Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3FhH3cqZa8sGcZA3mKXkg66JoahPm9VSXiEZ4riYZC14/1/3136382e3230352e3232342e302f32342d3234203d3e20323634383637.roa
File:                     3136382e3230352e3232342e302f32342d3234203d3e20323634383637.roa (raw, json)
Hash identifier:          YkUwu0io33bW9uYm4DkAQ2slZMCez/gh8SZeQQ7sSBw=
Subject key identifier:   9E:38:73:4D:AD:BF:22:B7:57:51:3C:1F:46:5B:98:E8:E8:D1:00:4A
Certificate issuer:       /CN=D8D9B8E4A835A2FE0F905786DED8B530F7F0AD05
Certificate serial:       55EF2C9FBF26EA1E2D5453B07108000CA7BC2127
Authority key identifier: D8:D9:B8:E4:A8:35:A2:FE:0F:90:57:86:DE:D8:B5:30:F7:F0:AD:05
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D8D9B8E4A835A2FE0F905786DED8B530F7F0AD05.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3FhH3cqZa8sGcZA3mKXkg66JoahPm9VSXiEZ4riYZC14/1/3136382e3230352e3232342e302f32342d3234203d3e20323634383637.roa
Signing time:             Thu 04 Apr 2024 15:05:54 +0000
ROA not before:           Thu 04 Apr 2024 15:00:54 +0000
ROA not after:            Thu 03 Apr 2025 15:05:54 +0000
asID:                     264867
IP address blocks:        168.205.224.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3FhH3cqZa8sGcZA3mKXkg66JoahPm9VSXiEZ4riYZC14/1/D8D9B8E4A835A2FE0F905786DED8B530F7F0AD05.crl
                          rsync://rpki-repo.registro.br/repo/3FhH3cqZa8sGcZA3mKXkg66JoahPm9VSXiEZ4riYZC14/1/D8D9B8E4A835A2FE0F905786DED8B530F7F0AD05.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D8D9B8E4A835A2FE0F905786DED8B530F7F0AD05.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 16:17:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:ef:2c:9f:bf:26:ea:1e:2d:54:53:b0:71:08:00:0c:a7:bc:21:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D8D9B8E4A835A2FE0F905786DED8B530F7F0AD05
        Validity
            Not Before: Apr  4 15:00:54 2024 GMT
            Not After : Apr  3 15:05:54 2025 GMT
        Subject: CN=9E38734DADBF22B757513C1F465B98E8E8D1004A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:51:ac:94:b6:e6:a2:7d:be:e1:f7:cb:4d:24:
                    be:98:b2:d8:b4:4e:cd:1e:2b:87:38:98:96:ec:5e:
                    fa:d2:d8:96:de:39:74:3a:17:67:b2:05:5e:9d:e1:
                    05:7b:f8:22:71:47:bf:e1:8f:4b:a1:54:6a:b3:83:
                    82:b5:05:1f:4e:c7:53:c2:c2:3e:02:60:93:70:fe:
                    97:43:4d:8b:97:73:47:54:bc:7c:13:a5:0b:e9:79:
                    5a:7d:b7:8e:b2:5f:91:62:04:6d:ed:ec:e6:d6:6f:
                    94:8c:48:57:7d:76:21:28:67:9a:cd:49:86:78:e0:
                    82:f7:db:7d:45:34:8a:fd:6f:ac:60:50:46:b5:71:
                    2a:e0:65:91:87:00:61:08:2f:37:9b:64:40:ee:00:
                    75:58:f7:08:e5:ce:f7:c4:99:82:14:f1:ee:d6:c8:
                    97:f3:db:11:23:af:bf:e3:cb:25:71:d6:0f:10:e2:
                    e1:d8:f5:ae:bd:6b:f5:fd:94:c0:54:6b:77:4b:51:
                    48:ec:14:f2:eb:be:59:27:d2:82:dd:b5:13:25:1a:
                    38:8f:0e:aa:5b:c3:a3:5e:f0:b1:80:d8:9e:b4:fc:
                    d4:01:af:63:10:83:a5:77:d3:95:81:e6:73:87:df:
                    53:7b:94:95:5e:b1:b6:0d:ca:73:88:e9:b1:31:2f:
                    da:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:38:73:4D:AD:BF:22:B7:57:51:3C:1F:46:5B:98:E8:E8:D1:00:4A
            X509v3 Authority Key Identifier:
                keyid:D8:D9:B8:E4:A8:35:A2:FE:0F:90:57:86:DE:D8:B5:30:F7:F0:AD:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3FhH3cqZa8sGcZA3mKXkg66JoahPm9VSXiEZ4riYZC14/1/D8D9B8E4A835A2FE0F905786DED8B530F7F0AD05.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D8D9B8E4A835A2FE0F905786DED8B530F7F0AD05.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3FhH3cqZa8sGcZA3mKXkg66JoahPm9VSXiEZ4riYZC14/1/3136382e3230352e3232342e302f32342d3234203d3e20323634383637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.205.224.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c1:a7:16:ea:d9:84:c1:70:0a:0c:03:01:7a:ac:7c:96:46:69:
         42:68:6b:84:08:ba:61:4d:be:9e:fa:06:f9:0a:16:3a:1d:b2:
         f3:43:d1:cc:4b:fa:d1:60:a9:31:62:b1:b5:b6:03:cd:ed:0b:
         cd:4f:28:16:f1:64:36:07:86:01:89:d3:50:1e:fd:e7:91:ae:
         93:21:57:a5:a6:4a:e9:1d:0d:4e:42:fa:63:26:c7:3d:b3:0f:
         88:03:49:29:f0:c2:6a:b4:9d:72:14:b7:f9:6c:34:b5:f3:88:
         9c:3d:76:69:6c:b4:52:a3:a7:c2:23:af:2c:bf:21:bd:1c:ed:
         2d:f7:f9:38:bb:7b:44:f1:5e:46:23:e6:9b:1c:ee:90:65:34:
         6c:96:b6:b1:46:99:35:8a:40:25:ad:76:fd:26:0f:91:d8:b5:
         6c:f0:8c:fa:4a:0c:79:ac:a2:28:65:94:13:45:ab:e7:c7:7a:
         6a:bd:12:14:5b:de:cd:5b:26:c9:ac:16:ac:85:5b:57:b3:04:
         af:8f:7c:d3:bb:22:fe:b9:fc:8e:de:2a:d9:9e:f7:86:de:80:
         36:1d:ff:73:2f:bf:57:30:4b:59:44:07:db:e8:3d:60:de:c5:
         80:8d:6b:51:9c:3f:e7:01:c2:52:29:18:d1:27:72:bc:1e:cc:
         02:75:70:42
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUVe8sn78m6h4tVFOwcQgADKe8IScwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDhEOUI4RTRBODM1QTJGRTBGOTA1Nzg2REVEOEI1MzBG
N0YwQUQwNTAeFw0yNDA0MDQxNTAwNTRaFw0yNTA0MDMxNTA1NTRaMDMxMTAvBgNV
BAMTKDlFMzg3MzREQURCRjIyQjc1NzUxM0MxRjQ2NUI5OEU4RThEMTAwNEEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDsUayUtuaifb7h98tNJL6Ysti0
Ts0eK4c4mJbsXvrS2JbeOXQ6F2eyBV6d4QV7+CJxR7/hj0uhVGqzg4K1BR9Ox1PC
wj4CYJNw/pdDTYuXc0dUvHwTpQvpeVp9t46yX5FiBG3t7ObWb5SMSFd9diEoZ5rN
SYZ44IL3231FNIr9b6xgUEa1cSrgZZGHAGEILzebZEDuAHVY9wjlzvfEmYIU8e7W
yJfz2xEjr7/jyyVx1g8Q4uHY9a69a/X9lMBUa3dLUUjsFPLrvlkn0oLdtRMlGjiP
Dqpbw6Ne8LGA2J60/NQBr2MQg6V305WB5nOH31N7lJVesbYNynOI6bExL9p5AgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUnjhzTa2/IrdXUTwfRluY6OjRAEowHwYDVR0j
BBgwFoAU2Nm45Kg1ov4PkFeG3ti1MPfwrQUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM0ZoSDNjcVphOHNHY1pBM21LWGtnNjZKb2FoUG05VlNYaUVaNHJpWVpD
MTQvMS9EOEQ5QjhFNEE4MzVBMkZFMEY5MDU3ODZERUQ4QjUzMEY3RjBBRDA1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Q4RDlCOEU0QTgzNUEyRkUw
RjkwNTc4NkRFRDhCNTMwRjdGMEFEMDUuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNGaEgzY3FaYThzR2NaQTNtS1hrZzY2Sm9haFBtOVZTWGlFWjRyaVlaQzE0LzEv
MzEzNjM4MmUzMjMwMzUyZTMyMzIzNDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzYzNDM4MzYzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAKjN4DANBgkqhkiG9w0BAQsFAAOCAQEAwacW
6tmEwXAKDAMBeqx8lkZpQmhrhAi6YU2+nvoG+QoWOh2y80PRzEv60WCpMWKxtbYD
ze0LzU8oFvFkNgeGAYnTUB7955GukyFXpaZK6R0NTkL6YybHPbMPiANJKfDCarSd
chS3+Ww0tfOInD12aWy0UqOnwiOvLL8hvRztLff5OLt7RPFeRiPmmxzukGU0bJa2
sUaZNYpAJa12/SYPkdi1bPCM+koMeayiKGWUE0Wr58d6ar0SFFvezVsmyawWrIVb
V7MEr49807si/rn8jt4q2Z73ht6ANh3/cy+/VzBLWUQH2+g9YN7FgI1rUZw/5wHC
UikY0SdyvB7MAnVwQg==
-----END CERTIFICATE-----
Generated at Fri Nov 22 16:43:54 2024 by rpki-client on console-ams.rpki-client.org