Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2nh9ad2c6vSjaP5jTwTHQzCEvKvoWcx1Jz3ikHSSgayF/1/3136382e3232372e3231302e302f32332d3233203d3e203631363134.roa
File:                     3136382e3232372e3231302e302f32332d3233203d3e203631363134.roa (raw, json)
Hash identifier:          dJkZPFvUpdCJFR5tT1REH2mqYyPrynP47Q4kul6tSyQ=
Subject key identifier:   3C:37:3D:D0:F4:32:D0:0E:1D:3F:29:79:8B:3E:6F:59:BD:9A:FC:E2
Certificate issuer:       /CN=A9E011B38B3A6810C10DE285FD8D256FABCEDBAF
Certificate serial:       2D7D3DF7ED7DF0A1A07B9515A1174D75870C00A0
Authority key identifier: A9:E0:11:B3:8B:3A:68:10:C1:0D:E2:85:FD:8D:25:6F:AB:CE:DB:AF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A9E011B38B3A6810C10DE285FD8D256FABCEDBAF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2nh9ad2c6vSjaP5jTwTHQzCEvKvoWcx1Jz3ikHSSgayF/1/3136382e3232372e3231302e302f32332d3233203d3e203631363134.roa
Signing time:             Wed 03 Apr 2024 18:31:08 +0000
ROA not before:           Wed 03 Apr 2024 18:26:08 +0000
ROA not after:            Wed 02 Apr 2025 18:31:08 +0000
asID:                     61614
IP address blocks:        168.227.210.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2nh9ad2c6vSjaP5jTwTHQzCEvKvoWcx1Jz3ikHSSgayF/1/A9E011B38B3A6810C10DE285FD8D256FABCEDBAF.crl
                          rsync://rpki-repo.registro.br/repo/2nh9ad2c6vSjaP5jTwTHQzCEvKvoWcx1Jz3ikHSSgayF/1/A9E011B38B3A6810C10DE285FD8D256FABCEDBAF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A9E011B38B3A6810C10DE285FD8D256FABCEDBAF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 18:40:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:7d:3d:f7:ed:7d:f0:a1:a0:7b:95:15:a1:17:4d:75:87:0c:00:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9E011B38B3A6810C10DE285FD8D256FABCEDBAF
        Validity
            Not Before: Apr  3 18:26:08 2024 GMT
            Not After : Apr  2 18:31:08 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:e0:03:af:7b:30:ac:79:6e:a1:40:12:06:16:
                    c4:9b:3d:0e:3c:8a:92:2b:d1:06:8f:39:9a:7b:cf:
                    af:75:ed:13:53:2a:d1:f6:6d:90:d1:c2:d8:f4:c1:
                    39:82:d2:c6:cc:a6:d1:c3:70:3d:d8:0f:56:af:c1:
                    20:16:6d:3a:17:d5:e6:d6:9a:f9:8f:6e:57:99:a0:
                    c8:a1:40:a7:9f:e6:08:72:c4:45:0a:46:2a:1a:67:
                    2c:37:0e:72:98:f0:ac:92:5b:eb:c2:05:e5:6c:d1:
                    98:a3:1d:3a:fe:bd:f1:24:cc:aa:c6:b5:a6:e6:a5:
                    36:e5:a2:08:3a:f9:83:21:46:4e:83:37:ac:23:99:
                    42:91:ed:e5:ce:b1:1a:2c:19:dd:2c:e2:21:a1:e3:
                    b9:46:20:72:b7:ce:5d:04:2d:60:d9:d3:37:58:6f:
                    10:59:45:09:55:64:86:10:3b:aa:33:07:46:10:1b:
                    77:f7:15:c0:22:0b:b3:cc:9d:51:59:4e:89:11:18:
                    56:e8:9f:09:05:35:0b:a7:9e:fb:e0:a7:5f:db:bc:
                    68:f5:4b:80:c5:b3:af:4e:fb:c6:ff:48:38:f4:a3:
                    2f:f4:08:a8:9d:a5:72:8a:73:a7:cb:4c:c0:9e:7d:
                    ae:7b:06:a6:0c:78:3d:59:a2:76:f4:d9:8f:50:dd:
                    9e:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:37:3D:D0:F4:32:D0:0E:1D:3F:29:79:8B:3E:6F:59:BD:9A:FC:E2
            X509v3 Authority Key Identifier:
                keyid:A9:E0:11:B3:8B:3A:68:10:C1:0D:E2:85:FD:8D:25:6F:AB:CE:DB:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2nh9ad2c6vSjaP5jTwTHQzCEvKvoWcx1Jz3ikHSSgayF/1/A9E011B38B3A6810C10DE285FD8D256FABCEDBAF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A9E011B38B3A6810C10DE285FD8D256FABCEDBAF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2nh9ad2c6vSjaP5jTwTHQzCEvKvoWcx1Jz3ikHSSgayF/1/3136382e3232372e3231302e302f32332d3233203d3e203631363134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.227.210.0/23

    Signature Algorithm: sha256WithRSAEncryption
         ab:e5:08:af:97:21:fa:52:75:95:ce:f7:88:c0:7f:65:08:c9:
         f2:88:97:bb:79:60:d5:d0:59:0d:d6:00:d6:be:f3:ef:cb:88:
         70:b7:b1:3a:47:ed:d6:a6:88:e3:b3:f7:92:74:28:2d:a1:91:
         27:ff:d2:14:88:13:c4:16:f2:e6:4d:29:48:d4:7e:c0:10:85:
         59:3e:c4:6d:b6:95:7c:33:0e:7a:fd:09:36:9a:02:30:a4:36:
         a3:87:f2:96:75:7b:bf:0a:cb:6a:3a:9b:ce:c7:93:05:ed:6b:
         97:ec:f5:9d:11:45:ff:b5:6e:86:2e:e8:89:67:12:dd:1d:d5:
         6d:3d:1f:a4:a6:31:ce:23:08:78:ce:ba:f8:24:de:89:ba:84:
         3d:00:9f:8f:9d:ea:94:81:e1:60:09:c3:09:58:04:2b:6f:9c:
         e6:9c:e5:3c:13:5f:4c:f9:36:f0:1c:e1:69:46:98:25:fb:91:
         aa:b4:ba:51:46:a6:67:91:9d:07:50:0d:8e:4e:aa:5e:1d:1c:
         72:fc:4e:7c:70:be:92:93:23:7e:88:0a:74:36:6b:a4:ee:80:
         21:ab:58:d0:3f:19:11:6c:09:eb:8d:04:77:a6:30:c2:f4:66:
         02:62:1b:db:7a:ec:47:40:fe:94:aa:be:dd:20:b3:31:93:cf:
         a3:cd:5b:46
-----BEGIN CERTIFICATE-----
MIIHQzCCBiugAwIBAgIULX099+198KGge5UVoRdNdYcMAKAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTlFMDExQjM4QjNBNjgxMEMxMERFMjg1RkQ4RDI1NkZB
QkNFREJBRjAeFw0yNDA0MDMxODI2MDhaFw0yNTA0MDIxODMxMDhaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQjFFMDAzQUY3QjMwQUM3OTZF
QTE0MDEyMDYxNkM0OUIzRDBFM0M4QTkyMkJEMTA2OEYzOTlBN0JDRkFGNzVFRDEz
NTMyQUQxRjY2RDkwRDFDMkQ4RjRDMTM5ODJEMkM2Q0NBNkQxQzM3MDNERDgwRjU2
QUZDMTIwMTY2RDNBMTdENUU2RDY5QUY5OEY2RTU3OTlBMEM4QTE0MEE3OUZFNjA4
NzJDNDQ1MEE0NjJBMUE2NzJDMzcwRTcyOThGMEFDOTI1QkVCQzIwNUU1NkNEMTk4
QTMxRDNBRkVCREYxMjRDQ0FBQzZCNUE2RTZBNTM2RTVBMjA4M0FGOTgzMjE0NjRF
ODMzN0FDMjM5OTQyOTFFREU1Q0VCMTFBMkMxOUREMkNFMjIxQTFFM0I5NDYyMDcy
QjdDRTVEMDQyRDYwRDlEMzM3NTg2RjEwNTk0NTA5NTU2NDg2MTAzQkFBMzMwNzQ2
MTAxQjc3RjcxNUMwMjIwQkIzQ0M5RDUxNTk0RTg5MTExODU2RTg5RjA5MDUzNTBC
QTc5RUZCRTBBNzVGREJCQzY4RjU0QjgwQzVCM0FGNEVGQkM2RkY0ODM4RjRBMzJG
RjQwOEE4OURBNTcyOEE3M0E3Q0I0Q0MwOUU3REFFN0IwNkE2MEM3ODNENTlBMjc2
RjREOThGNTBERDlFNUQwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAseADr3swrHluoUASBhbEmz0OPIqSK9EGjzmae8+vde0TUyrR9m2Q
0cLY9ME5gtLGzKbRw3A92A9Wr8EgFm06F9Xm1pr5j25XmaDIoUCnn+YIcsRFCkYq
GmcsNw5ymPCsklvrwgXlbNGYox06/r3xJMyqxrWm5qU25aIIOvmDIUZOgzesI5lC
ke3lzrEaLBndLOIhoeO5RiByt85dBC1g2dM3WG8QWUUJVWSGEDuqMwdGEBt39xXA
IguzzJ1RWU6JERhW6J8JBTULp5774Kdf27xo9UuAxbOvTvvG/0g49KMv9AionaVy
inOny0zAnn2uewamDHg9WaJ29NmPUN2eXQIDAQABo4ICUTCCAk0wHQYDVR0OBBYE
FDw3PdD0MtAOHT8peYs+b1m9mvziMB8GA1UdIwQYMBaAFKngEbOLOmgQwQ3ihf2N
JW+rztuvMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzJuaDlhZDJjNnZTamFQ
NWpUd1RIUXpDRXZLdm9XY3gxSnozaWtIU1NnYXlGLzEvQTlFMDExQjM4QjNBNjgx
MEMxMERFMjg1RkQ4RDI1NkZBQkNFREJBRi5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS9BOUUwMTFCMzhCM0E2ODEwQzEwREUyODVGRDhEMjU2RkFCQ0VE
QkFGLmNlcjCBrgYIKwYBBQUHAQsEgaEwgZ4wgZsGCCsGAQUFBzALhoGOcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby8ybmg5YWQyYzZ2U2phUDVqVHdU
SFF6Q0V2S3ZvV2N4MUp6M2lrSFNTZ2F5Ri8xLzMxMzYzODJlMzIzMjM3MmUzMjMx
MzAyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzNjMxMzYzMTM0LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB
qOPSMA0GCSqGSIb3DQEBCwUAA4IBAQCr5QivlyH6UnWVzveIwH9lCMnyiJe7eWDV
0FkN1gDWvvPvy4hwt7E6R+3Wpojjs/eSdCgtoZEn/9IUiBPEFvLmTSlI1H7AEIVZ
PsRttpV8Mw56/Qk2mgIwpDajh/KWdXu/CstqOpvOx5MF7WuX7PWdEUX/tW6GLuiJ
ZxLdHdVtPR+kpjHOIwh4zrr4JN6JuoQ9AJ+PneqUgeFgCcMJWAQrb5zmnOU8E19M
+TbwHOFpRpgl+5GqtLpRRqZnkZ0HUA2OTqpeHRxy/E58cL6SkyN+iAp0Nmuk7oAh
q1jQPxkRbAnrjQR3pjDC9GYCYhvbeuxHQP6Uqr7dILMxk8+jzVtG
-----END CERTIFICATE-----
Generated at Fri Jun 28 21:05:04 2024 by rpki-client on console-ams.rpki-client.org