Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3gXe9oo7UhZjBp2cLFQuZMsNnBcZtagZGQTCWkUKqGNj/1/3136382e3139352e38302e302f32322d3234203d3e20323635343239.roa
File:                     3136382e3139352e38302e302f32322d3234203d3e20323635343239.roa (raw, json)
Hash identifier:          yXYNcDMK1bf2Uz2tEzEP2METPX3XpLRF0egSxkR4I3k=
Subject key identifier:   4B:BA:49:1E:36:A2:0C:BF:E1:14:8B:5E:DC:14:A1:81:D5:0A:6F:7C
Certificate issuer:       /CN=0059BA88737DAD2C55270BBCF409B62E1276558F
Certificate serial:       6D6DCD6D04A294DE9196414546BD177E98E7B7F8
Authority key identifier: 00:59:BA:88:73:7D:AD:2C:55:27:0B:BC:F4:09:B6:2E:12:76:55:8F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0059BA88737DAD2C55270BBCF409B62E1276558F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3gXe9oo7UhZjBp2cLFQuZMsNnBcZtagZGQTCWkUKqGNj/1/3136382e3139352e38302e302f32322d3234203d3e20323635343239.roa
Signing time:             Wed 03 Apr 2024 18:31:29 +0000
ROA not before:           Wed 03 Apr 2024 18:26:29 +0000
ROA not after:            Wed 02 Apr 2025 18:31:29 +0000
asID:                     265429
IP address blocks:        168.195.80.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3gXe9oo7UhZjBp2cLFQuZMsNnBcZtagZGQTCWkUKqGNj/1/0059BA88737DAD2C55270BBCF409B62E1276558F.crl
                          rsync://rpki-repo.registro.br/repo/3gXe9oo7UhZjBp2cLFQuZMsNnBcZtagZGQTCWkUKqGNj/1/0059BA88737DAD2C55270BBCF409B62E1276558F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0059BA88737DAD2C55270BBCF409B62E1276558F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 18:40:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:6d:cd:6d:04:a2:94:de:91:96:41:45:46:bd:17:7e:98:e7:b7:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0059BA88737DAD2C55270BBCF409B62E1276558F
        Validity
            Not Before: Apr  3 18:26:29 2024 GMT
            Not After : Apr  2 18:31:29 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:1f:45:58:65:fd:4b:38:bf:93:2f:62:26:66:
                    cd:35:f9:7d:ea:8a:61:a3:c9:3d:33:92:5d:c4:1b:
                    4e:1a:45:66:ba:87:ad:c1:82:ba:fb:b1:fd:34:d3:
                    d5:9d:31:04:de:fe:58:36:54:5c:99:8c:4c:71:cc:
                    84:be:9a:42:34:eb:db:fb:72:75:9f:e8:0d:3e:e7:
                    12:94:76:45:48:c6:13:11:23:65:e1:df:cf:40:31:
                    d9:16:b3:be:30:e6:0a:ff:3f:28:fd:26:9c:ce:13:
                    1f:bd:83:ee:93:8d:7e:90:08:84:fb:03:9c:bc:51:
                    2d:80:bb:87:28:e6:59:3b:91:ce:25:a4:a5:89:c2:
                    9b:cf:a0:a2:bd:c8:77:30:db:c8:9f:c2:0d:b7:ee:
                    c7:91:94:01:50:eb:6a:ee:3e:7c:b7:ed:94:71:07:
                    14:02:fd:47:55:7c:4e:b9:71:76:d2:0d:97:d3:9c:
                    0b:cd:8d:b3:14:2f:cb:ea:54:50:11:28:84:b8:41:
                    2c:e8:d1:ce:45:80:8c:a0:aa:5e:19:21:d7:1a:e6:
                    78:03:be:8d:a0:50:8c:9f:e9:ba:fc:1e:98:0b:8a:
                    fe:8f:6b:78:ad:10:92:8d:d5:0b:8f:b5:6e:87:ad:
                    5a:ad:9a:69:b6:ed:f2:db:79:6e:76:06:38:eb:dd:
                    a6:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:BA:49:1E:36:A2:0C:BF:E1:14:8B:5E:DC:14:A1:81:D5:0A:6F:7C
            X509v3 Authority Key Identifier:
                keyid:00:59:BA:88:73:7D:AD:2C:55:27:0B:BC:F4:09:B6:2E:12:76:55:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3gXe9oo7UhZjBp2cLFQuZMsNnBcZtagZGQTCWkUKqGNj/1/0059BA88737DAD2C55270BBCF409B62E1276558F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0059BA88737DAD2C55270BBCF409B62E1276558F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3gXe9oo7UhZjBp2cLFQuZMsNnBcZtagZGQTCWkUKqGNj/1/3136382e3139352e38302e302f32322d3234203d3e20323635343239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.195.80.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4b:bc:51:ca:db:87:0a:6c:de:9a:f2:fe:e3:a2:38:fa:5a:a4:
         9d:66:89:48:4f:70:7d:34:17:d8:86:28:93:06:09:40:2c:b7:
         0e:c4:6f:8a:54:11:54:27:c8:30:5f:75:44:19:d2:8b:a1:d1:
         95:90:c1:9e:92:14:27:99:4c:47:5c:46:a2:ae:0e:f5:9e:a5:
         88:82:d5:fa:65:49:57:33:44:ba:9d:13:e9:2b:13:bb:7c:eb:
         01:a2:2e:81:1c:3c:9a:9d:17:ae:af:81:24:ab:9b:04:00:6d:
         62:f6:8e:ee:90:d5:d1:b8:15:21:6d:2d:0a:8f:df:9a:c5:c7:
         b2:6b:dc:c4:e7:a0:1d:17:b9:5b:78:d8:3b:08:0c:d5:a0:69:
         9f:6f:a5:32:f0:b6:77:a2:6c:12:2e:08:c1:0c:96:02:e8:a4:
         70:e6:9a:88:16:b1:43:ed:c2:1c:a5:06:dc:31:70:0f:01:97:
         43:65:85:4a:62:00:fd:21:8b:95:0d:99:3b:cf:87:81:8f:12:
         25:4b:29:04:f2:22:30:c7:f4:65:1d:04:a3:fd:7f:3c:78:b1:
         e7:64:9a:e2:5e:8a:78:04:04:73:af:78:f7:14:9e:3a:ec:42:
         11:08:70:5c:c0:b7:cd:e3:a7:b2:cc:9d:79:4d:5f:d7:02:67:
         a8:d9:a8:56
-----BEGIN CERTIFICATE-----
MIIHQzCCBiugAwIBAgIUbW3NbQSilN6RlkFFRr0Xfpjnt/gwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDA1OUJBODg3MzdEQUQyQzU1MjcwQkJDRjQwOUI2MkUx
Mjc2NTU4RjAeFw0yNDA0MDMxODI2MjlaFw0yNTA0MDIxODMxMjlaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQjkxRjQ1NTg2NUZENEIzOEJG
OTMyRjYyMjY2NkNEMzVGOTdERUE4QTYxQTNDOTNEMzM5MjVEQzQxQjRFMUE0NTY2
QkE4N0FEQzE4MkJBRkJCMUZEMzREM0Q1OUQzMTA0REVGRTU4MzY1NDVDOTk4QzRD
NzFDQzg0QkU5QTQyMzRFQkRCRkI3Mjc1OUZFODBEM0VFNzEyOTQ3NjQ1NDhDNjEz
MTEyMzY1RTFERkNGNDAzMUQ5MTZCM0JFMzBFNjBBRkYzRjI4RkQyNjlDQ0UxMzFG
QkQ4M0VFOTM4RDdFOTAwODg0RkIwMzlDQkM1MTJEODBCQjg3MjhFNjU5M0I5MUNF
MjVBNEE1ODlDMjlCQ0ZBMEEyQkRDODc3MzBEQkM4OUZDMjBEQjdFRUM3OTE5NDAx
NTBFQjZBRUUzRTdDQjdFRDk0NzEwNzE0MDJGRDQ3NTU3QzRFQjk3MTc2RDIwRDk3
RDM5QzBCQ0Q4REIzMTQyRkNCRUE1NDUwMTEyODg0Qjg0MTJDRThEMUNFNDU4MDhD
QTBBQTVFMTkyMUQ3MUFFNjc4MDNCRThEQTA1MDhDOUZFOUJBRkMxRTk4MEI4QUZF
OEY2Qjc4QUQxMDkyOERENTBCOEZCNTZFODdBRDVBQUQ5QTY5QjZFREYyREI3OTZF
NzYwNjM4RUJEREE2QjkwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAuR9FWGX9Szi/ky9iJmbNNfl96opho8k9M5JdxBtOGkVmuoetwYK6
+7H9NNPVnTEE3v5YNlRcmYxMccyEvppCNOvb+3J1n+gNPucSlHZFSMYTESNl4d/P
QDHZFrO+MOYK/z8o/SaczhMfvYPuk41+kAiE+wOcvFEtgLuHKOZZO5HOJaSlicKb
z6Civch3MNvIn8INt+7HkZQBUOtq7j58t+2UcQcUAv1HVXxOuXF20g2X05wLzY2z
FC/L6lRQESiEuEEs6NHORYCMoKpeGSHXGuZ4A76NoFCMn+m6/B6YC4r+j2t4rRCS
jdULj7Vuh61arZpptu3y23ludgY4692muQIDAQABo4ICUTCCAk0wHQYDVR0OBBYE
FEu6SR42ogy/4RSLXtwUoYHVCm98MB8GA1UdIwQYMBaAFABZuohzfa0sVScLvPQJ
ti4SdlWPMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzNnWGU5b283VWhaakJw
MmNMRlF1Wk1zTm5CY1p0YWdaR1FUQ1drVUtxR05qLzEvMDA1OUJBODg3MzdEQUQy
QzU1MjcwQkJDRjQwOUI2MkUxMjc2NTU4Ri5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS8wMDU5QkE4ODczN0RBRDJDNTUyNzBCQkNGNDA5QjYyRTEyNzY1
NThGLmNlcjCBrgYIKwYBBQUHAQsEgaEwgZ4wgZsGCCsGAQUFBzALhoGOcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby8zZ1hlOW9vN1VoWmpCcDJjTEZR
dVpNc05uQmNadGFnWkdRVENXa1VLcUdOai8xLzMxMzYzODJlMzEzOTM1MmUzODMw
MmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNjM1MzQzMjM5LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC
qMNQMA0GCSqGSIb3DQEBCwUAA4IBAQBLvFHK24cKbN6a8v7jojj6WqSdZolIT3B9
NBfYhiiTBglALLcOxG+KVBFUJ8gwX3VEGdKLodGVkMGekhQnmUxHXEairg71nqWI
gtX6ZUlXM0S6nRPpKxO7fOsBoi6BHDyanReur4Ekq5sEAG1i9o7ukNXRuBUhbS0K
j9+axceya9zE56AdF7lbeNg7CAzVoGmfb6Uy8LZ3omwSLgjBDJYC6KRw5pqIFrFD
7cIcpQbcMXAPAZdDZYVKYgD9IYuVDZk7z4eBjxIlSykE8iIwx/RlHQSj/X88eLHn
ZJriXop4BARzr3j3FJ467EIRCHBcwLfN46eyzJ15TV/XAmeo2ahW
-----END CERTIFICATE-----
Generated at Mon Nov 25 21:31:33 2024 by rpki-client on console-ams.rpki-client.org