Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9yqUTwgWiLByugmrAR4GGLC6vmesmoW62E6kpHHzZUwa/0/3139302e3132342e3235322e302f32332d3233203d3e20323730343536.roa
File:                     3139302e3132342e3235322e302f32332d3233203d3e20323730343536.roa (raw, json)
Hash identifier:          o8l+fbUQsH0VbX3caE9bk0UdGiUqL/bFonRYxVNsyNM=
Subject key identifier:   85:2B:60:4E:95:A6:B3:2F:ED:85:93:A9:EA:1E:A1:FF:72:EC:0D:11
Certificate issuer:       /CN=085D77D4302255076FC0EF856AC7C40EF2F57975
Certificate serial:       0B62C1D0E324F489F46B42F6A13F9C67B039C0F6
Authority key identifier: 08:5D:77:D4:30:22:55:07:6F:C0:EF:85:6A:C7:C4:0E:F2:F5:79:75
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/085D77D4302255076FC0EF856AC7C40EF2F57975.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9yqUTwgWiLByugmrAR4GGLC6vmesmoW62E6kpHHzZUwa/0/3139302e3132342e3235322e302f32332d3233203d3e20323730343536.roa
Signing time:             Wed 29 May 2024 23:04:39 +0000
ROA not before:           Wed 29 May 2024 22:59:39 +0000
ROA not after:            Wed 28 May 2025 23:04:39 +0000
asID:                     270456
IP address blocks:        190.124.252.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9yqUTwgWiLByugmrAR4GGLC6vmesmoW62E6kpHHzZUwa/0/085D77D4302255076FC0EF856AC7C40EF2F57975.crl
                          rsync://rpki-repo.registro.br/repo/9yqUTwgWiLByugmrAR4GGLC6vmesmoW62E6kpHHzZUwa/0/085D77D4302255076FC0EF856AC7C40EF2F57975.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/085D77D4302255076FC0EF856AC7C40EF2F57975.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 17 Feb 2025 04:45:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:62:c1:d0:e3:24:f4:89:f4:6b:42:f6:a1:3f:9c:67:b0:39:c0:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=085D77D4302255076FC0EF856AC7C40EF2F57975
        Validity
            Not Before: May 29 22:59:39 2024 GMT
            Not After : May 28 23:04:39 2025 GMT
        Subject: CN=852B604E95A6B32FED8593A9EA1EA1FF72EC0D11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:c0:bc:16:15:88:85:4d:40:30:bb:4b:90:c6:
                    d2:8c:af:c1:bc:bb:d4:44:23:14:1b:82:1f:5e:b4:
                    50:eb:af:ec:6d:84:66:8c:59:e1:02:68:6c:20:9c:
                    5e:62:51:5e:37:46:78:07:a1:88:98:2b:c3:6a:3d:
                    54:b8:1d:54:cc:53:43:3b:3f:88:90:d7:ab:2f:ca:
                    9c:d6:1b:d8:5f:ce:5e:05:6f:74:b9:93:78:d7:ac:
                    ce:03:94:89:b1:58:10:ab:dc:13:e7:9e:e5:e8:6b:
                    b8:af:4c:ff:8f:28:15:43:8a:81:2d:94:82:eb:b5:
                    08:62:1d:a4:0e:b2:75:8b:24:0e:c9:a5:de:cf:6c:
                    1b:80:44:e6:2c:7e:3e:ab:e2:c3:90:0a:5b:c1:1d:
                    b5:c4:5e:d1:ff:94:4a:68:d9:22:66:79:e5:f9:97:
                    4a:e9:33:9b:21:72:51:a1:61:9d:81:11:77:10:ea:
                    fb:96:be:04:b1:55:f5:25:9d:de:ab:72:d2:67:7a:
                    42:ca:18:77:f6:98:e6:bf:f5:6b:d5:49:f1:1b:53:
                    2a:b0:f1:8e:7e:99:21:da:a8:96:b4:9d:1c:66:fa:
                    99:90:78:9d:6e:fd:07:bc:dc:3f:80:43:14:26:c0:
                    6f:91:68:76:fb:b7:04:ee:25:fd:aa:0d:f8:f3:f6:
                    3c:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:2B:60:4E:95:A6:B3:2F:ED:85:93:A9:EA:1E:A1:FF:72:EC:0D:11
            X509v3 Authority Key Identifier:
                keyid:08:5D:77:D4:30:22:55:07:6F:C0:EF:85:6A:C7:C4:0E:F2:F5:79:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9yqUTwgWiLByugmrAR4GGLC6vmesmoW62E6kpHHzZUwa/0/085D77D4302255076FC0EF856AC7C40EF2F57975.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/085D77D4302255076FC0EF856AC7C40EF2F57975.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9yqUTwgWiLByugmrAR4GGLC6vmesmoW62E6kpHHzZUwa/0/3139302e3132342e3235322e302f32332d3233203d3e20323730343536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.124.252.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9d:5f:8d:d5:ce:36:95:48:4f:af:8b:62:bf:d7:f4:9a:67:cd:
         87:e1:f0:a9:50:62:74:eb:08:6a:84:27:29:35:29:f8:6f:c4:
         46:0d:12:67:a9:9f:11:6f:f5:ac:8d:f2:44:ca:aa:45:9e:44:
         13:a6:e7:3a:88:2b:ec:df:49:d2:b6:1c:9d:4b:d3:c1:ee:31:
         af:74:51:d2:4b:5d:0b:27:ea:fc:06:2c:f1:f4:58:ef:7f:8a:
         42:aa:55:3f:8e:38:1d:da:66:e1:c8:a4:dc:c2:21:c4:aa:e1:
         2c:86:94:01:57:b1:d4:e5:47:ce:58:c0:d6:9e:ae:2e:ad:67:
         f3:a6:82:d8:0c:12:53:6c:a2:ee:80:c0:da:41:7e:b0:73:66:
         55:46:6f:43:91:10:68:c0:b1:b6:36:fd:a4:68:10:ec:4f:15:
         30:3b:ad:ac:a7:63:6f:db:ea:04:ee:ab:09:d5:8c:d8:7d:6e:
         5a:42:8f:07:a7:3c:84:d3:7e:05:05:33:c3:42:31:eb:90:34:
         ca:f7:ed:79:9f:68:69:e4:5a:bf:f5:41:89:bd:f9:50:1e:00:
         1d:50:7f:dd:4b:dd:a0:8e:ee:0f:8c:6d:e5:50:de:47:4d:41:
         3b:af:23:18:ca:0b:ad:1f:0b:48:64:7d:6a:17:3d:29:9b:07:
         e0:b3:02:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:40:03 2025 by rpki-client