:DB:F6:75:86:A6:54:F4:D3:97:E0:CC:A7:02:A8:44:EE:BC:5B:99
Certificate issuer:       /CN=42F1C78060CC641617C8788CC89AA356D71F344F
Certificate serial:       179C6A4546DB13239DFEA6B8BD4037675814CAF5
Authority key identifier: 42:F1:C7:80:60:CC:64:16:17:C8:78:8C:C8:9A:A3:56:D7:1F:34:4F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/42F1C78060CC641617C8788CC89AA356D71F344F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3bNJ2KjrPijeatbPwFrQ1yiPeq2RCw6v9TEintWgHNBL/1/3139302e3132342e3234342e302f32322d3232203d3e20323730383630.roa
Signing time:             Wed 03 Apr 2024 21:57:12 +0000
ROA not before:           Wed 03 Apr 2024 21:52:12 +0000
ROA not after:            Wed 02 Apr 2025 21:57:12 +0000
asID:                     270860
IP address blocks:        190.124.244.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3bNJ2KjrPijeatbPwFrQ1yiPeq2RCw6v9TEintWgHNBL/1/42F1C78060CC641617C8788CC89AA356D71F344F.crl
                          rsync://rpki-repo.registro.br/repo/3bNJ2KjrPijeatbPwFrQ1yiPeq2RCw6v9TEintWgHNBL/1/42F1C78060CC641617C8788CC89AA356D71F344F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/42F1C78060CC641617C8788CC89AA356D71F344F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 18:27:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:9c:6a:45:46:db:13:23:9d:fe:a6:b8:bd:40:37:67:58:14:ca:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=42F1C78060CC641617C8788CC89AA356D71F344F
        Validity
            Not Before: Apr  3 21:52:12 2024 GMT
            Not After : Apr  2 21:57:12 2025 GMT
        Subject: CN=F6DBF67586A654F4D397E0CCA702A844EEBC5B99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:56:e7:60:a3:d2:47:4e:8d:2a:60:32:0d:15:
                    cb:1d:f2:03:45:d1:76:d3:55:fb:65:4a:75:e7:c2:
                    cd:5f:04:0f:b3:5b:c1:37:78:77:ba:7e:1e:7c:12:
                    70:df:21:f6:25:e4:fe:29:da:f4:d2:b3:c9:87:91:
                    ab:71:41:33:25:e3:47:21:da:bf:51:01:77:4a:03:
                    08:b1:4a:4a:a1:49:e4:5a:10:91:bf:c9:16:b6:fa:
                    d7:5f:61:03:ac:36:a9:2a:19:ba:96:fd:76:68:ca:
                    8f:0c:aa:f8:22:ef:71:0b:1e:eb:ec:42:d1:05:54:
                    59:4b:84:4c:6a:2a:5b:fb:41:0d:39:57:26:41:12:
                    7b:8e:30:af:de:ce:f0:d4:cb:e6:9e:7e:c4:18:a3:
                    03:74:39:03:d3:11:b8:6a:8e:ee:51:a3:c5:27:d9:
                    98:ec:ac:bf:2e:60:91:20:6c:3e:04:aa:23:47:da:
                    0d:68:a5:25:21:f4:7a:6d:91:6c:fb:ee:56:33:e1:
                    2a:36:30:22:2f:46:05:ee:9a:33:e7:97:92:0e:8f:
                    ca:38:95:58:22:bc:f5:a6:b0:b8:f2:2e:73:5c:3d:
                    03:63:0f:e9:be:d4:f6:58:38:22:8b:98:df:69:79:
                    9a:db:9e:9f:9c:a3:18:8e:39:db:b1:83:cd:76:85:
                    59:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:DB:F6:75:86:A6:54:F4:D3:97:E0:CC:A7:02:A8:44:EE:BC:5B:99
            X509v3 Authority Key Identifier:
                keyid:42:F1:C7:80:60:CC:64:16:17:C8:78:8C:C8:9A:A3:56:D7:1F:34:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3bNJ2KjrPijeatbPwFrQ1yiPeq2RCw6v9TEintWgHNBL/1/42F1C78060CC641617C8788CC89AA356D71F344F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/42F1C78060CC641617C8788CC89AA356D71F344F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3bNJ2KjrPijeatbPwFrQ1yiPeq2RCw6v9TEintWgHNBL/1/3139302e3132342e3234342e302f32322d3232203d3e20323730383630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.124.244.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9f:9e:c4:a3:cd:13:1f:33:bb:55:ae:46:0b:19:a9:2b:1a:d1:
         53:68:dd:53:7f:11:c8:69:28:11:a4:80:37:ed:8b:9c:6f:82:
         2c:4a:ff:e5:ec:cf:ae:83:26:b6:be:01:e3:65:8f:4e:96:e1:
         40:a1:c7:07:04:19:d3:14:76:0b:83:fe:48:42:ee:a1:a6:63:
         74:3f:09:c4:d3:9b:60:ec:fd:9d:f0:46:f3:ba:e6:5e:d3:97:
         26:95:47:a6:f8:73:46:15:45:cf:1d:fe:2d:2e:04:96:3c:f9:
         a1:eb:3a:c2:5c:cb:09:4c:8d:fd:98:e9:24:6c:76:27:08:ad:
         95:4b:89:10:99:03:3c:56:a3:b9:a6:75:40:0c:8d:5e:aa:78:
         4a:d9:9b:a1:04:da:34:0d:fe:71:59:ed:59:bb:76:7e:fa:04:
         64:66:c1:d3:bf:15:be:36:12:59:70:a6:e1:ce:c1:a6:13:91:
         ee:9e:4c:24:ad:20:e1:e9:d3:3b:8d:39:bd:26:94:3b:e0:71:
         ba:3c:f9:c8:cc:ff:38:52:6f:d7:4a:3d:6e:b8:8b:39:cd:62:
         30:4a:35:83:6a:f8:85:e9:ea:64:c8:a4:eb:e2:6d:56:0f:ed:
         ec:0e:14:37:be:98:b0:08:03:26:be:1d:42:ea:7d:74:c5:a2:
         f5:37:7d:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:43:54 2024 by rpki-client on console-ams.rpki-client.org