Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BmoWSGphkUoNrrnBnif5cLaRgmJEEv5cNaubLjpyS2Kn/1/3139302e38392e32302e302f32342d3234203d3e20323730333530.roa
File:                     3139302e38392e32302e302f32342d3234203d3e20323730333530.roa (raw, json)
Hash identifier:          ylM4RMXgUSXJhzwPPndcETpQJdWFGCgesZNK84FWEQc=
Subject key identifier:   16:F4:F8:B8:45:E8:6A:2C:B7:B1:97:26:B3:96:6B:DC:B4:3B:DD:9F
Certificate issuer:       /CN=5FEAAC2000A665FC612389853C8BC5F64B6E676E
Certificate serial:       6A313C894854F6EA2BD2A4313A0D9AFD023C3164
Authority key identifier: 5F:EA:AC:20:00:A6:65:FC:61:23:89:85:3C:8B:C5:F6:4B:6E:67:6E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FEAAC2000A665FC612389853C8BC5F64B6E676E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BmoWSGphkUoNrrnBnif5cLaRgmJEEv5cNaubLjpyS2Kn/1/3139302e38392e32302e302f32342d3234203d3e20323730333530.roa
Signing time:             Wed 03 Apr 2024 18:30:34 +0000
ROA not before:           Wed 03 Apr 2024 18:25:34 +0000
ROA not after:            Wed 02 Apr 2025 18:30:34 +0000
asID:                     270350
IP address blocks:        190.89.20.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BmoWSGphkUoNrrnBnif5cLaRgmJEEv5cNaubLjpyS2Kn/1/5FEAAC2000A665FC612389853C8BC5F64B6E676E.crl
                          rsync://rpki-repo.registro.br/repo/BmoWSGphkUoNrrnBnif5cLaRgmJEEv5cNaubLjpyS2Kn/1/5FEAAC2000A665FC612389853C8BC5F64B6E676E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FEAAC2000A665FC612389853C8BC5F64B6E676E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 01:05:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:31:3c:89:48:54:f6:ea:2b:d2:a4:31:3a:0d:9a:fd:02:3c:31:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5FEAAC2000A665FC612389853C8BC5F64B6E676E
        Validity
            Not Before: Apr  3 18:25:34 2024 GMT
            Not After : Apr  2 18:30:34 2025 GMT
        Subject: CN=16F4F8B845E86A2CB7B19726B3966BDCB43BDD9F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:ac:af:aa:da:e3:3d:6e:91:62:af:91:da:a1:
                    6d:b6:5a:7e:b9:6e:ae:56:a2:3f:01:b7:fb:b7:52:
                    a9:d7:2b:98:3a:47:37:17:21:6a:ff:89:a3:3b:b4:
                    ea:09:d3:35:75:3a:50:7c:42:13:f3:65:fc:44:be:
                    39:e8:5b:aa:88:e4:cb:6d:4f:4a:40:6f:bc:ad:5f:
                    ec:0f:5d:9c:04:55:a9:5d:07:10:f3:6c:27:c1:a0:
                    44:1b:a9:24:ad:2a:60:96:76:1a:c0:15:6c:03:8d:
                    ba:b0:88:30:32:38:54:73:88:f7:ee:bd:23:d8:bb:
                    24:aa:34:55:ec:1c:bd:17:15:c8:b7:08:31:92:0c:
                    96:30:a7:bd:a2:97:79:53:8d:5a:26:1d:45:03:39:
                    17:b4:02:22:3a:9f:f0:45:4a:06:6c:c6:2a:42:6a:
                    d4:c4:2b:b4:16:4b:ef:9d:a2:35:8c:88:c6:24:e1:
                    d9:6b:26:1f:9c:7f:0a:e8:9e:d5:46:fe:57:30:fd:
                    53:ea:ad:b1:90:57:6a:ba:37:47:ec:04:96:5c:64:
                    d1:b5:86:9d:e7:4f:fb:e7:26:fb:31:67:9e:d6:91:
                    86:fd:2c:47:47:b6:dc:aa:5f:da:2b:ba:3f:48:77:
                    f0:1a:9f:65:5e:45:fe:7e:ec:4e:78:95:d2:20:89:
                    3e:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:F4:F8:B8:45:E8:6A:2C:B7:B1:97:26:B3:96:6B:DC:B4:3B:DD:9F
            X509v3 Authority Key Identifier:
                keyid:5F:EA:AC:20:00:A6:65:FC:61:23:89:85:3C:8B:C5:F6:4B:6E:67:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BmoWSGphkUoNrrnBnif5cLaRgmJEEv5cNaubLjpyS2Kn/1/5FEAAC2000A665FC612389853C8BC5F64B6E676E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FEAAC2000A665FC612389853C8BC5F64B6E676E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BmoWSGphkUoNrrnBnif5cLaRgmJEEv5cNaubLjpyS2Kn/1/3139302e38392e32302e302f32342d3234203d3e20323730333530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.89.20.0/24

    Signature Algorithm: sha256WithRSAEncryption
         14:fc:15:31:28:60:19:a5:9e:cc:53:4b:96:1f:23:9d:91:7b:
         ae:f6:a5:79:03:48:09:9c:ec:58:ab:d3:63:41:cf:99:d8:01:
         c4:9e:ec:22:75:f6:17:11:b9:89:06:85:a5:4f:ad:34:8b:e8:
         fe:8e:6f:81:59:31:a5:45:65:00:18:68:c7:89:91:07:e1:1e:
         be:4b:b2:73:6d:27:f9:f2:68:c0:56:e5:c9:3f:5a:9d:b3:f8:
         2b:8f:92:52:a9:a5:6f:19:9d:a0:09:60:3b:48:6a:71:8b:fb:
         c6:26:79:0d:e4:78:ea:f2:c0:2a:b8:27:73:ef:5b:04:3b:b8:
         bf:37:91:6c:8f:ad:2b:45:38:33:e5:31:45:8a:32:7a:ce:eb:
         a4:69:20:3a:83:77:8a:cb:c9:17:fa:30:53:4e:10:79:5d:93:
         32:cd:d2:1f:07:f3:f4:cb:60:94:12:62:cd:f0:a3:7d:22:d1:
         e8:d4:d5:d1:9f:4e:40:c8:cc:92:44:94:ee:7a:6b:1f:f0:d7:
         ab:62:c3:17:d7:29:f6:e4:a3:7d:ab:ef:a6:f0:63:ad:a8:84:
         e5:a6:a9:b9:1b:02:82:08:f3:0e:b7:78:11:7f:67:dd:4b:28:
         d6:9e:4c:1f:c2:b6:bd:04:21:d4:c1:08:e4:a1:59:a5:b8:d9:
         ae:51:04:f4
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUajE8iUhU9uor0qQxOg2a/QI8MWQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUZFQUFDMjAwMEE2NjVGQzYxMjM4OTg1M0M4QkM1RjY0
QjZFNjc2RTAeFw0yNDA0MDMxODI1MzRaFw0yNTA0MDIxODMwMzRaMDMxMTAvBgNV
BAMTKDE2RjRGOEI4NDVFODZBMkNCN0IxOTcyNkIzOTY2QkRDQjQzQkREOUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfrK+q2uM9bpFir5HaoW22Wn65
bq5Woj8Bt/u3UqnXK5g6RzcXIWr/iaM7tOoJ0zV1OlB8QhPzZfxEvjnoW6qI5Mtt
T0pAb7ytX+wPXZwEValdBxDzbCfBoEQbqSStKmCWdhrAFWwDjbqwiDAyOFRziPfu
vSPYuySqNFXsHL0XFci3CDGSDJYwp72il3lTjVomHUUDORe0AiI6n/BFSgZsxipC
atTEK7QWS++dojWMiMYk4dlrJh+cfwrontVG/lcw/VPqrbGQV2q6N0fsBJZcZNG1
hp3nT/vnJvsxZ57WkYb9LEdHttyqX9oruj9Id/Aan2VeRf5+7E54ldIgiT4hAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUFvT4uEXoaiy3sZcms5Zr3LQ73Z8wHwYDVR0j
BBgwFoAUX+qsIACmZfxhI4mFPIvF9ktuZ24wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQm1vV1NHcGhrVW9OcnJuQm5pZjVjTGFSZ21KRUV2NWNOYXViTGpweVMy
S24vMS81RkVBQUMyMDAwQTY2NUZDNjEyMzg5ODUzQzhCQzVGNjRCNkU2NzZFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzVGRUFBQzIwMDBBNjY1RkM2
MTIzODk4NTNDOEJDNUY2NEI2RTY3NkUuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0Jtb1dTR3Boa1VvTnJybkJuaWY1Y0xhUmdtSkVFdjVjTmF1YkxqcHlTMktuLzEv
MzEzOTMwMmUzODM5MmUzMjMwMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNzMw
MzMzNTMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAvlkUMA0GCSqGSIb3DQEBCwUAA4IBAQAU/BUxKGAZ
pZ7MU0uWHyOdkXuu9qV5A0gJnOxYq9NjQc+Z2AHEnuwidfYXEbmJBoWlT600i+j+
jm+BWTGlRWUAGGjHiZEH4R6+S7JzbSf58mjAVuXJP1qds/grj5JSqaVvGZ2gCWA7
SGpxi/vGJnkN5Hjq8sAquCdz71sEO7i/N5Fsj60rRTgz5TFFijJ6zuukaSA6g3eK
y8kX+jBTThB5XZMyzdIfB/P0y2CUEmLN8KN9ItHo1NXRn05AyMySRJTuemsf8Ner
YsMX1yn25KN9q++m8GOtqITlpqm5GwKCCPMOt3gRf2fdSyjWnkwfwra9BCHUwQjk
oVmluNmuUQT0
-----END CERTIFICATE-----
Generated at Fri Nov 22 23:37:34 2024 by rpki-client on console-fra.rpki-client.org