Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/SvtopekQUR7gGrxACyVQ5ZuUFr6Y7sHJBro8zZYe5Ud/1/3139302e3130392e38382e302f32322d3234203d3e20323633393131.roa
File:                     3139302e3130392e38382e302f32322d3234203d3e20323633393131.roa (raw, json)
Hash identifier:          /l4/gjQhyWKvyU7Zr2k7n9rb7OdAG80E2ptJPb33fhw=
Subject key identifier:   86:03:F1:B5:9C:DA:A0:A7:D4:07:E4:E9:88:1B:D4:D5:1E:DD:24:DE
Certificate issuer:       /CN=C71FCA85C3B8D76FDF2AFBC9FD1852358AC556BB
Certificate serial:       08C4407937DDA6A2D32A59E500555AE703C9E6EC
Authority key identifier: C7:1F:CA:85:C3:B8:D7:6F:DF:2A:FB:C9:FD:18:52:35:8A:C5:56:BB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C71FCA85C3B8D76FDF2AFBC9FD1852358AC556BB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/SvtopekQUR7gGrxACyVQ5ZuUFr6Y7sHJBro8zZYe5Ud/1/3139302e3130392e38382e302f32322d3234203d3e20323633393131.roa
Signing time:             Thu 04 Apr 2024 12:21:37 +0000
ROA not before:           Thu 04 Apr 2024 12:16:37 +0000
ROA not after:            Thu 03 Apr 2025 12:21:37 +0000
asID:                     263911
IP address blocks:        190.109.88.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/SvtopekQUR7gGrxACyVQ5ZuUFr6Y7sHJBro8zZYe5Ud/1/C71FCA85C3B8D76FDF2AFBC9FD1852358AC556BB.crl
                          rsync://rpki-repo.registro.br/repo/SvtopekQUR7gGrxACyVQ5ZuUFr6Y7sHJBro8zZYe5Ud/1/C71FCA85C3B8D76FDF2AFBC9FD1852358AC556BB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C71FCA85C3B8D76FDF2AFBC9FD1852358AC556BB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 00:21:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:c4:40:79:37:dd:a6:a2:d3:2a:59:e5:00:55:5a:e7:03:c9:e6:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C71FCA85C3B8D76FDF2AFBC9FD1852358AC556BB
        Validity
            Not Before: Apr  4 12:16:37 2024 GMT
            Not After : Apr  3 12:21:37 2025 GMT
        Subject: CN=8603F1B59CDAA0A7D407E4E9881BD4D51EDD24DE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:59:66:2b:48:cf:d6:31:f0:6d:77:76:c7:be:
                    8a:4a:17:43:f4:5d:35:72:00:80:9a:eb:d1:5e:fd:
                    dd:e3:ab:b6:cf:af:af:09:52:83:7e:59:5d:49:92:
                    3a:73:a7:c7:76:26:08:2e:7f:3b:d9:f5:a4:9e:aa:
                    9e:20:ac:59:0f:bf:c9:88:b3:76:66:18:50:b3:b4:
                    df:da:23:3d:9a:db:e5:34:dc:02:c5:c6:fa:3d:f9:
                    57:74:4c:e2:ac:45:54:2f:6b:d1:9b:77:81:71:c1:
                    1e:6b:31:9e:b4:33:1b:67:37:c5:36:03:e6:6c:bd:
                    08:58:79:a3:f0:44:9c:82:86:46:fc:05:f9:04:94:
                    4c:64:2d:ef:95:bf:09:a4:4f:31:d0:4d:f3:7c:8f:
                    07:91:9f:f0:4e:79:e1:4f:29:ec:9a:0c:2e:42:8f:
                    9a:d5:17:98:35:c7:7c:06:3c:ea:07:c9:5a:65:aa:
                    79:3d:9b:74:21:c2:98:28:75:0e:2f:74:08:5c:cc:
                    89:6c:1a:ba:3e:7d:2d:4f:7b:a0:47:e6:c7:fa:2e:
                    2d:6d:a8:1d:92:8a:72:af:8c:32:d9:3c:6b:9d:85:
                    c7:d4:05:94:da:c4:68:fb:b7:94:af:f2:47:b9:de:
                    1f:39:3b:c3:da:b9:10:76:ce:72:cd:33:eb:a0:fe:
                    ce:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:03:F1:B5:9C:DA:A0:A7:D4:07:E4:E9:88:1B:D4:D5:1E:DD:24:DE
            X509v3 Authority Key Identifier:
                keyid:C7:1F:CA:85:C3:B8:D7:6F:DF:2A:FB:C9:FD:18:52:35:8A:C5:56:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/SvtopekQUR7gGrxACyVQ5ZuUFr6Y7sHJBro8zZYe5Ud/1/C71FCA85C3B8D76FDF2AFBC9FD1852358AC556BB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C71FCA85C3B8D76FDF2AFBC9FD1852358AC556BB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/SvtopekQUR7gGrxACyVQ5ZuUFr6Y7sHJBro8zZYe5Ud/1/3139302e3130392e38382e302f32322d3234203d3e20323633393131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.109.88.0/22

    Signature Algorithm: sha256WithRSAEncryption
         68:d3:30:e7:41:f6:27:23:43:af:d7:f7:ba:68:77:26:d1:73:
         b0:e6:f8:87:28:20:a7:55:a3:8c:0e:eb:57:b2:bf:89:7c:6c:
         b7:ca:d3:0b:d4:4b:69:4a:c0:7b:25:4f:36:aa:b1:4e:5f:00:
         b6:3d:21:a4:ec:1a:ae:2f:65:51:9d:ca:69:b8:df:17:85:51:
         02:06:38:35:fd:17:a6:af:07:8d:89:cd:82:40:ec:12:aa:6e:
         ce:5d:32:5c:f1:5b:bc:6d:36:ad:de:7a:cb:08:6f:cc:27:82:
         fc:db:a6:02:82:4e:ce:ad:c5:e7:c0:b1:02:84:07:f3:6f:82:
         1f:12:69:ad:6e:02:32:62:54:22:6c:1a:4b:b6:10:99:95:a0:
         57:8f:6a:7f:6c:a8:0e:9f:f6:dc:97:66:37:b8:ce:f1:8b:68:
         55:b8:0c:f7:46:bd:98:6c:aa:c6:62:53:ed:9d:36:1d:08:0f:
         6d:51:99:da:c4:97:55:e2:9e:bc:1c:54:5e:7a:8e:11:f8:06:
         f0:0b:9a:20:f3:0a:9f:30:1e:50:cf:88:cf:ba:41:a5:cb:b6:
         ae:be:8e:10:43:c0:53:72:66:3f:00:86:72:72:46:2c:ec:56:
         cc:2c:63:53:7c:25:fa:fa:e1:36:e2:2a:20:6b:76:23:2f:8f:
         ad:1a:e2:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 01:06:20 2024 by rpki-client on console-ams.rpki-client.org