Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9nqRqsxQ6XUoRcgdro2BY7BjMJBDuHbQrJScZAwvU36U/1/3136382e3139342e34342e302f32332d3233203d3e20323635333738.roa
File:                     3136382e3139342e34342e302f32332d3233203d3e20323635333738.roa (raw, json)
Hash identifier:          tV5Uu2NCURp5bvms13LoMnkF1a++rXRHWGcBJw2aro8=
Subject key identifier:   87:77:29:56:A2:AB:44:93:D0:89:D4:23:A3:57:62:9C:B3:BC:39:73
Certificate issuer:       /CN=AADA19A8F33624B7B066BD949E208F7B0E08B621
Certificate serial:       35C4DF774DA1507F8A8687C8A8E60CD1A26A28A6
Authority key identifier: AA:DA:19:A8:F3:36:24:B7:B0:66:BD:94:9E:20:8F:7B:0E:08:B6:21
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AADA19A8F33624B7B066BD949E208F7B0E08B621.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9nqRqsxQ6XUoRcgdro2BY7BjMJBDuHbQrJScZAwvU36U/1/3136382e3139342e34342e302f32332d3233203d3e20323635333738.roa
Signing time:             Thu 04 Apr 2024 05:43:12 +0000
ROA not before:           Thu 04 Apr 2024 05:38:12 +0000
ROA not after:            Thu 03 Apr 2025 05:43:12 +0000
asID:                     265378
IP address blocks:        168.194.44.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9nqRqsxQ6XUoRcgdro2BY7BjMJBDuHbQrJScZAwvU36U/1/AADA19A8F33624B7B066BD949E208F7B0E08B621.crl
                          rsync://rpki-repo.registro.br/repo/9nqRqsxQ6XUoRcgdro2BY7BjMJBDuHbQrJScZAwvU36U/1/AADA19A8F33624B7B066BD949E208F7B0E08B621.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AADA19A8F33624B7B066BD949E208F7B0E08B621.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 28 Sep 2024 20:53:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:c4:df:77:4d:a1:50:7f:8a:86:87:c8:a8:e6:0c:d1:a2:6a:28:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AADA19A8F33624B7B066BD949E208F7B0E08B621
        Validity
            Not Before: Apr  4 05:38:12 2024 GMT
            Not After : Apr  3 05:43:12 2025 GMT
        Subject: CN=87772956A2AB4493D089D423A357629CB3BC3973
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:6c:04:60:38:5b:3a:da:2d:60:08:63:8d:0d:
                    c2:2e:1c:98:a2:84:39:bd:fb:2b:2b:79:f2:6e:a1:
                    d6:a4:ac:62:02:7e:db:83:a8:bd:9c:e2:7f:54:81:
                    49:ec:e5:80:aa:95:46:5d:44:f5:ba:67:e6:0d:2c:
                    6a:0e:92:c0:84:36:3b:b3:1e:07:58:7a:20:54:9d:
                    f9:e9:d7:1b:56:14:cd:41:e1:74:a9:24:74:e9:44:
                    4f:9f:65:71:74:31:19:10:2f:70:3c:c6:11:42:8f:
                    80:17:e3:11:b7:d7:f9:62:a0:31:39:f7:37:97:24:
                    8f:ec:58:19:de:2b:f8:24:20:a8:a9:c8:81:98:f3:
                    5a:ab:2c:00:13:88:5a:88:50:ff:9a:ac:c9:42:60:
                    8b:42:d1:9d:6b:a9:f9:7c:33:11:5a:cc:e3:d5:b9:
                    69:69:b9:be:a4:ce:e5:07:85:db:39:ac:64:1b:91:
                    3d:5a:f5:b0:e9:e4:f1:a4:7c:45:3e:0f:0e:d7:c9:
                    54:a9:ec:0a:ca:6b:b1:1f:f9:98:0f:20:26:40:57:
                    af:11:d1:d2:ce:dd:71:a2:77:ff:f7:52:1f:79:29:
                    1e:d6:8b:de:e9:a5:6f:d9:d8:93:50:d0:7a:86:ed:
                    ff:5e:09:31:80:67:db:ce:83:46:f5:d0:ed:9b:d7:
                    e0:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:77:29:56:A2:AB:44:93:D0:89:D4:23:A3:57:62:9C:B3:BC:39:73
            X509v3 Authority Key Identifier:
                keyid:AA:DA:19:A8:F3:36:24:B7:B0:66:BD:94:9E:20:8F:7B:0E:08:B6:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9nqRqsxQ6XUoRcgdro2BY7BjMJBDuHbQrJScZAwvU36U/1/AADA19A8F33624B7B066BD949E208F7B0E08B621.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AADA19A8F33624B7B066BD949E208F7B0E08B621.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9nqRqsxQ6XUoRcgdro2BY7BjMJBDuHbQrJScZAwvU36U/1/3136382e3139342e34342e302f32332d3233203d3e20323635333738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.194.44.0/23

    Signature Algorithm: sha256WithRSAEncryption
         e9:2b:8e:c2:a9:c5:3d:cd:c7:9e:61:92:6c:ab:bd:ff:55:50:
         d7:b3:7a:33:55:da:c7:51:8a:1d:58:21:c6:09:d3:86:ac:b8:
         85:ba:f7:46:b5:53:8a:c5:67:07:58:4e:0e:fe:f8:30:a4:d5:
         68:a4:e7:5e:99:d4:31:51:5a:72:f2:28:f5:15:c0:97:87:c2:
         15:cf:51:c3:f8:29:55:9d:96:d7:58:a6:80:47:c6:66:75:8a:
         d4:3e:d9:f3:eb:7b:87:fc:f5:7b:aa:e0:4b:10:db:88:79:f5:
         da:54:12:52:68:f1:27:c1:26:d2:dd:0f:25:98:1e:1e:5c:37:
         39:d5:b2:4a:1b:0b:cd:b0:62:eb:ed:fb:f7:b3:8d:1a:8d:db:
         16:ce:2b:8e:97:8c:10:3e:b7:bb:60:e7:69:d8:16:d9:b8:90:
         1d:4b:0e:ac:43:e7:f3:d0:60:0f:ae:dc:b6:cf:95:51:4a:3a:
         18:87:9a:67:e8:8d:48:2e:c4:8c:4b:d4:89:9d:6f:32:c7:70:
         51:2a:a5:09:b5:d5:ac:6f:5d:1b:00:77:ac:e0:01:92:8d:53:
         b0:3f:22:a7:ae:7b:b0:31:f7:3d:c4:a5:2e:6a:f9:65:dd:ef:
         77:3c:4a:2a:b1:08:6d:c4:03:77:76:1d:4c:19:a0:29:ad:9d:
         c9:7e:63:8d
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUNcTfd02hUH+KhofIqOYM0aJqKKYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUFEQTE5QThGMzM2MjRCN0IwNjZCRDk0OUUyMDhGN0Iw
RTA4QjYyMTAeFw0yNDA0MDQwNTM4MTJaFw0yNTA0MDMwNTQzMTJaMDMxMTAvBgNV
BAMTKDg3NzcyOTU2QTJBQjQ0OTNEMDg5RDQyM0EzNTc2MjlDQjNCQzM5NzMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXbARgOFs62i1gCGONDcIuHJii
hDm9+ysrefJuodakrGICftuDqL2c4n9UgUns5YCqlUZdRPW6Z+YNLGoOksCENjuz
HgdYeiBUnfnp1xtWFM1B4XSpJHTpRE+fZXF0MRkQL3A8xhFCj4AX4xG31/lioDE5
9zeXJI/sWBneK/gkIKipyIGY81qrLAATiFqIUP+arMlCYItC0Z1rqfl8MxFazOPV
uWlpub6kzuUHhds5rGQbkT1a9bDp5PGkfEU+Dw7XyVSp7ArKa7Ef+ZgPICZAV68R
0dLO3XGid//3Uh95KR7Wi97ppW/Z2JNQ0HqG7f9eCTGAZ9vOg0b10O2b1+AVAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUh3cpVqKrRJPQidQjo1dinLO8OXMwHwYDVR0j
BBgwFoAUqtoZqPM2JLewZr2UniCPew4ItiEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOW5xUnFzeFE2WFVvUmNnZHJvMkJZN0JqTUpCRHVIYlFySlNjWkF3dlUz
NlUvMS9BQURBMTlBOEYzMzYyNEI3QjA2NkJEOTQ5RTIwOEY3QjBFMDhCNjIxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0FBREExOUE4RjMzNjI0QjdC
MDY2QkQ5NDlFMjA4RjdCMEUwOEI2MjEuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzlucVJxc3hRNlhVb1JjZ2RybzJCWTdCak1KQkR1SGJRckpTY1pBd3ZVMzZVLzEv
MzEzNjM4MmUzMTM5MzQyZTM0MzQyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjM2
MzUzMzM3Mzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAGowiwwDQYJKoZIhvcNAQELBQADggEBAOkrjsKp
xT3Nx55hkmyrvf9VUNezejNV2sdRih1YIcYJ04asuIW690a1U4rFZwdYTg7++DCk
1Wik516Z1DFRWnLyKPUVwJeHwhXPUcP4KVWdltdYpoBHxmZ1itQ+2fPre4f89Xuq
4EsQ24h59dpUElJo8SfBJtLdDyWYHh5cNznVskobC82wYuvt+/ezjRqN2xbOK46X
jBA+t7tg52nYFtm4kB1LDqxD5/PQYA+u3LbPlVFKOhiHmmfojUguxIxL1ImdbzLH
cFEqpQm11axvXRsAd6zgAZKNU7A/Iqeue7Ax9z3EpS5q+WXd73c8SiqxCG3EA3d2
HUwZoCmtncl+Y40=
-----END CERTIFICATE-----
Generated at Fri Sep 27 21:26:47 2024 by rpki-client on console-fra.rpki-client.org