Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9uLs22ASqpqZvBJL8xJRKQ4Rzwy4zjmpPdx9hZmqEPGE/1/3139302e3132332e3230302e302f32322d3332203d3e20323636313935.roa
File:                     3139302e3132332e3230302e302f32322d3332203d3e20323636313935.roa (raw, json)
Hash identifier:          DjCAt1x6U9H7aRvxRkNBVZ8tIZ/VuhvKm4KqwAVp69I=
Subject key identifier:   33:F2:E1:38:E9:03:8E:2C:FD:DC:E6:C5:93:28:E5:F5:82:AB:A2:2D
Certificate issuer:       /CN=554F31049EE1172449D30E9D16346BBA2B90EA1B
Certificate serial:       1190D72F30C326A824F969F501F78610D210540A
Authority key identifier: 55:4F:31:04:9E:E1:17:24:49:D3:0E:9D:16:34:6B:BA:2B:90:EA:1B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/554F31049EE1172449D30E9D16346BBA2B90EA1B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9uLs22ASqpqZvBJL8xJRKQ4Rzwy4zjmpPdx9hZmqEPGE/1/3139302e3132332e3230302e302f32322d3332203d3e20323636313935.roa
Signing time:             Thu 04 Apr 2024 04:02:13 +0000
ROA not before:           Thu 04 Apr 2024 03:57:13 +0000
ROA not after:            Thu 03 Apr 2025 04:02:13 +0000
asID:                     266195
IP address blocks:        190.123.200.0/22 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9uLs22ASqpqZvBJL8xJRKQ4Rzwy4zjmpPdx9hZmqEPGE/1/554F31049EE1172449D30E9D16346BBA2B90EA1B.crl
                          rsync://rpki-repo.registro.br/repo/9uLs22ASqpqZvBJL8xJRKQ4Rzwy4zjmpPdx9hZmqEPGE/1/554F31049EE1172449D30E9D16346BBA2B90EA1B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/554F31049EE1172449D30E9D16346BBA2B90EA1B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 06:03:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:90:d7:2f:30:c3:26:a8:24:f9:69:f5:01:f7:86:10:d2:10:54:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=554F31049EE1172449D30E9D16346BBA2B90EA1B
        Validity
            Not Before: Apr  4 03:57:13 2024 GMT
            Not After : Apr  3 04:02:13 2025 GMT
        Subject: CN=33F2E138E9038E2CFDDCE6C59328E5F582ABA22D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:65:48:cb:db:43:11:49:4f:85:39:ba:aa:9b:
                    42:3e:39:3c:54:bf:a1:ad:e0:ea:b9:1d:bc:13:6c:
                    1a:07:12:c4:8a:37:0c:aa:18:14:87:c4:82:b9:27:
                    44:a9:4c:37:4a:19:e8:27:08:8a:a5:69:b9:61:e8:
                    48:d9:4f:25:cf:d4:60:17:32:2b:2c:3e:83:b3:11:
                    51:4f:ac:81:b6:4f:49:a6:d2:39:cf:36:47:a8:8c:
                    eb:34:fe:9a:a0:e9:5b:9e:38:0e:b0:c7:66:a7:53:
                    f7:42:05:4a:c9:47:1a:af:ef:dc:1c:0e:8a:a5:59:
                    90:63:98:99:5d:30:c5:df:91:32:c4:f8:56:72:80:
                    e3:35:80:e7:18:c6:b4:c1:e2:e0:44:c6:9e:af:29:
                    b7:20:2a:af:1f:23:9e:b6:29:a0:ba:9b:aa:98:97:
                    ce:a7:47:da:28:d7:cf:75:8f:9f:d4:72:59:56:c3:
                    8b:df:cf:2b:51:e5:3d:e8:06:9c:d0:1e:b2:9b:e3:
                    54:77:e6:19:87:98:8d:3c:2f:19:cb:2f:df:63:97:
                    74:2c:ad:10:7e:d6:07:8d:ce:fb:44:db:6d:1f:39:
                    4b:86:9a:26:c2:08:ae:d1:47:e2:26:b3:67:a5:9d:
                    af:a9:e6:25:ba:f4:7d:bb:5a:ab:87:a7:e5:0e:d0:
                    c4:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:F2:E1:38:E9:03:8E:2C:FD:DC:E6:C5:93:28:E5:F5:82:AB:A2:2D
            X509v3 Authority Key Identifier:
                keyid:55:4F:31:04:9E:E1:17:24:49:D3:0E:9D:16:34:6B:BA:2B:90:EA:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9uLs22ASqpqZvBJL8xJRKQ4Rzwy4zjmpPdx9hZmqEPGE/1/554F31049EE1172449D30E9D16346BBA2B90EA1B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/554F31049EE1172449D30E9D16346BBA2B90EA1B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9uLs22ASqpqZvBJL8xJRKQ4Rzwy4zjmpPdx9hZmqEPGE/1/3139302e3132332e3230302e302f32322d3332203d3e20323636313935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.123.200.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a9:84:d7:9c:90:4d:2c:ba:c9:c1:4f:44:77:d0:62:78:30:75:
         5e:ac:c5:6c:4e:09:d3:7e:58:86:0d:c9:b6:e6:b1:33:70:35:
         32:02:19:30:2e:81:93:b0:d3:84:e4:61:91:4a:24:a2:56:be:
         61:ad:d4:56:2f:28:a5:1e:fb:fc:17:ca:87:f0:c3:85:6e:7c:
         d6:a8:7a:8c:6c:ac:30:bc:a1:ef:d2:e0:d8:96:02:33:9c:3a:
         43:ad:fc:56:de:9e:4a:0e:48:67:bb:eb:04:11:6c:a1:4d:4f:
         ff:43:85:49:59:7f:ed:3c:3d:8b:27:08:50:fe:c6:81:2b:61:
         eb:26:02:7b:b8:46:c1:cd:d4:13:b3:16:e2:8d:d4:df:11:b1:
         aa:20:10:b7:96:98:94:78:54:6c:08:e9:85:31:fe:53:c2:d8:
         59:e0:ba:91:aa:b4:73:22:24:92:57:35:ea:b4:fa:c2:89:5f:
         e5:c9:37:8a:44:33:1b:09:9b:2a:76:8c:d4:76:77:f7:67:83:
         83:be:aa:8e:87:9e:2b:18:66:11:e6:27:0e:0c:d6:93:84:6c:
         8b:ca:93:b2:aa:41:d3:1a:2f:34:57:b6:79:83:0d:2b:e5:56:
         bf:c7:b3:4c:d5:5c:ef:ee:e5:3a:1a:d8:1b:84:91:18:61:91:
         cf:7c:b0:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 06:32:06 2024 by rpki-client on console-fra.rpki-client.org