Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BzNz5dBE2kMYGnAfxEsNYLv7aMT8m4yxP63Yv82Ldm2g/2/3139302e3131322e3135362e302f32342d3234203d3e20323639373132.roa
File:                     3139302e3131322e3135362e302f32342d3234203d3e20323639373132.roa (raw, json)
Hash identifier:          lrJBA+4EnYGfa6pgvGQ25Lc5FKdgBG+EbVJtfn9k1OM=
Subject key identifier:   BF:7A:80:62:1E:85:18:4A:D8:05:87:C4:F7:BC:6C:58:1B:A1:85:76
Certificate issuer:       /CN=8FCC118E9F86EF9EF1FF0708589C3C428A30BBFD
Certificate serial:       0D2FAD64FD6F4C149166CA77DDD2E126AF978BFF
Authority key identifier: 8F:CC:11:8E:9F:86:EF:9E:F1:FF:07:08:58:9C:3C:42:8A:30:BB:FD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8FCC118E9F86EF9EF1FF0708589C3C428A30BBFD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BzNz5dBE2kMYGnAfxEsNYLv7aMT8m4yxP63Yv82Ldm2g/2/3139302e3131322e3135362e302f32342d3234203d3e20323639373132.roa
Signing time:             Wed 22 May 2024 18:13:17 +0000
ROA not before:           Wed 22 May 2024 18:08:17 +0000
ROA not after:            Wed 21 May 2025 18:13:17 +0000
asID:                     269712
IP address blocks:        190.112.156.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BzNz5dBE2kMYGnAfxEsNYLv7aMT8m4yxP63Yv82Ldm2g/2/8FCC118E9F86EF9EF1FF0708589C3C428A30BBFD.crl
                          rsync://rpki-repo.registro.br/repo/BzNz5dBE2kMYGnAfxEsNYLv7aMT8m4yxP63Yv82Ldm2g/2/8FCC118E9F86EF9EF1FF0708589C3C428A30BBFD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8FCC118E9F86EF9EF1FF0708589C3C428A30BBFD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 03 Jul 2024 20:51:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:2f:ad:64:fd:6f:4c:14:91:66:ca:77:dd:d2:e1:26:af:97:8b:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8FCC118E9F86EF9EF1FF0708589C3C428A30BBFD
        Validity
            Not Before: May 22 18:08:17 2024 GMT
            Not After : May 21 18:13:17 2025 GMT
        Subject: CN=BF7A80621E85184AD80587C4F7BC6C581BA18576
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:73:cb:3e:c7:0e:17:7f:3f:70:51:fe:e0:48:
                    6e:58:2c:7b:6c:0a:45:d0:6a:5b:71:2d:4c:5b:3a:
                    dc:be:bb:2d:47:ef:4a:e5:07:80:7e:62:04:8a:82:
                    36:ab:38:f4:12:9f:1a:d8:74:26:5f:1c:e7:6f:2f:
                    8d:9b:f9:67:e7:c1:18:39:82:c7:a0:78:16:8b:b6:
                    90:a3:db:f2:d9:e5:95:0d:bd:d2:6f:a5:9e:e3:6d:
                    2f:fb:c1:23:a6:dd:75:93:26:09:95:51:56:99:a6:
                    ed:e2:d0:eb:91:e3:67:96:35:f8:e2:32:48:98:45:
                    2d:ae:76:a4:e6:0c:62:cb:b4:90:49:ec:a1:36:0d:
                    6e:b4:63:fd:90:38:fc:3e:a1:cb:e1:db:0d:dc:88:
                    00:5b:13:39:5d:eb:9b:5d:e4:9f:ef:a3:85:85:4c:
                    7e:f5:33:18:85:00:2a:b5:db:69:bf:fe:ce:ac:30:
                    02:30:29:70:2c:86:ed:25:91:9c:31:dc:41:a0:84:
                    82:67:19:8b:c7:ed:b1:b2:22:f9:3a:0d:66:df:3e:
                    20:d4:8d:a8:d6:89:ec:af:9b:7e:1c:68:f1:ad:ed:
                    9e:3b:33:d2:ce:69:77:bb:08:d2:22:c5:a5:8e:ef:
                    06:53:65:af:24:8b:55:3a:87:74:96:61:28:6f:29:
                    72:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:7A:80:62:1E:85:18:4A:D8:05:87:C4:F7:BC:6C:58:1B:A1:85:76
            X509v3 Authority Key Identifier:
                keyid:8F:CC:11:8E:9F:86:EF:9E:F1:FF:07:08:58:9C:3C:42:8A:30:BB:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BzNz5dBE2kMYGnAfxEsNYLv7aMT8m4yxP63Yv82Ldm2g/2/8FCC118E9F86EF9EF1FF0708589C3C428A30BBFD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8FCC118E9F86EF9EF1FF0708589C3C428A30BBFD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BzNz5dBE2kMYGnAfxEsNYLv7aMT8m4yxP63Yv82Ldm2g/2/3139302e3131322e3135362e302f32342d3234203d3e20323639373132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.112.156.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ac:43:62:e9:ab:89:6a:4b:d9:22:01:3c:97:31:8a:bd:f4:65:
         0a:34:c9:27:c9:0f:cc:73:f2:32:13:d6:26:1b:d4:70:8b:09:
         f5:7e:11:2d:a0:6d:7e:84:51:f6:d4:28:49:c4:93:81:4a:aa:
         e6:e5:4d:bb:f5:3d:bc:20:79:0d:90:da:dd:5f:fb:78:87:c3:
         6e:1d:55:2f:99:bb:d8:2f:17:6f:ec:52:fe:d0:8f:d0:41:76:
         b7:3f:5b:9d:e2:c3:5b:60:34:bf:41:4b:b3:49:a6:89:72:a6:
         34:05:87:bd:82:54:94:d6:66:21:b0:3c:b6:4c:b3:73:f9:e1:
         2e:81:55:cf:6d:cc:2c:18:fd:eb:ae:93:3a:87:dc:e9:38:53:
         8d:5f:6c:ce:87:16:b4:05:47:45:0a:33:da:64:6d:13:bd:cd:
         9f:9e:ca:6a:79:09:16:0c:08:60:bf:83:b4:a9:04:80:51:c2:
         c8:09:49:6e:12:da:36:dd:1a:d4:d9:73:a1:71:1d:9f:cd:a8:
         41:61:30:f2:f6:12:af:9c:6c:23:c8:f5:64:61:50:2e:91:13:
         ae:dd:b5:8c:fa:7c:ec:08:0a:77:7d:29:ba:21:a8:57:a1:fa:
         b3:b0:71:f8:6c:e0:eb:25:5f:68:69:fe:cd:8b:79:0c:81:72:
         b3:da:b6:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 3 04:58:19 2024 by rpki-client on console-ams.rpki-client.org