Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/SvtopekQUR7gGrxACyVQ5ZuUFr6Y7sHJBro8zZYe5Ud/0/3139302e3130392e39302e302f32342d3234203d3e20323634323330.roa
File:                     3139302e3130392e39302e302f32342d3234203d3e20323634323330.roa (raw, json)
Hash identifier:          TUDC7EHndOnW9lrOm3BiDCTQCbUqryDJMMODACp2IA8=
Subject key identifier:   26:84:81:30:BE:73:3D:C6:6E:65:BC:9D:34:BE:81:1D:B7:E9:97:10
Certificate issuer:       /CN=D59C2B03CF0FCD4B0D3005B321204334D08669AF
Certificate serial:       62CDF737F5FD09E3A6B10B421E7E1671A9AEAF23
Authority key identifier: D5:9C:2B:03:CF:0F:CD:4B:0D:30:05:B3:21:20:43:34:D0:86:69:AF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D59C2B03CF0FCD4B0D3005B321204334D08669AF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/SvtopekQUR7gGrxACyVQ5ZuUFr6Y7sHJBro8zZYe5Ud/0/3139302e3130392e39302e302f32342d3234203d3e20323634323330.roa
Signing time:             Mon 28 Oct 2024 21:20:39 +0000
ROA not before:           Mon 28 Oct 2024 21:15:39 +0000
ROA not after:            Mon 27 Oct 2025 21:20:39 +0000
asID:                     264230
IP address blocks:        190.109.90.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/SvtopekQUR7gGrxACyVQ5ZuUFr6Y7sHJBro8zZYe5Ud/0/D59C2B03CF0FCD4B0D3005B321204334D08669AF.crl
                          rsync://rpki-repo.registro.br/repo/SvtopekQUR7gGrxACyVQ5ZuUFr6Y7sHJBro8zZYe5Ud/0/D59C2B03CF0FCD4B0D3005B321204334D08669AF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D59C2B03CF0FCD4B0D3005B321204334D08669AF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 22 Nov 2024 23:40:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:cd:f7:37:f5:fd:09:e3:a6:b1:0b:42:1e:7e:16:71:a9:ae:af:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D59C2B03CF0FCD4B0D3005B321204334D08669AF
        Validity
            Not Before: Oct 28 21:15:39 2024 GMT
            Not After : Oct 27 21:20:39 2025 GMT
        Subject: CN=26848130BE733DC66E65BC9D34BE811DB7E99710
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:15:8e:75:ad:46:4f:1e:24:52:2c:04:78:ea:
                    46:7f:25:35:ef:75:95:9b:cc:ef:0b:0b:ef:47:90:
                    ef:3c:c4:3a:75:d1:41:23:eb:fe:80:00:c3:34:aa:
                    11:0d:b5:29:96:19:92:5f:51:df:09:25:33:b0:ca:
                    63:c8:56:3d:16:95:66:08:80:e4:19:65:69:a1:34:
                    f2:29:91:a4:d6:a5:6a:85:54:3a:03:02:25:8b:5c:
                    ad:a6:97:37:5f:dd:99:dd:c8:22:a6:10:7e:a0:75:
                    d1:ce:c9:94:23:a2:4a:17:a3:d8:b5:28:59:7f:aa:
                    ef:73:2c:23:20:3b:ec:3c:68:ee:9f:c1:9f:01:b6:
                    ce:69:b9:d2:e4:a0:22:4b:9a:8d:2f:df:1d:9e:06:
                    1e:64:e7:7f:ac:82:84:33:b3:cd:a2:63:bb:50:67:
                    be:80:9f:50:c8:d8:b4:e7:18:2c:30:e2:b6:4d:97:
                    ba:5b:39:b3:3b:6f:b0:19:94:14:2f:cc:ba:ae:7a:
                    57:86:45:b7:71:b7:96:17:f0:64:09:0c:a0:ef:30:
                    ce:24:5f:1a:8d:ec:7f:34:e2:6e:3c:79:5c:0b:7c:
                    85:5a:59:47:e4:39:f6:cf:58:ce:6d:ff:e9:f6:10:
                    91:35:b2:ca:7b:ec:94:f4:a7:ef:c3:97:61:34:75:
                    99:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:84:81:30:BE:73:3D:C6:6E:65:BC:9D:34:BE:81:1D:B7:E9:97:10
            X509v3 Authority Key Identifier:
                keyid:D5:9C:2B:03:CF:0F:CD:4B:0D:30:05:B3:21:20:43:34:D0:86:69:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/SvtopekQUR7gGrxACyVQ5ZuUFr6Y7sHJBro8zZYe5Ud/0/D59C2B03CF0FCD4B0D3005B321204334D08669AF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D59C2B03CF0FCD4B0D3005B321204334D08669AF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/SvtopekQUR7gGrxACyVQ5ZuUFr6Y7sHJBro8zZYe5Ud/0/3139302e3130392e39302e302f32342d3234203d3e20323634323330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.109.90.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6a:a4:2d:2c:13:09:88:09:9a:e7:b3:7e:c2:28:0e:c4:9c:f4:
         2c:43:36:71:48:cb:ec:88:14:0f:02:40:39:06:b6:91:76:49:
         a1:73:03:64:cf:39:37:8e:2b:d8:44:fa:37:f3:e8:8c:53:6f:
         40:a0:36:0d:ec:c3:16:14:be:0f:dc:cb:fc:70:56:38:9b:39:
         1f:d5:10:0b:7e:05:87:e6:ff:93:71:8e:c2:85:68:3f:d9:ef:
         cf:06:76:76:6a:20:eb:7c:f2:dd:ec:70:32:a8:b1:75:da:54:
         62:47:46:ab:62:fe:5c:b4:89:4a:9c:ae:af:9e:b9:6b:47:30:
         a0:4e:c2:43:5e:77:6d:c5:7f:fa:88:3e:e2:8f:65:1c:13:2d:
         08:85:8f:05:4e:26:3e:27:d9:21:77:68:99:88:f4:6a:b9:e9:
         b1:a4:da:83:e5:56:6e:f2:06:0e:01:06:7a:f1:f3:38:b1:58:
         10:9b:48:92:21:b4:93:7d:21:61:b3:c5:99:9f:da:e5:33:01:
         8d:6e:1b:71:b5:74:41:c7:11:e0:10:6c:ed:c8:d7:7a:91:2d:
         76:f6:fc:b4:3d:70:69:90:06:49:32:04:e9:a7:e0:69:2c:57:
         a5:5b:0f:3c:ed:f0:59:87:78:29:7f:90:95:5e:75:2b:75:9d:
         6d:16:1b:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:33:22 2024 by rpki-client on console-ams.rpki-client.org