Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2t3bGZXz8mJDrDdmZ6NDc2xZDsbjfgErhrjWe7Hv8oQM/1/3139302e38392e3134392e302f32342d3234203d3e20323730333730.roa
File:                     3139302e38392e3134392e302f32342d3234203d3e20323730333730.roa (raw, json)
Hash identifier:          irKqCazmi+0inG7XJWnfSoipVUKZFXrrdK3MUDAn/Dk=
Subject key identifier:   8F:7C:47:2E:AF:E5:61:BA:4C:3E:B3:5C:82:8D:EB:80:03:35:F2:39
Certificate issuer:       /CN=C53FFF72C11B3649D5A047FD42D3DD312B1842CF
Certificate serial:       7DEED13C6B74E89934F5D5351B430A873D60E05F
Authority key identifier: C5:3F:FF:72:C1:1B:36:49:D5:A0:47:FD:42:D3:DD:31:2B:18:42:CF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C53FFF72C11B3649D5A047FD42D3DD312B1842CF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2t3bGZXz8mJDrDdmZ6NDc2xZDsbjfgErhrjWe7Hv8oQM/1/3139302e38392e3134392e302f32342d3234203d3e20323730333730.roa
Signing time:             Thu 04 Apr 2024 09:31:52 +0000
ROA not before:           Thu 04 Apr 2024 09:26:52 +0000
ROA not after:            Thu 03 Apr 2025 09:31:52 +0000
asID:                     270370
IP address blocks:        190.89.149.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2t3bGZXz8mJDrDdmZ6NDc2xZDsbjfgErhrjWe7Hv8oQM/1/C53FFF72C11B3649D5A047FD42D3DD312B1842CF.crl
                          rsync://rpki-repo.registro.br/repo/2t3bGZXz8mJDrDdmZ6NDc2xZDsbjfgErhrjWe7Hv8oQM/1/C53FFF72C11B3649D5A047FD42D3DD312B1842CF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C53FFF72C11B3649D5A047FD42D3DD312B1842CF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 23:26:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:ee:d1:3c:6b:74:e8:99:34:f5:d5:35:1b:43:0a:87:3d:60:e0:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C53FFF72C11B3649D5A047FD42D3DD312B1842CF
        Validity
            Not Before: Apr  4 09:26:52 2024 GMT
            Not After : Apr  3 09:31:52 2025 GMT
        Subject: CN=8F7C472EAFE561BA4C3EB35C828DEB800335F239
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:23:ae:c7:a8:fc:f6:5d:79:4f:19:79:d9:0d:
                    d3:61:af:4e:70:50:66:28:3e:85:34:17:9d:cb:44:
                    e2:8f:27:25:bd:62:8b:23:34:6c:ea:09:45:27:0b:
                    2a:66:8d:80:b9:23:a1:42:9b:a3:cb:09:5c:15:2e:
                    98:35:49:09:96:66:f3:de:ed:32:44:82:7e:73:81:
                    33:3e:35:d6:67:fc:34:17:5a:45:b7:9e:ef:bd:75:
                    6c:4c:53:a0:51:1a:37:9e:e1:15:8d:fe:26:54:e3:
                    a6:32:34:e8:30:c1:fd:88:ad:d3:6f:f5:11:db:cc:
                    d8:cc:30:cb:9f:3d:1a:88:e1:d5:c6:22:eb:9d:b3:
                    30:b1:91:66:09:ff:f7:fa:61:9a:29:36:42:57:a3:
                    68:f2:77:b2:8f:4f:54:2b:12:d2:0d:9f:2e:ed:e8:
                    1e:7b:43:71:74:24:b4:62:a9:73:40:7b:8c:d6:18:
                    24:d5:f1:fd:40:38:97:5d:af:2f:5b:fe:e3:90:11:
                    30:c9:f2:d7:17:6c:28:71:7c:a4:30:e7:a1:c3:5d:
                    17:25:31:1a:ca:03:e5:ad:58:9f:96:2e:61:fd:ae:
                    23:63:51:9e:55:07:2f:a5:54:13:4a:57:66:ba:94:
                    24:db:79:94:17:51:18:c7:0d:3c:1b:cc:96:78:9e:
                    64:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:7C:47:2E:AF:E5:61:BA:4C:3E:B3:5C:82:8D:EB:80:03:35:F2:39
            X509v3 Authority Key Identifier:
                keyid:C5:3F:FF:72:C1:1B:36:49:D5:A0:47:FD:42:D3:DD:31:2B:18:42:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2t3bGZXz8mJDrDdmZ6NDc2xZDsbjfgErhrjWe7Hv8oQM/1/C53FFF72C11B3649D5A047FD42D3DD312B1842CF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C53FFF72C11B3649D5A047FD42D3DD312B1842CF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2t3bGZXz8mJDrDdmZ6NDc2xZDsbjfgErhrjWe7Hv8oQM/1/3139302e38392e3134392e302f32342d3234203d3e20323730333730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.89.149.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5a:8a:51:ac:76:4c:d5:1f:47:ea:69:4d:cd:4e:95:75:6b:b2:
         f1:a9:77:c7:54:d0:ce:1b:0b:be:7d:2b:f5:06:b2:85:4e:d5:
         89:3b:11:f4:04:85:30:12:62:2d:8d:b9:8b:aa:d7:06:47:19:
         98:11:43:29:37:3e:4a:ae:c6:43:28:75:e5:6e:53:7e:a2:e6:
         c3:0d:d5:2e:97:52:8e:05:9a:54:0a:1b:48:a2:e7:72:95:80:
         f6:87:33:ff:80:4b:ae:24:15:76:f5:f4:45:5d:96:a7:aa:c0:
         4e:c8:44:1d:f8:dd:9c:ae:b3:46:c6:6c:df:15:ad:a5:c7:eb:
         61:7f:ba:44:93:61:ff:97:60:ff:69:96:7f:e2:0a:0f:6e:20:
         9a:c5:f4:2b:90:6a:4e:93:24:93:84:ed:ed:37:20:b8:46:81:
         81:3c:12:21:f1:20:6a:72:e3:d6:27:a3:57:0a:79:e9:54:fa:
         67:d5:ec:9f:95:ab:9c:24:b6:ae:48:f9:9f:cd:21:2e:26:53:
         14:ae:c2:d0:5e:8e:f7:1f:7c:2e:94:86:f3:e9:16:b7:79:90:
         ff:cf:aa:a0:66:80:7b:10:d2:10:0a:69:07:03:15:9a:43:65:
         54:13:d1:9d:02:c1:75:e7:fa:53:c2:78:c8:22:e0:11:56:66:
         f4:8d:48:cb
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUfe7RPGt06Jk09dU1G0MKhz1g4F8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzUzRkZGNzJDMTFCMzY0OUQ1QTA0N0ZENDJEM0REMzEy
QjE4NDJDRjAeFw0yNDA0MDQwOTI2NTJaFw0yNTA0MDMwOTMxNTJaMDMxMTAvBgNV
BAMTKDhGN0M0NzJFQUZFNTYxQkE0QzNFQjM1QzgyOERFQjgwMDMzNUYyMzkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFI67HqPz2XXlPGXnZDdNhr05w
UGYoPoU0F53LROKPJyW9YosjNGzqCUUnCypmjYC5I6FCm6PLCVwVLpg1SQmWZvPe
7TJEgn5zgTM+NdZn/DQXWkW3nu+9dWxMU6BRGjee4RWN/iZU46YyNOgwwf2IrdNv
9RHbzNjMMMufPRqI4dXGIuudszCxkWYJ//f6YZopNkJXo2jyd7KPT1QrEtINny7t
6B57Q3F0JLRiqXNAe4zWGCTV8f1AOJddry9b/uOQETDJ8tcXbChxfKQw56HDXRcl
MRrKA+WtWJ+WLmH9riNjUZ5VBy+lVBNKV2a6lCTbeZQXURjHDTwbzJZ4nmTpAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUj3xHLq/lYbpMPrNcgo3rgAM18jkwHwYDVR0j
BBgwFoAUxT//csEbNknVoEf9QtPdMSsYQs8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMnQzYkdaWHo4bUpEckRkbVo2TkRjMnhaRHNiamZnRXJocmpXZTdIdjhv
UU0vMS9DNTNGRkY3MkMxMUIzNjQ5RDVBMDQ3RkQ0MkQzREQzMTJCMTg0MkNGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0M1M0ZGRjcyQzExQjM2NDlE
NUEwNDdGRDQyRDNERDMxMkIxODQyQ0YuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJ0M2JHWlh6OG1KRHJEZG1aNk5EYzJ4WkRzYmpmZ0VyaHJqV2U3SHY4b1FNLzEv
MzEzOTMwMmUzODM5MmUzMTM0MzkyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM3
MzAzMzM3MzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAC+WZUwDQYJKoZIhvcNAQELBQADggEBAFqKUax2
TNUfR+ppTc1OlXVrsvGpd8dU0M4bC759K/UGsoVO1Yk7EfQEhTASYi2NuYuq1wZH
GZgRQyk3PkquxkModeVuU36i5sMN1S6XUo4FmlQKG0ii53KVgPaHM/+AS64kFXb1
9EVdlqeqwE7IRB343Zyus0bGbN8VraXH62F/ukSTYf+XYP9pln/iCg9uIJrF9CuQ
ak6TJJOE7e03ILhGgYE8EiHxIGpy49Yno1cKeelU+mfV7J+Vq5wktq5I+Z/NIS4m
UxSuwtBejvcffC6UhvPpFrd5kP/PqqBmgHsQ0hAKaQcDFZpDZVQT0Z0CwXXn+lPC
eMgi4BFWZvSNSMs=
-----END CERTIFICATE-----
Generated at Fri Jun 28 22:39:31 2024 by rpki-client on console-fra.rpki-client.org