Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BzNz5dBE2kMYGnAfxEsNYLv7aMT8m4yxP63Yv82Ldm2g/0/3139302e3131322e3135362e302f32332d3233203d3e20323639373132.roa
File:                     3139302e3131322e3135362e302f32332d3233203d3e20323639373132.roa (raw, json)
Hash identifier:          8X4zTZgQ2j9TJGCvlsOFdlvjDfyAaTxSKRejtW10TJI=
Subject key identifier:   B1:98:59:92:B0:A5:CD:A7:95:4D:D3:BA:2B:3D:31:A7:33:2D:CE:35
Certificate issuer:       /CN=9B40C2CC13EAB50345EDACFACC15DB43E60B85A2
Certificate serial:       1E02672DCD3D359C69B3699BE4FC2F4844781066
Authority key identifier: 9B:40:C2:CC:13:EA:B5:03:45:ED:AC:FA:CC:15:DB:43:E6:0B:85:A2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9B40C2CC13EAB50345EDACFACC15DB43E60B85A2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BzNz5dBE2kMYGnAfxEsNYLv7aMT8m4yxP63Yv82Ldm2g/0/3139302e3131322e3135362e302f32332d3233203d3e20323639373132.roa
Signing time:             Mon 24 Feb 2025 17:20:06 +0000
ROA not before:           Mon 24 Feb 2025 17:15:06 +0000
ROA not after:            Mon 23 Feb 2026 17:20:06 +0000
asID:                     269712
IP address blocks:        190.112.156.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BzNz5dBE2kMYGnAfxEsNYLv7aMT8m4yxP63Yv82Ldm2g/0/9B40C2CC13EAB50345EDACFACC15DB43E60B85A2.crl
                          rsync://rpki-repo.registro.br/repo/BzNz5dBE2kMYGnAfxEsNYLv7aMT8m4yxP63Yv82Ldm2g/0/9B40C2CC13EAB50345EDACFACC15DB43E60B85A2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9B40C2CC13EAB50345EDACFACC15DB43E60B85A2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 08:19:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:02:67:2d:cd:3d:35:9c:69:b3:69:9b:e4:fc:2f:48:44:78:10:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9B40C2CC13EAB50345EDACFACC15DB43E60B85A2
        Validity
            Not Before: Feb 24 17:15:06 2025 GMT
            Not After : Feb 23 17:20:06 2026 GMT
        Subject: CN=B1985992B0A5CDA7954DD3BA2B3D31A7332DCE35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:53:a3:d6:40:92:40:01:eb:84:ea:a6:ea:40:
                    99:7d:a5:7e:fc:f5:e2:0c:4f:d4:32:c6:96:0a:a1:
                    be:27:29:22:aa:f5:72:df:20:72:af:4f:ff:ed:14:
                    7c:f8:65:9e:95:a0:e3:66:60:10:ba:c4:e6:8b:c5:
                    0b:ae:35:8e:cb:b8:84:59:17:a9:ef:08:47:24:74:
                    47:96:98:bb:0c:24:a9:1f:31:de:85:25:bf:52:90:
                    2f:c6:c7:2b:f8:54:62:88:67:9f:05:d7:27:ce:db:
                    1f:93:98:c3:20:cf:bf:31:db:22:0a:68:b6:50:25:
                    5e:61:2e:18:f4:12:67:46:34:7e:a6:01:4d:11:07:
                    9c:e2:e9:81:bb:84:dd:72:62:30:2d:5f:37:0a:19:
                    32:6f:77:88:aa:5c:bc:6f:11:69:8a:9f:c4:9a:20:
                    69:74:6f:93:eb:2b:16:9c:c9:2c:e6:d5:4e:cf:14:
                    b8:c1:64:18:9f:b6:0e:b8:e5:f0:b5:45:8a:bc:fe:
                    32:7a:c3:c4:6f:fa:70:cb:3c:3d:07:a4:67:b4:e1:
                    6d:26:85:53:8a:28:38:2d:57:92:09:15:3f:5a:b2:
                    8f:07:70:88:e8:83:62:bf:5a:39:f3:27:79:d4:47:
                    95:9f:e5:0f:eb:8c:32:39:72:ab:68:cd:73:d7:fb:
                    a2:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:98:59:92:B0:A5:CD:A7:95:4D:D3:BA:2B:3D:31:A7:33:2D:CE:35
            X509v3 Authority Key Identifier:
                keyid:9B:40:C2:CC:13:EA:B5:03:45:ED:AC:FA:CC:15:DB:43:E6:0B:85:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BzNz5dBE2kMYGnAfxEsNYLv7aMT8m4yxP63Yv82Ldm2g/0/9B40C2CC13EAB50345EDACFACC15DB43E60B85A2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9B40C2CC13EAB50345EDACFACC15DB43E60B85A2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BzNz5dBE2kMYGnAfxEsNYLv7aMT8m4yxP63Yv82Ldm2g/0/3139302e3131322e3135362e302f32332d3233203d3e20323639373132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.112.156.0/23

    Signature Algorithm: sha256WithRSAEncryption
         43:fc:14:95:c4:e5:89:63:f0:3d:65:92:ea:a5:dd:3b:cb:72:
         07:38:6f:31:4c:fa:25:35:f7:40:4e:cc:d4:a9:e2:f3:ec:5c:
         ec:bb:83:88:fb:a2:db:ee:ab:40:a3:3e:34:87:2b:32:45:60:
         48:9f:58:8b:19:c2:bb:7c:be:60:29:6a:a3:10:8d:fc:74:03:
         79:dd:f9:ed:b8:57:c5:5b:79:0b:b2:84:88:6f:03:d7:b6:bb:
         df:2e:29:e7:ec:d9:8b:60:0c:95:85:14:36:b5:3d:85:be:fe:
         97:a8:69:03:5e:8c:60:55:02:ef:f6:24:21:de:a4:c0:a8:c3:
         a5:04:6d:0f:31:cc:66:9c:f1:1d:65:bf:7d:a1:a9:ad:ec:81:
         32:cd:77:bc:82:ff:ff:90:1c:5d:27:31:15:7c:e9:bf:e4:04:
         60:8b:a0:3b:2f:09:ef:af:e3:53:9f:6f:27:38:9c:ab:69:1c:
         d3:39:28:4d:f0:53:32:cd:1a:f4:db:86:dd:77:6e:09:37:c9:
         b5:a7:91:49:7b:34:d9:c7:56:c6:f8:22:bd:ae:6c:e1:19:6b:
         d4:67:7c:4c:0b:e4:34:7b:f3:83:d9:67:ec:9b:4d:b2:d4:cb:
         b3:1c:46:6a:00:70:04:1a:92:d0:9c:6b:8a:3b:1a:da:3e:52:
         29:30:d4:41
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUHgJnLc09NZxps2mb5PwvSER4EGYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUI0MEMyQ0MxM0VBQjUwMzQ1RURBQ0ZBQ0MxNURCNDNF
NjBCODVBMjAeFw0yNTAyMjQxNzE1MDZaFw0yNjAyMjMxNzIwMDZaMDMxMTAvBgNV
BAMTKEIxOTg1OTkyQjBBNUNEQTc5NTRERDNCQTJCM0QzMUE3MzMyRENFMzUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWU6PWQJJAAeuE6qbqQJl9pX78
9eIMT9QyxpYKob4nKSKq9XLfIHKvT//tFHz4ZZ6VoONmYBC6xOaLxQuuNY7LuIRZ
F6nvCEckdEeWmLsMJKkfMd6FJb9SkC/Gxyv4VGKIZ58F1yfO2x+TmMMgz78x2yIK
aLZQJV5hLhj0EmdGNH6mAU0RB5zi6YG7hN1yYjAtXzcKGTJvd4iqXLxvEWmKn8Sa
IGl0b5PrKxacySzm1U7PFLjBZBiftg645fC1RYq8/jJ6w8Rv+nDLPD0HpGe04W0m
hVOKKDgtV5IJFT9aso8HcIjog2K/WjnzJ3nUR5Wf5Q/rjDI5cqtozXPX+6K7AgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUsZhZkrClzaeVTdO6Kz0xpzMtzjUwHwYDVR0j
BBgwFoAUm0DCzBPqtQNF7az6zBXbQ+YLhaIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQnpOejVkQkUya01ZR25BZnhFc05ZTHY3YU1UOG00eXhQNjNZdjgyTGRt
MmcvMC85QjQwQzJDQzEzRUFCNTAzNDVFREFDRkFDQzE1REI0M0U2MEI4NUEyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzlCNDBDMkNDMTNFQUI1MDM0
NUVEQUNGQUNDMTVEQjQzRTYwQjg1QTIuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0J6Tno1ZEJFMmtNWUduQWZ4RXNOWUx2N2FNVDhtNHl4UDYzWXY4MkxkbTJnLzAv
MzEzOTMwMmUzMTMxMzIyZTMxMzUzNjJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDMy
MzYzOTM3MzEzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAb5wnDANBgkqhkiG9w0BAQsFAAOCAQEAQ/wU
lcTliWPwPWWS6qXdO8tyBzhvMUz6JTX3QE7M1Kni8+xc7LuDiPui2+6rQKM+NIcr
MkVgSJ9YixnCu3y+YClqoxCN/HQDed357bhXxVt5C7KEiG8D17a73y4p5+zZi2AM
lYUUNrU9hb7+l6hpA16MYFUC7/YkId6kwKjDpQRtDzHMZpzxHWW/faGpreyBMs13
vIL//5AcXScxFXzpv+QEYIugOy8J76/jU59vJzicq2kc0zkoTfBTMs0a9NuG3Xdu
CTfJtaeRSXs02cdWxvgiva5s4Rlr1Gd8TAvkNHvzg9ln7JtNstTLsxxGagBwBBqS
0Jxrijsa2j5SKTDUQQ==
-----END CERTIFICATE-----
Generated at Mon Apr 7 14:38:13 2025 by rpki-client