Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3Hj6k2YeCvuLHxX9YyC6Afk5dgHiwP6fyKYwjFxLAtgN/0/3230312e3133312e36382e302f32322d3234203d3e203631393432.roa
File:                     3230312e3133312e36382e302f32322d3234203d3e203631393432.roa (raw, json)
Hash identifier:          5y2+yvsDQWrx17cmQRDaTTnC64beXwHV6q1N6e5qFZg=
Subject key identifier:   97:23:7B:EB:AF:52:64:C8:28:7D:94:A9:A5:24:C5:20:17:FF:35:31
Certificate issuer:       /CN=0EC8EAC7F1F5A216824B37118697748825F314D9
Certificate serial:       656991B160CD56AAA3BD83FBBC8E209B37AAB13F
Authority key identifier: 0E:C8:EA:C7:F1:F5:A2:16:82:4B:37:11:86:97:74:88:25:F3:14:D9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0EC8EAC7F1F5A216824B37118697748825F314D9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3Hj6k2YeCvuLHxX9YyC6Afk5dgHiwP6fyKYwjFxLAtgN/0/3230312e3133312e36382e302f32322d3234203d3e203631393432.roa
Signing time:             Mon 22 Apr 2024 14:25:33 +0000
ROA not before:           Mon 22 Apr 2024 14:20:33 +0000
ROA not after:            Mon 21 Apr 2025 14:25:33 +0000
asID:                     61942
IP address blocks:        201.131.68.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3Hj6k2YeCvuLHxX9YyC6Afk5dgHiwP6fyKYwjFxLAtgN/0/0EC8EAC7F1F5A216824B37118697748825F314D9.crl
                          rsync://rpki-repo.registro.br/repo/3Hj6k2YeCvuLHxX9YyC6Afk5dgHiwP6fyKYwjFxLAtgN/0/0EC8EAC7F1F5A216824B37118697748825F314D9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0EC8EAC7F1F5A216824B37118697748825F314D9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Jun 2024 01:54:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:69:91:b1:60:cd:56:aa:a3:bd:83:fb:bc:8e:20:9b:37:aa:b1:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0EC8EAC7F1F5A216824B37118697748825F314D9
        Validity
            Not Before: Apr 22 14:20:33 2024 GMT
            Not After : Apr 21 14:25:33 2025 GMT
        Subject: CN=97237BEBAF5264C8287D94A9A524C52017FF3531
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:5d:5f:a7:bb:33:d4:7b:20:20:f0:c9:0b:bf:
                    26:6b:e9:f7:8c:01:72:b4:dd:4c:0f:3c:88:1f:11:
                    d3:a2:f5:79:01:04:c6:b7:65:2b:30:0f:a1:38:51:
                    9e:9d:57:6e:f5:61:a9:ea:64:f1:3d:bf:37:87:b0:
                    d8:19:de:22:7e:1d:fd:c6:6a:c4:d0:b4:f3:f0:14:
                    94:72:53:75:c4:94:5e:e1:ca:14:29:31:fd:6d:54:
                    8c:92:54:ec:4f:37:f8:4f:72:ce:c5:4e:02:e9:56:
                    d3:8b:ff:18:6c:99:4a:b5:a0:00:e8:9b:35:31:19:
                    b0:0d:66:56:af:43:da:e3:13:55:0e:dd:e7:66:24:
                    72:11:ec:17:c8:c1:2b:1e:78:e8:6b:20:97:c4:48:
                    fb:6d:a4:0f:56:b5:5d:7a:39:50:04:44:00:d6:56:
                    63:75:9b:6c:3d:40:4a:93:47:1d:bf:b9:04:2d:a3:
                    81:3d:c5:ba:7c:9a:eb:92:53:69:53:4f:d7:76:f7:
                    60:c6:60:48:d3:ab:12:6c:90:a9:8a:b3:f9:c9:68:
                    68:14:e4:20:73:94:4d:4d:dd:44:d7:8b:8b:9c:3e:
                    c4:ca:20:21:bc:28:27:e5:5a:7a:a0:89:da:0b:22:
                    c7:f1:c5:ed:f0:26:56:10:aa:62:fb:bd:37:83:42:
                    72:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:23:7B:EB:AF:52:64:C8:28:7D:94:A9:A5:24:C5:20:17:FF:35:31
            X509v3 Authority Key Identifier:
                keyid:0E:C8:EA:C7:F1:F5:A2:16:82:4B:37:11:86:97:74:88:25:F3:14:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3Hj6k2YeCvuLHxX9YyC6Afk5dgHiwP6fyKYwjFxLAtgN/0/0EC8EAC7F1F5A216824B37118697748825F314D9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0EC8EAC7F1F5A216824B37118697748825F314D9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Hj6k2YeCvuLHxX9YyC6Afk5dgHiwP6fyKYwjFxLAtgN/0/3230312e3133312e36382e302f32322d3234203d3e203631393432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.131.68.0/22

    Signature Algorithm: sha256WithRSAEncryption
         51:57:d6:01:7d:b9:f3:c8:da:28:5e:cf:92:a3:c9:1c:7c:2c:
         fe:25:4d:41:a9:5e:85:f0:a0:08:e9:d6:89:07:e7:74:83:79:
         b9:0d:4a:26:a6:81:a7:40:60:63:c4:c4:9d:8f:89:cc:75:a7:
         e6:56:20:fd:85:54:2e:a1:62:18:a6:b1:c9:ad:8c:cf:eb:56:
         a0:b2:0b:bf:47:77:ed:e9:eb:ee:10:a5:08:b1:c5:91:6b:11:
         6d:dc:05:9c:9f:49:42:a4:ac:ef:7d:6d:6c:74:6a:03:8b:3d:
         86:18:9d:db:a5:d0:67:94:f3:fb:9a:50:f4:36:9a:ed:c5:03:
         90:b4:5e:c9:eb:b6:f8:b5:9e:2f:40:21:d2:76:22:22:c6:b8:
         4f:5c:81:bc:9a:ac:28:5c:a5:07:6f:fa:1e:6e:d2:97:ef:e6:
         b7:0a:0b:c8:06:04:0a:0a:4a:34:19:4e:41:6d:5c:67:fa:81:
         e9:07:59:b1:5e:f5:73:2f:01:b3:85:95:7e:9e:bd:ee:a7:7c:
         8f:48:26:6e:5b:19:ee:ae:18:94:b3:67:d7:66:d1:91:4c:ed:
         91:f8:fb:74:76:2d:63:53:20:c2:b9:81:89:21:59:34:ee:38:
         95:6a:89:3e:3c:8d:c9:55:46:e1:bd:db:ac:2b:41:f7:4b:65:
         c3:45:10:84
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUZWmRsWDNVqqjvYP7vI4gmzeqsT8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEVDOEVBQzdGMUY1QTIxNjgyNEIzNzExODY5Nzc0ODgy
NUYzMTREOTAeFw0yNDA0MjIxNDIwMzNaFw0yNTA0MjExNDI1MzNaMDMxMTAvBgNV
BAMTKDk3MjM3QkVCQUY1MjY0QzgyODdEOTRBOUE1MjRDNTIwMTdGRjM1MzEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTXV+nuzPUeyAg8MkLvyZr6feM
AXK03UwPPIgfEdOi9XkBBMa3ZSswD6E4UZ6dV271YanqZPE9vzeHsNgZ3iJ+Hf3G
asTQtPPwFJRyU3XElF7hyhQpMf1tVIySVOxPN/hPcs7FTgLpVtOL/xhsmUq1oADo
mzUxGbANZlavQ9rjE1UO3edmJHIR7BfIwSseeOhrIJfESPttpA9WtV16OVAERADW
VmN1m2w9QEqTRx2/uQQto4E9xbp8muuSU2lTT9d292DGYEjTqxJskKmKs/nJaGgU
5CBzlE1N3UTXi4ucPsTKICG8KCflWnqgidoLIsfxxe3wJlYQqmL7vTeDQnJrAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUlyN7669SZMgofZSppSTFIBf/NTEwHwYDVR0j
BBgwFoAUDsjqx/H1ohaCSzcRhpd0iCXzFNkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM0hqNmsyWWVDdnVMSHhYOVl5QzZBZms1ZGdIaXdQNmZ5S1l3akZ4TEF0
Z04vMC8wRUM4RUFDN0YxRjVBMjE2ODI0QjM3MTE4Njk3NzQ4ODI1RjMxNEQ5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzBFQzhFQUM3RjFGNUEyMTY4
MjRCMzcxMTg2OTc3NDg4MjVGMzE0RDkuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNIajZrMlllQ3Z1TEh4WDlZeUM2QWZrNWRnSGl3UDZmeUtZd2pGeExBdGdOLzAv
MzIzMDMxMmUzMTMzMzEyZTM2MzgyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzNjMx
MzkzNDMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCyYNEMA0GCSqGSIb3DQEBCwUAA4IBAQBRV9YBfbnz
yNooXs+So8kcfCz+JU1BqV6F8KAI6daJB+d0g3m5DUompoGnQGBjxMSdj4nMdafm
ViD9hVQuoWIYprHJrYzP61agsgu/R3ft6evuEKUIscWRaxFt3AWcn0lCpKzvfW1s
dGoDiz2GGJ3bpdBnlPP7mlD0NprtxQOQtF7J67b4tZ4vQCHSdiIixrhPXIG8mqwo
XKUHb/oebtKX7+a3CgvIBgQKCko0GU5BbVxn+oHpB1mxXvVzLwGzhZV+nr3up3yP
SCZuWxnurhiUs2fXZtGRTO2R+Pt0di1jUyDCuYGJIVk07jiVaok+PI3JVUbhvdus
K0H3S2XDRRCE
-----END CERTIFICATE-----
Generated at Mon Jun 3 01:08:08 2024 by rpki-client on console-fra.rpki-client.org