Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BmoWSGphkUoNrrnBnif5cLaRgmJEEv5cNaubLjpyS2Kn/1/3139302e38392e32312e302f32342d3234203d3e20323730333530.roa
File:                     3139302e38392e32312e302f32342d3234203d3e20323730333530.roa (raw, json)
Hash identifier:          uUDafQqB6k75hUDXRVcfHVygWyABuuJJ/jb/7khwrOI=
Subject key identifier:   F0:73:71:3F:FC:D7:7E:15:6B:0E:B3:42:E5:8A:DE:FC:70:D5:4C:78
Certificate issuer:       /CN=5FEAAC2000A665FC612389853C8BC5F64B6E676E
Certificate serial:       1738E38C76E25D59AC1AAA542B918766933593EF
Authority key identifier: 5F:EA:AC:20:00:A6:65:FC:61:23:89:85:3C:8B:C5:F6:4B:6E:67:6E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FEAAC2000A665FC612389853C8BC5F64B6E676E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BmoWSGphkUoNrrnBnif5cLaRgmJEEv5cNaubLjpyS2Kn/1/3139302e38392e32312e302f32342d3234203d3e20323730333530.roa
Signing time:             Wed 03 Apr 2024 18:30:33 +0000
ROA not before:           Wed 03 Apr 2024 18:25:33 +0000
ROA not after:            Wed 02 Apr 2025 18:30:33 +0000
asID:                     270350
IP address blocks:        190.89.21.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BmoWSGphkUoNrrnBnif5cLaRgmJEEv5cNaubLjpyS2Kn/1/5FEAAC2000A665FC612389853C8BC5F64B6E676E.crl
                          rsync://rpki-repo.registro.br/repo/BmoWSGphkUoNrrnBnif5cLaRgmJEEv5cNaubLjpyS2Kn/1/5FEAAC2000A665FC612389853C8BC5F64B6E676E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FEAAC2000A665FC612389853C8BC5F64B6E676E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:38:e3:8c:76:e2:5d:59:ac:1a:aa:54:2b:91:87:66:93:35:93:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5FEAAC2000A665FC612389853C8BC5F64B6E676E
        Validity
            Not Before: Apr  3 18:25:33 2024 GMT
            Not After : Apr  2 18:30:33 2025 GMT
        Subject: CN=F073713FFCD77E156B0EB342E58ADEFC70D54C78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:87:01:a8:9b:7e:62:db:60:45:08:6e:5c:3a:
                    d5:a2:d5:e6:2a:af:6c:cc:65:68:73:e5:ea:b8:81:
                    1a:15:e4:d1:b8:ed:4b:4d:89:45:65:98:71:7d:97:
                    33:49:e1:9a:8c:25:d7:00:bc:c7:19:6d:27:22:96:
                    04:c1:dd:44:0e:d3:4f:6b:0e:9b:f2:68:9c:fc:4d:
                    07:54:a6:a3:a7:39:c0:29:af:28:9a:a5:f3:0c:3f:
                    f4:fa:ec:33:a6:9e:3c:26:25:6b:2d:cf:0c:b6:2e:
                    27:ef:69:b2:c2:3b:6a:42:54:50:72:ef:f4:c7:dc:
                    f8:ad:b5:a7:2d:37:26:3a:20:35:1b:be:53:45:50:
                    7e:40:b6:4d:19:de:c9:91:a4:3f:d1:8c:de:07:51:
                    9a:e2:df:82:20:31:ec:67:2e:95:0d:44:73:83:f6:
                    7e:4b:35:55:81:6e:a2:f5:c2:07:37:78:70:94:97:
                    e8:2c:02:6a:e8:a0:56:ec:81:5a:a1:57:37:1b:91:
                    11:d4:36:80:d0:74:e2:d7:18:9c:bd:51:8c:24:2a:
                    63:5b:01:9d:4a:da:6a:57:ab:0a:37:c4:65:5d:8b:
                    90:56:66:08:59:42:03:06:af:7d:02:3c:b6:87:4c:
                    9c:48:0d:45:c5:f7:f0:53:21:04:80:60:56:ac:da:
                    fa:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:73:71:3F:FC:D7:7E:15:6B:0E:B3:42:E5:8A:DE:FC:70:D5:4C:78
            X509v3 Authority Key Identifier:
                keyid:5F:EA:AC:20:00:A6:65:FC:61:23:89:85:3C:8B:C5:F6:4B:6E:67:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BmoWSGphkUoNrrnBnif5cLaRgmJEEv5cNaubLjpyS2Kn/1/5FEAAC2000A665FC612389853C8BC5F64B6E676E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FEAAC2000A665FC612389853C8BC5F64B6E676E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BmoWSGphkUoNrrnBnif5cLaRgmJEEv5cNaubLjpyS2Kn/1/3139302e38392e32312e302f32342d3234203d3e20323730333530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.89.21.0/24

    Signature Algorithm: sha256WithRSAEncryption
         16:b2:fb:c7:d7:1d:cd:07:fa:5d:e0:25:79:2f:80:86:d8:34:
         fe:cb:83:25:35:5f:a7:82:20:17:4a:2e:52:fc:77:4d:c4:1e:
         5f:92:57:fc:f6:c3:73:a3:87:50:7b:a1:07:fd:e0:56:f2:c6:
         2f:0f:22:b2:47:7f:5d:7b:67:7e:bb:c7:8b:48:03:c4:36:60:
         87:4f:e7:b6:b4:ff:85:88:90:28:8d:d5:78:bf:1e:8b:b1:0e:
         0d:a8:ba:bc:95:09:31:d3:4a:72:f6:1a:c2:c3:bb:1d:5f:32:
         32:dd:41:c2:39:a6:6f:e9:8d:1c:0e:d3:8f:62:4f:9d:db:ee:
         68:23:4d:7c:60:9e:a6:a1:35:a9:ff:2b:e8:26:a9:d8:98:95:
         c2:32:fa:60:f3:21:e5:45:f6:5f:7a:d0:74:cd:ed:d4:38:1f:
         c6:18:7d:1f:4b:57:17:b8:b2:0b:bf:49:25:5f:6b:29:83:4d:
         fb:0d:49:d3:a0:75:74:ec:a2:b7:b4:8d:29:e8:4c:9f:69:3e:
         34:69:2b:5d:ad:0d:16:fa:11:a7:2a:42:8a:2d:3e:77:a2:61:
         28:9e:13:02:a2:a7:51:30:c0:63:a2:27:14:46:3f:0f:e1:55:
         08:89:b7:0f:50:1b:88:8c:58:47:b9:2b:b5:15:28:23:05:f5:
         de:c6:e0:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 00:05:40 2024 by rpki-client on console-ams.rpki-client.org