Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5ne5MqkHMk81YgaZzVcfN3kJr3AVUnZTmbnCp3iWdUKA/1/3138392e35312e34302e302f32322d3234203d3e20323730373235.roa
File:                     3138392e35312e34302e302f32322d3234203d3e20323730373235.roa (raw, json)
Hash identifier:          v1t6ujo1EYnlpYcelajV/33SDEWmGkI8Q+ySyEwajh8=
Subject key identifier:   DC:08:4E:FC:39:51:DC:E2:8B:59:B8:52:BE:57:A7:06:59:78:B0:EF
Certificate issuer:       /CN=BB76E74F01759656B3EF7322060749744C02C0FE
Certificate serial:       2736604B6ADE4E5200AA6947AD7D74D19BEA8A18
Authority key identifier: BB:76:E7:4F:01:75:96:56:B3:EF:73:22:06:07:49:74:4C:02:C0:FE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BB76E74F01759656B3EF7322060749744C02C0FE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5ne5MqkHMk81YgaZzVcfN3kJr3AVUnZTmbnCp3iWdUKA/1/3138392e35312e34302e302f32322d3234203d3e20323730373235.roa
Signing time:             Wed 03 Apr 2024 18:30:17 +0000
ROA not before:           Wed 03 Apr 2024 18:25:17 +0000
ROA not after:            Wed 02 Apr 2025 18:30:17 +0000
asID:                     270725
IP address blocks:        189.51.40.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5ne5MqkHMk81YgaZzVcfN3kJr3AVUnZTmbnCp3iWdUKA/1/BB76E74F01759656B3EF7322060749744C02C0FE.crl
                          rsync://rpki-repo.registro.br/repo/5ne5MqkHMk81YgaZzVcfN3kJr3AVUnZTmbnCp3iWdUKA/1/BB76E74F01759656B3EF7322060749744C02C0FE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BB76E74F01759656B3EF7322060749744C02C0FE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:36:60:4b:6a:de:4e:52:00:aa:69:47:ad:7d:74:d1:9b:ea:8a:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BB76E74F01759656B3EF7322060749744C02C0FE
        Validity
            Not Before: Apr  3 18:25:17 2024 GMT
            Not After : Apr  2 18:30:17 2025 GMT
        Subject: CN=DC084EFC3951DCE28B59B852BE57A7065978B0EF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:b9:06:a3:97:5a:a0:ff:7f:5d:ba:9f:aa:93:
                    3b:ae:a2:f6:44:2e:10:ed:c6:69:2f:22:76:e5:d1:
                    54:11:b7:f4:98:6f:f3:81:a4:e1:d2:52:4f:38:d1:
                    eb:12:e2:52:48:d7:23:67:f7:7c:fb:33:f9:90:45:
                    36:5e:bc:6d:ef:67:7e:5a:c5:48:ee:af:69:42:58:
                    f1:6a:3e:97:6a:03:c4:bb:ca:16:5e:0a:17:0c:85:
                    8c:85:36:73:cb:45:8c:47:26:56:88:72:ca:28:b2:
                    85:c2:85:d4:7a:b6:16:a2:7b:25:e5:3a:c3:58:8d:
                    16:0b:92:a9:43:09:4f:c2:73:3b:91:6d:b7:79:ae:
                    80:54:46:67:c2:60:45:a7:39:78:53:b6:ef:6a:dc:
                    56:32:ca:af:01:6d:b8:8b:73:e0:ec:27:39:c1:9e:
                    f3:a9:e3:2a:a4:d2:c8:71:59:42:7a:ba:35:f6:a4:
                    27:a8:39:88:9e:bf:e7:3f:52:60:e4:b4:a8:3f:ad:
                    fa:ae:28:39:ec:6f:75:77:c5:d3:f2:41:04:58:1e:
                    83:55:24:ad:76:2b:bf:df:b2:a9:e6:ff:20:36:0e:
                    b8:17:ba:94:09:0d:ea:87:7c:01:63:83:a5:1d:e3:
                    26:f3:89:b8:a5:69:2e:fe:f7:1d:2b:d3:75:0a:d4:
                    78:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:08:4E:FC:39:51:DC:E2:8B:59:B8:52:BE:57:A7:06:59:78:B0:EF
            X509v3 Authority Key Identifier:
                keyid:BB:76:E7:4F:01:75:96:56:B3:EF:73:22:06:07:49:74:4C:02:C0:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5ne5MqkHMk81YgaZzVcfN3kJr3AVUnZTmbnCp3iWdUKA/1/BB76E74F01759656B3EF7322060749744C02C0FE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BB76E74F01759656B3EF7322060749744C02C0FE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5ne5MqkHMk81YgaZzVcfN3kJr3AVUnZTmbnCp3iWdUKA/1/3138392e35312e34302e302f32322d3234203d3e20323730373235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.51.40.0/22

    Signature Algorithm: sha256WithRSAEncryption
         40:59:10:5f:15:4f:ea:ce:d4:b3:c2:3a:e2:4e:6d:ff:7d:8e:
         bf:cb:6e:d5:70:b7:35:d5:e9:c7:7d:67:ad:4d:7d:11:26:22:
         f8:6a:1f:25:57:fb:6d:ea:6a:3f:2a:3f:25:8f:9e:a6:78:21:
         4d:bc:b5:03:50:0a:ee:99:ed:04:04:b3:7b:8f:4a:67:d5:ea:
         5e:12:40:b0:40:ed:f6:c5:80:58:d5:f0:96:5b:e5:37:43:96:
         64:3d:73:e7:e7:12:8d:65:ad:b0:35:46:0f:17:32:91:05:f5:
         c8:d1:bf:7f:5f:69:f6:2a:ee:bb:99:eb:2c:13:e0:1e:18:d0:
         89:c2:44:ea:3b:ac:77:0d:39:47:82:02:04:b4:8b:99:4b:fe:
         03:c2:27:39:d2:18:9c:23:3c:71:78:2b:a5:93:ae:ef:a4:6d:
         57:62:20:2c:01:df:6b:b7:3c:45:46:7e:be:25:ca:98:01:91:
         9f:6b:e5:76:35:69:59:b6:f8:38:07:86:99:9e:dc:dd:43:a7:
         ba:f2:37:4c:91:45:c7:08:c1:a6:33:63:d8:f6:bd:4e:aa:cb:
         e9:bf:64:30:56:d2:a9:f5:a0:f9:fc:15:e2:50:39:3b:8a:52:
         50:d3:bb:29:e1:9f:cc:27:53:f5:87:c6:72:09:36:d2:c4:ee:
         26:06:b0:a5
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUJzZgS2reTlIAqmlHrX100ZvqihgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkI3NkU3NEYwMTc1OTY1NkIzRUY3MzIyMDYwNzQ5NzQ0
QzAyQzBGRTAeFw0yNDA0MDMxODI1MTdaFw0yNTA0MDIxODMwMTdaMDMxMTAvBgNV
BAMTKERDMDg0RUZDMzk1MURDRTI4QjU5Qjg1MkJFNTdBNzA2NTk3OEIwRUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnuQajl1qg/39dup+qkzuuovZE
LhDtxmkvInbl0VQRt/SYb/OBpOHSUk840esS4lJI1yNn93z7M/mQRTZevG3vZ35a
xUjur2lCWPFqPpdqA8S7yhZeChcMhYyFNnPLRYxHJlaIcsoosoXChdR6thaieyXl
OsNYjRYLkqlDCU/CczuRbbd5roBURmfCYEWnOXhTtu9q3FYyyq8BbbiLc+DsJznB
nvOp4yqk0shxWUJ6ujX2pCeoOYiev+c/UmDktKg/rfquKDnsb3V3xdPyQQRYHoNV
JK12K7/fsqnm/yA2DrgXupQJDeqHfAFjg6Ud4ybzibilaS7+9x0r03UK1Hh9AgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQU3AhO/DlR3OKLWbhSvlenBll4sO8wHwYDVR0j
BBgwFoAUu3bnTwF1llaz73MiBgdJdEwCwP4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNW5lNU1xa0hNazgxWWdhWnpWY2ZOM2tKcjNBVlVuWlRtYm5DcDNpV2RV
S0EvMS9CQjc2RTc0RjAxNzU5NjU2QjNFRjczMjIwNjA3NDk3NDRDMDJDMEZFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0JCNzZFNzRGMDE3NTk2NTZC
M0VGNzMyMjA2MDc0OTc0NEMwMkMwRkUuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzVuZTVNcWtITWs4MVlnYVp6VmNmTjNrSnIzQVZVblpUbWJuQ3AzaVdkVUtBLzEv
MzEzODM5MmUzNTMxMmUzNDMwMmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNzMw
MzczMjM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCvTMoMA0GCSqGSIb3DQEBCwUAA4IBAQBAWRBfFU/q
ztSzwjriTm3/fY6/y27VcLc11enHfWetTX0RJiL4ah8lV/tt6mo/Kj8lj56meCFN
vLUDUArume0EBLN7j0pn1epeEkCwQO32xYBY1fCWW+U3Q5ZkPXPn5xKNZa2wNUYP
FzKRBfXI0b9/X2n2Ku67messE+AeGNCJwkTqO6x3DTlHggIEtIuZS/4Dwic50hic
IzxxeCulk67vpG1XYiAsAd9rtzxFRn6+JcqYAZGfa+V2NWlZtvg4B4aZntzdQ6e6
8jdMkUXHCMGmM2PY9r1Oqsvpv2QwVtKp9aD5/BXiUDk7ilJQ07sp4Z/MJ1P1h8Zy
CTbSxO4mBrCl
-----END CERTIFICATE-----
Generated at Sat Nov 23 01:25:32 2024 by rpki-client on console-ams.rpki-client.org