Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6NgZYnCg4ZPjTneR4Lt5Y3rL1PcQpPqpZDagsBSG6haB/1/3139302e38392e3234342e302f32322d3232203d3e20323730343133.roa
File:                     3139302e38392e3234342e302f32322d3232203d3e20323730343133.roa (raw, json)
Hash identifier:          q7cVCSfinacDii4A4SLoM70Gy3t/cDi5CiF+cWS/rdM=
Subject key identifier:   1F:6E:FD:1C:68:4B:3D:D5:D7:00:02:9E:03:0F:13:5A:34:94:71:86
Certificate issuer:       /CN=BE6164348043E6AA537C7ED74D50CC40298757FC
Certificate serial:       35746A96697658DD9E909A30ADD3680F532249BF
Authority key identifier: BE:61:64:34:80:43:E6:AA:53:7C:7E:D7:4D:50:CC:40:29:87:57:FC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BE6164348043E6AA537C7ED74D50CC40298757FC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6NgZYnCg4ZPjTneR4Lt5Y3rL1PcQpPqpZDagsBSG6haB/1/3139302e38392e3234342e302f32322d3232203d3e20323730343133.roa
Signing time:             Fri 19 Jul 2024 15:09:13 +0000
ROA not before:           Fri 19 Jul 2024 15:04:13 +0000
ROA not after:            Fri 18 Jul 2025 15:09:13 +0000
asID:                     270413
IP address blocks:        190.89.244.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6NgZYnCg4ZPjTneR4Lt5Y3rL1PcQpPqpZDagsBSG6haB/1/BE6164348043E6AA537C7ED74D50CC40298757FC.crl
                          rsync://rpki-repo.registro.br/repo/6NgZYnCg4ZPjTneR4Lt5Y3rL1PcQpPqpZDagsBSG6haB/1/BE6164348043E6AA537C7ED74D50CC40298757FC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BE6164348043E6AA537C7ED74D50CC40298757FC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 19:26:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:74:6a:96:69:76:58:dd:9e:90:9a:30:ad:d3:68:0f:53:22:49:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BE6164348043E6AA537C7ED74D50CC40298757FC
        Validity
            Not Before: Jul 19 15:04:13 2024 GMT
            Not After : Jul 18 15:09:13 2025 GMT
        Subject: CN=1F6EFD1C684B3DD5D700029E030F135A34947186
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:b3:6a:d5:1c:c9:12:e2:dc:1f:ad:da:cd:ec:
                    d2:db:75:de:bd:0a:d1:d1:34:a0:e2:44:e2:c9:09:
                    51:56:4e:ce:73:f1:d8:f1:d1:d8:da:71:ce:17:2f:
                    fa:f1:ed:9d:4b:d6:ea:0c:a5:c9:85:bf:2f:35:5b:
                    55:28:25:62:9b:97:bd:5b:5e:83:cc:94:4d:44:2b:
                    5b:46:73:d7:99:6a:cd:e9:61:b4:9d:c2:67:8f:bf:
                    d0:d0:25:c8:cf:c9:2c:48:c3:fa:76:92:80:fc:df:
                    46:9f:b5:a8:af:04:50:d4:cf:77:c8:b7:7e:69:64:
                    20:31:be:c0:19:fe:c1:af:19:18:d5:1e:f5:34:de:
                    4c:b5:8e:17:07:db:bf:c0:ba:21:c5:fa:56:41:e1:
                    5f:3d:4b:e1:2a:28:90:9b:74:b9:18:07:b1:50:38:
                    4e:fe:56:1f:d2:34:aa:7d:8c:bb:46:da:0a:b2:52:
                    35:49:91:c9:bf:66:e1:f1:20:67:5a:d2:45:fd:d0:
                    74:ba:cb:27:f9:eb:2b:2f:83:11:a9:37:b6:65:11:
                    08:5b:97:1e:e9:d6:61:ff:55:05:ae:f9:fe:7b:7a:
                    1f:fc:f9:0c:7e:c1:43:8d:1f:4c:00:58:1b:a4:77:
                    bc:bd:d1:92:8e:f1:c3:aa:fc:83:79:f0:78:5b:83:
                    e2:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:6E:FD:1C:68:4B:3D:D5:D7:00:02:9E:03:0F:13:5A:34:94:71:86
            X509v3 Authority Key Identifier:
                keyid:BE:61:64:34:80:43:E6:AA:53:7C:7E:D7:4D:50:CC:40:29:87:57:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6NgZYnCg4ZPjTneR4Lt5Y3rL1PcQpPqpZDagsBSG6haB/1/BE6164348043E6AA537C7ED74D50CC40298757FC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BE6164348043E6AA537C7ED74D50CC40298757FC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6NgZYnCg4ZPjTneR4Lt5Y3rL1PcQpPqpZDagsBSG6haB/1/3139302e38392e3234342e302f32322d3232203d3e20323730343133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.89.244.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6b:af:03:1b:9d:2a:cf:5a:2a:03:cf:71:6f:58:37:c9:f9:63:
         68:b1:3e:49:65:b0:ef:e6:ae:93:dc:a8:88:06:0f:84:2e:37:
         27:45:bf:ca:69:62:71:4e:96:a9:fe:3f:2f:81:23:0b:6e:a8:
         34:20:d1:d1:d7:e4:8e:3f:6e:3e:7a:36:3e:df:50:f8:a4:70:
         4a:d0:4f:39:b8:0b:2e:f6:02:1e:37:1c:b0:14:bf:90:27:96:
         e4:1a:1a:44:86:bb:fb:f0:65:54:df:a1:1c:61:9c:7d:e1:5f:
         4b:38:88:c5:ee:67:3e:42:60:36:cd:7f:17:9e:b7:30:8a:30:
         2d:51:26:19:9e:85:d1:f4:9e:85:fa:9f:75:55:18:20:b5:45:
         ea:1a:29:2d:5f:e6:88:4a:cf:64:da:04:70:a1:56:eb:b1:b0:
         d0:38:a0:c5:4e:97:5d:46:1c:7a:ae:c4:76:32:67:dd:07:ad:
         e5:40:3f:9a:58:20:56:26:2a:6e:8f:b4:27:12:23:d3:f9:4d:
         f0:b5:e4:3d:19:fd:63:81:0b:7b:0d:62:6a:32:31:cb:6e:83:
         1a:14:98:20:ad:75:87:40:16:52:6a:db:d4:54:59:a4:fd:9c:
         15:14:cf:74:97:63:02:b7:c9:e5:23:69:14:3d:68:0a:86:b5:
         4d:62:bb:62
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUNXRqlml2WN2ekJowrdNoD1MiSb8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkU2MTY0MzQ4MDQzRTZBQTUzN0M3RUQ3NEQ1MENDNDAy
OTg3NTdGQzAeFw0yNDA3MTkxNTA0MTNaFw0yNTA3MTgxNTA5MTNaMDMxMTAvBgNV
BAMTKDFGNkVGRDFDNjg0QjNERDVENzAwMDI5RTAzMEYxMzVBMzQ5NDcxODYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbs2rVHMkS4twfrdrN7NLbdd69
CtHRNKDiROLJCVFWTs5z8djx0djacc4XL/rx7Z1L1uoMpcmFvy81W1UoJWKbl71b
XoPMlE1EK1tGc9eZas3pYbSdwmePv9DQJcjPySxIw/p2koD830aftaivBFDUz3fI
t35pZCAxvsAZ/sGvGRjVHvU03ky1jhcH27/AuiHF+lZB4V89S+EqKJCbdLkYB7FQ
OE7+Vh/SNKp9jLtG2gqyUjVJkcm/ZuHxIGda0kX90HS6yyf56ysvgxGpN7ZlEQhb
lx7p1mH/VQWu+f57eh/8+Qx+wUONH0wAWBukd7y90ZKO8cOq/IN58Hhbg+IBAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUH279HGhLPdXXAAKeAw8TWjSUcYYwHwYDVR0j
BBgwFoAUvmFkNIBD5qpTfH7XTVDMQCmHV/wwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNk5nWlluQ2c0WlBqVG5lUjRMdDVZM3JMMVBjUXBQcXBaRGFnc0JTRzZo
YUIvMS9CRTYxNjQzNDgwNDNFNkFBNTM3QzdFRDc0RDUwQ0M0MDI5ODc1N0ZDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0JFNjE2NDM0ODA0M0U2QUE1
MzdDN0VENzRENTBDQzQwMjk4NzU3RkMuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzZOZ1pZbkNnNFpQalRuZVI0THQ1WTNyTDFQY1FwUHFwWkRhZ3NCU0c2aGFCLzEv
MzEzOTMwMmUzODM5MmUzMjM0MzQyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzMjM3
MzAzNDMxMzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAK+WfQwDQYJKoZIhvcNAQELBQADggEBAGuvAxud
Ks9aKgPPcW9YN8n5Y2ixPkllsO/mrpPcqIgGD4QuNydFv8ppYnFOlqn+Py+BIwtu
qDQg0dHX5I4/bj56Nj7fUPikcErQTzm4Cy72Ah43HLAUv5AnluQaGkSGu/vwZVTf
oRxhnH3hX0s4iMXuZz5CYDbNfxeetzCKMC1RJhmehdH0noX6n3VVGCC1ReoaKS1f
5ohKz2TaBHChVuuxsNA4oMVOl11GHHquxHYyZ90HreVAP5pYIFYmKm6PtCcSI9P5
TfC15D0Z/WOBC3sNYmoyMctugxoUmCCtdYdAFlJq29RUWaT9nBUUz3SXYwK3yeUj
aRQ9aAqGtU1iu2I=
-----END CERTIFICATE-----
Generated at Fri Nov 22 19:44:18 2024 by rpki-client on console-ams.rpki-client.org