Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C3MZ5yPv9TiFWToF6V1hgVLT5eH56MS2M3mEzH6rrc9d/1/3139302e392e38382e302f32322d3332203d3e20323731353739.roa
File:                     3139302e392e38382e302f32322d3332203d3e20323731353739.roa (raw, json)
Hash identifier:          b7gNnPycjIH3hObMVpk1dlBc9eqmaCGSFg58DC7JmVc=
Subject key identifier:   FD:9F:B5:11:24:12:85:26:14:39:58:20:0A:67:53:CA:00:CA:F4:E4
Certificate issuer:       /CN=8A6A545B21CA8F70C37A8FB24E9A901800755696
Certificate serial:       F045E96719394623AA4E0D1AA3EFAADDA645FD
Authority key identifier: 8A:6A:54:5B:21:CA:8F:70:C3:7A:8F:B2:4E:9A:90:18:00:75:56:96
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8A6A545B21CA8F70C37A8FB24E9A901800755696.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C3MZ5yPv9TiFWToF6V1hgVLT5eH56MS2M3mEzH6rrc9d/1/3139302e392e38382e302f32322d3332203d3e20323731353739.roa
Signing time:             Thu 04 Apr 2024 15:20:29 +0000
ROA not before:           Thu 04 Apr 2024 15:15:29 +0000
ROA not after:            Thu 03 Apr 2025 15:20:29 +0000
asID:                     271579
IP address blocks:        190.9.88.0/22 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/C3MZ5yPv9TiFWToF6V1hgVLT5eH56MS2M3mEzH6rrc9d/1/8A6A545B21CA8F70C37A8FB24E9A901800755696.crl
                          rsync://rpki-repo.registro.br/repo/C3MZ5yPv9TiFWToF6V1hgVLT5eH56MS2M3mEzH6rrc9d/1/8A6A545B21CA8F70C37A8FB24E9A901800755696.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8A6A545B21CA8F70C37A8FB24E9A901800755696.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 15:18:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            f0:45:e9:67:19:39:46:23:aa:4e:0d:1a:a3:ef:aa:dd:a6:45:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8A6A545B21CA8F70C37A8FB24E9A901800755696
        Validity
            Not Before: Apr  4 15:15:29 2024 GMT
            Not After : Apr  3 15:20:29 2025 GMT
        Subject: CN=FD9FB51124128526143958200A6753CA00CAF4E4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:00:27:ef:df:14:19:79:56:1f:2f:f2:00:f4:
                    87:7f:bb:52:ff:57:4a:58:02:1f:cc:3b:6f:7f:86:
                    d8:87:5a:83:02:4b:13:bc:6e:64:9f:f3:21:24:e4:
                    16:23:a5:fd:88:bf:12:30:3f:9e:24:97:41:43:45:
                    31:a0:7a:82:c8:c3:32:3c:1c:cc:ac:fa:7b:b9:08:
                    88:4a:7c:fc:ca:0c:38:ef:bf:f4:53:17:12:46:f3:
                    9c:84:3e:bf:8d:6c:59:f1:cb:9d:72:2a:66:36:f2:
                    7d:af:6d:5b:78:6b:ca:b4:84:27:7a:29:6a:e6:a6:
                    9f:28:a8:d2:f7:fd:e0:ec:b7:31:5a:19:d6:ec:c5:
                    3e:b9:69:00:80:7a:26:be:08:12:d5:a8:a5:cd:83:
                    93:99:da:ad:55:41:34:13:8d:00:df:95:79:ff:c5:
                    00:81:b0:2b:66:ea:80:a2:d2:f2:65:3d:8a:0c:85:
                    74:50:92:86:fa:99:6a:b4:f4:27:64:59:39:75:84:
                    19:97:c6:6a:66:da:d4:87:b2:76:56:2c:e8:7b:b6:
                    23:e5:8f:4c:eb:22:5f:ce:ec:13:93:2d:13:99:ac:
                    83:38:2e:d2:f7:d7:01:e4:2e:cb:7b:c0:3b:49:df:
                    ac:6a:8a:36:40:80:28:41:be:a9:2f:dd:1e:f2:4f:
                    57:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:9F:B5:11:24:12:85:26:14:39:58:20:0A:67:53:CA:00:CA:F4:E4
            X509v3 Authority Key Identifier:
                keyid:8A:6A:54:5B:21:CA:8F:70:C3:7A:8F:B2:4E:9A:90:18:00:75:56:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C3MZ5yPv9TiFWToF6V1hgVLT5eH56MS2M3mEzH6rrc9d/1/8A6A545B21CA8F70C37A8FB24E9A901800755696.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8A6A545B21CA8F70C37A8FB24E9A901800755696.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C3MZ5yPv9TiFWToF6V1hgVLT5eH56MS2M3mEzH6rrc9d/1/3139302e392e38382e302f32322d3332203d3e20323731353739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.9.88.0/22

    Signature Algorithm: sha256WithRSAEncryption
         50:ea:23:36:e7:58:57:4f:c5:54:08:55:12:c2:97:ac:0f:2a:
         99:60:f8:6d:57:56:98:29:f1:52:f5:c8:89:92:97:a6:08:41:
         40:63:f1:80:c4:bf:00:3b:ba:2f:eb:98:3e:9b:dd:30:5c:22:
         e2:01:8e:2d:03:40:5c:35:d6:04:5d:8e:38:c5:62:88:8b:87:
         4c:a2:6b:54:02:90:89:4d:4c:16:e3:37:03:cc:99:e5:88:b9:
         50:66:9b:c9:a6:c5:d4:26:f4:66:2e:63:42:60:de:6e:09:b9:
         55:15:b6:bf:53:30:c9:24:5c:0b:5f:79:bb:cc:eb:5c:57:94:
         22:e5:d2:37:99:ee:d4:27:97:c7:d7:9b:e5:32:05:86:69:c2:
         3d:39:7f:eb:df:15:ca:da:6a:77:d0:5a:9a:0f:e0:f5:2b:14:
         c8:5f:60:6f:f3:e5:29:e3:20:06:72:d3:3d:34:2d:2a:90:47:
         94:cb:3f:7b:20:ba:7c:e4:87:cf:47:bb:46:3e:c6:59:ec:97:
         3f:49:b7:e0:c0:db:33:ee:ef:38:d0:85:a6:3b:67:15:c9:e0:
         8b:f9:ee:ff:2f:2d:57:de:ad:1f:75:bb:30:c0:fd:39:bb:ce:
         16:17:70:f7:61:3f:5c:c0:54:7e:d3:83:2d:d0:94:9f:de:88:
         b7:6c:24:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 15:22:41 2024 by rpki-client on console-fra.rpki-client.org