Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6NgZYnCg4ZPjTneR4Lt5Y3rL1PcQpPqpZDagsBSG6haB/1/3139302e38392e3234362e302f32342d3234203d3e20323730343133.roa
File:                     3139302e38392e3234362e302f32342d3234203d3e20323730343133.roa (raw, json)
Hash identifier:          5h/BAeN6gy3OHVl0q7+hBugaJPhFV3bbS2+XhMLAGHQ=
Subject key identifier:   EB:8F:E2:D7:B4:BE:42:99:B5:74:90:53:D1:9C:D2:D1:C9:15:08:59
Certificate issuer:       /CN=BE6164348043E6AA537C7ED74D50CC40298757FC
Certificate serial:       02EC2A17E3C6534B770517B0E7F9DE09686AC581
Authority key identifier: BE:61:64:34:80:43:E6:AA:53:7C:7E:D7:4D:50:CC:40:29:87:57:FC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BE6164348043E6AA537C7ED74D50CC40298757FC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6NgZYnCg4ZPjTneR4Lt5Y3rL1PcQpPqpZDagsBSG6haB/1/3139302e38392e3234362e302f32342d3234203d3e20323730343133.roa
Signing time:             Thu 04 Apr 2024 00:25:32 +0000
ROA not before:           Thu 04 Apr 2024 00:20:32 +0000
ROA not after:            Thu 03 Apr 2025 00:25:32 +0000
asID:                     270413
IP address blocks:        190.89.246.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6NgZYnCg4ZPjTneR4Lt5Y3rL1PcQpPqpZDagsBSG6haB/1/BE6164348043E6AA537C7ED74D50CC40298757FC.crl
                          rsync://rpki-repo.registro.br/repo/6NgZYnCg4ZPjTneR4Lt5Y3rL1PcQpPqpZDagsBSG6haB/1/BE6164348043E6AA537C7ED74D50CC40298757FC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BE6164348043E6AA537C7ED74D50CC40298757FC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 20:15:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:ec:2a:17:e3:c6:53:4b:77:05:17:b0:e7:f9:de:09:68:6a:c5:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BE6164348043E6AA537C7ED74D50CC40298757FC
        Validity
            Not Before: Apr  4 00:20:32 2024 GMT
            Not After : Apr  3 00:25:32 2025 GMT
        Subject: CN=EB8FE2D7B4BE4299B5749053D19CD2D1C9150859
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:c7:49:b6:b5:d5:ce:ae:88:a9:fc:8e:04:82:
                    02:3e:f7:25:ec:32:25:90:18:18:bf:ee:42:69:2c:
                    33:4b:c2:5d:d8:2d:f8:e1:ec:8e:cd:72:12:b3:75:
                    7e:ff:e3:ed:91:5c:82:8a:02:65:9c:a3:77:82:6d:
                    2a:75:da:59:89:ff:a8:f8:ca:ce:26:fd:51:e4:a3:
                    b4:33:a6:9f:64:88:80:6a:39:7f:ef:35:ef:e3:62:
                    fc:b8:93:04:c9:cd:8f:3e:5d:7f:4d:f0:99:fb:3b:
                    13:ac:76:2d:52:1c:72:cd:53:c2:07:9e:58:65:83:
                    41:5d:f5:0f:e4:c6:e7:ec:3a:c2:ec:34:50:ff:4c:
                    91:17:36:19:d1:7d:4c:f3:3d:fa:90:6f:6c:9c:74:
                    f0:a0:f8:1d:96:61:c0:45:3e:49:72:f9:f0:96:d7:
                    17:f6:5b:87:6f:52:75:9d:54:74:45:83:48:12:a0:
                    ed:02:47:22:89:45:79:a9:ee:2f:b4:c4:06:ac:de:
                    fd:22:fc:44:bc:55:20:7e:04:78:89:ab:98:03:43:
                    8b:6c:af:da:ac:80:29:17:2e:f6:2b:c9:71:ce:4a:
                    6e:da:2f:a1:6d:5c:11:30:26:75:76:8e:6b:32:e4:
                    31:4d:2e:a4:03:46:67:0c:66:73:45:cf:5b:89:e1:
                    20:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:8F:E2:D7:B4:BE:42:99:B5:74:90:53:D1:9C:D2:D1:C9:15:08:59
            X509v3 Authority Key Identifier:
                keyid:BE:61:64:34:80:43:E6:AA:53:7C:7E:D7:4D:50:CC:40:29:87:57:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6NgZYnCg4ZPjTneR4Lt5Y3rL1PcQpPqpZDagsBSG6haB/1/BE6164348043E6AA537C7ED74D50CC40298757FC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BE6164348043E6AA537C7ED74D50CC40298757FC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6NgZYnCg4ZPjTneR4Lt5Y3rL1PcQpPqpZDagsBSG6haB/1/3139302e38392e3234362e302f32342d3234203d3e20323730343133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.89.246.0/24

    Signature Algorithm: sha256WithRSAEncryption
         42:53:7a:50:00:f8:af:92:3f:c6:6a:8e:0b:46:d8:92:5c:34:
         d2:f4:6f:37:a8:02:db:61:7a:38:1a:89:b2:e6:c0:2a:2f:fb:
         b0:d5:91:c3:66:8e:9a:74:82:21:72:cf:70:29:82:82:35:3d:
         d5:13:5b:3a:f3:b2:e0:23:1d:60:9c:27:74:14:75:04:d9:0a:
         86:6f:a3:73:ed:41:2d:a2:4b:6f:9d:7d:a2:e4:4a:b9:39:64:
         ca:3a:1e:83:08:6d:9c:c0:c1:b0:be:dd:1a:da:00:30:56:01:
         08:44:22:9d:90:48:cc:e9:32:9b:f7:60:2c:5b:6b:e6:89:7d:
         14:e9:64:75:d4:79:0a:18:de:b2:36:e1:e0:59:67:5c:2e:34:
         61:37:8a:cb:3a:d0:ad:ac:b6:4b:2d:6f:b1:90:05:06:47:f6:
         64:5b:77:5d:44:83:c2:da:1c:74:49:85:e3:c7:11:3c:00:91:
         f8:bc:19:a7:22:c7:6f:01:f8:3b:96:08:22:fc:d8:00:9a:72:
         63:65:b4:27:2b:f7:56:1f:b0:9b:e1:17:82:54:20:6e:a7:d8:
         6a:00:e3:0d:ac:9e:e8:a2:59:9d:7d:78:1a:35:03:da:31:a3:
         a6:d3:e8:5b:8d:7b:07:4b:b8:87:86:ef:19:fb:f1:a4:fc:0e:
         8e:4c:4f:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 21:05:07 2024 by rpki-client on console-ams.rpki-client.org