Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EmT71RHLNWSUAmSN8jzRcT6RXdQoZyggwd6bsH2cxhcX/1/3139302e3138302e3134382e302f32322d3234203d3e20323633323535.roa
File:                     3139302e3138302e3134382e302f32322d3234203d3e20323633323535.roa (raw, json)
Hash identifier:          KB/YuJy4TxiraMsMllGMfye6VcCufsgRc9TYDB2n0vs=
Subject key identifier:   56:51:54:45:15:C0:A2:A4:01:05:E0:F2:2D:AE:06:83:EC:0B:09:5C
Certificate issuer:       /CN=5B90C3AB894B4089B90719C3140678196A073A0B
Certificate serial:       5CDB7AE4438DED5B6A502F5098111828CEF2771C
Authority key identifier: 5B:90:C3:AB:89:4B:40:89:B9:07:19:C3:14:06:78:19:6A:07:3A:0B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5B90C3AB894B4089B90719C3140678196A073A0B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EmT71RHLNWSUAmSN8jzRcT6RXdQoZyggwd6bsH2cxhcX/1/3139302e3138302e3134382e302f32322d3234203d3e20323633323535.roa
Signing time:             Thu 04 Apr 2024 19:03:51 +0000
ROA not before:           Thu 04 Apr 2024 18:58:51 +0000
ROA not after:            Thu 03 Apr 2025 19:03:51 +0000
asID:                     263255
IP address blocks:        190.180.148.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EmT71RHLNWSUAmSN8jzRcT6RXdQoZyggwd6bsH2cxhcX/1/5B90C3AB894B4089B90719C3140678196A073A0B.crl
                          rsync://rpki-repo.registro.br/repo/EmT71RHLNWSUAmSN8jzRcT6RXdQoZyggwd6bsH2cxhcX/1/5B90C3AB894B4089B90719C3140678196A073A0B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5B90C3AB894B4089B90719C3140678196A073A0B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 06:55:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:db:7a:e4:43:8d:ed:5b:6a:50:2f:50:98:11:18:28:ce:f2:77:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5B90C3AB894B4089B90719C3140678196A073A0B
        Validity
            Not Before: Apr  4 18:58:51 2024 GMT
            Not After : Apr  3 19:03:51 2025 GMT
        Subject: CN=5651544515C0A2A40105E0F22DAE0683EC0B095C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:26:1a:82:90:a4:14:3a:4a:24:c0:d2:69:93:
                    04:fa:df:d3:ac:a6:7f:67:ff:2e:e0:a1:b5:35:ca:
                    fc:de:b8:93:d1:cf:b4:41:40:74:55:d3:0b:8d:8a:
                    d4:16:68:92:3f:7c:3e:11:d8:80:2a:89:ad:d4:61:
                    21:67:79:2a:03:d0:df:c4:9a:e0:13:71:27:31:a8:
                    1b:3b:05:a7:01:58:3b:9c:46:58:6a:88:d3:61:69:
                    17:8f:9c:4f:e1:06:07:b3:96:42:a8:e2:32:39:19:
                    03:73:90:84:e4:b3:93:34:ce:dd:56:13:a5:2e:45:
                    61:0b:af:73:aa:50:0c:2b:fe:54:39:16:90:5a:82:
                    df:f1:5d:71:95:49:5c:f9:0e:43:e0:07:31:c5:2c:
                    47:e6:0a:99:3b:e7:d1:c5:2d:01:52:47:4f:69:ec:
                    16:1e:4b:0e:ba:45:56:6b:ef:e1:1c:6f:49:af:3f:
                    36:51:74:17:b4:3d:50:84:d5:62:e9:bf:1e:10:15:
                    44:63:59:b6:6d:4f:ec:cb:79:af:27:1a:cf:87:0e:
                    e8:dd:92:a6:3f:b2:3a:e3:17:b9:3d:91:21:22:1a:
                    1d:06:b5:5c:4b:d1:af:b6:4d:f9:91:5d:f6:77:5b:
                    df:9a:69:7c:de:a3:62:cb:ee:86:ac:69:cf:e8:29:
                    0f:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:51:54:45:15:C0:A2:A4:01:05:E0:F2:2D:AE:06:83:EC:0B:09:5C
            X509v3 Authority Key Identifier:
                keyid:5B:90:C3:AB:89:4B:40:89:B9:07:19:C3:14:06:78:19:6A:07:3A:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EmT71RHLNWSUAmSN8jzRcT6RXdQoZyggwd6bsH2cxhcX/1/5B90C3AB894B4089B90719C3140678196A073A0B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5B90C3AB894B4089B90719C3140678196A073A0B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EmT71RHLNWSUAmSN8jzRcT6RXdQoZyggwd6bsH2cxhcX/1/3139302e3138302e3134382e302f32322d3234203d3e20323633323535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.180.148.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1c:59:ff:1f:d8:b8:54:29:dc:b5:b7:0e:cf:c4:91:fa:3f:1d:
         29:fe:83:40:97:df:bc:ab:32:a8:15:dc:0a:e6:1c:6d:9f:a0:
         41:87:ea:e0:4e:9f:c4:7b:37:27:8e:d4:6c:2e:18:f1:2e:b9:
         ac:14:9e:5d:b1:42:a4:d6:be:86:b0:ea:23:ee:06:8e:0b:e8:
         49:70:a3:bf:f1:15:42:a3:9b:12:1d:8f:64:e6:08:66:64:de:
         26:eb:38:f4:e9:a4:6a:5c:4d:b0:5a:fd:61:6b:31:0e:d9:60:
         15:8d:12:ff:e3:5e:7c:f8:ef:a2:a7:33:ff:6f:5b:1e:3f:7e:
         56:5f:53:7c:2a:49:58:c9:ec:76:28:a8:69:e7:12:51:09:01:
         47:22:a5:69:7a:81:61:8a:c6:a0:d9:f5:01:b3:b6:70:01:73:
         51:1b:fe:9c:07:ff:9a:23:9c:a0:d3:cc:1f:4b:9b:9c:e9:91:
         2a:8e:a1:0f:30:7f:d0:05:09:02:54:a3:ce:47:38:8f:cb:c2:
         9a:d2:2a:94:c4:ac:a1:4d:d7:dd:8e:10:c5:69:c4:7a:19:23:
         63:ff:f1:a0:d8:56:06:54:36:db:30:6a:cf:35:4a:3d:69:c9:
         10:78:de:19:ca:27:e6:e5:b5:04:2b:7b:e9:31:f8:08:db:74:
         56:b4:10:3f
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUXNt65EON7VtqUC9QmBEYKM7ydxwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUI5MEMzQUI4OTRCNDA4OUI5MDcxOUMzMTQwNjc4MTk2
QTA3M0EwQjAeFw0yNDA0MDQxODU4NTFaFw0yNTA0MDMxOTAzNTFaMDMxMTAvBgNV
BAMTKDU2NTE1NDQ1MTVDMEEyQTQwMTA1RTBGMjJEQUUwNjgzRUMwQjA5NUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBJhqCkKQUOkokwNJpkwT639Os
pn9n/y7gobU1yvzeuJPRz7RBQHRV0wuNitQWaJI/fD4R2IAqia3UYSFneSoD0N/E
muATcScxqBs7BacBWDucRlhqiNNhaRePnE/hBgezlkKo4jI5GQNzkITks5M0zt1W
E6UuRWELr3OqUAwr/lQ5FpBagt/xXXGVSVz5DkPgBzHFLEfmCpk759HFLQFSR09p
7BYeSw66RVZr7+Ecb0mvPzZRdBe0PVCE1WLpvx4QFURjWbZtT+zLea8nGs+HDujd
kqY/sjrjF7k9kSEiGh0GtVxL0a+2TfmRXfZ3W9+aaXzeo2LL7oasac/oKQ9tAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUVlFURRXAoqQBBeDyLa4Gg+wLCVwwHwYDVR0j
BBgwFoAUW5DDq4lLQIm5BxnDFAZ4GWoHOgswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRW1UNzFSSExOV1NVQW1TTjhqelJjVDZSWGRRb1p5Z2d3ZDZic0gyY3ho
Y1gvMS81QjkwQzNBQjg5NEI0MDg5QjkwNzE5QzMxNDA2NzgxOTZBMDczQTBCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzVCOTBDM0FCODk0QjQwODlC
OTA3MTlDMzE0MDY3ODE5NkEwNzNBMEIuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0VtVDcxUkhMTldTVUFtU044anpSY1Q2UlhkUW9aeWdnd2Q2YnNIMmN4aGNYLzEv
MzEzOTMwMmUzMTM4MzAyZTMxMzQzODJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMy
MzYzMzMyMzUzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAr60lDANBgkqhkiG9w0BAQsFAAOCAQEAHFn/
H9i4VCnctbcOz8SR+j8dKf6DQJffvKsyqBXcCuYcbZ+gQYfq4E6fxHs3J47UbC4Y
8S65rBSeXbFCpNa+hrDqI+4GjgvoSXCjv/EVQqObEh2PZOYIZmTeJus49OmkalxN
sFr9YWsxDtlgFY0S/+NefPjvoqcz/29bHj9+Vl9TfCpJWMnsdiioaecSUQkBRyKl
aXqBYYrGoNn1AbO2cAFzURv+nAf/miOcoNPMH0ubnOmRKo6hDzB/0AUJAlSjzkc4
j8vCmtIqlMSsoU3X3Y4QxWnEehkjY//xoNhWBlQ22zBqzzVKPWnJEHjeGcon5uW1
BCt76TH4CNt0VrQQPw==
-----END CERTIFICATE-----
Generated at Fri Jun 28 09:51:04 2024 by rpki-client on console-ams.rpki-client.org