Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FQyvKNLAxGXFiy3pQVng2ehz5RR11UWB5xi8zy51UKaQ/1/3139302e392e37372e302f32342d3234203d3e20323731363432.roa
File:                     3139302e392e37372e302f32342d3234203d3e20323731363432.roa (raw, json)
Hash identifier:          WbCN0REQddL3ErCz0I0mp/0E6WBHYisYnK1h58aAMAM=
Subject key identifier:   F1:F5:2A:23:C1:90:0A:60:2E:A9:82:10:B6:1C:5F:20:93:59:80:E5
Certificate issuer:       /CN=3CF129D24760CA58DEE1B42CDACAE4407710A219
Certificate serial:       5E5CA834792A9B66E6101152FDF1DD5260004F0F
Authority key identifier: 3C:F1:29:D2:47:60:CA:58:DE:E1:B4:2C:DA:CA:E4:40:77:10:A2:19
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3CF129D24760CA58DEE1B42CDACAE4407710A219.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FQyvKNLAxGXFiy3pQVng2ehz5RR11UWB5xi8zy51UKaQ/1/3139302e392e37372e302f32342d3234203d3e20323731363432.roa
Signing time:             Thu 04 Apr 2024 14:40:57 +0000
ROA not before:           Thu 04 Apr 2024 14:35:57 +0000
ROA not after:            Thu 03 Apr 2025 14:40:57 +0000
asID:                     271642
IP address blocks:        190.9.77.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FQyvKNLAxGXFiy3pQVng2ehz5RR11UWB5xi8zy51UKaQ/1/3CF129D24760CA58DEE1B42CDACAE4407710A219.crl
                          rsync://rpki-repo.registro.br/repo/FQyvKNLAxGXFiy3pQVng2ehz5RR11UWB5xi8zy51UKaQ/1/3CF129D24760CA58DEE1B42CDACAE4407710A219.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3CF129D24760CA58DEE1B42CDACAE4407710A219.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 10:24:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:5c:a8:34:79:2a:9b:66:e6:10:11:52:fd:f1:dd:52:60:00:4f:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3CF129D24760CA58DEE1B42CDACAE4407710A219
        Validity
            Not Before: Apr  4 14:35:57 2024 GMT
            Not After : Apr  3 14:40:57 2025 GMT
        Subject: CN=F1F52A23C1900A602EA98210B61C5F20935980E5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:5d:ee:17:46:96:ad:05:91:cc:75:dc:6e:58:
                    cd:68:d6:07:d6:86:75:12:94:2a:e9:de:64:3f:3c:
                    d5:90:e6:49:69:fb:e4:5b:dd:1e:8b:9f:83:53:66:
                    47:f2:70:b5:49:de:7e:5c:04:dc:51:aa:80:ee:3f:
                    0a:37:50:1d:28:bc:78:28:e6:77:91:45:57:de:6f:
                    f1:de:a7:e4:a5:39:6e:c3:ae:1d:ee:50:bb:11:22:
                    6a:41:97:ae:5c:39:31:88:39:6b:5b:05:fa:8d:55:
                    ca:21:ea:83:af:97:52:13:84:75:bd:9a:82:f1:4e:
                    d3:9f:71:29:fe:a1:d0:d0:11:73:16:bb:1c:13:24:
                    ae:58:80:b6:26:f8:11:2d:4d:10:15:09:19:f0:aa:
                    14:53:66:dc:9d:1a:59:c3:23:18:2b:be:33:76:45:
                    88:14:4c:34:e5:d9:f4:c8:54:e7:d4:e4:a4:38:5e:
                    ac:6f:5a:59:37:bb:25:88:d7:cf:dd:a0:b2:56:e4:
                    ac:71:9b:7e:01:40:bf:5b:84:59:d5:dd:7d:ad:4f:
                    c9:08:a2:ca:b4:6f:4b:47:c9:38:cd:c3:ac:01:e7:
                    7b:fc:c9:e0:a8:f4:f2:7d:89:99:96:84:7b:da:88:
                    1a:3b:c1:c3:87:c6:64:13:9b:06:a2:c8:17:28:af:
                    0b:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:F5:2A:23:C1:90:0A:60:2E:A9:82:10:B6:1C:5F:20:93:59:80:E5
            X509v3 Authority Key Identifier:
                keyid:3C:F1:29:D2:47:60:CA:58:DE:E1:B4:2C:DA:CA:E4:40:77:10:A2:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FQyvKNLAxGXFiy3pQVng2ehz5RR11UWB5xi8zy51UKaQ/1/3CF129D24760CA58DEE1B42CDACAE4407710A219.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3CF129D24760CA58DEE1B42CDACAE4407710A219.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FQyvKNLAxGXFiy3pQVng2ehz5RR11UWB5xi8zy51UKaQ/1/3139302e392e37372e302f32342d3234203d3e20323731363432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.9.77.0/24

    Signature Algorithm: sha256WithRSAEncryption
         85:d8:39:7b:6c:5c:54:cd:a6:b2:ea:48:3e:09:66:58:3c:27:
         c3:45:81:b9:a4:f1:35:8f:f9:7e:be:ce:95:5d:70:ad:5d:be:
         af:f1:0c:6d:a1:bb:39:51:a4:9e:1c:fc:ae:36:f0:ad:98:d8:
         20:55:10:97:b8:98:19:a7:45:8b:12:d1:ba:9d:d0:8d:c3:3c:
         f3:a0:fa:7c:14:17:d7:39:c5:43:58:82:15:d4:dd:a0:3f:fd:
         e8:b3:db:94:b9:da:e0:01:41:51:61:b6:30:b8:ce:b7:f2:ee:
         0a:c5:e3:1e:f3:87:1c:0f:9f:ac:1e:3c:05:d9:f8:32:7d:88:
         30:51:54:f7:28:8e:6a:68:ca:58:97:02:44:d7:c9:f5:e6:8b:
         48:ff:df:2b:75:ba:ce:59:8d:64:83:88:7a:e9:b3:3e:f5:69:
         da:95:8f:af:87:d9:69:39:22:8e:80:76:e0:85:5c:85:e5:ab:
         27:b7:6d:21:96:da:14:71:a7:63:b6:df:d8:36:01:00:ca:0b:
         96:29:28:86:88:f3:77:07:94:b3:b5:d4:02:d3:85:6d:88:c9:
         1b:d2:82:20:9c:ad:60:28:0b:d3:0a:ca:8d:8c:78:03:cc:c3:
         a3:ff:32:32:1f:b3:1c:a2:83:2c:c6:0a:97:99:17:61:f3:4c:
         6b:4a:e2:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:39:25 2024 by rpki-client on console-ams.rpki-client.org