Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3HunNrUqNwTQgfSuMxSH6P7tZbTvZCydAFfFztSCduhu/1/3136382e3132312e3131322e302f32342d3234203d3e20323635333131.roa
File:                     3136382e3132312e3131322e302f32342d3234203d3e20323635333131.roa (raw, json)
Hash identifier:          SMqqrUoRxyfzQ8BThiVQSDTgFoGdjaq2pmEJ0JZn19U=
Subject key identifier:   1A:B4:50:88:78:22:A6:0C:D0:40:3F:C7:60:E9:3D:00:14:04:9B:96
Certificate issuer:       /CN=F24241E6982A012648294002B697451627DFF661
Certificate serial:       71569F5CCD9FEFE74E00725E6DB567E03881B1CA
Authority key identifier: F2:42:41:E6:98:2A:01:26:48:29:40:02:B6:97:45:16:27:DF:F6:61
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F24241E6982A012648294002B697451627DFF661.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3HunNrUqNwTQgfSuMxSH6P7tZbTvZCydAFfFztSCduhu/1/3136382e3132312e3131322e302f32342d3234203d3e20323635333131.roa
Signing time:             Thu 04 Apr 2024 16:23:06 +0000
ROA not before:           Thu 04 Apr 2024 16:18:06 +0000
ROA not after:            Thu 03 Apr 2025 16:23:06 +0000
asID:                     265311
IP address blocks:        168.121.112.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3HunNrUqNwTQgfSuMxSH6P7tZbTvZCydAFfFztSCduhu/1/F24241E6982A012648294002B697451627DFF661.crl
                          rsync://rpki-repo.registro.br/repo/3HunNrUqNwTQgfSuMxSH6P7tZbTvZCydAFfFztSCduhu/1/F24241E6982A012648294002B697451627DFF661.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F24241E6982A012648294002B697451627DFF661.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 07:55:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:56:9f:5c:cd:9f:ef:e7:4e:00:72:5e:6d:b5:67:e0:38:81:b1:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F24241E6982A012648294002B697451627DFF661
        Validity
            Not Before: Apr  4 16:18:06 2024 GMT
            Not After : Apr  3 16:23:06 2025 GMT
        Subject: CN=1AB450887822A60CD0403FC760E93D0014049B96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:62:f5:6d:8c:1d:6a:ec:55:fa:24:b9:7e:24:
                    ea:d9:14:d4:50:dd:7d:4d:a3:6d:03:db:c4:23:1a:
                    54:dd:7a:01:4f:c0:bb:32:ec:15:2e:0e:2c:8d:c9:
                    5c:2b:a7:5a:0b:5c:d0:51:54:7d:1e:a6:55:8f:88:
                    88:da:25:bf:30:27:79:6f:44:ad:47:9f:dc:79:38:
                    d0:ce:4e:41:91:a1:81:cd:5d:47:91:ea:1e:2f:52:
                    21:9d:8b:5d:31:ab:3b:db:a6:57:62:41:c9:02:b9:
                    05:a7:ff:58:c3:a6:d5:40:15:1a:94:69:b7:5a:44:
                    c1:53:cb:4c:26:09:b3:62:37:4f:99:5b:8a:65:62:
                    5e:25:30:5b:0e:11:d9:8e:26:61:7f:dd:f3:f6:28:
                    24:a0:9b:39:37:8f:cc:cd:5e:1a:f9:78:cb:29:6d:
                    a8:58:b9:34:d8:b7:92:fd:dd:e0:3f:15:03:77:89:
                    7b:99:ed:2e:55:20:06:de:b4:5b:cf:dc:7b:d3:3b:
                    4b:df:ff:9b:74:ce:0e:27:cd:8b:b6:da:10:6c:5f:
                    0d:ae:11:a5:e9:3b:b4:d6:ae:1d:24:69:35:f9:4f:
                    7d:3e:a2:cc:b2:77:77:ae:9c:d0:3d:5f:47:e8:12:
                    e1:6c:97:e2:42:a8:c5:70:84:ea:2e:ba:0f:8e:da:
                    a8:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:B4:50:88:78:22:A6:0C:D0:40:3F:C7:60:E9:3D:00:14:04:9B:96
            X509v3 Authority Key Identifier:
                keyid:F2:42:41:E6:98:2A:01:26:48:29:40:02:B6:97:45:16:27:DF:F6:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3HunNrUqNwTQgfSuMxSH6P7tZbTvZCydAFfFztSCduhu/1/F24241E6982A012648294002B697451627DFF661.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F24241E6982A012648294002B697451627DFF661.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3HunNrUqNwTQgfSuMxSH6P7tZbTvZCydAFfFztSCduhu/1/3136382e3132312e3131322e302f32342d3234203d3e20323635333131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.121.112.0/24

    Signature Algorithm: sha256WithRSAEncryption
         73:7c:eb:9c:f1:fc:e9:53:4b:3e:64:2f:9c:1d:dc:40:72:99:
         9b:1c:a6:b1:f8:09:4e:cd:12:64:81:32:6b:10:0c:26:90:9e:
         95:fd:e9:05:6e:d8:04:36:7e:d5:58:48:73:97:f7:32:f2:41:
         cd:a1:2a:2e:3a:7c:f4:96:c6:f1:b7:98:ac:d2:a5:6b:ca:2b:
         3b:48:1b:4a:83:84:82:b4:31:6a:84:cd:99:9e:64:34:b3:66:
         42:87:9f:e0:31:e3:20:d6:a0:6b:a9:d2:67:9f:ad:72:c8:71:
         f1:28:63:e4:2d:61:33:c7:91:62:25:02:81:b8:22:34:3e:3a:
         1c:f5:c2:52:ca:ec:27:1d:df:f2:40:89:8b:3d:e8:43:a3:aa:
         e3:06:ea:ea:13:37:a1:23:30:d3:f1:80:99:00:f4:c3:d4:85:
         c1:9b:32:05:bc:a5:3b:90:8f:5b:64:8f:5f:2d:27:f6:ca:93:
         09:63:4a:0b:56:b1:86:7c:db:27:82:6d:77:a6:74:20:0f:ca:
         6f:7e:17:41:59:9b:97:07:c6:49:20:42:bd:70:37:93:1e:49:
         38:47:da:f5:56:2f:f2:b1:52:a3:9c:07:49:82:ee:60:8a:44:
         a0:80:fa:a8:b6:79:22:fe:cf:05:30:73:47:90:d5:6c:72:14:
         96:66:ee:0b
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUcVafXM2f7+dOAHJebbVn4DiBscowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjI0MjQxRTY5ODJBMDEyNjQ4Mjk0MDAyQjY5NzQ1MTYy
N0RGRjY2MTAeFw0yNDA0MDQxNjE4MDZaFw0yNTA0MDMxNjIzMDZaMDMxMTAvBgNV
BAMTKDFBQjQ1MDg4NzgyMkE2MENEMDQwM0ZDNzYwRTkzRDAwMTQwNDlCOTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnYvVtjB1q7FX6JLl+JOrZFNRQ
3X1No20D28QjGlTdegFPwLsy7BUuDiyNyVwrp1oLXNBRVH0eplWPiIjaJb8wJ3lv
RK1Hn9x5ONDOTkGRoYHNXUeR6h4vUiGdi10xqzvbpldiQckCuQWn/1jDptVAFRqU
abdaRMFTy0wmCbNiN0+ZW4plYl4lMFsOEdmOJmF/3fP2KCSgmzk3j8zNXhr5eMsp
bahYuTTYt5L93eA/FQN3iXuZ7S5VIAbetFvP3HvTO0vf/5t0zg4nzYu22hBsXw2u
EaXpO7TWrh0kaTX5T30+osyyd3eunNA9X0foEuFsl+JCqMVwhOouug+O2qhpAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUGrRQiHgipgzQQD/HYOk9ABQEm5YwHwYDVR0j
BBgwFoAU8kJB5pgqASZIKUACtpdFFiff9mEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM0h1bk5yVXFOd1RRZ2ZTdU14U0g2UDd0WmJUdlpDeWRBRmZGenRTQ2R1
aHUvMS9GMjQyNDFFNjk4MkEwMTI2NDgyOTQwMDJCNjk3NDUxNjI3REZGNjYxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0YyNDI0MUU2OTgyQTAxMjY0
ODI5NDAwMkI2OTc0NTE2MjdERkY2NjEuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNIdW5OclVxTndUUWdmU3VNeFNINlA3dFpiVHZaQ3lkQUZmRnp0U0NkdWh1LzEv
MzEzNjM4MmUzMTMyMzEyZTMxMzEzMjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzYzNTMzMzEzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAKh5cDANBgkqhkiG9w0BAQsFAAOCAQEAc3zr
nPH86VNLPmQvnB3cQHKZmxymsfgJTs0SZIEyaxAMJpCelf3pBW7YBDZ+1VhIc5f3
MvJBzaEqLjp89JbG8beYrNKla8orO0gbSoOEgrQxaoTNmZ5kNLNmQoef4DHjINag
a6nSZ5+tcshx8Shj5C1hM8eRYiUCgbgiND46HPXCUsrsJx3f8kCJiz3oQ6Oq4wbq
6hM3oSMw0/GAmQD0w9SFwZsyBbylO5CPW2SPXy0n9sqTCWNKC1axhnzbJ4Jtd6Z0
IA/Kb34XQVmblwfGSSBCvXA3kx5JOEfa9VYv8rFSo5wHSYLuYIpEoID6qLZ5Iv7P
BTBzR5DVbHIUlmbuCw==
-----END CERTIFICATE-----
Generated at Fri Nov 22 05:48:36 2024 by rpki-client on console-fra.rpki-client.org