Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FQyvKNLAxGXFiy3pQVng2ehz5RR11UWB5xi8zy51UKaQ/1/3139302e392e37362e302f32322d3232203d3e20323731363432.roa
File:                     3139302e392e37362e302f32322d3232203d3e20323731363432.roa (raw, json)
Hash identifier:          VTsSIA1f6tA7g6JEQbc3cz3p6tJXwisRJ5F8wTnGvc8=
Subject key identifier:   DC:EE:A5:A5:1C:2D:0B:24:BE:37:5B:FB:0A:28:82:C6:43:FB:64:06
Certificate issuer:       /CN=3CF129D24760CA58DEE1B42CDACAE4407710A219
Certificate serial:       31D4FE6FC00CBFF48514203B5509E713617C24F2
Authority key identifier: 3C:F1:29:D2:47:60:CA:58:DE:E1:B4:2C:DA:CA:E4:40:77:10:A2:19
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3CF129D24760CA58DEE1B42CDACAE4407710A219.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FQyvKNLAxGXFiy3pQVng2ehz5RR11UWB5xi8zy51UKaQ/1/3139302e392e37362e302f32322d3232203d3e20323731363432.roa
Signing time:             Thu 04 Apr 2024 14:40:57 +0000
ROA not before:           Thu 04 Apr 2024 14:35:57 +0000
ROA not after:            Thu 03 Apr 2025 14:40:57 +0000
asID:                     271642
IP address blocks:        190.9.76.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FQyvKNLAxGXFiy3pQVng2ehz5RR11UWB5xi8zy51UKaQ/1/3CF129D24760CA58DEE1B42CDACAE4407710A219.crl
                          rsync://rpki-repo.registro.br/repo/FQyvKNLAxGXFiy3pQVng2ehz5RR11UWB5xi8zy51UKaQ/1/3CF129D24760CA58DEE1B42CDACAE4407710A219.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3CF129D24760CA58DEE1B42CDACAE4407710A219.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 10:24:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:d4:fe:6f:c0:0c:bf:f4:85:14:20:3b:55:09:e7:13:61:7c:24:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3CF129D24760CA58DEE1B42CDACAE4407710A219
        Validity
            Not Before: Apr  4 14:35:57 2024 GMT
            Not After : Apr  3 14:40:57 2025 GMT
        Subject: CN=DCEEA5A51C2D0B24BE375BFB0A2882C643FB6406
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:be:f4:b6:b6:2d:98:a4:b5:ba:40:bb:24:39:
                    72:7b:48:f7:bb:5b:5a:8b:13:4e:34:48:d0:15:74:
                    4d:51:db:f8:8b:7a:26:a9:ff:72:41:72:e7:61:84:
                    8d:61:b4:4f:c8:c7:2c:97:db:85:a3:67:72:a9:b8:
                    08:fe:e9:34:cd:a8:6e:08:e2:ac:f0:a1:6c:2d:0c:
                    b2:4d:5e:b9:4c:05:17:7b:f3:4e:6c:1e:32:38:05:
                    1d:4e:8b:37:7f:cb:45:ed:4b:62:30:8a:9a:dd:dd:
                    89:00:18:db:d1:91:ca:d3:97:4e:87:fa:a2:91:29:
                    9e:e0:3c:2e:87:c8:50:3f:c4:2c:35:26:90:94:fe:
                    6e:95:5c:70:08:3e:77:58:31:aa:41:65:70:fb:af:
                    b4:7d:36:bf:5a:98:1d:0d:5a:33:cd:e9:07:93:df:
                    50:49:0c:7d:38:7a:d9:2d:4d:18:c4:c8:4c:e2:e9:
                    51:92:16:4a:52:d5:08:24:e8:3e:80:60:97:3a:e6:
                    0c:ca:11:3b:c7:81:18:0f:3b:ed:02:1c:5b:b3:cc:
                    6d:20:85:89:1b:f7:32:70:92:f4:d8:1b:98:79:43:
                    ba:4e:43:78:ad:eb:5b:3b:e0:bf:e7:55:b0:d6:87:
                    97:00:34:61:b1:01:c5:b6:c0:3a:4d:ee:bc:0b:25:
                    a7:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:EE:A5:A5:1C:2D:0B:24:BE:37:5B:FB:0A:28:82:C6:43:FB:64:06
            X509v3 Authority Key Identifier:
                keyid:3C:F1:29:D2:47:60:CA:58:DE:E1:B4:2C:DA:CA:E4:40:77:10:A2:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FQyvKNLAxGXFiy3pQVng2ehz5RR11UWB5xi8zy51UKaQ/1/3CF129D24760CA58DEE1B42CDACAE4407710A219.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3CF129D24760CA58DEE1B42CDACAE4407710A219.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FQyvKNLAxGXFiy3pQVng2ehz5RR11UWB5xi8zy51UKaQ/1/3139302e392e37362e302f32322d3232203d3e20323731363432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.9.76.0/22

    Signature Algorithm: sha256WithRSAEncryption
         82:3c:5a:d2:17:77:9b:4b:44:84:88:d1:dc:81:cd:6d:4d:20:
         2c:23:e4:44:39:38:44:0e:34:3a:e3:9e:b1:df:d3:c7:ac:82:
         51:7d:b9:61:0b:e5:54:5f:12:39:cd:be:d8:7f:35:b0:51:ca:
         b3:3f:0b:e6:42:dd:2d:ab:cd:b0:f5:0c:f5:5b:0a:24:53:43:
         4e:25:eb:8a:db:8c:fe:5c:95:f1:4c:67:e6:56:68:12:ea:ed:
         0e:9a:fc:d7:31:dd:fb:12:cf:1e:28:10:9d:86:ca:0a:1d:f6:
         bb:de:9c:e2:6f:e4:e6:9d:62:a7:cc:ef:d0:90:8e:b0:27:17:
         d2:d7:0d:05:d9:56:7d:fe:a2:d0:96:5b:22:48:c8:61:ca:e3:
         b8:a1:aa:92:2c:eb:7f:dc:e7:26:4f:e8:be:e7:b6:38:a5:74:
         0e:46:bd:14:62:66:4b:dc:4f:8a:6b:6c:2b:70:7d:93:33:3f:
         2d:7b:1c:44:2e:6f:c5:66:cf:96:01:1f:b8:91:06:7f:a3:4c:
         6c:da:4f:59:12:c9:35:03:5e:b6:50:e0:c7:59:b1:27:1e:f3:
         81:37:10:ed:18:c0:a4:fd:27:54:2b:42:e1:59:12:91:87:f5:
         9e:67:23:8e:81:bd:40:3c:77:7f:7b:59:53:77:1b:97:86:ce:
         99:28:47:7c
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUMdT+b8AMv/SFFCA7VQnnE2F8JPIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0NGMTI5RDI0NzYwQ0E1OERFRTFCNDJDREFDQUU0NDA3
NzEwQTIxOTAeFw0yNDA0MDQxNDM1NTdaFw0yNTA0MDMxNDQwNTdaMDMxMTAvBgNV
BAMTKERDRUVBNUE1MUMyRDBCMjRCRTM3NUJGQjBBMjg4MkM2NDNGQjY0MDYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/vvS2ti2YpLW6QLskOXJ7SPe7
W1qLE040SNAVdE1R2/iLeiap/3JBcudhhI1htE/IxyyX24WjZ3KpuAj+6TTNqG4I
4qzwoWwtDLJNXrlMBRd7805sHjI4BR1Oizd/y0XtS2Iwiprd3YkAGNvRkcrTl06H
+qKRKZ7gPC6HyFA/xCw1JpCU/m6VXHAIPndYMapBZXD7r7R9Nr9amB0NWjPN6QeT
31BJDH04etktTRjEyEzi6VGSFkpS1Qgk6D6AYJc65gzKETvHgRgPO+0CHFuzzG0g
hYkb9zJwkvTYG5h5Q7pOQ3it61s74L/nVbDWh5cANGGxAcW2wDpN7rwLJafzAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQU3O6lpRwtCyS+N1v7CiiCxkP7ZAYwHwYDVR0j
BBgwFoAUPPEp0kdgylje4bQs2srkQHcQohkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRlF5dktOTEF4R1hGaXkzcFFWbmcyZWh6NVJSMTFVV0I1eGk4enk1MVVL
YVEvMS8zQ0YxMjlEMjQ3NjBDQTU4REVFMUI0MkNEQUNBRTQ0MDc3MTBBMjE5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzNDRjEyOUQyNDc2MENBNThE
RUUxQjQyQ0RBQ0FFNDQwNzcxMEEyMTkuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0ZReXZLTkxBeEdYRml5M3BRVm5nMmVoejVSUjExVVdCNXhpOHp5NTFVS2FRLzEv
MzEzOTMwMmUzOTJlMzczNjJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDMyMzczMTM2
MzQzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEAr4JTDANBgkqhkiG9w0BAQsFAAOCAQEAgjxa0hd3m0tE
hIjR3IHNbU0gLCPkRDk4RA40OuOesd/Tx6yCUX25YQvlVF8SOc2+2H81sFHKsz8L
5kLdLavNsPUM9VsKJFNDTiXrituM/lyV8Uxn5lZoEurtDpr81zHd+xLPHigQnYbK
Ch32u96c4m/k5p1ip8zv0JCOsCcX0tcNBdlWff6i0JZbIkjIYcrjuKGqkizrf9zn
Jk/ovue2OKV0Dka9FGJmS9xPimtsK3B9kzM/LXscRC5vxWbPlgEfuJEGf6NMbNpP
WRLJNQNetlDgx1mxJx7zgTcQ7RjApP0nVCtC4VkSkYf1nmcjjoG9QDx3f3tZU3cb
l4bOmShHfA==
-----END CERTIFICATE-----
Generated at Fri Nov 22 09:39:25 2024 by rpki-client on console-ams.rpki-client.org