Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6NgZYnCg4ZPjTneR4Lt5Y3rL1PcQpPqpZDagsBSG6haB/1/3139302e38392e3234342e302f32342d3234203d3e20323730343133.roa
File:                     3139302e38392e3234342e302f32342d3234203d3e20323730343133.roa (raw, json)
Hash identifier:          uc5V1L1jpgndhNWhNiWlfrnOAc5vePd2CYa4LAOCyrA=
Subject key identifier:   A6:68:0C:BC:50:7E:98:EB:50:FA:42:51:0D:CE:76:F6:02:60:89:A3
Certificate issuer:       /CN=BE6164348043E6AA537C7ED74D50CC40298757FC
Certificate serial:       576DAC8E1A7726B4660F477B5B332209A7A2E9B5
Authority key identifier: BE:61:64:34:80:43:E6:AA:53:7C:7E:D7:4D:50:CC:40:29:87:57:FC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BE6164348043E6AA537C7ED74D50CC40298757FC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6NgZYnCg4ZPjTneR4Lt5Y3rL1PcQpPqpZDagsBSG6haB/1/3139302e38392e3234342e302f32342d3234203d3e20323730343133.roa
Signing time:             Thu 06 Mar 2025 00:49:47 +0000
ROA not before:           Thu 06 Mar 2025 00:44:47 +0000
ROA not after:            Thu 05 Mar 2026 00:49:47 +0000
asID:                     270413
IP address blocks:        190.89.244.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6NgZYnCg4ZPjTneR4Lt5Y3rL1PcQpPqpZDagsBSG6haB/1/BE6164348043E6AA537C7ED74D50CC40298757FC.crl
                          rsync://rpki-repo.registro.br/repo/6NgZYnCg4ZPjTneR4Lt5Y3rL1PcQpPqpZDagsBSG6haB/1/BE6164348043E6AA537C7ED74D50CC40298757FC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BE6164348043E6AA537C7ED74D50CC40298757FC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 19 Apr 2025 01:07:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:6d:ac:8e:1a:77:26:b4:66:0f:47:7b:5b:33:22:09:a7:a2:e9:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BE6164348043E6AA537C7ED74D50CC40298757FC
        Validity
            Not Before: Mar  6 00:44:47 2025 GMT
            Not After : Mar  5 00:49:47 2026 GMT
        Subject: CN=A6680CBC507E98EB50FA42510DCE76F6026089A3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:11:83:c9:1e:85:6c:f0:a1:2f:15:b9:ae:2a:
                    91:05:a8:b1:e1:d2:0d:7b:62:8b:09:1f:e4:49:30:
                    85:6e:9a:5c:7b:c7:2e:2b:e3:01:b7:c9:6d:b0:6c:
                    29:1c:60:e3:96:14:bb:2f:27:96:76:1e:ce:e9:f6:
                    25:a9:c6:84:dc:39:64:03:2d:64:bd:33:e8:80:d8:
                    a8:ee:a3:55:23:70:8f:9f:ce:39:f8:29:4a:2a:11:
                    35:80:21:1e:2f:2f:b2:bc:68:3c:8e:fb:6d:28:d2:
                    32:1c:46:39:ca:85:a9:79:2f:4a:26:bd:02:19:91:
                    26:98:aa:b0:a7:3a:5c:b5:53:da:ef:e8:8f:6d:bd:
                    1e:d8:ad:4f:5e:3d:f7:42:d4:48:d7:ed:67:33:85:
                    63:37:9b:fb:b7:b3:66:a8:44:ee:4e:59:97:5b:bc:
                    34:9b:08:b1:db:80:bd:dd:90:37:4d:70:f9:a6:fa:
                    ba:88:f1:ee:36:a9:f3:f6:17:35:7e:53:36:57:8e:
                    21:d9:a5:21:6a:01:3e:08:5b:ae:5e:f5:fd:c1:2f:
                    e9:18:0a:08:18:16:00:f4:cd:d9:a9:1e:41:ec:de:
                    dd:fe:e4:6d:87:38:c2:83:5c:db:49:95:9d:88:b4:
                    f6:d3:e3:ef:0e:33:7b:7b:8c:98:ab:df:5f:80:37:
                    40:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:68:0C:BC:50:7E:98:EB:50:FA:42:51:0D:CE:76:F6:02:60:89:A3
            X509v3 Authority Key Identifier:
                keyid:BE:61:64:34:80:43:E6:AA:53:7C:7E:D7:4D:50:CC:40:29:87:57:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6NgZYnCg4ZPjTneR4Lt5Y3rL1PcQpPqpZDagsBSG6haB/1/BE6164348043E6AA537C7ED74D50CC40298757FC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BE6164348043E6AA537C7ED74D50CC40298757FC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6NgZYnCg4ZPjTneR4Lt5Y3rL1PcQpPqpZDagsBSG6haB/1/3139302e38392e3234342e302f32342d3234203d3e20323730343133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.89.244.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1a:21:c4:9c:d7:97:a3:67:83:e8:63:ab:82:5f:ac:b7:a4:c9:
         fe:19:ad:4c:5d:e4:72:5a:8b:42:48:03:18:74:d6:54:29:83:
         ae:06:1f:bd:48:75:9a:23:ec:cb:e6:e1:85:b5:18:ae:29:7e:
         66:10:f5:5a:e7:34:fd:fd:41:2d:49:ea:88:f1:08:ef:17:b1:
         52:18:21:ce:d2:2b:4e:6d:11:18:1c:19:ae:e7:d6:22:8a:b6:
         ce:85:ae:cb:6f:8c:1b:be:40:64:29:f0:ac:e3:99:49:92:13:
         b9:bc:78:f4:e3:cf:8d:25:bd:37:0f:d7:fc:9f:52:a1:d8:31:
         ff:40:04:46:6d:21:f7:20:89:6a:b6:4a:b5:0a:e5:7b:ad:9a:
         35:2f:f2:25:32:7d:cb:c5:d9:50:f3:83:a7:26:39:4b:fb:b7:
         28:9d:3e:30:82:66:ba:8d:7f:b4:48:6f:2a:25:37:00:de:97:
         aa:77:86:d4:8a:7b:1d:8e:05:54:e0:fe:c1:d1:ad:bd:0f:f1:
         7f:75:df:98:c3:bd:74:51:0f:18:5c:d7:e2:86:f9:2c:28:49:
         e1:e5:bf:17:00:df:bf:a6:64:c5:db:00:9c:2a:7b:e1:23:21:
         64:8d:e9:7b:77:fd:07:0d:76:bc:b4:13:fa:5d:c3:b7:7b:79:
         af:50:cc:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 08:21:52 2025 by rpki-client