Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Gdj8AffWnxhaqjsPTizm4q4euDHdCF42JcnnJAojbQnM/0/3139302e38332e33312e302f32342d3234203d3e20323730333438.roa
File:                     3139302e38332e33312e302f32342d3234203d3e20323730333438.roa (raw, json)
Hash identifier:          BMfWt09eeY7IuhC7V0b9OHxHtMCQp9PNadG54VgFsTg=
Subject key identifier:   3B:79:68:B1:F8:64:0F:18:92:70:79:16:7D:72:A1:14:59:84:08:7D
Certificate issuer:       /CN=F56EFCA70F4D47C16E985AD896951551D366CD18
Certificate serial:       022598A2526B48F51A85EBE98BB3C2C11A998021
Authority key identifier: F5:6E:FC:A7:0F:4D:47:C1:6E:98:5A:D8:96:95:15:51:D3:66:CD:18
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F56EFCA70F4D47C16E985AD896951551D366CD18.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Gdj8AffWnxhaqjsPTizm4q4euDHdCF42JcnnJAojbQnM/0/3139302e38332e33312e302f32342d3234203d3e20323730333438.roa
Signing time:             Mon 21 Oct 2024 13:10:03 +0000
ROA not before:           Mon 21 Oct 2024 13:05:03 +0000
ROA not after:            Mon 20 Oct 2025 13:10:03 +0000
asID:                     270348
IP address blocks:        190.83.31.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Gdj8AffWnxhaqjsPTizm4q4euDHdCF42JcnnJAojbQnM/0/F56EFCA70F4D47C16E985AD896951551D366CD18.crl
                          rsync://rpki-repo.registro.br/repo/Gdj8AffWnxhaqjsPTizm4q4euDHdCF42JcnnJAojbQnM/0/F56EFCA70F4D47C16E985AD896951551D366CD18.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F56EFCA70F4D47C16E985AD896951551D366CD18.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 17:12:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:25:98:a2:52:6b:48:f5:1a:85:eb:e9:8b:b3:c2:c1:1a:99:80:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F56EFCA70F4D47C16E985AD896951551D366CD18
        Validity
            Not Before: Oct 21 13:05:03 2024 GMT
            Not After : Oct 20 13:10:03 2025 GMT
        Subject: CN=3B7968B1F8640F18927079167D72A1145984087D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:7d:db:7c:2d:9f:6e:3f:4a:81:0a:37:0e:c1:
                    10:df:a6:8a:61:71:46:3f:89:11:76:21:33:4a:f7:
                    d5:1f:a3:77:8b:da:b0:c6:90:b4:a1:99:aa:c0:21:
                    68:20:a9:d7:ab:8c:cc:ff:6b:fd:20:76:24:34:d5:
                    15:65:c8:06:f3:ea:a5:4b:b4:5f:6f:cb:a1:1e:ed:
                    68:08:63:fa:ec:0a:5b:38:7e:03:52:ed:07:8f:59:
                    97:c9:f2:8a:8a:c4:ee:30:23:9b:dd:2c:94:e0:a9:
                    f3:1c:63:e1:6a:4a:46:d0:78:97:b1:1e:9d:76:9e:
                    8b:5a:70:0c:d5:33:56:bd:bd:fb:03:72:ad:1b:bc:
                    49:aa:15:ce:a8:4f:01:f8:c3:f1:41:1b:1d:3d:5d:
                    42:91:b7:e1:cf:31:7b:87:fb:ff:10:e5:b3:56:00:
                    76:fd:46:d3:77:7e:d3:5c:b2:89:60:c5:93:00:10:
                    25:2b:ff:61:2d:cb:60:49:94:1b:b4:32:bc:a7:c0:
                    62:6d:99:c3:8c:f0:4f:9b:37:0a:94:af:92:ce:cf:
                    7a:32:a5:1f:79:2d:bb:45:05:6f:45:23:36:83:ae:
                    2a:ba:fe:4c:b6:ab:74:08:c4:c2:78:2c:21:a6:86:
                    87:5b:5a:6b:29:ed:78:c2:ee:f7:69:dd:85:f0:af:
                    9c:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:79:68:B1:F8:64:0F:18:92:70:79:16:7D:72:A1:14:59:84:08:7D
            X509v3 Authority Key Identifier:
                keyid:F5:6E:FC:A7:0F:4D:47:C1:6E:98:5A:D8:96:95:15:51:D3:66:CD:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Gdj8AffWnxhaqjsPTizm4q4euDHdCF42JcnnJAojbQnM/0/F56EFCA70F4D47C16E985AD896951551D366CD18.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F56EFCA70F4D47C16E985AD896951551D366CD18.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gdj8AffWnxhaqjsPTizm4q4euDHdCF42JcnnJAojbQnM/0/3139302e38332e33312e302f32342d3234203d3e20323730333438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.83.31.0/24

    Signature Algorithm: sha256WithRSAEncryption
         52:8f:bc:c6:10:a6:39:1c:51:ea:cb:30:f1:62:35:0e:f2:78:
         22:b7:cd:28:77:04:92:b3:85:10:fe:03:d6:8a:98:ce:3b:26:
         dc:35:a1:1b:2c:82:5c:f7:ed:a8:7b:e9:dd:c5:2b:95:d5:28:
         d8:38:1d:cb:51:31:92:1a:51:0b:9b:6c:a7:e1:78:33:c2:77:
         23:26:1a:3b:e0:db:2e:e3:37:cb:ae:17:b5:ae:17:3c:cd:24:
         f3:e4:46:b2:cd:49:8a:39:1c:1d:bf:a1:e7:93:94:10:ce:1c:
         3a:f8:b5:74:05:dc:b3:b9:de:95:c0:e2:13:59:34:d8:b2:ed:
         58:93:e1:66:c8:ad:45:9b:34:7d:35:c6:6f:b6:47:1f:55:3f:
         50:cd:06:d9:9b:c0:17:b1:45:eb:2b:7b:ba:d2:77:c2:4d:c7:
         5e:25:1e:3b:42:8a:26:5a:78:f6:75:c8:ad:4d:e9:4e:79:63:
         4a:10:2f:fa:f8:30:00:8c:40:03:27:83:88:43:76:df:a6:c8:
         9c:06:cb:83:13:37:84:14:a3:0c:4d:1d:40:93:72:b2:82:cd:
         bc:24:a7:10:a6:82:f4:6b:3c:b1:a0:74:c5:9c:40:b6:c9:d7:
         0c:c2:e4:38:9e:36:ee:c8:5e:52:c5:c9:ef:0d:d6:e0:d1:9b:
         86:50:e5:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 15:50:06 2024 by rpki-client on console-ams.rpki-client.org