Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BzNz5dBE2kMYGnAfxEsNYLv7aMT8m4yxP63Yv82Ldm2g/0/3139302e3131322e3135362e302f32322d3232203d3e20323639373132.roa
File:                     3139302e3131322e3135362e302f32322d3232203d3e20323639373132.roa (raw, json)
Hash identifier:          PJThCUTZ7moteTily4gt1fT5uRuCbqVT2139H44WgeE=
Subject key identifier:   EA:90:81:AF:6F:EA:06:59:F6:CD:63:FB:5B:1A:69:09:DD:A7:D0:39
Certificate issuer:       /CN=9B40C2CC13EAB50345EDACFACC15DB43E60B85A2
Certificate serial:       2F605849692A7448DF4B3B7D1AFFBD29D64DDF25
Authority key identifier: 9B:40:C2:CC:13:EA:B5:03:45:ED:AC:FA:CC:15:DB:43:E6:0B:85:A2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9B40C2CC13EAB50345EDACFACC15DB43E60B85A2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BzNz5dBE2kMYGnAfxEsNYLv7aMT8m4yxP63Yv82Ldm2g/0/3139302e3131322e3135362e302f32322d3232203d3e20323639373132.roa
Signing time:             Mon 24 Feb 2025 17:20:09 +0000
ROA not before:           Mon 24 Feb 2025 17:15:09 +0000
ROA not after:            Mon 23 Feb 2026 17:20:09 +0000
asID:                     269712
IP address blocks:        190.112.156.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BzNz5dBE2kMYGnAfxEsNYLv7aMT8m4yxP63Yv82Ldm2g/0/9B40C2CC13EAB50345EDACFACC15DB43E60B85A2.crl
                          rsync://rpki-repo.registro.br/repo/BzNz5dBE2kMYGnAfxEsNYLv7aMT8m4yxP63Yv82Ldm2g/0/9B40C2CC13EAB50345EDACFACC15DB43E60B85A2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9B40C2CC13EAB50345EDACFACC15DB43E60B85A2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 19 Apr 2025 01:49:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:60:58:49:69:2a:74:48:df:4b:3b:7d:1a:ff:bd:29:d6:4d:df:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9B40C2CC13EAB50345EDACFACC15DB43E60B85A2
        Validity
            Not Before: Feb 24 17:15:09 2025 GMT
            Not After : Feb 23 17:20:09 2026 GMT
        Subject: CN=EA9081AF6FEA0659F6CD63FB5B1A6909DDA7D039
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:83:db:51:32:fc:3a:56:0b:60:e3:1a:ef:66:
                    d9:8c:93:48:ca:83:e7:bb:60:f7:9d:ac:d1:d5:55:
                    e9:16:71:fb:fc:2c:e3:f6:f5:0e:53:d0:c3:b3:dc:
                    d9:7b:08:8f:88:b9:b1:4c:bd:ff:0b:62:5f:13:f6:
                    36:0a:c2:44:d5:98:8a:8e:0c:3d:f0:cf:6b:a1:4f:
                    4b:4d:0a:d4:68:27:f0:fb:0e:7b:8e:e5:db:27:e0:
                    c3:58:7a:96:b5:3c:59:b2:b3:38:a1:02:42:d6:55:
                    15:74:e8:62:e3:50:67:c6:6f:02:98:ee:8a:11:56:
                    d4:aa:c1:99:a3:8b:5b:4c:8b:05:a0:de:e0:0d:3f:
                    f4:5a:70:dd:34:f5:94:a8:0c:11:a5:87:62:c7:49:
                    1b:83:0b:06:53:9b:de:71:7f:6e:34:70:ac:62:55:
                    46:70:6d:e5:e5:38:72:cb:4d:ac:4b:03:3d:67:e5:
                    c5:8f:3e:70:bd:05:39:6e:3a:a0:7d:8a:d3:ae:0e:
                    4b:55:ee:17:0f:c3:25:c1:bc:ba:1b:70:29:d8:83:
                    5a:b6:f1:db:81:a8:2a:0f:7b:0a:72:c0:e6:57:41:
                    c1:b4:90:b0:4c:b8:00:23:cc:70:0a:33:51:2e:5f:
                    9b:5c:21:59:b2:7d:85:2a:8b:92:42:6d:09:25:cb:
                    01:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:90:81:AF:6F:EA:06:59:F6:CD:63:FB:5B:1A:69:09:DD:A7:D0:39
            X509v3 Authority Key Identifier:
                keyid:9B:40:C2:CC:13:EA:B5:03:45:ED:AC:FA:CC:15:DB:43:E6:0B:85:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BzNz5dBE2kMYGnAfxEsNYLv7aMT8m4yxP63Yv82Ldm2g/0/9B40C2CC13EAB50345EDACFACC15DB43E60B85A2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9B40C2CC13EAB50345EDACFACC15DB43E60B85A2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BzNz5dBE2kMYGnAfxEsNYLv7aMT8m4yxP63Yv82Ldm2g/0/3139302e3131322e3135362e302f32322d3232203d3e20323639373132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.112.156.0/22

    Signature Algorithm: sha256WithRSAEncryption
         45:f7:90:91:d3:dd:52:35:9f:d6:71:b8:ce:31:d6:f4:54:cf:
         39:06:0e:a8:9e:37:53:f3:76:ef:f4:99:39:e5:0f:f3:be:50:
         69:f8:f7:38:6d:81:4a:c5:53:b7:01:b2:40:cf:07:82:d7:f3:
         ab:c9:0b:e7:c8:db:62:4f:46:a5:08:58:e6:10:e4:93:01:80:
         12:e4:c4:fd:a4:ee:d3:bc:76:cf:92:2b:ba:11:28:18:29:57:
         c8:e9:a1:ef:34:8f:94:7c:53:ea:95:bf:96:5d:5f:e7:b3:c4:
         8a:8f:00:04:4e:1d:41:76:0d:47:e5:7f:28:75:2c:bc:1b:6d:
         9f:ba:26:f6:00:09:36:a2:c5:4d:d4:52:4e:66:3b:6c:bc:67:
         24:74:ac:7f:8a:90:7d:63:71:5e:10:14:26:d0:06:ee:0b:c1:
         8b:99:f1:c3:a0:f7:13:4f:43:e9:f9:7c:0f:f5:6c:ee:5e:db:
         da:8b:60:54:80:c1:e8:60:f4:c2:eb:55:c1:df:65:31:ce:d6:
         5f:2c:2e:8b:4b:3b:a0:36:3c:9d:b8:17:8b:b7:0e:ed:28:5c:
         42:8c:9d:24:1d:0e:80:d2:2e:eb:92:27:d7:88:82:fd:31:21:
         79:8d:29:f9:eb:83:fa:52:9e:e7:d6:85:96:0c:cc:f4:ee:84:
         f6:cf:71:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 16:41:02 2025 by rpki-client