Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/SvtopekQUR7gGrxACyVQ5ZuUFr6Y7sHJBro8zZYe5Ud/0/3139302e3130392e38382e302f32322d3232203d3e20323634323330.roa
File:                     3139302e3130392e38382e302f32322d3232203d3e20323634323330.roa (raw, json)
Hash identifier:          RyrFXWEQlYF+5KJMKqaP9B3wdDkE9dOEKhi4WsV3lC0=
Subject key identifier:   FC:79:58:48:87:C0:1D:16:BE:9A:A3:5B:A6:38:BF:7E:CC:9A:74:1D
Certificate issuer:       /CN=D59C2B03CF0FCD4B0D3005B321204334D08669AF
Certificate serial:       69DD0C97CBA7B91D4B5CE65FCC097EF39113D6BB
Authority key identifier: D5:9C:2B:03:CF:0F:CD:4B:0D:30:05:B3:21:20:43:34:D0:86:69:AF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D59C2B03CF0FCD4B0D3005B321204334D08669AF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/SvtopekQUR7gGrxACyVQ5ZuUFr6Y7sHJBro8zZYe5Ud/0/3139302e3130392e38382e302f32322d3232203d3e20323634323330.roa
Signing time:             Mon 28 Oct 2024 21:20:38 +0000
ROA not before:           Mon 28 Oct 2024 21:15:38 +0000
ROA not after:            Mon 27 Oct 2025 21:20:38 +0000
asID:                     264230
IP address blocks:        190.109.88.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/SvtopekQUR7gGrxACyVQ5ZuUFr6Y7sHJBro8zZYe5Ud/0/D59C2B03CF0FCD4B0D3005B321204334D08669AF.crl
                          rsync://rpki-repo.registro.br/repo/SvtopekQUR7gGrxACyVQ5ZuUFr6Y7sHJBro8zZYe5Ud/0/D59C2B03CF0FCD4B0D3005B321204334D08669AF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D59C2B03CF0FCD4B0D3005B321204334D08669AF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 17:44:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:dd:0c:97:cb:a7:b9:1d:4b:5c:e6:5f:cc:09:7e:f3:91:13:d6:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D59C2B03CF0FCD4B0D3005B321204334D08669AF
        Validity
            Not Before: Oct 28 21:15:38 2024 GMT
            Not After : Oct 27 21:20:38 2025 GMT
        Subject: CN=FC79584887C01D16BE9AA35BA638BF7ECC9A741D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:92:22:e8:21:62:99:cd:b8:94:6b:65:03:77:
                    c9:8f:e6:bd:a7:59:26:1a:d8:73:af:fe:bf:ae:19:
                    12:30:15:5f:a9:bb:45:0d:52:29:78:9a:3c:d2:67:
                    8d:f3:8b:83:ea:99:64:d8:f8:b9:6d:32:ad:6f:2c:
                    be:69:9f:3f:1e:8a:d3:a4:2e:ec:95:c8:f8:a6:a9:
                    c1:4b:b2:96:0e:3d:09:3f:c0:c7:6f:5e:95:58:12:
                    04:e8:92:d3:24:a6:93:f7:98:15:8b:9e:21:34:27:
                    eb:88:5b:47:cd:28:67:5e:66:f5:50:0e:4f:72:f8:
                    5f:00:9d:e8:d3:70:54:88:1c:b2:b4:5e:e4:c4:af:
                    f6:cd:22:01:6a:58:f4:f5:a8:73:1f:b5:51:1e:fc:
                    9d:e8:d9:08:99:67:76:02:1a:b4:98:3d:91:60:e9:
                    64:f0:c7:fd:b0:a2:4a:cc:d8:dc:c9:c8:ae:74:39:
                    8a:48:57:93:ba:bb:d9:11:d3:ea:70:df:e2:e2:b4:
                    fb:b8:e2:a7:82:e7:68:06:61:fe:44:95:06:30:35:
                    c3:85:ee:9b:f3:b1:68:77:02:fd:ec:af:5e:ba:42:
                    19:c7:99:b9:68:35:49:ff:26:8c:fc:d9:3a:d8:ba:
                    c8:51:f5:ab:b1:d3:1e:a7:8e:3f:77:cd:f1:6a:77:
                    a8:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:79:58:48:87:C0:1D:16:BE:9A:A3:5B:A6:38:BF:7E:CC:9A:74:1D
            X509v3 Authority Key Identifier:
                keyid:D5:9C:2B:03:CF:0F:CD:4B:0D:30:05:B3:21:20:43:34:D0:86:69:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/SvtopekQUR7gGrxACyVQ5ZuUFr6Y7sHJBro8zZYe5Ud/0/D59C2B03CF0FCD4B0D3005B321204334D08669AF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D59C2B03CF0FCD4B0D3005B321204334D08669AF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/SvtopekQUR7gGrxACyVQ5ZuUFr6Y7sHJBro8zZYe5Ud/0/3139302e3130392e38382e302f32322d3232203d3e20323634323330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.109.88.0/22

    Signature Algorithm: sha256WithRSAEncryption
         63:84:7f:09:61:f4:9f:13:2c:1f:da:9b:9b:76:35:cf:bf:03:
         dc:59:54:6b:4f:95:1e:4b:2b:8e:d5:29:e0:45:90:ad:1a:ec:
         77:d0:67:79:c9:49:09:e9:04:f2:59:e3:af:ff:ce:e2:87:5a:
         10:51:2d:b3:d7:05:cf:31:56:34:ff:c4:c0:46:9e:88:53:09:
         9a:0f:06:e5:69:98:c7:f4:ba:38:87:bf:f8:93:bc:0b:27:eb:
         ae:cf:80:2b:b1:05:c9:b8:f6:76:3f:11:6a:94:ca:ad:14:62:
         b6:ec:a7:15:4d:48:79:1d:7a:51:a2:57:95:5b:74:c3:b1:e2:
         2e:b0:07:c8:31:fe:b9:01:cb:88:c6:13:b1:37:e0:38:eb:8a:
         7e:fb:3e:45:ac:18:20:f3:2c:ba:d7:8a:2d:05:d7:3a:e1:3a:
         84:23:34:da:43:54:9a:db:73:21:1c:5d:88:72:8f:10:af:22:
         4b:ea:35:20:bb:7a:d9:4e:f2:08:85:fb:e1:bb:dd:d2:dc:2d:
         cc:e8:3b:d1:7c:64:eb:2e:7a:8d:c8:16:12:40:7e:0d:13:fc:
         4c:27:ea:2d:5f:c6:0e:ac:21:cc:f4:8d:aa:12:53:72:75:f0:
         53:44:fb:92:e3:84:2a:b7:0e:ea:8c:6a:e7:0c:9c:2d:f9:9c:
         2e:71:b7:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 17:55:51 2024 by rpki-client on console-fra.rpki-client.org