Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BzNz5dBE2kMYGnAfxEsNYLv7aMT8m4yxP63Yv82Ldm2g/2/3139302e3131322e3135362e302f32322d3232203d3e20323639373132.roa
File:                     3139302e3131322e3135362e302f32322d3232203d3e20323639373132.roa (raw, json)
Hash identifier:          59IgtJAErlZC52f7Pq8tCFhQpg1+73cq6x4CUa/ObdQ=
Subject key identifier:   14:69:6D:42:A1:1B:25:3F:E0:80:D6:1A:37:58:71:A6:CD:A6:E0:1A
Certificate issuer:       /CN=8FCC118E9F86EF9EF1FF0708589C3C428A30BBFD
Certificate serial:       38861FDC54CA1FF5E81D21F340A0BD77DCBE3837
Authority key identifier: 8F:CC:11:8E:9F:86:EF:9E:F1:FF:07:08:58:9C:3C:42:8A:30:BB:FD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8FCC118E9F86EF9EF1FF0708589C3C428A30BBFD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BzNz5dBE2kMYGnAfxEsNYLv7aMT8m4yxP63Yv82Ldm2g/2/3139302e3131322e3135362e302f32322d3232203d3e20323639373132.roa
Signing time:             Wed 22 May 2024 18:13:17 +0000
ROA not before:           Wed 22 May 2024 18:08:17 +0000
ROA not after:            Wed 21 May 2025 18:13:17 +0000
asID:                     269712
IP address blocks:        190.112.156.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BzNz5dBE2kMYGnAfxEsNYLv7aMT8m4yxP63Yv82Ldm2g/2/8FCC118E9F86EF9EF1FF0708589C3C428A30BBFD.crl
                          rsync://rpki-repo.registro.br/repo/BzNz5dBE2kMYGnAfxEsNYLv7aMT8m4yxP63Yv82Ldm2g/2/8FCC118E9F86EF9EF1FF0708589C3C428A30BBFD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8FCC118E9F86EF9EF1FF0708589C3C428A30BBFD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 03 Jul 2024 20:51:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:86:1f:dc:54:ca:1f:f5:e8:1d:21:f3:40:a0:bd:77:dc:be:38:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8FCC118E9F86EF9EF1FF0708589C3C428A30BBFD
        Validity
            Not Before: May 22 18:08:17 2024 GMT
            Not After : May 21 18:13:17 2025 GMT
        Subject: CN=14696D42A11B253FE080D61A375871A6CDA6E01A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:b9:09:d8:73:58:e1:ec:36:8f:da:56:7d:0b:
                    52:5d:1d:7b:b2:bb:75:aa:fe:bb:c7:54:f2:0b:52:
                    49:67:06:ad:68:07:ba:44:c0:21:9f:c7:2c:58:a6:
                    54:90:eb:1e:fc:fc:28:9e:e5:b4:95:88:6e:34:6c:
                    0d:d2:af:5d:30:f0:0e:a9:ac:d2:0d:29:43:e5:31:
                    54:95:66:72:a1:ba:83:fd:3a:1e:a5:be:05:6e:77:
                    d7:de:36:5c:f1:0b:45:4e:16:5a:c1:a7:5d:04:22:
                    64:59:99:bc:7c:27:c2:15:c0:92:16:5a:96:f8:19:
                    a5:56:45:98:9e:af:23:c6:0f:5c:ca:7c:de:d7:ef:
                    e3:e0:fa:aa:72:71:c1:39:ec:8f:d2:c0:c2:e6:10:
                    41:c9:1b:5c:7c:01:57:1b:ae:b4:1b:67:8c:a0:92:
                    fa:9b:b4:70:90:6d:aa:da:b2:9b:b2:53:76:8c:54:
                    78:44:6d:82:b5:ec:4a:01:e1:6f:56:b0:a9:da:a8:
                    a6:4d:25:f1:52:67:9c:7b:e3:50:fb:fa:88:58:89:
                    01:d3:ca:c9:dd:ce:f6:41:d5:9a:44:02:a1:1a:bd:
                    6f:5b:cd:74:2c:5b:63:b5:66:9f:fa:73:d2:6e:20:
                    f3:aa:1c:c0:b6:b9:f6:b9:05:42:c1:7c:aa:3a:24:
                    a9:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:69:6D:42:A1:1B:25:3F:E0:80:D6:1A:37:58:71:A6:CD:A6:E0:1A
            X509v3 Authority Key Identifier:
                keyid:8F:CC:11:8E:9F:86:EF:9E:F1:FF:07:08:58:9C:3C:42:8A:30:BB:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BzNz5dBE2kMYGnAfxEsNYLv7aMT8m4yxP63Yv82Ldm2g/2/8FCC118E9F86EF9EF1FF0708589C3C428A30BBFD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8FCC118E9F86EF9EF1FF0708589C3C428A30BBFD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BzNz5dBE2kMYGnAfxEsNYLv7aMT8m4yxP63Yv82Ldm2g/2/3139302e3131322e3135362e302f32322d3232203d3e20323639373132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.112.156.0/22

    Signature Algorithm: sha256WithRSAEncryption
         09:84:43:18:8b:ae:c4:04:47:ab:d6:2b:09:b1:6f:0b:76:93:
         9d:55:4e:a6:5e:99:2a:e1:c2:6a:26:21:7e:5f:f1:75:dc:9b:
         8f:38:99:4b:6e:45:22:33:17:c1:bf:bb:45:66:4a:0b:ad:aa:
         71:e1:fa:65:e5:93:75:9a:a0:33:e0:c4:dc:50:7b:6a:0e:04:
         42:16:b8:9d:0b:d8:82:8c:4b:26:25:73:b6:24:9d:40:c8:46:
         27:f8:d9:e7:6c:d4:07:e0:b4:3e:ba:8f:64:92:f1:48:c1:94:
         17:5b:c9:56:7f:b9:74:0e:7f:7c:d0:ed:ce:e7:7f:5c:86:35:
         d1:b3:9a:ea:5a:8f:92:4d:26:e9:66:7c:7c:a9:3a:ba:bf:dc:
         b6:52:c1:d6:71:96:8c:c3:45:ae:7b:32:a8:b6:98:f6:d7:d6:
         85:a4:78:a2:6c:db:08:44:d1:41:18:2b:e7:8b:54:0e:a9:75:
         42:22:15:e8:29:25:b2:e1:69:6c:a6:cb:5a:8b:3c:a4:b2:cd:
         75:c2:eb:c6:c1:35:79:ef:f6:ad:ed:7d:87:64:17:df:9b:a7:
         37:d6:a6:80:5c:1a:66:1f:51:2e:bc:ac:14:2d:6c:a2:1f:f3:
         cb:32:38:2b:52:fb:61:c6:fe:0f:72:6e:d3:cf:8f:bb:c0:5b:
         e2:0e:cc:d6
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUOIYf3FTKH/XoHSHzQKC9d9y+ODcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEZDQzExOEU5Rjg2RUY5RUYxRkYwNzA4NTg5QzNDNDI4
QTMwQkJGRDAeFw0yNDA1MjIxODA4MTdaFw0yNTA1MjExODEzMTdaMDMxMTAvBgNV
BAMTKDE0Njk2RDQyQTExQjI1M0ZFMDgwRDYxQTM3NTg3MUE2Q0RBNkUwMUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSuQnYc1jh7DaP2lZ9C1JdHXuy
u3Wq/rvHVPILUklnBq1oB7pEwCGfxyxYplSQ6x78/Cie5bSViG40bA3Sr10w8A6p
rNINKUPlMVSVZnKhuoP9Oh6lvgVud9feNlzxC0VOFlrBp10EImRZmbx8J8IVwJIW
Wpb4GaVWRZieryPGD1zKfN7X7+Pg+qpyccE57I/SwMLmEEHJG1x8AVcbrrQbZ4yg
kvqbtHCQbaraspuyU3aMVHhEbYK17EoB4W9WsKnaqKZNJfFSZ5x741D7+ohYiQHT
ysndzvZB1ZpEAqEavW9bzXQsW2O1Zp/6c9JuIPOqHMC2ufa5BULBfKo6JKlVAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUFGltQqEbJT/ggNYaN1hxps2m4BowHwYDVR0j
BBgwFoAUj8wRjp+G757x/wcIWJw8Qoowu/0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQnpOejVkQkUya01ZR25BZnhFc05ZTHY3YU1UOG00eXhQNjNZdjgyTGRt
MmcvMi84RkNDMTE4RTlGODZFRjlFRjFGRjA3MDg1ODlDM0M0MjhBMzBCQkZELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzhGQ0MxMThFOUY4NkVGOUVG
MUZGMDcwODU4OUMzQzQyOEEzMEJCRkQuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0J6Tno1ZEJFMmtNWUduQWZ4RXNOWUx2N2FNVDhtNHl4UDYzWXY4MkxkbTJnLzIv
MzEzOTMwMmUzMTMxMzIyZTMxMzUzNjJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDMy
MzYzOTM3MzEzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAr5wnDANBgkqhkiG9w0BAQsFAAOCAQEACYRD
GIuuxARHq9YrCbFvC3aTnVVOpl6ZKuHCaiYhfl/xddybjziZS25FIjMXwb+7RWZK
C62qceH6ZeWTdZqgM+DE3FB7ag4EQha4nQvYgoxLJiVztiSdQMhGJ/jZ52zUB+C0
PrqPZJLxSMGUF1vJVn+5dA5/fNDtzud/XIY10bOa6lqPkk0m6WZ8fKk6ur/ctlLB
1nGWjMNFrnsyqLaY9tfWhaR4omzbCETRQRgr54tUDql1QiIV6CklsuFpbKbLWos8
pLLNdcLrxsE1ee/2re19h2QX35unN9amgFwaZh9RLrysFC1soh/zyzI4K1L7Ycb+
D3Ju08+Pu8Bb4g7M1g==
-----END CERTIFICATE-----
Generated at Wed Jul 3 04:58:19 2024 by rpki-client on console-ams.rpki-client.org