Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/3139302e3130392e3130302e302f32342d3234203d3e20323732373130.roa
File:                     3139302e3130392e3130302e302f32342d3234203d3e20323732373130.roa (raw, json)
Hash identifier:          +UJXW1slXyYhuuI/7/J7gNo5M73BmheMWvTTP/Of9F4=
Subject key identifier:   BE:B6:E8:B5:D9:AC:CC:DD:57:0C:DA:BC:A8:41:C4:71:90:64:74:0D
Certificate issuer:       /CN=B5D37E22EB8E5668F093546E634B55B0A780D24F
Certificate serial:       5CF65553FDE59A6EECD226205B291E15991DC390
Authority key identifier: B5:D3:7E:22:EB:8E:56:68:F0:93:54:6E:63:4B:55:B0:A7:80:D2:4F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5D37E22EB8E5668F093546E634B55B0A780D24F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/3139302e3130392e3130302e302f32342d3234203d3e20323732373130.roa
Signing time:             Thu 03 Oct 2024 13:10:07 +0000
ROA not before:           Thu 03 Oct 2024 13:05:07 +0000
ROA not after:            Thu 02 Oct 2025 13:10:07 +0000
asID:                     272710
IP address blocks:        190.109.100.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/B5D37E22EB8E5668F093546E634B55B0A780D24F.crl
                          rsync://rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/B5D37E22EB8E5668F093546E634B55B0A780D24F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5D37E22EB8E5668F093546E634B55B0A780D24F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 07:57:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:f6:55:53:fd:e5:9a:6e:ec:d2:26:20:5b:29:1e:15:99:1d:c3:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B5D37E22EB8E5668F093546E634B55B0A780D24F
        Validity
            Not Before: Oct  3 13:05:07 2024 GMT
            Not After : Oct  2 13:10:07 2025 GMT
        Subject: CN=BEB6E8B5D9ACCCDD570CDABCA841C4719064740D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:0e:18:dc:3e:32:53:98:d1:bf:88:d7:70:04:
                    39:54:01:4b:98:52:0f:18:e9:5d:c4:c6:14:82:fc:
                    2e:85:df:6c:1b:68:e4:66:5f:8b:f4:a0:40:4e:3b:
                    e6:8c:12:a3:82:4a:a1:58:fb:f1:0a:df:9e:35:c5:
                    ec:78:be:9b:3b:24:66:f3:90:f9:5e:1a:70:e8:28:
                    d2:3b:8f:6c:8d:be:79:18:de:24:6a:4a:6a:de:c5:
                    56:53:ac:3e:13:b3:71:42:de:e7:4b:61:66:5f:9b:
                    46:06:45:fa:65:22:6b:0f:d5:f9:44:38:c3:55:78:
                    d8:c7:e2:b1:50:ba:a7:a6:60:68:7a:45:5b:6f:38:
                    5f:1f:c8:7a:80:4a:d0:08:fe:55:57:09:85:db:9f:
                    38:cb:67:c9:85:b8:82:b6:e4:3b:86:b1:2b:03:3f:
                    19:ec:13:2b:0f:40:dd:d8:00:0c:76:14:e4:4f:99:
                    1e:d7:f6:0a:79:e3:a9:23:6f:d0:3c:11:c8:3a:fe:
                    d4:04:25:3f:c7:f2:9c:bf:e8:7a:ac:98:5c:46:d7:
                    dd:68:26:df:a4:19:03:6d:d4:09:91:12:ff:c6:6c:
                    af:31:f4:0b:22:20:d3:ff:09:3e:03:cb:b6:5f:7e:
                    e8:ef:df:16:3a:64:57:c2:b3:0c:5e:fe:18:b1:3a:
                    97:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:B6:E8:B5:D9:AC:CC:DD:57:0C:DA:BC:A8:41:C4:71:90:64:74:0D
            X509v3 Authority Key Identifier:
                keyid:B5:D3:7E:22:EB:8E:56:68:F0:93:54:6E:63:4B:55:B0:A7:80:D2:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/B5D37E22EB8E5668F093546E634B55B0A780D24F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5D37E22EB8E5668F093546E634B55B0A780D24F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/3139302e3130392e3130302e302f32342d3234203d3e20323732373130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.109.100.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a0:6b:95:f2:e5:06:b1:97:93:82:14:10:fe:c5:a2:c1:27:f7:
         51:1c:55:75:35:8b:4e:cf:09:24:57:e5:11:97:a8:ce:b3:b4:
         24:fa:5f:c2:42:e8:06:32:43:e0:20:28:2e:c4:3d:1f:4d:9a:
         63:b1:27:2a:93:de:9f:6f:62:a5:55:4a:31:3e:05:f8:61:54:
         dd:70:9c:55:8a:95:4b:37:6e:54:07:48:0e:ac:a9:56:e7:90:
         64:0a:f4:04:60:f1:31:7e:af:02:9a:19:5a:e7:c8:b1:d1:83:
         f4:55:5b:d9:94:5f:8b:3f:7d:33:43:cc:1e:aa:8a:8e:05:c6:
         f6:96:48:1d:bb:72:84:fe:26:cb:9a:db:45:bb:9a:98:bf:48:
         0e:9a:49:f2:24:3a:54:89:33:93:51:84:91:c6:25:87:87:8b:
         a5:e8:22:66:82:1c:c4:36:1e:03:12:29:a2:00:60:f7:f8:c6:
         56:97:76:1c:24:5e:bb:b2:26:48:b5:9e:fc:d0:73:96:06:f9:
         52:00:9e:7d:90:6e:d3:a4:a8:af:8a:1e:14:14:51:b6:4a:b2:
         e9:12:9e:31:ed:d2:6e:01:f8:08:fc:53:0c:2a:b4:f8:f9:b4:
         61:6d:1b:65:00:1d:fb:83:cb:85:08:bc:ed:11:3b:4b:5f:47:
         8a:9b:e8:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 09:48:06 2024 by rpki-client on console-ams.rpki-client.org