Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3bNJ2KjrPijeatbPwFrQ1yiPeq2RCw6v9TEintWgHNBL/1/3139302e3132342e3234342e302f32332d3233203d3e20323730383630.roa
File:                     3139302e3132342e3234342e302f32332d3233203d3e20323730383630.roa (raw, json)
Hash identifier:          BME9n1BUGXotEq5M3188ns7ORE2HIQ/aGYIeSezd66k=
Subject key identifier:   A3:16:C3:68:01:FA:36:28:7B:2E:97:40:16:BB:44:E6:7F:93:E4:86
Certificate issuer:       /CN=42F1C78060CC641617C8788CC89AA356D71F344F
Certificate serial:       5754400578403A86B79B9864F98EE1ABCF52461F
Authority key identifier: 42:F1:C7:80:60:CC:64:16:17:C8:78:8C:C8:9A:A3:56:D7:1F:34:4F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/42F1C78060CC641617C8788CC89AA356D71F344F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3bNJ2KjrPijeatbPwFrQ1yiPeq2RCw6v9TEintWgHNBL/1/3139302e3132342e3234342e302f32332d3233203d3e20323730383630.roa
Signing time:             Wed 03 Apr 2024 21:57:13 +0000
ROA not before:           Wed 03 Apr 2024 21:52:13 +0000
ROA not after:            Wed 02 Apr 2025 21:57:13 +0000
asID:                     270860
IP address blocks:        190.124.244.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3bNJ2KjrPijeatbPwFrQ1yiPeq2RCw6v9TEintWgHNBL/1/42F1C78060CC641617C8788CC89AA356D71F344F.crl
                          rsync://rpki-repo.registro.br/repo/3bNJ2KjrPijeatbPwFrQ1yiPeq2RCw6v9TEintWgHNBL/1/42F1C78060CC641617C8788CC89AA356D71F344F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/42F1C78060CC641617C8788CC89AA356D71F344F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 18:27:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:54:40:05:78:40:3a:86:b7:9b:98:64:f9:8e:e1:ab:cf:52:46:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=42F1C78060CC641617C8788CC89AA356D71F344F
        Validity
            Not Before: Apr  3 21:52:13 2024 GMT
            Not After : Apr  2 21:57:13 2025 GMT
        Subject: CN=A316C36801FA36287B2E974016BB44E67F93E486
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:42:a3:f6:bb:04:73:13:1d:60:53:ba:48:7b:
                    79:dd:d9:be:81:d9:de:9e:20:e1:9f:76:52:5b:f9:
                    5b:9c:e0:76:43:05:eb:f1:ee:04:7d:d7:01:df:49:
                    13:79:95:d0:f7:0b:12:10:a6:f5:a8:5c:82:d6:2c:
                    75:bb:38:7c:f0:72:93:d7:73:0e:5a:90:78:90:b6:
                    f8:c2:93:f5:ef:bd:4e:c8:dd:18:94:04:af:6b:89:
                    68:e0:b2:a7:c8:64:12:f5:ee:77:98:00:fe:ac:dc:
                    4c:1b:fc:54:b6:44:ce:26:84:2c:01:2e:c4:15:2e:
                    90:a0:d1:76:b6:3c:fc:0c:bf:b8:0a:bb:e9:a4:6b:
                    e2:47:bf:b7:79:33:1d:0b:1a:0f:96:1b:46:52:f8:
                    ec:23:92:ba:36:30:b1:6d:88:dc:70:28:02:16:25:
                    c7:73:29:66:c8:c7:4c:d3:3b:e3:6d:61:ea:2a:20:
                    24:56:be:bd:1e:2d:b3:f8:b2:17:73:c3:48:8f:27:
                    2d:36:76:35:e3:10:6c:89:4f:a5:e7:85:42:1c:45:
                    50:f2:f0:4e:b0:8d:d6:0b:5e:94:e9:03:13:e2:03:
                    7e:d2:53:65:30:e6:7c:c8:25:78:c4:33:84:42:77:
                    21:66:9b:61:38:df:9c:1b:a6:f5:e1:6a:1b:87:8e:
                    c9:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:16:C3:68:01:FA:36:28:7B:2E:97:40:16:BB:44:E6:7F:93:E4:86
            X509v3 Authority Key Identifier:
                keyid:42:F1:C7:80:60:CC:64:16:17:C8:78:8C:C8:9A:A3:56:D7:1F:34:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3bNJ2KjrPijeatbPwFrQ1yiPeq2RCw6v9TEintWgHNBL/1/42F1C78060CC641617C8788CC89AA356D71F344F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/42F1C78060CC641617C8788CC89AA356D71F344F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3bNJ2KjrPijeatbPwFrQ1yiPeq2RCw6v9TEintWgHNBL/1/3139302e3132342e3234342e302f32332d3233203d3e20323730383630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.124.244.0/23

    Signature Algorithm: sha256WithRSAEncryption
         39:fb:a3:0c:29:04:6f:48:a8:be:ca:e0:fe:d4:3c:54:04:61:
         3f:77:9c:8b:f1:41:99:70:c0:99:2a:68:bd:b6:20:1a:a2:06:
         b0:bb:56:1b:4b:62:b9:e9:3e:19:94:96:c7:39:f0:44:13:aa:
         f3:d2:55:d1:b8:62:c5:84:07:b1:93:39:93:a7:08:72:08:1f:
         90:1f:8e:35:ca:aa:d8:83:91:10:ec:72:e7:8e:9e:ec:e5:d2:
         be:85:94:73:82:0e:43:75:24:c8:4e:96:ce:30:88:af:09:85:
         a9:62:14:98:69:a4:09:5f:40:87:f5:ff:64:d0:e2:33:51:c1:
         5a:7c:8e:79:e6:2f:fb:7d:fc:15:2d:b5:ba:cd:d0:d9:a7:d5:
         67:59:24:68:c8:52:43:6c:fe:fc:57:46:30:2d:4a:be:e4:39:
         15:c1:8f:35:d9:bd:e1:da:68:88:19:8b:f9:f8:41:71:98:69:
         eb:63:eb:19:da:d7:b6:7e:58:24:69:be:cf:12:3c:0a:af:49:
         9f:6d:de:d1:d7:ba:12:ef:75:5b:fe:8f:e5:fa:2e:ba:13:20:
         10:c9:ee:4d:33:c6:68:f4:4a:d2:12:95:5c:db:f8:29:24:19:
         13:ba:f7:b1:50:1c:b9:e5:22:5b:11:16:a1:9c:94:d8:6d:60:
         e1:ac:eb:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:43:54 2024 by rpki-client on console-ams.rpki-client.org