Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3bNJ2KjrPijeatbPwFrQ1yiPeq2RCw6v9TEintWgHNBL/1/3139302e3132342e3234352e302f32342d3234203d3e20323730383630.roa
File:                     3139302e3132342e3234352e302f32342d3234203d3e20323730383630.roa (raw, json)
Hash identifier:          5Beu0I/ABAuYMJ3WI98mbLSSRyQPZkFXupXyQ0bzKd8=
Subject key identifier:   81:B6:E6:CD:09:CB:E7:4B:C5:78:0E:0E:0E:D4:F5:79:AE:60:94:D7
Certificate issuer:       /CN=42F1C78060CC641617C8788CC89AA356D71F344F
Certificate serial:       76B883216DE65B6955E30B9807682DA4ED09E2A4
Authority key identifier: 42:F1:C7:80:60:CC:64:16:17:C8:78:8C:C8:9A:A3:56:D7:1F:34:4F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/42F1C78060CC641617C8788CC89AA356D71F344F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3bNJ2KjrPijeatbPwFrQ1yiPeq2RCw6v9TEintWgHNBL/1/3139302e3132342e3234352e302f32342d3234203d3e20323730383630.roa
Signing time:             Wed 03 Apr 2024 21:57:13 +0000
ROA not before:           Wed 03 Apr 2024 21:52:13 +0000
ROA not after:            Wed 02 Apr 2025 21:57:13 +0000
asID:                     270860
IP address blocks:        190.124.245.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3bNJ2KjrPijeatbPwFrQ1yiPeq2RCw6v9TEintWgHNBL/1/42F1C78060CC641617C8788CC89AA356D71F344F.crl
                          rsync://rpki-repo.registro.br/repo/3bNJ2KjrPijeatbPwFrQ1yiPeq2RCw6v9TEintWgHNBL/1/42F1C78060CC641617C8788CC89AA356D71F344F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/42F1C78060CC641617C8788CC89AA356D71F344F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 18:27:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:b8:83:21:6d:e6:5b:69:55:e3:0b:98:07:68:2d:a4:ed:09:e2:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=42F1C78060CC641617C8788CC89AA356D71F344F
        Validity
            Not Before: Apr  3 21:52:13 2024 GMT
            Not After : Apr  2 21:57:13 2025 GMT
        Subject: CN=81B6E6CD09CBE74BC5780E0E0ED4F579AE6094D7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:d8:bd:0c:39:39:9d:db:22:80:ea:c1:0d:e5:
                    93:13:db:b7:75:b3:03:04:94:b5:f3:9c:45:f0:fb:
                    ea:85:82:3f:20:62:b1:48:13:ab:0b:01:e8:db:8e:
                    1b:ee:f5:bd:bf:51:4f:af:73:5d:4f:27:52:98:2c:
                    3c:b8:b1:b4:4b:45:25:7f:c1:0e:ea:96:06:79:cf:
                    d6:9e:8a:5c:3b:18:fb:26:69:36:86:92:4c:a1:87:
                    8a:69:d3:72:a7:fe:e7:c2:98:b3:98:62:7a:47:a9:
                    58:73:fc:5a:3c:84:fc:70:ad:72:ea:e7:3a:3f:8b:
                    f5:8d:0a:5f:e6:8d:2b:ad:8b:5d:a1:f3:44:7e:ab:
                    3f:a8:9f:ef:b2:10:3b:81:a4:e6:5a:6d:23:01:26:
                    98:96:80:b7:10:da:41:2e:a2:13:27:f5:5d:5e:b9:
                    88:5e:4c:c0:bc:40:f8:18:29:88:92:26:20:16:53:
                    6b:d9:6b:9a:25:33:a1:73:7c:c5:74:92:9b:a8:2a:
                    cc:9e:20:dd:d2:64:5f:34:72:3a:0e:ba:13:13:b2:
                    ee:9a:a4:3b:ec:d3:4d:2d:e2:70:6b:0a:7b:70:11:
                    75:b4:b6:b9:11:ca:c0:26:98:ba:f6:db:66:17:92:
                    d8:9c:88:2b:74:eb:05:27:4e:2f:2a:7d:c6:34:4b:
                    aa:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:B6:E6:CD:09:CB:E7:4B:C5:78:0E:0E:0E:D4:F5:79:AE:60:94:D7
            X509v3 Authority Key Identifier:
                keyid:42:F1:C7:80:60:CC:64:16:17:C8:78:8C:C8:9A:A3:56:D7:1F:34:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3bNJ2KjrPijeatbPwFrQ1yiPeq2RCw6v9TEintWgHNBL/1/42F1C78060CC641617C8788CC89AA356D71F344F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/42F1C78060CC641617C8788CC89AA356D71F344F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3bNJ2KjrPijeatbPwFrQ1yiPeq2RCw6v9TEintWgHNBL/1/3139302e3132342e3234352e302f32342d3234203d3e20323730383630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.124.245.0/24

    Signature Algorithm: sha256WithRSAEncryption
         09:c0:60:7d:eb:b6:cd:74:3f:8b:a1:9d:d9:53:61:d4:85:4c:
         63:e4:e5:0c:59:37:c2:48:fd:49:6e:2a:74:3c:b3:39:db:37:
         7a:4e:d2:05:9a:4d:7d:35:12:fb:cc:2f:0f:b3:55:ec:da:23:
         fc:2d:f5:d2:4c:5b:5d:ae:74:d4:41:54:b7:ab:e7:c5:4b:23:
         73:43:d0:29:42:8f:6a:7e:c5:ce:77:02:0a:9c:8a:7f:a0:7a:
         3c:83:b4:50:0d:c6:7b:60:11:59:56:63:c9:85:e4:c1:ed:88:
         ef:9b:7e:f4:e7:2f:6a:27:e4:51:e9:22:fa:3f:50:84:ee:0c:
         2b:f1:46:5a:87:e8:3a:20:bd:ac:5c:5b:95:c2:a5:01:4c:07:
         fc:67:99:f4:a9:73:0e:f9:8f:69:1d:f2:c6:91:04:e9:03:47:
         05:65:b4:c0:54:bd:c1:cc:f6:35:d2:dc:1e:c5:ad:6d:a8:ef:
         1f:ea:d5:73:cc:e5:b4:31:14:7d:55:37:a4:8b:6a:a6:be:c9:
         cc:01:d2:eb:5e:5c:80:4b:b9:1b:48:2d:66:97:14:62:53:5f:
         2a:17:f6:b2:c3:47:5e:1e:a5:8e:56:18:73:92:69:76:32:b0:
         dc:c0:33:c0:9f:40:67:54:de:f9:76:cb:b7:a8:9d:b0:f9:d0:
         26:ca:eb:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:43:54 2024 by rpki-client on console-ams.rpki-client.org