Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/RdJn5EfmmgbHnZLC8FZiWuVj6xHDax3MwnWYTaUawyK/0/3139302e332e3136362e302f32342d3234203d3e20323731363033.roa
File:                     3139302e332e3136362e302f32342d3234203d3e20323731363033.roa (raw, json)
Hash identifier:          qWXsWMtA6QvMDMjL3UNVbPvudSgEx8XI/NhBNI1pzqw=
Subject key identifier:   F9:09:CF:9A:99:87:B0:75:6E:AA:60:36:9C:E5:EF:A0:7F:2E:C0:E9
Certificate issuer:       /CN=8A93F234754BF521193905D6EAF7AFDBB2811E48
Certificate serial:       20E3532A7E2DC32BB24AF83750CDF128C0C9D07F
Authority key identifier: 8A:93:F2:34:75:4B:F5:21:19:39:05:D6:EA:F7:AF:DB:B2:81:1E:48
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8A93F234754BF521193905D6EAF7AFDBB2811E48.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/RdJn5EfmmgbHnZLC8FZiWuVj6xHDax3MwnWYTaUawyK/0/3139302e332e3136362e302f32342d3234203d3e20323731363033.roa
Signing time:             Wed 28 Aug 2024 00:32:49 +0000
ROA not before:           Wed 28 Aug 2024 00:27:49 +0000
ROA not after:            Wed 27 Aug 2025 00:32:49 +0000
asID:                     271603
IP address blocks:        190.3.166.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/RdJn5EfmmgbHnZLC8FZiWuVj6xHDax3MwnWYTaUawyK/0/8A93F234754BF521193905D6EAF7AFDBB2811E48.crl
                          rsync://rpki-repo.registro.br/repo/RdJn5EfmmgbHnZLC8FZiWuVj6xHDax3MwnWYTaUawyK/0/8A93F234754BF521193905D6EAF7AFDBB2811E48.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8A93F234754BF521193905D6EAF7AFDBB2811E48.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 17 Feb 2025 06:29:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:e3:53:2a:7e:2d:c3:2b:b2:4a:f8:37:50:cd:f1:28:c0:c9:d0:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8A93F234754BF521193905D6EAF7AFDBB2811E48
        Validity
            Not Before: Aug 28 00:27:49 2024 GMT
            Not After : Aug 27 00:32:49 2025 GMT
        Subject: CN=F909CF9A9987B0756EAA60369CE5EFA07F2EC0E9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:88:d3:04:45:11:c8:44:56:db:d8:ad:ee:e8:
                    4e:5b:b2:91:d5:48:7d:d4:80:9b:04:e7:3f:1d:ea:
                    e0:96:07:fe:44:c3:39:03:8d:7f:ad:54:f8:3d:52:
                    c8:f9:e5:ba:07:36:05:0d:a8:d7:fd:2f:96:5d:26:
                    d3:a7:f7:c9:f0:3b:6e:e8:67:de:7d:1b:b6:62:fd:
                    2f:5b:b6:bf:c7:f6:0c:5c:1b:63:22:a8:75:4f:9e:
                    cd:24:1b:3a:f8:15:78:ae:51:4a:67:6d:e6:d5:a7:
                    57:63:1a:40:56:e1:a5:ea:be:88:0b:88:03:55:e0:
                    bc:29:00:53:d6:a4:74:a0:2a:ce:94:91:51:6e:a9:
                    b0:c8:51:74:89:0c:de:e8:f0:39:c3:6a:28:3d:b3:
                    fc:fa:c5:42:12:eb:ef:fa:30:33:0f:16:bd:11:0a:
                    29:86:70:f9:c1:63:3b:98:19:6e:3c:a0:d9:a8:e6:
                    81:d6:6b:1f:3e:f0:79:07:c2:d0:86:d2:34:d5:ee:
                    f5:8e:15:3c:13:0e:34:d2:ee:41:3e:41:4d:7d:64:
                    62:f2:09:6a:9d:7f:3a:db:ee:36:ac:44:16:14:e2:
                    ef:4f:5d:7b:9d:86:65:9f:a5:cc:56:37:e9:26:9a:
                    04:2d:83:e4:fa:6b:50:b3:ce:d8:56:19:34:4f:7e:
                    64:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:09:CF:9A:99:87:B0:75:6E:AA:60:36:9C:E5:EF:A0:7F:2E:C0:E9
            X509v3 Authority Key Identifier:
                keyid:8A:93:F2:34:75:4B:F5:21:19:39:05:D6:EA:F7:AF:DB:B2:81:1E:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/RdJn5EfmmgbHnZLC8FZiWuVj6xHDax3MwnWYTaUawyK/0/8A93F234754BF521193905D6EAF7AFDBB2811E48.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8A93F234754BF521193905D6EAF7AFDBB2811E48.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/RdJn5EfmmgbHnZLC8FZiWuVj6xHDax3MwnWYTaUawyK/0/3139302e332e3136362e302f32342d3234203d3e20323731363033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.3.166.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b1:15:cb:7f:f3:3d:85:a6:cb:1c:c2:b7:45:57:e9:42:cf:45:
         ca:ae:c7:0d:9b:ad:6d:00:2b:9e:70:33:29:ad:82:d2:28:80:
         17:79:1d:d2:a9:9d:51:70:16:22:08:53:af:19:71:ff:ae:5f:
         7a:82:9f:90:5c:e1:70:84:53:0f:bd:3b:f5:2d:1d:e9:14:2b:
         81:aa:ce:01:01:b3:81:de:4a:2a:10:e3:40:34:d2:e3:13:c9:
         1a:46:95:0f:22:7e:e2:fc:10:da:6a:fa:39:1b:91:0d:19:be:
         62:27:e2:2b:a5:71:48:5f:4f:fc:fb:bb:9a:d1:e2:e2:84:f3:
         68:0e:7f:55:e2:04:d6:e1:da:45:2a:57:fc:66:41:32:4c:7c:
         99:ac:b2:b0:7a:96:43:a8:54:43:5d:0f:42:e0:3e:9d:92:5b:
         bd:8d:b7:d3:98:a7:b5:b6:33:cf:66:32:ad:67:5b:9b:b2:26:
         42:12:87:41:86:77:21:cc:06:68:87:bc:2d:07:05:86:78:c4:
         81:ae:5e:59:ca:66:44:8d:f7:2c:23:4e:51:d5:da:6e:66:89:
         20:90:11:9a:c7:f0:1c:33:5a:95:87:cc:f6:36:3a:a4:16:c5:
         39:4f:20:44:6b:1f:d9:67:00:78:61:26:d7:18:18:0a:6b:7d:
         4a:02:38:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:07:03 2025 by rpki-client