Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BmoWSGphkUoNrrnBnif5cLaRgmJEEv5cNaubLjpyS2Kn/1/3139302e38392e32302e302f32342d3234203d3e20323730333530.roa
File:                     3139302e38392e32302e302f32342d3234203d3e20323730333530.roa (raw, json)
Hash identifier:          JdTCc5KwXqvOMH3Q2qFN+/IlO+DWRe6vvUUgK89R2Is=
Subject key identifier:   BF:70:76:6A:68:2F:AD:F6:1A:AF:B4:FC:94:2D:DA:4F:8A:3F:94:5A
Certificate issuer:       /CN=5FEAAC2000A665FC612389853C8BC5F64B6E676E
Certificate serial:       6BC1C77D82029CC371899091008396F7E3663839
Authority key identifier: 5F:EA:AC:20:00:A6:65:FC:61:23:89:85:3C:8B:C5:F6:4B:6E:67:6E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FEAAC2000A665FC612389853C8BC5F64B6E676E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BmoWSGphkUoNrrnBnif5cLaRgmJEEv5cNaubLjpyS2Kn/1/3139302e38392e32302e302f32342d3234203d3e20323730333530.roa
Signing time:             Wed 05 Mar 2025 19:00:00 +0000
ROA not before:           Wed 05 Mar 2025 18:55:00 +0000
ROA not after:            Wed 04 Mar 2026 19:00:00 +0000
asID:                     270350
IP address blocks:        190.89.20.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BmoWSGphkUoNrrnBnif5cLaRgmJEEv5cNaubLjpyS2Kn/1/5FEAAC2000A665FC612389853C8BC5F64B6E676E.crl
                          rsync://rpki-repo.registro.br/repo/BmoWSGphkUoNrrnBnif5cLaRgmJEEv5cNaubLjpyS2Kn/1/5FEAAC2000A665FC612389853C8BC5F64B6E676E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FEAAC2000A665FC612389853C8BC5F64B6E676E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 21:39:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:c1:c7:7d:82:02:9c:c3:71:89:90:91:00:83:96:f7:e3:66:38:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5FEAAC2000A665FC612389853C8BC5F64B6E676E
        Validity
            Not Before: Mar  5 18:55:00 2025 GMT
            Not After : Mar  4 19:00:00 2026 GMT
        Subject: CN=BF70766A682FADF61AAFB4FC942DDA4F8A3F945A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:ec:50:7a:27:80:e3:e3:78:1c:b8:d2:b5:8e:
                    17:35:db:05:e9:e2:02:f2:4d:ab:43:e7:ba:a5:16:
                    42:ca:74:5a:b3:ff:4c:e7:b4:58:49:80:0b:5a:fc:
                    71:e1:c4:e0:f2:a6:af:7f:ff:8f:7a:48:b4:2f:51:
                    35:92:06:cd:67:4d:6a:77:4b:7f:39:77:b1:40:ec:
                    1c:ac:b5:fb:b8:2a:ae:a3:e9:40:95:a7:f7:77:fc:
                    1c:bb:7f:f7:a8:91:5a:dd:7c:21:4c:40:ab:21:d2:
                    1a:67:fe:b4:a9:35:de:f5:78:cb:54:3e:98:28:fc:
                    69:88:17:95:36:c2:36:a3:d4:4b:ac:81:f5:83:2d:
                    bf:86:d3:8f:40:1e:70:6c:8d:96:df:4d:29:af:7c:
                    b5:35:4d:6d:0c:32:98:f2:d8:e4:00:8b:f2:80:73:
                    69:17:76:01:84:36:d9:a9:33:e5:80:46:46:2c:69:
                    56:e1:dd:ba:34:d8:5f:73:64:3a:d8:3a:4b:29:1c:
                    06:9a:9a:7b:c1:74:96:88:6e:4e:3e:3c:05:a2:7c:
                    59:9d:d9:40:01:61:37:74:23:a6:72:a6:46:db:c7:
                    39:ee:28:dc:a2:ff:aa:2b:52:70:2a:79:38:a5:54:
                    53:4a:8a:bb:4d:f4:1f:3b:c3:d6:62:4c:35:4d:77:
                    98:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:70:76:6A:68:2F:AD:F6:1A:AF:B4:FC:94:2D:DA:4F:8A:3F:94:5A
            X509v3 Authority Key Identifier:
                keyid:5F:EA:AC:20:00:A6:65:FC:61:23:89:85:3C:8B:C5:F6:4B:6E:67:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BmoWSGphkUoNrrnBnif5cLaRgmJEEv5cNaubLjpyS2Kn/1/5FEAAC2000A665FC612389853C8BC5F64B6E676E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FEAAC2000A665FC612389853C8BC5F64B6E676E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BmoWSGphkUoNrrnBnif5cLaRgmJEEv5cNaubLjpyS2Kn/1/3139302e38392e32302e302f32342d3234203d3e20323730333530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.89.20.0/24

    Signature Algorithm: sha256WithRSAEncryption
         14:4e:1d:30:41:bb:6c:8f:49:b4:5a:34:75:16:e9:d7:32:c4:
         1c:8d:77:33:61:a4:f9:81:e9:2c:8e:85:ac:78:d8:2d:75:2d:
         22:af:2e:1e:4f:79:07:0b:f9:96:ac:98:44:14:a3:f3:38:5a:
         06:f9:d4:0c:99:a6:20:f4:34:35:38:41:f9:56:83:9e:23:d2:
         dc:de:13:98:4c:ec:bf:32:99:a1:f3:28:0b:5f:ef:cf:e0:b0:
         c7:76:6b:75:c1:0a:1e:6b:3d:4f:60:8f:a7:70:a4:52:06:c4:
         8f:23:bf:46:3b:f3:a8:f4:c0:31:41:9a:2d:d5:66:94:6a:c1:
         f9:34:e3:65:e5:60:df:df:e4:8f:96:a3:4f:7a:e2:a1:26:57:
         5f:6e:87:8d:ec:d2:2a:c3:3b:a3:56:18:2a:ea:48:d1:60:20:
         c8:95:38:62:19:ba:39:56:fc:44:33:0d:39:5a:b7:54:1f:0a:
         2d:b7:65:e8:fb:05:f6:de:76:c2:83:09:5a:4b:01:82:e0:d8:
         3c:a9:20:de:4a:33:78:cd:7a:60:3f:60:b3:60:87:86:53:a5:
         49:cd:fd:37:4a:98:eb:64:6e:d1:9a:ff:c9:a0:0c:18:a2:3b:
         70:d9:31:56:d2:e2:a9:0d:5b:47:ad:77:b6:02:f8:12:86:25:
         17:8f:b6:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 06:08:06 2025 by rpki-client