Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9yqUTwgWiLByugmrAR4GGLC6vmesmoW62E6kpHHzZUwa/0/3139302e3132342e3235352e302f32342d3234203d3e20323730343536.roa
File:                     3139302e3132342e3235352e302f32342d3234203d3e20323730343536.roa (raw, json)
Hash identifier:          lIIY13k+IKACLGcdAtF77CNBZvTnmuzfAUTv7i4hbvA=
Subject key identifier:   2E:0B:09:78:95:C2:28:40:30:0A:0A:D6:39:BC:61:9E:72:6E:CA:09
Certificate issuer:       /CN=085D77D4302255076FC0EF856AC7C40EF2F57975
Certificate serial:       795768E764D2B0DDF886E85641195BD262A29D69
Authority key identifier: 08:5D:77:D4:30:22:55:07:6F:C0:EF:85:6A:C7:C4:0E:F2:F5:79:75
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/085D77D4302255076FC0EF856AC7C40EF2F57975.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9yqUTwgWiLByugmrAR4GGLC6vmesmoW62E6kpHHzZUwa/0/3139302e3132342e3235352e302f32342d3234203d3e20323730343536.roa
Signing time:             Wed 29 May 2024 23:04:40 +0000
ROA not before:           Wed 29 May 2024 22:59:40 +0000
ROA not after:            Wed 28 May 2025 23:04:40 +0000
asID:                     270456
IP address blocks:        190.124.255.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9yqUTwgWiLByugmrAR4GGLC6vmesmoW62E6kpHHzZUwa/0/085D77D4302255076FC0EF856AC7C40EF2F57975.crl
                          rsync://rpki-repo.registro.br/repo/9yqUTwgWiLByugmrAR4GGLC6vmesmoW62E6kpHHzZUwa/0/085D77D4302255076FC0EF856AC7C40EF2F57975.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/085D77D4302255076FC0EF856AC7C40EF2F57975.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 02:45:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:57:68:e7:64:d2:b0:dd:f8:86:e8:56:41:19:5b:d2:62:a2:9d:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=085D77D4302255076FC0EF856AC7C40EF2F57975
        Validity
            Not Before: May 29 22:59:40 2024 GMT
            Not After : May 28 23:04:40 2025 GMT
        Subject: CN=2E0B097895C22840300A0AD639BC619E726ECA09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:bf:60:00:ed:11:95:94:9f:a7:82:70:46:96:
                    b7:f1:92:9b:59:e5:2b:91:73:3d:14:a7:b7:b7:6a:
                    b2:c1:ef:33:bf:bf:e1:77:dc:c6:29:d4:c0:9e:39:
                    1a:25:02:64:d9:e4:9e:49:93:9b:46:ed:0b:25:d7:
                    a4:a9:2f:22:1a:12:2e:4b:68:cc:c6:6f:38:fd:31:
                    c4:12:84:37:b8:ed:7d:04:06:a5:dc:0e:8b:4f:59:
                    c8:a3:9f:87:aa:fb:aa:55:de:93:09:37:ea:62:91:
                    f5:1a:8f:22:a0:e4:e4:81:8d:28:5f:34:50:2f:56:
                    1a:d8:8e:40:5f:11:c8:4a:91:c3:74:a2:f0:78:c4:
                    53:5d:1c:e8:68:db:b1:0f:b5:04:36:e9:5e:31:8e:
                    c4:c5:3e:b5:1c:5c:e2:4f:62:59:0e:ae:f7:65:85:
                    c7:4b:e8:1f:6a:b5:5b:0f:c9:c8:1b:06:44:3c:e6:
                    e3:b2:c5:d0:64:59:8d:6f:cd:e5:3f:cc:4e:06:45:
                    67:1e:5c:a2:0c:d7:7d:94:0d:32:d4:75:80:16:7f:
                    16:55:ac:a3:29:e2:1e:20:b0:9c:c8:23:2d:ce:36:
                    db:cf:b5:a1:b7:d4:f3:fe:3c:5a:67:63:4a:f9:72:
                    70:9e:0a:3d:3a:81:a9:47:f0:c9:a1:db:7f:86:2e:
                    34:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:0B:09:78:95:C2:28:40:30:0A:0A:D6:39:BC:61:9E:72:6E:CA:09
            X509v3 Authority Key Identifier:
                keyid:08:5D:77:D4:30:22:55:07:6F:C0:EF:85:6A:C7:C4:0E:F2:F5:79:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9yqUTwgWiLByugmrAR4GGLC6vmesmoW62E6kpHHzZUwa/0/085D77D4302255076FC0EF856AC7C40EF2F57975.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/085D77D4302255076FC0EF856AC7C40EF2F57975.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9yqUTwgWiLByugmrAR4GGLC6vmesmoW62E6kpHHzZUwa/0/3139302e3132342e3235352e302f32342d3234203d3e20323730343536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.124.255.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5f:c4:f1:d8:91:18:98:ed:3b:06:8c:fb:71:bd:0a:07:59:4f:
         4e:9a:cf:81:e8:e8:60:e8:04:d3:ef:3f:f7:e2:c1:32:c0:1e:
         58:58:d5:7b:e3:9b:6e:f7:88:eb:e4:a9:f4:ad:86:a1:f7:3e:
         0b:d9:77:11:3f:0a:fc:d2:ca:2f:31:f1:03:e1:01:3b:e9:bd:
         c3:0a:38:c4:e3:ae:1b:ad:9a:aa:e4:6e:d1:f4:b4:11:b9:73:
         ab:b4:e4:5b:6e:98:70:2a:e8:bb:83:30:3c:9f:91:cb:a0:15:
         b0:31:f0:20:bf:b6:7a:e4:5e:ca:97:ac:6a:32:12:ec:32:e6:
         47:c4:c3:ea:06:17:08:1e:7b:ff:8a:5d:f9:d8:f9:39:bf:fe:
         d6:53:f9:9c:b9:9a:c2:3f:3d:13:9b:a7:a3:dc:f0:f1:36:6e:
         7a:46:64:59:4e:2b:20:a1:f0:dc:f5:9c:57:41:d4:82:98:fc:
         7c:14:43:27:f4:05:5d:2f:20:f1:e5:89:55:74:0c:be:5d:ac:
         f2:e8:b9:27:be:91:4a:ec:c1:d4:4b:91:05:eb:6f:e7:66:3b:
         0e:16:40:42:25:2e:3a:8d:a8:ac:67:3a:b3:91:f4:e8:b2:eb:
         a9:b5:c6:af:e5:f7:aa:2d:c0:79:27:b9:ff:0c:e2:df:5b:ee:
         e0:c0:da:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 03:51:20 2024 by rpki-client on console-fra.rpki-client.org