Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FQyvKNLAxGXFiy3pQVng2ehz5RR11UWB5xi8zy51UKaQ/1/3139302e392e37382e302f32342d3234203d3e20323731363432.roa
File:                     3139302e392e37382e302f32342d3234203d3e20323731363432.roa (raw, json)
Hash identifier:          cyTlpUqN4xzdAdIn/3jJBNGYwRC2+VgFClL8e7EYnMo=
Subject key identifier:   00:1A:81:53:58:0C:A6:07:3B:F0:6B:89:BF:5C:44:9D:E8:1C:8D:45
Certificate issuer:       /CN=3CF129D24760CA58DEE1B42CDACAE4407710A219
Certificate serial:       35D2069876509F5A574992145AB5EA7AA3A89F03
Authority key identifier: 3C:F1:29:D2:47:60:CA:58:DE:E1:B4:2C:DA:CA:E4:40:77:10:A2:19
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3CF129D24760CA58DEE1B42CDACAE4407710A219.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FQyvKNLAxGXFiy3pQVng2ehz5RR11UWB5xi8zy51UKaQ/1/3139302e392e37382e302f32342d3234203d3e20323731363432.roa
Signing time:             Thu 04 Apr 2024 14:40:57 +0000
ROA not before:           Thu 04 Apr 2024 14:35:57 +0000
ROA not after:            Thu 03 Apr 2025 14:40:57 +0000
asID:                     271642
IP address blocks:        190.9.78.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FQyvKNLAxGXFiy3pQVng2ehz5RR11UWB5xi8zy51UKaQ/1/3CF129D24760CA58DEE1B42CDACAE4407710A219.crl
                          rsync://rpki-repo.registro.br/repo/FQyvKNLAxGXFiy3pQVng2ehz5RR11UWB5xi8zy51UKaQ/1/3CF129D24760CA58DEE1B42CDACAE4407710A219.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3CF129D24760CA58DEE1B42CDACAE4407710A219.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 06:55:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:d2:06:98:76:50:9f:5a:57:49:92:14:5a:b5:ea:7a:a3:a8:9f:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3CF129D24760CA58DEE1B42CDACAE4407710A219
        Validity
            Not Before: Apr  4 14:35:57 2024 GMT
            Not After : Apr  3 14:40:57 2025 GMT
        Subject: CN=001A8153580CA6073BF06B89BF5C449DE81C8D45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:bb:e4:56:f2:6f:30:b2:77:cc:55:e1:ad:eb:
                    4e:f5:c6:de:46:db:d3:ab:be:04:25:9c:32:41:c7:
                    c0:9c:30:49:d7:9a:6e:3b:8b:d2:5c:d6:7c:d8:bd:
                    60:40:fc:3e:10:2b:83:50:6c:b5:8c:3b:bb:c5:5f:
                    9f:91:a9:92:e0:84:6f:76:be:c9:0c:58:89:e9:ea:
                    94:1f:f7:95:30:c7:67:41:10:a0:7a:1d:de:a4:75:
                    48:23:1c:fb:8d:5e:c2:40:7b:3b:65:ca:15:8c:e4:
                    46:b6:a6:41:8d:a2:07:b1:7b:42:60:7c:60:d2:68:
                    c3:d5:08:a3:21:38:be:77:2b:2f:55:01:16:69:c4:
                    11:51:a7:a3:f4:41:ed:a6:9b:0e:01:18:3c:4c:8c:
                    9e:a5:7b:37:a0:8c:18:ea:a0:de:16:e7:9e:9b:28:
                    29:18:6c:72:4a:ef:03:7d:ea:d8:ca:a1:3a:de:86:
                    83:f6:0f:2a:29:94:47:bc:44:58:64:12:8d:3f:b3:
                    38:33:99:70:f7:ef:76:02:e8:de:1a:0e:ff:b8:71:
                    d7:7a:bb:c9:25:84:89:e2:86:f1:f5:8c:a1:9e:7d:
                    b1:f5:5b:2f:e9:bf:69:f7:c4:a5:dd:1f:a0:6f:df:
                    5d:2d:3d:5a:cd:9a:64:09:34:2a:e6:26:48:98:2b:
                    ee:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:1A:81:53:58:0C:A6:07:3B:F0:6B:89:BF:5C:44:9D:E8:1C:8D:45
            X509v3 Authority Key Identifier:
                keyid:3C:F1:29:D2:47:60:CA:58:DE:E1:B4:2C:DA:CA:E4:40:77:10:A2:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FQyvKNLAxGXFiy3pQVng2ehz5RR11UWB5xi8zy51UKaQ/1/3CF129D24760CA58DEE1B42CDACAE4407710A219.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3CF129D24760CA58DEE1B42CDACAE4407710A219.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FQyvKNLAxGXFiy3pQVng2ehz5RR11UWB5xi8zy51UKaQ/1/3139302e392e37382e302f32342d3234203d3e20323731363432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.9.78.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7a:48:92:f6:c9:5c:2d:d5:dc:be:13:99:bd:ee:d5:0d:ef:89:
         22:84:aa:55:3e:3e:59:d3:12:bc:ad:23:27:36:87:57:b4:68:
         7d:d1:f0:12:dc:5b:20:a6:bc:cf:1d:54:fa:08:46:7f:d6:9e:
         23:d4:28:3e:b1:91:58:26:92:fd:98:c0:31:5f:20:10:f7:e7:
         f3:90:cb:93:fa:90:0d:6b:46:b8:40:00:3d:c8:12:72:b2:f3:
         73:6e:61:44:9b:b2:15:52:ed:8c:15:3f:0b:b7:15:45:69:a3:
         e0:65:5f:44:e8:1a:94:e4:7e:25:8b:23:65:37:85:3a:7c:1c:
         7e:fd:ef:e1:51:21:97:81:17:e6:9d:64:25:09:d3:7b:60:52:
         ad:00:74:82:3c:12:3b:38:fe:34:e9:17:fe:62:91:17:70:04:
         9b:08:91:79:c5:87:16:a7:eb:70:53:ff:9d:2c:d5:33:f0:74:
         24:04:5d:c5:99:1b:59:04:d2:d0:21:ca:de:0d:4b:f6:c7:6e:
         c9:f2:83:c5:63:2e:36:80:b8:4f:2a:cb:70:bb:1e:c9:af:b0:
         29:fe:de:a9:09:68:dc:98:5b:8e:c9:66:1d:b4:98:a9:f5:10:
         8f:a9:e1:90:53:a6:94:25:9a:5f:9f:2a:b5:3b:26:cb:5e:1e:
         43:8f:8f:d6
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUNdIGmHZQn1pXSZIUWrXqeqOonwMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0NGMTI5RDI0NzYwQ0E1OERFRTFCNDJDREFDQUU0NDA3
NzEwQTIxOTAeFw0yNDA0MDQxNDM1NTdaFw0yNTA0MDMxNDQwNTdaMDMxMTAvBgNV
BAMTKDAwMUE4MTUzNTgwQ0E2MDczQkYwNkI4OUJGNUM0NDlERTgxQzhENDUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgu+RW8m8wsnfMVeGt6071xt5G
29OrvgQlnDJBx8CcMEnXmm47i9Jc1nzYvWBA/D4QK4NQbLWMO7vFX5+RqZLghG92
vskMWInp6pQf95Uwx2dBEKB6Hd6kdUgjHPuNXsJAeztlyhWM5Ea2pkGNogexe0Jg
fGDSaMPVCKMhOL53Ky9VARZpxBFRp6P0Qe2mmw4BGDxMjJ6lezegjBjqoN4W556b
KCkYbHJK7wN96tjKoTrehoP2DyoplEe8RFhkEo0/szgzmXD373YC6N4aDv+4cdd6
u8klhInihvH1jKGefbH1Wy/pv2n3xKXdH6Bv310tPVrNmmQJNCrmJkiYK+6xAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUABqBU1gMpgc78GuJv1xEnegcjUUwHwYDVR0j
BBgwFoAUPPEp0kdgylje4bQs2srkQHcQohkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRlF5dktOTEF4R1hGaXkzcFFWbmcyZWh6NVJSMTFVV0I1eGk4enk1MVVL
YVEvMS8zQ0YxMjlEMjQ3NjBDQTU4REVFMUI0MkNEQUNBRTQ0MDc3MTBBMjE5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzNDRjEyOUQyNDc2MENBNThE
RUUxQjQyQ0RBQ0FFNDQwNzcxMEEyMTkuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0ZReXZLTkxBeEdYRml5M3BRVm5nMmVoejVSUjExVVdCNXhpOHp5NTFVS2FRLzEv
MzEzOTMwMmUzOTJlMzczODJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzczMTM2
MzQzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEAL4JTjANBgkqhkiG9w0BAQsFAAOCAQEAekiS9slcLdXc
vhOZve7VDe+JIoSqVT4+WdMSvK0jJzaHV7RofdHwEtxbIKa8zx1U+ghGf9aeI9Qo
PrGRWCaS/ZjAMV8gEPfn85DLk/qQDWtGuEAAPcgScrLzc25hRJuyFVLtjBU/C7cV
RWmj4GVfROgalOR+JYsjZTeFOnwcfv3v4VEhl4EX5p1kJQnTe2BSrQB0gjwSOzj+
NOkX/mKRF3AEmwiRecWHFqfrcFP/nSzVM/B0JARdxZkbWQTS0CHK3g1L9sduyfKD
xWMuNoC4TyrLcLseya+wKf7eqQlo3JhbjslmHbSYqfUQj6nhkFOmlCWaX58qtTsm
y14eQ4+P1g==
-----END CERTIFICATE-----
Generated at Fri Jun 28 05:28:09 2024 by rpki-client on console-ams.rpki-client.org