Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8v9o4vDKFhy4Px3hw3PCFiSzsntpe2nWsGp725EnBvg5/2/3139302e38392e36302e302f32322d3332203d3e20323730333632.roa
File:                     3139302e38392e36302e302f32322d3332203d3e20323730333632.roa (raw, json)
Hash identifier:          ll9y4Bsk31IOEhJV6ld0cjztmrWbl/D03TM1s/xpoe4=
Subject key identifier:   7A:83:4B:A1:A7:CF:0B:94:EF:8A:11:C2:13:7A:6C:F9:66:AE:B8:19
Certificate issuer:       /CN=1B1004FC54CDC40DC5667B1D6B183CCEA2DA4FFD
Certificate serial:       22C6702FF10B4A37C673FCC4F00369FE72CD5F9E
Authority key identifier: 1B:10:04:FC:54:CD:C4:0D:C5:66:7B:1D:6B:18:3C:CE:A2:DA:4F:FD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1B1004FC54CDC40DC5667B1D6B183CCEA2DA4FFD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8v9o4vDKFhy4Px3hw3PCFiSzsntpe2nWsGp725EnBvg5/2/3139302e38392e36302e302f32322d3332203d3e20323730333632.roa
Signing time:             Wed 03 Apr 2024 19:42:31 +0000
ROA not before:           Wed 03 Apr 2024 19:37:31 +0000
ROA not after:            Wed 02 Apr 2025 19:42:31 +0000
asID:                     270362
IP address blocks:        190.89.60.0/22 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8v9o4vDKFhy4Px3hw3PCFiSzsntpe2nWsGp725EnBvg5/2/1B1004FC54CDC40DC5667B1D6B183CCEA2DA4FFD.crl
                          rsync://rpki-repo.registro.br/repo/8v9o4vDKFhy4Px3hw3PCFiSzsntpe2nWsGp725EnBvg5/2/1B1004FC54CDC40DC5667B1D6B183CCEA2DA4FFD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1B1004FC54CDC40DC5667B1D6B183CCEA2DA4FFD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:51:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:c6:70:2f:f1:0b:4a:37:c6:73:fc:c4:f0:03:69:fe:72:cd:5f:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1B1004FC54CDC40DC5667B1D6B183CCEA2DA4FFD
        Validity
            Not Before: Apr  3 19:37:31 2024 GMT
            Not After : Apr  2 19:42:31 2025 GMT
        Subject: CN=7A834BA1A7CF0B94EF8A11C2137A6CF966AEB819
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:8f:ae:42:83:a0:49:36:08:ca:a4:d8:58:7a:
                    fd:b3:0d:53:cf:71:58:85:c6:c9:45:75:3b:e0:46:
                    29:2a:f6:42:15:21:5e:67:7e:f2:2b:8c:95:8d:5d:
                    b3:e1:fa:eb:70:6c:c9:3a:ff:02:30:d6:0a:3a:4b:
                    63:b1:8c:a1:fc:b3:f0:7b:b3:7c:d7:72:c2:f3:cc:
                    df:7f:c1:fa:5b:e8:12:f2:6e:f3:11:ec:e7:d0:f6:
                    bc:d6:66:5d:21:27:f7:0c:67:78:f5:d1:88:2a:58:
                    ec:33:cf:93:b1:4a:bc:fe:26:75:a2:1e:08:a7:6d:
                    d3:df:28:58:77:32:1b:45:79:7d:89:9f:4d:6d:13:
                    0e:20:e6:f0:af:eb:63:2e:92:df:fe:47:b8:3c:b3:
                    00:48:ac:50:31:15:48:36:fd:43:26:09:ba:82:74:
                    ed:05:db:ef:9b:e2:fc:9a:12:01:f1:d2:97:c3:dd:
                    5e:60:2d:20:c1:e0:4d:41:6e:dc:81:5a:d4:29:af:
                    9e:b7:ee:2c:b5:1d:1a:aa:a1:40:85:58:5f:ca:8d:
                    05:35:b0:e2:1b:97:b9:1b:d9:9f:3e:ea:9e:ce:b4:
                    1b:36:83:e6:7a:ca:90:5a:22:c4:bc:3a:a5:a1:3a:
                    58:5f:db:49:43:d4:24:b3:10:74:78:ce:94:da:a2:
                    ae:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:83:4B:A1:A7:CF:0B:94:EF:8A:11:C2:13:7A:6C:F9:66:AE:B8:19
            X509v3 Authority Key Identifier:
                keyid:1B:10:04:FC:54:CD:C4:0D:C5:66:7B:1D:6B:18:3C:CE:A2:DA:4F:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8v9o4vDKFhy4Px3hw3PCFiSzsntpe2nWsGp725EnBvg5/2/1B1004FC54CDC40DC5667B1D6B183CCEA2DA4FFD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1B1004FC54CDC40DC5667B1D6B183CCEA2DA4FFD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8v9o4vDKFhy4Px3hw3PCFiSzsntpe2nWsGp725EnBvg5/2/3139302e38392e36302e302f32322d3332203d3e20323730333632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.89.60.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4a:1a:ec:98:a5:15:a4:b9:b9:0d:6e:1e:72:c5:85:76:5e:27:
         2c:03:ba:b7:80:b1:e4:f0:9b:ad:c2:12:d8:ab:69:83:65:9d:
         4d:c0:4e:e3:d2:8b:0f:af:62:58:f0:df:8a:db:22:45:77:53:
         b4:4e:92:10:f4:d4:5d:7a:aa:4b:b0:98:67:98:68:6b:05:75:
         d9:1c:ef:c1:50:7f:3d:8b:53:bf:53:78:50:dd:6d:71:61:69:
         c4:15:52:b5:7c:9a:c3:76:25:8b:e1:42:18:3a:c7:53:27:92:
         d7:e2:9d:7b:03:50:4b:18:c1:8a:bf:2b:aa:5c:f0:24:fd:a6:
         39:24:31:d5:76:72:53:61:96:de:6f:6b:ee:c4:d7:fb:41:92:
         dd:01:da:81:db:ed:e0:ec:b5:ce:aa:54:0a:39:3e:ce:9c:e3:
         54:74:46:29:92:12:1b:99:95:73:57:9a:6d:03:7c:1d:c1:d4:
         c0:3e:e2:ab:37:80:5d:2a:0d:8a:22:bd:22:56:3e:29:c9:b7:
         c8:85:11:76:69:3c:88:a8:35:a4:40:8e:e2:a1:2d:db:49:1d:
         a2:8c:81:00:76:e0:29:63:34:03:2c:ac:2c:6f:c9:6c:71:42:
         19:0b:1e:68:c4:05:14:cf:5c:12:2c:a2:a6:77:6a:84:33:90:
         71:de:2c:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:10:04 2024 by rpki-client on console-ams.rpki-client.org