Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FQyvKNLAxGXFiy3pQVng2ehz5RR11UWB5xi8zy51UKaQ/1/3139302e392e37382e302f32342d3234203d3e20323731363432.roa
File:                     3139302e392e37382e302f32342d3234203d3e20323731363432.roa (raw, json)
Hash identifier:          3CSXvgD8gZZJY3OihNgW2wuvdgpLd+7AI9EKOovQkxU=
Subject key identifier:   3A:1B:90:4C:CF:A6:1B:AF:62:02:94:B1:08:AF:25:04:3B:52:22:2A
Certificate issuer:       /CN=3CF129D24760CA58DEE1B42CDACAE4407710A219
Certificate serial:       55D8048A2B9D79D8DB5E3DBE3BD2EB11F4C3DC71
Authority key identifier: 3C:F1:29:D2:47:60:CA:58:DE:E1:B4:2C:DA:CA:E4:40:77:10:A2:19
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3CF129D24760CA58DEE1B42CDACAE4407710A219.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FQyvKNLAxGXFiy3pQVng2ehz5RR11UWB5xi8zy51UKaQ/1/3139302e392e37382e302f32342d3234203d3e20323731363432.roa
Signing time:             Thu 06 Mar 2025 14:57:47 +0000
ROA not before:           Thu 06 Mar 2025 14:52:47 +0000
ROA not after:            Thu 05 Mar 2026 14:57:47 +0000
asID:                     271642
IP address blocks:        190.9.78.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FQyvKNLAxGXFiy3pQVng2ehz5RR11UWB5xi8zy51UKaQ/1/3CF129D24760CA58DEE1B42CDACAE4407710A219.crl
                          rsync://rpki-repo.registro.br/repo/FQyvKNLAxGXFiy3pQVng2ehz5RR11UWB5xi8zy51UKaQ/1/3CF129D24760CA58DEE1B42CDACAE4407710A219.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3CF129D24760CA58DEE1B42CDACAE4407710A219.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 23 Apr 2025 23:24:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:d8:04:8a:2b:9d:79:d8:db:5e:3d:be:3b:d2:eb:11:f4:c3:dc:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3CF129D24760CA58DEE1B42CDACAE4407710A219
        Validity
            Not Before: Mar  6 14:52:47 2025 GMT
            Not After : Mar  5 14:57:47 2026 GMT
        Subject: CN=3A1B904CCFA61BAF620294B108AF25043B52222A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:d6:a7:e7:1b:04:21:4a:4e:33:ba:a6:65:72:
                    89:76:d9:b9:bd:de:7e:ba:cd:f6:1f:a0:f5:1c:4b:
                    17:3a:d6:06:fe:6d:ac:34:50:38:5f:a7:a2:15:13:
                    54:ec:67:c4:83:de:2b:10:a1:46:05:73:d1:8a:44:
                    8c:5b:dd:97:06:89:5d:03:77:6f:a4:c1:1d:0b:76:
                    70:79:31:0e:cc:08:69:25:aa:d1:09:69:bd:12:03:
                    bb:40:9e:74:d5:2e:9f:db:c7:fe:ae:32:6d:e1:03:
                    db:98:45:ed:74:08:06:34:f2:c3:60:cf:28:79:d6:
                    3e:d5:43:8d:2c:13:92:be:cc:93:49:5d:9f:9c:3c:
                    c4:fd:c3:40:32:3e:01:18:6d:8e:14:65:06:d2:f7:
                    8b:44:c4:32:b4:d3:f1:84:94:50:69:5a:0e:14:94:
                    25:6d:73:d9:2c:25:f4:46:4d:fb:73:fc:eb:ac:75:
                    16:d0:07:03:5d:f1:ff:69:dd:80:08:5a:7e:28:13:
                    4e:d4:d9:80:b1:8b:03:a5:ac:39:43:c0:dc:d2:e4:
                    88:3b:74:0c:77:af:91:d9:46:9c:ad:1a:12:ba:77:
                    bd:3e:92:00:fd:73:92:ac:72:61:62:96:39:b1:a0:
                    0e:de:f0:83:d7:fd:d3:63:2c:cd:51:56:96:0c:34:
                    f3:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:1B:90:4C:CF:A6:1B:AF:62:02:94:B1:08:AF:25:04:3B:52:22:2A
            X509v3 Authority Key Identifier:
                keyid:3C:F1:29:D2:47:60:CA:58:DE:E1:B4:2C:DA:CA:E4:40:77:10:A2:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FQyvKNLAxGXFiy3pQVng2ehz5RR11UWB5xi8zy51UKaQ/1/3CF129D24760CA58DEE1B42CDACAE4407710A219.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3CF129D24760CA58DEE1B42CDACAE4407710A219.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FQyvKNLAxGXFiy3pQVng2ehz5RR11UWB5xi8zy51UKaQ/1/3139302e392e37382e302f32342d3234203d3e20323731363432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.9.78.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a7:f7:7d:42:7d:66:2e:6f:6d:09:27:49:bb:61:b0:27:6d:66:
         a5:66:1c:b0:61:f2:d3:f3:a5:7f:f8:aa:f0:a8:da:3a:4d:8c:
         b0:30:0a:17:04:d0:c8:4b:27:5d:38:c7:08:e2:6b:f0:fa:70:
         62:58:c1:4d:41:8b:1f:fa:9f:58:a9:ba:67:b7:a2:80:78:5a:
         8d:35:4a:53:57:7f:43:99:93:75:72:b1:48:89:d6:30:a3:e1:
         7e:75:cf:53:f1:9a:3a:c3:1d:42:eb:68:a7:93:a7:8f:c4:c0:
         ca:b6:82:08:6e:6a:85:8a:8c:16:d5:cc:2b:78:ca:d6:75:2c:
         51:d8:b0:9e:bc:46:cd:cf:7c:7d:cd:38:17:23:17:fd:e0:6f:
         d7:89:ce:e2:27:fb:7e:0b:1a:48:46:b6:03:b9:30:28:f3:b5:
         c6:18:aa:c1:36:6d:3f:06:71:e1:f1:64:fd:49:46:51:da:cd:
         88:25:b2:18:f6:43:4c:3a:2a:64:c4:37:15:87:c2:cd:1a:2c:
         9e:a1:7c:df:3f:c4:62:70:5f:ce:cd:45:2f:92:92:67:0f:69:
         d8:a6:57:ba:e5:1d:1d:58:c5:39:a1:3b:01:ac:bb:d4:63:63:
         7a:7b:28:05:cb:18:01:2e:ec:fb:ac:5e:aa:45:73:e7:2e:bd:
         80:8f:c2:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 23:19:42 2025 by rpki-client