Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C514coYEexrxv39oTKuNiJmKkE1Mhqyja9Ns3stH3x3C/1/3139302e38392e3235322e302f32322d3234203d3e20323730343134.roa
File:                     3139302e38392e3235322e302f32322d3234203d3e20323730343134.roa (raw, json)
Hash identifier:          i8P5z0FyxYMRF3mgtrlnxPLfhqkaunXrPlPAGD/ZD28=
Subject key identifier:   39:AB:40:1A:D2:F0:AC:81:1A:4B:D4:CB:57:88:A4:34:DE:0A:22:C7
Certificate issuer:       /CN=C95BCD8741F1697313471305FEAAAF3DA02061D6
Certificate serial:       0F7F60EED8DCEECC5FE99B6752A02E795A87262C
Authority key identifier: C9:5B:CD:87:41:F1:69:73:13:47:13:05:FE:AA:AF:3D:A0:20:61:D6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C95BCD8741F1697313471305FEAAAF3DA02061D6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C514coYEexrxv39oTKuNiJmKkE1Mhqyja9Ns3stH3x3C/1/3139302e38392e3235322e302f32322d3234203d3e20323730343134.roa
Signing time:             Thu 06 Mar 2025 16:40:31 +0000
ROA not before:           Thu 06 Mar 2025 16:35:31 +0000
ROA not after:            Thu 05 Mar 2026 16:40:31 +0000
asID:                     270414
IP address blocks:        190.89.252.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/C514coYEexrxv39oTKuNiJmKkE1Mhqyja9Ns3stH3x3C/1/C95BCD8741F1697313471305FEAAAF3DA02061D6.crl
                          rsync://rpki-repo.registro.br/repo/C514coYEexrxv39oTKuNiJmKkE1Mhqyja9Ns3stH3x3C/1/C95BCD8741F1697313471305FEAAAF3DA02061D6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C95BCD8741F1697313471305FEAAAF3DA02061D6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 11 Apr 2025 19:39:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:7f:60:ee:d8:dc:ee:cc:5f:e9:9b:67:52:a0:2e:79:5a:87:26:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C95BCD8741F1697313471305FEAAAF3DA02061D6
        Validity
            Not Before: Mar  6 16:35:31 2025 GMT
            Not After : Mar  5 16:40:31 2026 GMT
        Subject: CN=39AB401AD2F0AC811A4BD4CB5788A434DE0A22C7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:53:4c:94:b3:de:ae:50:1e:2f:6c:c4:26:8a:
                    cc:b1:0f:92:fc:3e:04:ac:6e:96:90:ee:19:54:9e:
                    88:dd:0c:3c:3d:08:31:1c:57:0e:98:9d:68:42:68:
                    d8:64:46:7e:7a:99:be:4a:3d:7a:3f:56:ca:fc:e0:
                    d1:4a:bd:0b:40:18:2a:e5:29:95:63:db:b8:5e:78:
                    db:50:4c:b9:55:dd:64:06:1e:be:37:28:71:86:76:
                    f3:20:3d:1b:f0:22:8c:ba:cd:52:e3:c1:2b:cf:3e:
                    08:e7:6f:90:76:bf:82:08:2e:2e:55:a8:a1:10:61:
                    07:56:b9:87:d2:28:2c:e9:25:39:3a:70:92:46:1e:
                    cd:ad:bc:6d:10:a3:c7:03:5a:12:40:7b:13:26:38:
                    d0:2f:66:a7:70:18:83:e7:17:60:90:bf:af:bc:23:
                    16:45:75:d1:e7:07:fa:ae:9b:be:98:29:37:fc:bd:
                    e6:94:95:88:97:da:58:af:c0:40:ed:50:02:07:2d:
                    34:23:fc:0d:77:df:14:91:62:28:88:35:ec:2d:1b:
                    fd:5d:53:e0:18:97:7b:f0:e1:17:f6:ec:68:27:16:
                    92:a0:c2:a1:2b:5f:4d:b7:e1:2f:00:87:95:79:a0:
                    cc:43:8a:81:e9:f5:3f:22:6b:ad:4a:a5:40:4a:00:
                    ae:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:AB:40:1A:D2:F0:AC:81:1A:4B:D4:CB:57:88:A4:34:DE:0A:22:C7
            X509v3 Authority Key Identifier:
                keyid:C9:5B:CD:87:41:F1:69:73:13:47:13:05:FE:AA:AF:3D:A0:20:61:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C514coYEexrxv39oTKuNiJmKkE1Mhqyja9Ns3stH3x3C/1/C95BCD8741F1697313471305FEAAAF3DA02061D6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C95BCD8741F1697313471305FEAAAF3DA02061D6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C514coYEexrxv39oTKuNiJmKkE1Mhqyja9Ns3stH3x3C/1/3139302e38392e3235322e302f32322d3234203d3e20323730343134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.89.252.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1b:6d:4b:b2:81:0c:11:ac:66:5c:a5:3c:46:f0:b5:58:43:21:
         b2:75:53:d9:5e:a2:c1:e9:b4:ad:c1:5c:16:d2:97:ff:ad:96:
         f4:52:c1:2e:97:c0:89:d8:e0:fa:c5:09:26:35:c1:0d:4e:32:
         c8:92:a1:d6:20:c6:2f:85:97:7f:56:d6:2e:5d:24:d8:db:76:
         68:e1:9d:68:81:12:4b:58:c0:3c:d0:1e:de:10:65:17:c8:32:
         b8:32:47:ab:6c:41:35:8a:f9:32:ca:58:ae:8c:e3:63:ba:c0:
         47:47:86:c1:d4:ff:f5:02:25:fa:0c:88:11:6f:ca:af:8d:47:
         24:b3:7c:fb:15:fa:ca:89:72:64:70:6a:54:0d:34:2c:7b:c3:
         af:d9:69:9d:65:2e:73:77:ab:7e:87:c6:75:86:df:5f:ac:8c:
         2a:27:be:7b:92:63:99:5e:83:bd:3f:05:57:8e:9e:cf:78:7f:
         16:44:dc:f7:f7:47:e9:38:a7:f9:45:65:a4:ed:41:98:48:70:
         c7:ef:86:06:3d:64:bf:bb:1d:03:76:92:eb:82:51:e0:44:b1:
         93:c8:91:a8:7b:66:62:88:19:22:a6:8f:dc:9f:d6:92:0c:f8:
         86:b3:2e:ad:ec:44:cb:c1:01:eb:80:b4:0b:97:68:0d:05:a2:
         5b:0c:88:48
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUD39g7tjc7sxf6ZtnUqAueVqHJiwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzk1QkNEODc0MUYxNjk3MzEzNDcxMzA1RkVBQUFGM0RB
MDIwNjFENjAeFw0yNTAzMDYxNjM1MzFaFw0yNjAzMDUxNjQwMzFaMDMxMTAvBgNV
BAMTKDM5QUI0MDFBRDJGMEFDODExQTRCRDRDQjU3ODhBNDM0REUwQTIyQzcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrU0yUs96uUB4vbMQmisyxD5L8
PgSsbpaQ7hlUnojdDDw9CDEcVw6YnWhCaNhkRn56mb5KPXo/Vsr84NFKvQtAGCrl
KZVj27heeNtQTLlV3WQGHr43KHGGdvMgPRvwIoy6zVLjwSvPPgjnb5B2v4IILi5V
qKEQYQdWuYfSKCzpJTk6cJJGHs2tvG0Qo8cDWhJAexMmONAvZqdwGIPnF2CQv6+8
IxZFddHnB/qum76YKTf8veaUlYiX2livwEDtUAIHLTQj/A133xSRYiiINewtG/1d
U+AYl3vw4Rf27GgnFpKgwqErX0234S8Ah5V5oMxDioHp9T8ia61KpUBKAK4/AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUOatAGtLwrIEaS9TLV4ikNN4KIscwHwYDVR0j
BBgwFoAUyVvNh0HxaXMTRxMF/qqvPaAgYdYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQzUxNGNvWUVleHJ4djM5b1RLdU5pSm1La0UxTWhxeWphOU5zM3N0SDN4
M0MvMS9DOTVCQ0Q4NzQxRjE2OTczMTM0NzEzMDVGRUFBQUYzREEwMjA2MUQ2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0M5NUJDRDg3NDFGMTY5NzMx
MzQ3MTMwNUZFQUFBRjNEQTAyMDYxRDYuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0M1MTRjb1lFZXhyeHYzOW9US3VOaUptS2tFMU1ocXlqYTlOczNzdEgzeDNDLzEv
MzEzOTMwMmUzODM5MmUzMjM1MzIyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM3
MzAzNDMxMzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAK+WfwwDQYJKoZIhvcNAQELBQADggEBABttS7KB
DBGsZlylPEbwtVhDIbJ1U9leosHptK3BXBbSl/+tlvRSwS6XwInY4PrFCSY1wQ1O
MsiSodYgxi+Fl39W1i5dJNjbdmjhnWiBEktYwDzQHt4QZRfIMrgyR6tsQTWK+TLK
WK6M42O6wEdHhsHU//UCJfoMiBFvyq+NRySzfPsV+sqJcmRwalQNNCx7w6/ZaZ1l
LnN3q36HxnWG31+sjConvnuSY5leg70/BVeOns94fxZE3Pf3R+k4p/lFZaTtQZhI
cMfvhgY9ZL+7HQN2kuuCUeBEsZPIkah7ZmKIGSKmj9yf1pIM+IazLq3sRMvBAeuA
tAuXaA0FolsMiEg=
-----END CERTIFICATE-----
Generated at Fri Apr 11 03:10:51 2025 by rpki-client