Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BmoWSGphkUoNrrnBnif5cLaRgmJEEv5cNaubLjpyS2Kn/1/3139302e38392e32322e302f32342d3234203d3e20323730333530.roa
File:                     3139302e38392e32322e302f32342d3234203d3e20323730333530.roa (raw, json)
Hash identifier:          hAtSeujbn/O4JZVgxvgbg7IRJX86Wm5R850fFD39O3U=
Subject key identifier:   50:D4:DB:BA:B6:C4:5D:6C:D3:A6:76:8F:AD:80:AC:5F:EF:DD:73:E6
Certificate issuer:       /CN=5FEAAC2000A665FC612389853C8BC5F64B6E676E
Certificate serial:       7235DD08004645E8603BF7F04BAF820E906C6E4A
Authority key identifier: 5F:EA:AC:20:00:A6:65:FC:61:23:89:85:3C:8B:C5:F6:4B:6E:67:6E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FEAAC2000A665FC612389853C8BC5F64B6E676E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BmoWSGphkUoNrrnBnif5cLaRgmJEEv5cNaubLjpyS2Kn/1/3139302e38392e32322e302f32342d3234203d3e20323730333530.roa
Signing time:             Wed 05 Mar 2025 19:00:00 +0000
ROA not before:           Wed 05 Mar 2025 18:55:00 +0000
ROA not after:            Wed 04 Mar 2026 19:00:00 +0000
asID:                     270350
IP address blocks:        190.89.22.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BmoWSGphkUoNrrnBnif5cLaRgmJEEv5cNaubLjpyS2Kn/1/5FEAAC2000A665FC612389853C8BC5F64B6E676E.crl
                          rsync://rpki-repo.registro.br/repo/BmoWSGphkUoNrrnBnif5cLaRgmJEEv5cNaubLjpyS2Kn/1/5FEAAC2000A665FC612389853C8BC5F64B6E676E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FEAAC2000A665FC612389853C8BC5F64B6E676E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 21:39:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:35:dd:08:00:46:45:e8:60:3b:f7:f0:4b:af:82:0e:90:6c:6e:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5FEAAC2000A665FC612389853C8BC5F64B6E676E
        Validity
            Not Before: Mar  5 18:55:00 2025 GMT
            Not After : Mar  4 19:00:00 2026 GMT
        Subject: CN=50D4DBBAB6C45D6CD3A6768FAD80AC5FEFDD73E6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:a8:9d:8f:d8:f6:39:cb:ce:98:27:a6:31:48:
                    18:8e:d5:7c:48:6e:87:5d:80:10:54:c8:af:29:3f:
                    ca:0c:d2:d7:ae:b2:29:99:67:b9:cb:e6:af:59:8d:
                    2b:6b:82:85:5c:a8:aa:bd:46:04:7f:44:57:17:11:
                    e2:d7:55:24:15:2b:9a:79:bf:61:81:0b:fb:52:36:
                    c2:f7:0a:aa:7b:6f:87:4f:81:c7:7d:23:ef:9b:06:
                    20:3a:8b:99:4d:a5:f5:a0:e7:5d:90:de:82:b0:60:
                    8a:36:3a:4c:41:6c:33:5d:4e:af:33:ee:6e:51:6a:
                    4d:2a:c6:6f:77:6d:1f:0c:b7:8e:fb:d4:d4:75:4f:
                    60:b1:30:52:f2:5a:32:d7:ba:07:9c:40:43:c0:6d:
                    93:0a:30:22:e1:ed:6d:c3:14:7a:f4:9d:3c:af:fe:
                    44:22:5d:21:93:8c:e1:17:06:3b:9d:fb:81:6e:42:
                    3e:62:8b:84:eb:09:77:59:ec:08:18:d5:ce:c8:c4:
                    1f:c9:e2:fa:14:e3:70:48:bd:2d:cb:cf:cb:ff:2f:
                    5e:ea:c1:14:ef:68:a0:eb:85:0c:e9:db:89:af:18:
                    bd:9e:96:de:99:2d:5e:cb:17:08:ae:ad:84:15:17:
                    9d:37:58:17:9d:37:17:bd:45:9a:9e:0c:5f:ca:4d:
                    af:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:D4:DB:BA:B6:C4:5D:6C:D3:A6:76:8F:AD:80:AC:5F:EF:DD:73:E6
            X509v3 Authority Key Identifier:
                keyid:5F:EA:AC:20:00:A6:65:FC:61:23:89:85:3C:8B:C5:F6:4B:6E:67:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BmoWSGphkUoNrrnBnif5cLaRgmJEEv5cNaubLjpyS2Kn/1/5FEAAC2000A665FC612389853C8BC5F64B6E676E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FEAAC2000A665FC612389853C8BC5F64B6E676E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BmoWSGphkUoNrrnBnif5cLaRgmJEEv5cNaubLjpyS2Kn/1/3139302e38392e32322e302f32342d3234203d3e20323730333530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.89.22.0/24

    Signature Algorithm: sha256WithRSAEncryption
         43:93:e2:ea:8d:22:d1:34:ba:01:34:d0:48:5c:46:fc:f8:f0:
         87:14:6e:77:15:b9:75:ac:33:ee:79:6c:d5:8b:2a:ae:4b:db:
         47:54:22:6b:6d:cf:98:4f:d8:bd:a9:12:bb:28:23:ec:ae:2b:
         86:07:d7:fd:43:fb:c6:5b:bf:14:bc:e4:53:2b:6f:76:fa:f7:
         ed:6d:cc:82:d6:61:b1:e9:23:dc:20:9d:1f:09:83:ad:bd:bf:
         47:ea:69:9c:78:9b:c1:78:9f:89:86:8f:f3:32:80:03:b7:54:
         9c:f7:ff:d0:8c:7e:3f:c3:9f:b8:c4:58:01:0f:49:b0:9b:7b:
         39:04:20:87:6e:b5:ba:c0:83:89:f5:4b:e3:b3:53:84:dd:28:
         1e:05:a5:be:85:57:6a:0f:13:69:6f:c0:63:e0:bd:67:11:d7:
         52:0e:be:6e:1b:bc:5a:b3:ed:51:82:95:d2:ce:ff:49:87:c7:
         2b:74:0b:e5:5f:c0:ec:68:0e:b8:eb:66:66:fe:e5:f3:da:31:
         c1:c8:eb:1f:db:b7:d4:9a:f6:11:17:95:f8:23:13:b2:80:84:
         94:1e:49:5a:93:c6:ed:48:9a:dc:b5:d6:41:54:46:56:c4:4f:
         57:3a:25:a5:15:8d:76:49:e4:1a:ac:d6:12:4f:8c:c8:96:45:
         40:02:47:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 02:23:33 2025 by rpki-client