Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3bNJ2KjrPijeatbPwFrQ1yiPeq2RCw6v9TEintWgHNBL/1/3139302e3132342e3234342e302f32342d3234203d3e20323730383630.roa
File:                     3139302e3132342e3234342e302f32342d3234203d3e20323730383630.roa (raw, json)
Hash identifier:          PNAk0BE0sumRMV6l9eoDAxX0BseeLxkk50LJRR11x5s=
Subject key identifier:   7F:3C:FA:34:B0:2F:D7:4B:FD:39:AF:44:89:F0:DA:F4:5F:7E:DC:57
Certificate issuer:       /CN=42F1C78060CC641617C8788CC89AA356D71F344F
Certificate serial:       6005792160DBBCD1577B8061A1C1324A80BD0F26
Authority key identifier: 42:F1:C7:80:60:CC:64:16:17:C8:78:8C:C8:9A:A3:56:D7:1F:34:4F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/42F1C78060CC641617C8788CC89AA356D71F344F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3bNJ2KjrPijeatbPwFrQ1yiPeq2RCw6v9TEintWgHNBL/1/3139302e3132342e3234342e302f32342d3234203d3e20323730383630.roa
Signing time:             Wed 03 Apr 2024 21:57:13 +0000
ROA not before:           Wed 03 Apr 2024 21:52:13 +0000
ROA not after:            Wed 02 Apr 2025 21:57:13 +0000
asID:                     270860
IP address blocks:        190.124.244.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3bNJ2KjrPijeatbPwFrQ1yiPeq2RCw6v9TEintWgHNBL/1/42F1C78060CC641617C8788CC89AA356D71F344F.crl
                          rsync://rpki-repo.registro.br/repo/3bNJ2KjrPijeatbPwFrQ1yiPeq2RCw6v9TEintWgHNBL/1/42F1C78060CC641617C8788CC89AA356D71F344F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/42F1C78060CC641617C8788CC89AA356D71F344F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 18:27:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:05:79:21:60:db:bc:d1:57:7b:80:61:a1:c1:32:4a:80:bd:0f:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=42F1C78060CC641617C8788CC89AA356D71F344F
        Validity
            Not Before: Apr  3 21:52:13 2024 GMT
            Not After : Apr  2 21:57:13 2025 GMT
        Subject: CN=7F3CFA34B02FD74BFD39AF4489F0DAF45F7EDC57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:03:6a:b0:3b:52:78:0c:27:ae:82:c2:a1:f5:
                    7f:ad:ac:1d:5b:61:81:f9:c5:5d:32:1c:f9:80:30:
                    77:ca:ca:7e:dd:2d:85:bc:54:fe:17:1a:f6:a3:87:
                    bb:ca:b3:24:6a:ca:83:be:23:2a:62:35:6f:0c:de:
                    2f:4f:76:b7:8c:ce:ee:07:9d:5d:de:b2:e9:14:2f:
                    ea:ab:26:d0:aa:23:d0:a3:3c:a4:d9:32:8d:b4:52:
                    17:4d:d5:d9:19:d1:04:79:f5:8c:f4:b0:4e:08:a8:
                    66:d4:0e:66:5a:f5:33:a1:8a:df:d2:0e:ce:1a:47:
                    7c:56:05:1b:bd:9b:dc:c3:93:3a:05:c1:b9:a7:9d:
                    8c:a1:76:49:fd:e3:f1:e9:60:6b:ad:ec:15:55:10:
                    7b:c0:2a:f5:f5:55:d4:b5:19:7c:91:b5:0b:7c:cb:
                    c8:43:55:00:b8:13:ea:f7:34:58:88:ac:81:46:60:
                    ee:a3:44:f6:6a:93:67:e6:14:6f:2d:0e:ad:02:67:
                    d9:dd:ea:c8:50:0a:6d:35:40:42:51:b6:2d:3f:fe:
                    b8:58:ac:0a:a2:2c:1c:e9:c0:1b:67:50:ab:c9:de:
                    79:74:a3:38:34:25:f0:84:53:43:d3:85:36:4e:36:
                    e0:fb:f1:d6:01:a9:09:78:27:1f:97:a1:ef:e8:7e:
                    e9:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:3C:FA:34:B0:2F:D7:4B:FD:39:AF:44:89:F0:DA:F4:5F:7E:DC:57
            X509v3 Authority Key Identifier:
                keyid:42:F1:C7:80:60:CC:64:16:17:C8:78:8C:C8:9A:A3:56:D7:1F:34:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3bNJ2KjrPijeatbPwFrQ1yiPeq2RCw6v9TEintWgHNBL/1/42F1C78060CC641617C8788CC89AA356D71F344F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/42F1C78060CC641617C8788CC89AA356D71F344F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3bNJ2KjrPijeatbPwFrQ1yiPeq2RCw6v9TEintWgHNBL/1/3139302e3132342e3234342e302f32342d3234203d3e20323730383630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.124.244.0/24

    Signature Algorithm: sha256WithRSAEncryption
         50:94:97:24:62:10:7e:2f:e7:94:b5:8f:90:2c:9d:1e:41:4e:
         26:1d:c0:d7:ed:14:cd:9d:d0:bb:f4:2f:7e:54:02:be:cc:47:
         b9:9c:72:86:ad:e3:35:d0:ea:5d:2e:2f:86:41:29:38:17:04:
         85:bb:29:ec:60:1a:6c:bb:18:ca:da:b7:6b:10:5c:00:41:2a:
         28:1f:44:52:da:ee:04:8c:28:d8:f3:ac:64:d4:f7:a6:1d:c2:
         1b:a9:9d:c9:91:1f:08:a7:b6:cb:7a:69:2f:71:79:bd:59:59:
         20:6b:60:a9:0d:ed:80:bc:1e:b1:b1:b3:ea:5c:74:d0:da:ee:
         84:a8:30:25:b0:1b:71:e0:25:59:b5:20:2c:95:38:9f:94:f9:
         b2:9a:64:ff:5d:ff:6d:7d:f9:4e:4f:e8:b7:ef:60:1d:39:15:
         56:8b:3e:54:57:3f:14:ea:7c:d1:14:16:b1:32:a9:3c:0b:98:
         10:87:1c:c4:84:db:8a:1d:ff:2a:fb:7a:1e:27:49:1d:8f:ce:
         ff:4a:0f:7e:10:31:b3:b7:11:11:f9:f6:98:5d:e4:01:1a:fe:
         22:c4:8f:f6:f9:57:0b:c5:b5:c4:39:81:45:e9:8d:7c:38:a5:
         c1:9e:6e:60:d9:ac:b3:55:09:ef:8b:f7:3b:bb:6d:e4:40:fe:
         8b:d4:ea:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:43:54 2024 by rpki-client on console-ams.rpki-client.org