Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J7DbE98dPZ9CVi2THC1oEUEsrMu5jF5MefnG19nWTzjr/0/3139302e3138302e3133392e302f32342d3234203d3e203532393330.roa
File:                     3139302e3138302e3133392e302f32342d3234203d3e203532393330.roa (raw, json)
Hash identifier:          Ky3oq9nKVwz0EMB2YY7fX65aFxm5op6UweKS/kTUqk4=
Subject key identifier:   83:E6:BB:44:43:DC:D6:B3:2B:A1:B5:2B:5B:2F:AD:C5:F2:50:71:92
Certificate issuer:       /CN=B0F9F75E2FF219B2BDD625EBBC294A989BAB0EBD
Certificate serial:       3A85C5EB2DAB6FCFB0F89295489BD78DDDDBD30D
Authority key identifier: B0:F9:F7:5E:2F:F2:19:B2:BD:D6:25:EB:BC:29:4A:98:9B:AB:0E:BD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B0F9F75E2FF219B2BDD625EBBC294A989BAB0EBD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J7DbE98dPZ9CVi2THC1oEUEsrMu5jF5MefnG19nWTzjr/0/3139302e3138302e3133392e302f32342d3234203d3e203532393330.roa
Signing time:             Fri 17 Jan 2025 16:16:55 +0000
ROA not before:           Fri 17 Jan 2025 16:11:55 +0000
ROA not after:            Fri 16 Jan 2026 16:16:55 +0000
asID:                     52930
IP address blocks:        190.180.139.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/J7DbE98dPZ9CVi2THC1oEUEsrMu5jF5MefnG19nWTzjr/0/B0F9F75E2FF219B2BDD625EBBC294A989BAB0EBD.crl
                          rsync://rpki-repo.registro.br/repo/J7DbE98dPZ9CVi2THC1oEUEsrMu5jF5MefnG19nWTzjr/0/B0F9F75E2FF219B2BDD625EBBC294A989BAB0EBD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B0F9F75E2FF219B2BDD625EBBC294A989BAB0EBD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 17 Feb 2025 20:49:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:85:c5:eb:2d:ab:6f:cf:b0:f8:92:95:48:9b:d7:8d:dd:db:d3:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B0F9F75E2FF219B2BDD625EBBC294A989BAB0EBD
        Validity
            Not Before: Jan 17 16:11:55 2025 GMT
            Not After : Jan 16 16:16:55 2026 GMT
        Subject: CN=83E6BB4443DCD6B32BA1B52B5B2FADC5F2507192
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:2a:40:1e:a3:b1:58:5b:c5:d8:e8:c8:b8:97:
                    65:f5:a9:f4:ca:4b:4e:32:37:0a:f5:6e:7f:3c:5d:
                    3e:79:7e:c2:8f:1d:7b:95:14:69:c4:48:78:23:fd:
                    53:2f:12:ea:29:ad:fc:9d:a6:7b:0a:3a:a4:67:d3:
                    66:82:22:63:cd:60:8f:9d:55:54:e7:c7:a1:a0:74:
                    0a:3b:fe:5d:97:d6:89:15:2c:96:b0:17:b7:15:28:
                    bc:d1:bf:f9:12:15:00:94:c4:c3:01:2f:d5:37:c6:
                    69:0e:06:11:c0:b4:54:f2:a7:f0:56:a5:3d:0a:f7:
                    f5:a8:f6:32:34:9e:4c:a6:b2:92:e7:bb:d2:ad:95:
                    29:a7:87:79:31:ab:e4:eb:a7:2e:93:4f:d3:ed:4e:
                    44:a0:10:7b:fd:6f:4e:f1:f5:a0:45:b8:e6:28:80:
                    4b:6b:4a:bb:a1:34:62:1f:2d:b0:7c:7c:12:b1:1a:
                    99:86:b4:12:d3:f4:4b:59:f7:d4:4e:2b:95:62:df:
                    3a:a5:d6:d9:a4:e9:2a:61:09:6e:68:b7:2f:4f:9e:
                    44:38:db:44:a2:44:38:f3:83:85:e3:14:b4:56:8d:
                    a3:d1:43:b1:ac:c2:68:21:19:42:cb:e0:6c:b3:3c:
                    71:37:4b:fd:68:a4:8d:69:b0:cf:1d:97:c4:81:f1:
                    e7:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:E6:BB:44:43:DC:D6:B3:2B:A1:B5:2B:5B:2F:AD:C5:F2:50:71:92
            X509v3 Authority Key Identifier:
                keyid:B0:F9:F7:5E:2F:F2:19:B2:BD:D6:25:EB:BC:29:4A:98:9B:AB:0E:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J7DbE98dPZ9CVi2THC1oEUEsrMu5jF5MefnG19nWTzjr/0/B0F9F75E2FF219B2BDD625EBBC294A989BAB0EBD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B0F9F75E2FF219B2BDD625EBBC294A989BAB0EBD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J7DbE98dPZ9CVi2THC1oEUEsrMu5jF5MefnG19nWTzjr/0/3139302e3138302e3133392e302f32342d3234203d3e203532393330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.180.139.0/24

    Signature Algorithm: sha256WithRSAEncryption
         38:3a:02:74:60:b5:63:bd:c0:6a:05:10:af:52:c2:e3:ae:0b:
         a6:65:21:bf:16:8b:2b:4a:e5:c8:23:6c:52:9f:91:96:7f:9a:
         0f:6e:9b:98:fb:37:8e:c8:d7:64:c2:d8:17:69:a9:29:b4:3a:
         34:1c:f5:2b:64:c0:2d:79:17:06:26:58:89:7d:2d:02:65:61:
         1c:37:95:44:5f:26:c5:d6:c6:31:bb:26:0c:6b:a6:84:89:54:
         df:15:74:64:e6:44:71:b3:6e:2b:fd:e3:65:3e:98:53:ff:66:
         b2:9e:9f:e6:ca:11:2f:ce:27:90:b6:0b:06:ab:ab:0a:57:bf:
         48:52:63:28:02:32:0e:1e:13:b4:d3:47:05:e3:94:81:fc:2d:
         75:02:05:e3:50:01:39:db:82:6b:7a:e2:a8:2d:50:f7:c9:0f:
         57:8d:10:2f:f0:69:a4:f5:c2:29:46:a8:e1:8e:95:f6:b2:64:
         cc:60:e9:25:16:34:8e:53:3b:4c:c5:e3:a5:99:b7:08:d9:33:
         73:27:51:95:89:05:df:31:b6:d2:0d:71:41:5b:86:c9:1e:9a:
         02:f8:06:f6:5a:7e:55:94:bf:e6:46:6f:42:25:92:f4:f5:af:
         b3:80:3e:03:48:a8:6e:d7:1f:be:69:a6:68:40:1e:f5:da:4d:
         ce:32:cb:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:20:54 2025 by rpki-client