Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9yqUTwgWiLByugmrAR4GGLC6vmesmoW62E6kpHHzZUwa/0/3139302e3132342e3235342e302f32332d3233203d3e20323730343536.roa
File:                     3139302e3132342e3235342e302f32332d3233203d3e20323730343536.roa (raw, json)
Hash identifier:          MPYw8c8fyEGBa8SGGuqoYXWJ9iPAtWHxhF4ycEUzxUI=
Subject key identifier:   67:5F:B7:B6:BD:4B:C9:11:DA:8B:4C:0F:AF:77:67:A7:91:26:95:99
Certificate issuer:       /CN=085D77D4302255076FC0EF856AC7C40EF2F57975
Certificate serial:       420402BD1931A879674F8CFEF4168F9F0FE36AB2
Authority key identifier: 08:5D:77:D4:30:22:55:07:6F:C0:EF:85:6A:C7:C4:0E:F2:F5:79:75
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/085D77D4302255076FC0EF856AC7C40EF2F57975.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9yqUTwgWiLByugmrAR4GGLC6vmesmoW62E6kpHHzZUwa/0/3139302e3132342e3235342e302f32332d3233203d3e20323730343536.roa
Signing time:             Wed 29 May 2024 23:04:40 +0000
ROA not before:           Wed 29 May 2024 22:59:40 +0000
ROA not after:            Wed 28 May 2025 23:04:40 +0000
asID:                     270456
IP address blocks:        190.124.254.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9yqUTwgWiLByugmrAR4GGLC6vmesmoW62E6kpHHzZUwa/0/085D77D4302255076FC0EF856AC7C40EF2F57975.crl
                          rsync://rpki-repo.registro.br/repo/9yqUTwgWiLByugmrAR4GGLC6vmesmoW62E6kpHHzZUwa/0/085D77D4302255076FC0EF856AC7C40EF2F57975.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/085D77D4302255076FC0EF856AC7C40EF2F57975.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 02:45:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:04:02:bd:19:31:a8:79:67:4f:8c:fe:f4:16:8f:9f:0f:e3:6a:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=085D77D4302255076FC0EF856AC7C40EF2F57975
        Validity
            Not Before: May 29 22:59:40 2024 GMT
            Not After : May 28 23:04:40 2025 GMT
        Subject: CN=675FB7B6BD4BC911DA8B4C0FAF7767A791269599
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:43:89:ff:cc:cd:8d:b7:d2:c2:65:0d:33:f2:
                    0b:eb:14:eb:16:12:95:86:ff:3e:6c:df:2e:41:95:
                    8e:30:27:d7:31:65:be:37:c5:09:18:a0:2a:18:10:
                    ce:13:61:94:32:4c:6f:b8:58:f4:7b:74:99:b4:38:
                    40:1e:5f:0b:e1:a4:03:58:88:66:5f:22:5f:36:91:
                    2c:2c:4e:9a:e8:e1:fe:db:46:b9:ee:5e:d1:d5:c1:
                    ed:e3:c2:bd:22:ea:44:e5:06:ed:63:3d:fb:5d:71:
                    00:ea:f1:84:3c:26:09:5d:7d:51:e0:60:5c:e2:19:
                    3d:d7:32:26:b6:cd:83:ee:8d:6f:fa:47:de:f3:e5:
                    ef:f2:29:04:7c:d4:fd:55:c8:d7:9e:a2:b2:6d:00:
                    cb:30:b0:32:75:e1:7c:79:84:bd:1c:78:e5:2d:4f:
                    fd:77:2b:d3:03:4a:fb:91:50:ad:7a:b3:50:9c:42:
                    cb:ba:e0:f6:42:b8:0d:1f:eb:e6:40:12:f6:5d:f7:
                    de:c6:92:c8:1b:a6:2f:f4:dd:d2:ee:37:1e:92:db:
                    36:13:4c:26:e8:a7:d7:74:12:6c:6e:a5:68:4a:61:
                    23:0c:a8:df:3c:e2:3d:62:de:f2:19:61:e1:b9:06:
                    7e:47:73:0c:ea:83:bd:b0:fa:e2:f0:b2:89:06:32:
                    52:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:5F:B7:B6:BD:4B:C9:11:DA:8B:4C:0F:AF:77:67:A7:91:26:95:99
            X509v3 Authority Key Identifier:
                keyid:08:5D:77:D4:30:22:55:07:6F:C0:EF:85:6A:C7:C4:0E:F2:F5:79:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9yqUTwgWiLByugmrAR4GGLC6vmesmoW62E6kpHHzZUwa/0/085D77D4302255076FC0EF856AC7C40EF2F57975.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/085D77D4302255076FC0EF856AC7C40EF2F57975.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9yqUTwgWiLByugmrAR4GGLC6vmesmoW62E6kpHHzZUwa/0/3139302e3132342e3235342e302f32332d3233203d3e20323730343536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.124.254.0/23

    Signature Algorithm: sha256WithRSAEncryption
         72:57:ba:b5:03:e7:23:62:40:d6:e2:6d:e5:90:f0:5d:29:f5:
         35:f2:58:5a:12:43:8a:23:4b:4e:76:11:ac:d7:9d:fa:a5:91:
         51:d7:b2:82:da:7b:cb:04:81:f8:15:2b:d7:1d:e9:59:7e:66:
         65:b0:9d:8f:b2:36:a9:04:fa:32:f0:93:29:b9:93:7f:17:57:
         62:5d:9c:7a:2b:25:67:ab:60:a4:bb:fe:4a:5a:55:32:34:0b:
         e1:3c:35:5a:9d:bc:41:12:b3:c3:0a:00:d4:7c:a4:1e:ce:3e:
         59:58:aa:69:42:f0:bc:99:37:e7:0a:2a:cf:52:7a:e0:26:05:
         27:62:4d:f5:d5:e7:fc:0b:8b:7e:49:d0:b3:31:ee:78:d0:df:
         e0:af:91:0c:97:1f:99:8c:b5:b2:91:b6:6f:39:be:ca:13:43:
         e2:c6:2c:8a:f9:e6:86:b3:fb:59:30:1e:13:36:54:9f:62:a9:
         b9:f1:a3:bc:3a:82:8d:a9:37:93:25:6c:54:c7:82:8d:aa:e2:
         d3:81:f9:49:54:ea:49:ff:6d:e2:55:cf:67:5f:b7:2f:ad:aa:
         bb:be:44:24:3a:a8:de:1c:06:1a:97:76:a2:f5:27:a9:39:89:
         4a:66:a9:71:82:89:0c:8b:1f:e8:d6:9a:62:85:84:2d:93:f6:
         b4:7f:a1:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 03:51:20 2024 by rpki-client on console-fra.rpki-client.org