Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8Tv8E1WdRdmtU5chgLgbC4N2inR2BmUjd4AoCn5P2pQ9/0/3139302e38392e35322e302f32322d3234203d3e20323730333536.roa
File:                     3139302e38392e35322e302f32322d3234203d3e20323730333536.roa (raw, json)
Hash identifier:          Hu71frMfIk2E/7lLBSse1G9vDUklCXfI6T9P1EHmaOw=
Subject key identifier:   58:9E:1D:A9:AA:28:51:8E:5A:75:F3:BA:C8:78:67:BD:A6:1D:A8:FE
Certificate issuer:       /CN=DCEDD606E5DF583760013C3A374BF806DB1E2D84
Certificate serial:       5AA1C62F9AD147FE8AED16FC85E972EDF340B988
Authority key identifier: DC:ED:D6:06:E5:DF:58:37:60:01:3C:3A:37:4B:F8:06:DB:1E:2D:84
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DCEDD606E5DF583760013C3A374BF806DB1E2D84.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8Tv8E1WdRdmtU5chgLgbC4N2inR2BmUjd4AoCn5P2pQ9/0/3139302e38392e35322e302f32322d3234203d3e20323730333536.roa
Signing time:             Tue 29 Oct 2024 17:09:55 +0000
ROA not before:           Tue 29 Oct 2024 17:04:55 +0000
ROA not after:            Tue 28 Oct 2025 17:09:55 +0000
asID:                     270356
IP address blocks:        190.89.52.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8Tv8E1WdRdmtU5chgLgbC4N2inR2BmUjd4AoCn5P2pQ9/0/DCEDD606E5DF583760013C3A374BF806DB1E2D84.crl
                          rsync://rpki-repo.registro.br/repo/8Tv8E1WdRdmtU5chgLgbC4N2inR2BmUjd4AoCn5P2pQ9/0/DCEDD606E5DF583760013C3A374BF806DB1E2D84.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DCEDD606E5DF583760013C3A374BF806DB1E2D84.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:a1:c6:2f:9a:d1:47:fe:8a:ed:16:fc:85:e9:72:ed:f3:40:b9:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DCEDD606E5DF583760013C3A374BF806DB1E2D84
        Validity
            Not Before: Oct 29 17:04:55 2024 GMT
            Not After : Oct 28 17:09:55 2025 GMT
        Subject: CN=589E1DA9AA28518E5A75F3BAC87867BDA61DA8FE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:51:60:99:8a:b5:46:18:19:e7:90:d3:c6:de:
                    c3:f6:15:c6:57:b1:77:c9:34:d8:5f:55:68:05:a6:
                    4d:82:e5:4c:a4:81:eb:4f:69:4d:c2:c8:62:5b:ef:
                    28:d8:86:2f:5b:c3:17:73:83:48:92:f4:e0:3d:8c:
                    56:15:46:63:aa:8d:e5:83:f1:db:37:f8:87:c0:02:
                    59:a2:d3:e9:09:ea:ef:91:88:97:de:8b:30:59:8e:
                    51:1a:b5:fd:e8:0f:ea:25:90:66:38:a9:ef:0c:a9:
                    f3:b5:8b:40:e0:24:e6:a8:95:f2:4f:e5:9f:3c:94:
                    bc:a9:cf:2f:34:70:b0:6f:72:bb:87:3c:d1:6a:12:
                    45:ef:d2:53:0e:a9:65:4c:d7:4b:15:e5:f8:b5:4a:
                    2f:16:0d:47:44:e9:37:28:81:72:49:11:a5:8a:97:
                    1e:cf:fe:1a:82:bb:c1:6d:78:ec:20:51:04:62:88:
                    bb:29:4e:d2:eb:fe:c4:37:1a:d8:10:e4:f6:c1:cf:
                    d3:f6:f6:00:77:9a:70:8c:26:41:98:66:39:d7:f5:
                    ff:94:5b:ec:98:de:d4:6e:13:ff:71:cc:ee:db:8c:
                    2a:33:7f:81:23:0a:1d:e0:84:fb:0d:7d:7f:56:76:
                    71:79:cf:dd:9e:ca:9d:7c:f2:7e:f8:f1:cd:fb:71:
                    93:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:9E:1D:A9:AA:28:51:8E:5A:75:F3:BA:C8:78:67:BD:A6:1D:A8:FE
            X509v3 Authority Key Identifier:
                keyid:DC:ED:D6:06:E5:DF:58:37:60:01:3C:3A:37:4B:F8:06:DB:1E:2D:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8Tv8E1WdRdmtU5chgLgbC4N2inR2BmUjd4AoCn5P2pQ9/0/DCEDD606E5DF583760013C3A374BF806DB1E2D84.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DCEDD606E5DF583760013C3A374BF806DB1E2D84.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8Tv8E1WdRdmtU5chgLgbC4N2inR2BmUjd4AoCn5P2pQ9/0/3139302e38392e35322e302f32322d3234203d3e20323730333536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.89.52.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b8:7b:02:e2:57:2e:43:6a:c5:0e:9e:a5:c0:84:93:ba:92:cd:
         db:fe:2c:99:7a:aa:6e:26:18:21:71:e9:bc:b6:f2:50:46:11:
         57:93:7a:47:78:98:7a:aa:fb:fb:0b:ed:96:90:31:94:48:46:
         d7:e9:8f:a2:83:75:00:ea:9d:cd:1f:a8:22:42:4a:5b:79:5f:
         5c:de:07:25:3a:2f:34:fe:d2:ef:94:a3:d9:80:2e:fa:07:27:
         b6:ae:2d:d8:8f:7b:ec:de:20:57:71:87:da:cf:8b:03:7a:7d:
         22:69:26:fd:2c:9e:df:79:ab:47:ca:c6:07:69:f6:f7:de:26:
         c7:26:76:75:1d:8b:64:12:cd:fa:af:9f:c3:68:bb:4e:a6:45:
         83:60:2b:c9:78:ad:7a:76:59:c3:43:0f:46:ba:4a:d0:a9:0a:
         2b:2f:22:49:79:58:76:4e:ca:1a:fd:31:12:e6:98:a5:58:a8:
         04:40:cf:1b:53:a8:34:f4:4d:4a:65:cd:da:5c:e3:92:05:43:
         ff:d5:37:8c:00:75:e6:5e:43:fb:f4:61:95:b8:6e:d6:6b:c5:
         df:07:25:68:2d:47:c4:f2:ff:f9:f9:71:91:ba:52:1b:c7:cf:
         34:65:b0:4c:e5:ee:64:e7:6f:2d:a2:3d:3c:97:f3:ad:85:41:
         b4:2d:df:fa
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUWqHGL5rRR/6K7Rb8hely7fNAuYgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRENFREQ2MDZFNURGNTgzNzYwMDEzQzNBMzc0QkY4MDZE
QjFFMkQ4NDAeFw0yNDEwMjkxNzA0NTVaFw0yNTEwMjgxNzA5NTVaMDMxMTAvBgNV
BAMTKDU4OUUxREE5QUEyODUxOEU1QTc1RjNCQUM4Nzg2N0JEQTYxREE4RkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3UWCZirVGGBnnkNPG3sP2FcZX
sXfJNNhfVWgFpk2C5UykgetPaU3CyGJb7yjYhi9bwxdzg0iS9OA9jFYVRmOqjeWD
8ds3+IfAAlmi0+kJ6u+RiJfeizBZjlEatf3oD+olkGY4qe8MqfO1i0DgJOaolfJP
5Z88lLypzy80cLBvcruHPNFqEkXv0lMOqWVM10sV5fi1Si8WDUdE6TcogXJJEaWK
lx7P/hqCu8FteOwgUQRiiLspTtLr/sQ3GtgQ5PbBz9P29gB3mnCMJkGYZjnX9f+U
W+yY3tRuE/9xzO7bjCozf4EjCh3ghPsNfX9WdnF5z92eyp188n748c37cZOHAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUWJ4dqaooUY5adfO6yHhnvaYdqP4wHwYDVR0j
BBgwFoAU3O3WBuXfWDdgATw6N0v4BtseLYQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOFR2OEUxV2RSZG10VTVjaGdMZ2JDNE4yaW5SMkJtVWpkNEFvQ241UDJw
UTkvMC9EQ0VERDYwNkU1REY1ODM3NjAwMTNDM0EzNzRCRjgwNkRCMUUyRDg0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0RDRURENjA2RTVERjU4Mzc2
MDAxM0MzQTM3NEJGODA2REIxRTJEODQuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhUdjhFMVdkUmRtdFU1Y2hnTGdiQzROMmluUjJCbVVqZDRBb0NuNVAycFE5LzAv
MzEzOTMwMmUzODM5MmUzNTMyMmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNzMw
MzMzNTM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCvlk0MA0GCSqGSIb3DQEBCwUAA4IBAQC4ewLiVy5D
asUOnqXAhJO6ks3b/iyZeqpuJhghcem8tvJQRhFXk3pHeJh6qvv7C+2WkDGUSEbX
6Y+ig3UA6p3NH6giQkpbeV9c3gclOi80/tLvlKPZgC76Bye2ri3Yj3vs3iBXcYfa
z4sDen0iaSb9LJ7featHysYHafb33ibHJnZ1HYtkEs36r5/DaLtOpkWDYCvJeK16
dlnDQw9GukrQqQorLyJJeVh2Tsoa/TES5pilWKgEQM8bU6g09E1KZc3aXOOSBUP/
1TeMAHXmXkP79GGVuG7Wa8XfByVoLUfE8v/5+XGRulIbx880ZbBM5e5k528toj08
l/OthUG0Ld/6
-----END CERTIFICATE-----
Generated at Sat Nov 23 14:44:54 2024 by rpki-client on console-ams.rpki-client.org