Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BzNz5dBE2kMYGnAfxEsNYLv7aMT8m4yxP63Yv82Ldm2g/0/3139302e3131322e3135392e302f32342d3234203d3e20323639373132.roa
File:                     3139302e3131322e3135392e302f32342d3234203d3e20323639373132.roa (raw, json)
Hash identifier:          QcrkPhF+k614JNl/KF/tkecREBBi55kEnI5oV6z6+yk=
Subject key identifier:   BF:DC:7F:92:E3:BE:B0:FC:B7:C6:CB:9F:2B:80:B0:7E:4E:8E:35:D6
Certificate issuer:       /CN=9B40C2CC13EAB50345EDACFACC15DB43E60B85A2
Certificate serial:       674C6E61A76343F1D18D706C3746F49044DD1A34
Authority key identifier: 9B:40:C2:CC:13:EA:B5:03:45:ED:AC:FA:CC:15:DB:43:E6:0B:85:A2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9B40C2CC13EAB50345EDACFACC15DB43E60B85A2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BzNz5dBE2kMYGnAfxEsNYLv7aMT8m4yxP63Yv82Ldm2g/0/3139302e3131322e3135392e302f32342d3234203d3e20323639373132.roa
Signing time:             Mon 24 Feb 2025 17:21:55 +0000
ROA not before:           Mon 24 Feb 2025 17:16:55 +0000
ROA not after:            Mon 23 Feb 2026 17:21:55 +0000
asID:                     269712
IP address blocks:        190.112.159.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BzNz5dBE2kMYGnAfxEsNYLv7aMT8m4yxP63Yv82Ldm2g/0/9B40C2CC13EAB50345EDACFACC15DB43E60B85A2.crl
                          rsync://rpki-repo.registro.br/repo/BzNz5dBE2kMYGnAfxEsNYLv7aMT8m4yxP63Yv82Ldm2g/0/9B40C2CC13EAB50345EDACFACC15DB43E60B85A2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9B40C2CC13EAB50345EDACFACC15DB43E60B85A2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 19 Apr 2025 01:49:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:4c:6e:61:a7:63:43:f1:d1:8d:70:6c:37:46:f4:90:44:dd:1a:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9B40C2CC13EAB50345EDACFACC15DB43E60B85A2
        Validity
            Not Before: Feb 24 17:16:55 2025 GMT
            Not After : Feb 23 17:21:55 2026 GMT
        Subject: CN=BFDC7F92E3BEB0FCB7C6CB9F2B80B07E4E8E35D6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:b3:43:f0:a4:8a:e7:5b:e5:29:0f:cc:ee:3a:
                    8d:fd:35:97:77:46:ea:f6:58:6e:d0:d2:c0:77:91:
                    cf:69:85:0f:76:d5:86:87:3e:bb:60:66:42:3f:64:
                    0e:6a:66:dd:e9:81:76:b8:12:24:52:8e:7c:dd:71:
                    1c:48:ac:cb:4e:15:ac:ef:c2:61:8d:10:5e:2d:a5:
                    48:c2:bf:b3:f7:e5:86:c3:01:f4:a7:95:ab:d3:67:
                    94:93:a8:02:97:14:cd:38:38:af:d8:01:93:b5:24:
                    12:b6:fa:6b:c5:ad:15:49:fa:cf:2f:5a:3e:e3:fb:
                    98:7f:94:05:42:12:64:69:77:62:8d:6f:4e:f2:ee:
                    50:63:c9:3d:2d:64:a0:33:fd:77:ed:cb:ff:c8:be:
                    d3:f0:70:c3:64:84:32:87:ad:21:dd:76:12:50:bc:
                    dc:1a:b1:bc:b6:f3:4f:b1:45:16:3a:29:5b:98:53:
                    ad:01:c4:c4:4d:90:df:e5:0f:be:0d:8b:79:f0:14:
                    b1:4f:7d:24:b4:59:fe:f3:5d:4b:e1:65:3a:ac:42:
                    98:0f:fb:84:f4:b3:e5:90:52:22:7b:86:b0:e6:46:
                    df:ad:11:a9:f6:ed:ff:a0:ab:ed:e2:5e:79:60:14:
                    f4:1a:47:a9:3f:6d:58:bb:e0:5c:dc:9e:79:69:46:
                    63:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:DC:7F:92:E3:BE:B0:FC:B7:C6:CB:9F:2B:80:B0:7E:4E:8E:35:D6
            X509v3 Authority Key Identifier:
                keyid:9B:40:C2:CC:13:EA:B5:03:45:ED:AC:FA:CC:15:DB:43:E6:0B:85:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BzNz5dBE2kMYGnAfxEsNYLv7aMT8m4yxP63Yv82Ldm2g/0/9B40C2CC13EAB50345EDACFACC15DB43E60B85A2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9B40C2CC13EAB50345EDACFACC15DB43E60B85A2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BzNz5dBE2kMYGnAfxEsNYLv7aMT8m4yxP63Yv82Ldm2g/0/3139302e3131322e3135392e302f32342d3234203d3e20323639373132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.112.159.0/24

    Signature Algorithm: sha256WithRSAEncryption
         af:a1:3b:73:a1:9e:ea:22:13:97:dd:cf:01:50:23:0f:ac:e4:
         c7:2d:56:e5:3f:c4:0f:22:6b:90:56:63:76:00:5b:1f:04:5b:
         16:4e:61:5f:9c:b7:8c:ad:a3:b8:fd:10:4c:5b:03:ff:a1:1f:
         7d:94:08:50:29:a2:cd:e1:86:55:d6:c8:b8:ea:ec:9a:46:39:
         ee:da:2a:36:b0:eb:16:a9:b4:40:97:9e:f8:25:dd:5f:4c:db:
         5e:bf:5e:9b:4a:4a:50:00:73:03:bb:73:41:e9:4c:dd:f5:e7:
         45:02:8f:84:7c:69:a6:3f:3a:98:bf:c1:c9:51:43:78:6f:3a:
         96:fd:b3:87:99:dd:93:02:e9:bc:7a:11:5e:eb:a5:2d:27:3c:
         4f:84:a7:79:a9:00:b2:80:ed:a3:19:72:76:bf:2b:16:73:9a:
         c3:88:cc:c5:2f:18:cf:c6:d9:ea:ee:ce:86:8f:86:e5:ca:ff:
         f0:60:79:6b:41:ba:18:76:8b:db:b7:1d:15:a7:3e:45:a2:39:
         60:5b:13:6f:e6:af:fe:6d:0a:b4:72:36:af:f6:21:ed:cf:e1:
         64:8f:e9:0c:0f:f1:f7:0e:fb:00:8b:fc:29:8c:f7:dc:dc:94:
         81:ca:a7:b8:65:98:5f:0b:28:55:7f:bb:fc:e7:6c:42:81:a2:
         44:8f:c1:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 16:45:02 2025 by rpki-client