Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HG8kx81PYUoRNaQquiF2m6y9xjwuByVxeNriJ99shw3K/1/3139302e31322e3135322e302f32322d3332203d3e20323731323830.roa
File:                     3139302e31322e3135322e302f32322d3332203d3e20323731323830.roa (raw, json)
Hash identifier:          HPmEizrL0vdnZ+3VOB5r9JgwxN8ySBwBijyXSR0JY04=
Subject key identifier:   5C:3E:B8:F0:57:D2:2A:E0:92:B7:B0:A8:EF:A1:48:88:6F:91:FE:18
Certificate issuer:       /CN=530AA7DD3778859AD9102696F2AD70D18F3BECA8
Certificate serial:       55F82FBAE60FEE2A46CCB90CD2DEC5E009B8DEFD
Authority key identifier: 53:0A:A7:DD:37:78:85:9A:D9:10:26:96:F2:AD:70:D1:8F:3B:EC:A8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/530AA7DD3778859AD9102696F2AD70D18F3BECA8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HG8kx81PYUoRNaQquiF2m6y9xjwuByVxeNriJ99shw3K/1/3139302e31322e3135322e302f32322d3332203d3e20323731323830.roa
Signing time:             Thu 04 Apr 2024 14:04:49 +0000
ROA not before:           Thu 04 Apr 2024 13:59:49 +0000
ROA not after:            Thu 03 Apr 2025 14:04:49 +0000
asID:                     271280
IP address blocks:        190.12.152.0/22 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HG8kx81PYUoRNaQquiF2m6y9xjwuByVxeNriJ99shw3K/1/530AA7DD3778859AD9102696F2AD70D18F3BECA8.crl
                          rsync://rpki-repo.registro.br/repo/HG8kx81PYUoRNaQquiF2m6y9xjwuByVxeNriJ99shw3K/1/530AA7DD3778859AD9102696F2AD70D18F3BECA8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/530AA7DD3778859AD9102696F2AD70D18F3BECA8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:f8:2f:ba:e6:0f:ee:2a:46:cc:b9:0c:d2:de:c5:e0:09:b8:de:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=530AA7DD3778859AD9102696F2AD70D18F3BECA8
        Validity
            Not Before: Apr  4 13:59:49 2024 GMT
            Not After : Apr  3 14:04:49 2025 GMT
        Subject: CN=5C3EB8F057D22AE092B7B0A8EFA148886F91FE18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:4a:df:9a:b4:84:25:2e:33:cd:2d:06:3a:6b:
                    45:04:8f:80:a3:77:35:16:f6:e4:bd:04:d0:f9:b3:
                    54:43:24:32:a2:72:b2:3d:cb:dd:14:13:c5:b6:23:
                    be:65:f7:85:15:6a:d2:12:b7:cf:2a:51:34:c7:5b:
                    10:94:e1:d8:1d:df:14:99:20:dd:e5:3c:f9:f3:61:
                    df:1b:35:1b:01:f3:c5:46:be:65:ea:06:08:21:b2:
                    e1:ee:e9:09:f1:5c:31:1d:db:94:15:9d:e0:38:3a:
                    53:ea:e2:88:35:1e:cd:5c:26:32:9d:60:0e:8a:23:
                    03:64:4c:bd:a0:dc:1f:62:85:70:54:78:ac:cc:1c:
                    73:e7:d2:31:f8:ba:87:b4:17:0c:2e:c2:22:ca:d8:
                    b0:1c:6f:e1:74:1f:ad:c8:94:0d:21:ac:ef:93:c8:
                    64:f5:81:61:f5:5b:16:e6:6c:59:aa:70:e3:93:1f:
                    2f:2a:14:3a:9a:fe:e6:53:81:26:0d:e6:0d:b6:a5:
                    50:38:39:a3:23:64:ef:41:93:5b:c8:3a:ce:22:f8:
                    b0:97:a2:df:b2:cf:6f:14:46:b4:e0:cd:40:2d:6a:
                    6d:70:0c:c6:d6:77:ae:e2:31:d4:f5:ce:64:cd:33:
                    75:21:3f:0f:5d:dc:fd:51:e3:e4:4c:a0:e3:e3:c8:
                    ce:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:3E:B8:F0:57:D2:2A:E0:92:B7:B0:A8:EF:A1:48:88:6F:91:FE:18
            X509v3 Authority Key Identifier:
                keyid:53:0A:A7:DD:37:78:85:9A:D9:10:26:96:F2:AD:70:D1:8F:3B:EC:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HG8kx81PYUoRNaQquiF2m6y9xjwuByVxeNriJ99shw3K/1/530AA7DD3778859AD9102696F2AD70D18F3BECA8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/530AA7DD3778859AD9102696F2AD70D18F3BECA8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HG8kx81PYUoRNaQquiF2m6y9xjwuByVxeNriJ99shw3K/1/3139302e31322e3135322e302f32322d3332203d3e20323731323830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.12.152.0/22

    Signature Algorithm: sha256WithRSAEncryption
         30:f8:54:7f:0c:a0:c0:0d:3c:cf:ef:7a:14:bc:ea:f7:19:cf:
         b9:e8:38:4e:71:65:09:9b:66:eb:b4:1f:35:c2:dc:47:e7:93:
         b7:ef:09:49:90:6e:4d:43:86:a0:40:4e:1a:80:d2:93:2f:c1:
         24:6b:4b:87:1d:9a:a9:06:0a:4f:1d:e1:a3:0d:f6:b8:e7:6b:
         c5:15:b7:1a:b5:01:6d:84:84:bd:5f:51:45:dd:07:fe:ce:aa:
         09:36:c8:ec:c6:c1:dd:9e:a9:e3:5b:b0:60:41:45:bc:63:c1:
         64:59:c8:c1:d0:93:7e:75:58:ef:af:31:ea:0e:90:7d:08:fa:
         4b:e9:2b:eb:d4:82:b5:e5:38:c3:dc:d9:8f:c0:54:06:db:cb:
         01:b6:d8:58:a2:30:cb:92:78:c2:9e:c4:fa:dc:8d:78:84:b4:
         53:29:01:fd:2b:70:2e:ca:e1:69:e0:83:0d:6b:33:73:fb:87:
         6b:81:a4:72:a3:eb:50:fb:f8:75:ef:3e:0c:2b:4a:66:59:e0:
         19:00:ec:92:71:d5:35:f3:99:1d:59:2b:02:a2:68:bc:b3:a4:
         19:13:e8:b6:bc:5a:ee:f4:5d:6b:43:36:5d:4b:2a:d3:20:08:
         ac:e8:01:c2:47:57:23:3c:c9:68:3c:3c:bb:25:2d:8d:1b:ea:
         51:f8:36:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 14:45:01 2024 by rpki-client on console-ams.rpki-client.org