Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4JTLirbyjyhgBeUjN1dNUivFQNyCDdGHji7caMieatQB/0/3136382e3232382e3130322e302f32342d3234203d3e203631363834.roa
File:                     3136382e3232382e3130322e302f32342d3234203d3e203631363834.roa (raw, json)
Hash identifier:          Ijp5dY0rT/rHqqSTSb5E2RVp3VYEQu1lYliKdaXDvSs=
Subject key identifier:   0E:9F:3D:1F:EC:4B:ED:7E:B3:B8:B7:F7:2E:DB:A6:4A:75:FE:37:7F
Certificate issuer:       /CN=FB9F6F01B875008AF2C132009D0509E681E2FA99
Certificate serial:       06D829B0585D31AAAA494353FE92F02AAFAF6480
Authority key identifier: FB:9F:6F:01:B8:75:00:8A:F2:C1:32:00:9D:05:09:E6:81:E2:FA:99
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB9F6F01B875008AF2C132009D0509E681E2FA99.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4JTLirbyjyhgBeUjN1dNUivFQNyCDdGHji7caMieatQB/0/3136382e3232382e3130322e302f32342d3234203d3e203631363834.roa
Signing time:             Wed 24 Apr 2024 14:40:32 +0000
ROA not before:           Wed 24 Apr 2024 14:35:32 +0000
ROA not after:            Wed 23 Apr 2025 14:40:32 +0000
asID:                     61684
IP address blocks:        168.228.102.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4JTLirbyjyhgBeUjN1dNUivFQNyCDdGHji7caMieatQB/0/FB9F6F01B875008AF2C132009D0509E681E2FA99.crl
                          rsync://rpki-repo.registro.br/repo/4JTLirbyjyhgBeUjN1dNUivFQNyCDdGHji7caMieatQB/0/FB9F6F01B875008AF2C132009D0509E681E2FA99.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB9F6F01B875008AF2C132009D0509E681E2FA99.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:d8:29:b0:58:5d:31:aa:aa:49:43:53:fe:92:f0:2a:af:af:64:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB9F6F01B875008AF2C132009D0509E681E2FA99
        Validity
            Not Before: Apr 24 14:35:32 2024 GMT
            Not After : Apr 23 14:40:32 2025 GMT
        Subject: CN=0E9F3D1FEC4BED7EB3B8B7F72EDBA64A75FE377F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:c6:52:32:b7:08:b1:de:77:f7:87:09:94:ec:
                    c1:65:10:76:fb:ec:41:b1:45:6f:9e:a3:a5:d1:fd:
                    d8:60:11:79:6d:26:ef:82:21:52:c2:03:45:fa:b7:
                    e9:6d:82:be:21:a8:b0:22:49:b3:74:26:18:d1:d4:
                    64:5c:76:77:5c:49:ec:d3:8a:3d:a0:ae:02:f1:77:
                    ec:03:9c:53:e0:53:49:06:17:5b:3f:2b:23:9d:3e:
                    25:62:bc:55:ac:eb:91:05:85:7e:0e:00:04:2f:fb:
                    ad:fc:fe:f2:10:3a:9a:00:6f:18:ce:92:34:eb:f0:
                    95:6d:cb:f2:44:63:e2:85:c6:e6:44:a9:68:96:74:
                    c2:f6:cf:e3:b6:69:b5:17:ba:6a:74:b8:b5:a0:eb:
                    fa:69:fd:52:b8:16:27:5e:f6:8c:a7:5f:f6:a8:57:
                    7c:57:ff:08:7d:2a:3a:03:27:fc:f7:76:29:bb:27:
                    be:e5:1c:02:d4:5a:30:ab:0c:36:2e:f7:b8:d2:6c:
                    19:91:58:38:f8:20:17:1b:2b:90:01:aa:64:07:9d:
                    03:d7:48:a4:8c:05:24:b9:14:b3:8f:88:7c:36:01:
                    f1:cd:fd:56:61:41:7b:c7:8a:29:f5:e6:99:78:76:
                    b5:15:96:e7:5f:c7:79:26:ad:e9:cf:ae:50:cc:60:
                    e9:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:9F:3D:1F:EC:4B:ED:7E:B3:B8:B7:F7:2E:DB:A6:4A:75:FE:37:7F
            X509v3 Authority Key Identifier:
                keyid:FB:9F:6F:01:B8:75:00:8A:F2:C1:32:00:9D:05:09:E6:81:E2:FA:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4JTLirbyjyhgBeUjN1dNUivFQNyCDdGHji7caMieatQB/0/FB9F6F01B875008AF2C132009D0509E681E2FA99.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB9F6F01B875008AF2C132009D0509E681E2FA99.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4JTLirbyjyhgBeUjN1dNUivFQNyCDdGHji7caMieatQB/0/3136382e3232382e3130322e302f32342d3234203d3e203631363834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.228.102.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bf:c2:58:f4:be:f7:19:21:f3:96:ee:f3:5b:74:10:d5:35:cf:
         f3:53:86:ee:c3:bf:ab:96:62:7e:2f:07:88:89:1a:03:17:ee:
         cd:d6:ab:8b:61:ad:b8:9a:d2:f0:6d:f3:ae:e8:53:50:54:27:
         c0:91:58:39:18:b5:35:ae:e5:7f:45:d3:72:1f:27:a4:16:ae:
         3d:3d:df:28:16:f1:a3:04:0a:f6:4f:a8:69:b6:c7:1a:68:36:
         18:8f:4e:33:e9:09:b7:0e:a9:61:3f:62:d7:c0:5c:a1:41:22:
         3d:c3:cb:76:ca:c4:ab:b5:e5:06:35:c7:20:e5:31:e5:97:39:
         c1:96:be:39:f4:d2:fb:65:0b:6e:c1:94:e1:7b:53:71:89:fd:
         b2:13:07:ac:d4:b2:4b:50:9d:a1:32:94:e5:b6:51:4a:04:32:
         ec:96:54:73:48:9f:6b:77:58:62:ba:31:62:5a:54:88:0f:f0:
         b0:04:83:ea:bc:80:d8:ae:64:f6:df:22:40:02:b4:1e:d1:14:
         1c:d6:4f:9c:30:fd:44:ec:1a:e3:05:00:ea:8b:b4:61:d6:ba:
         85:e0:90:88:85:f3:4e:77:14:0e:33:99:e1:4e:d3:e6:9f:a0:
         b1:0b:e4:9b:87:1d:8d:14:d6:a7:0f:43:26:35:9f:da:a8:2b:
         37:a4:97:2e
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUBtgpsFhdMaqqSUNT/pLwKq+vZIAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkI5RjZGMDFCODc1MDA4QUYyQzEzMjAwOUQwNTA5RTY4
MUUyRkE5OTAeFw0yNDA0MjQxNDM1MzJaFw0yNTA0MjMxNDQwMzJaMDMxMTAvBgNV
BAMTKDBFOUYzRDFGRUM0QkVEN0VCM0I4QjdGNzJFREJBNjRBNzVGRTM3N0YwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaxlIytwix3nf3hwmU7MFlEHb7
7EGxRW+eo6XR/dhgEXltJu+CIVLCA0X6t+ltgr4hqLAiSbN0JhjR1GRcdndcSezT
ij2grgLxd+wDnFPgU0kGF1s/KyOdPiVivFWs65EFhX4OAAQv+638/vIQOpoAbxjO
kjTr8JVty/JEY+KFxuZEqWiWdML2z+O2abUXump0uLWg6/pp/VK4Fide9oynX/ao
V3xX/wh9KjoDJ/z3dim7J77lHALUWjCrDDYu97jSbBmRWDj4IBcbK5ABqmQHnQPX
SKSMBSS5FLOPiHw2AfHN/VZhQXvHiin15pl4drUVludfx3kmrenPrlDMYOl5AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUDp89H+xL7X6zuLf3LtumSnX+N38wHwYDVR0j
BBgwFoAU+59vAbh1AIrywTIAnQUJ5oHi+pkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNEpUTGlyYnlqeWhnQmVVak4xZE5VaXZGUU55Q0RkR0hqaTdjYU1pZWF0
UUIvMC9GQjlGNkYwMUI4NzUwMDhBRjJDMTMyMDA5RDA1MDlFNjgxRTJGQTk5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0ZCOUY2RjAxQjg3NTAwOEFG
MkMxMzIwMDlEMDUwOUU2ODFFMkZBOTkuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRKVExpcmJ5anloZ0JlVWpOMWROVWl2RlFOeUNEZEdIamk3Y2FNaWVhdFFCLzAv
MzEzNjM4MmUzMjMyMzgyZTMxMzAzMjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM2
MzEzNjM4MzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBACo5GYwDQYJKoZIhvcNAQELBQADggEBAL/CWPS+
9xkh85bu81t0ENU1z/NThu7Dv6uWYn4vB4iJGgMX7s3Wq4thrbia0vBt867oU1BU
J8CRWDkYtTWu5X9F03IfJ6QWrj093ygW8aMECvZPqGm2xxpoNhiPTjPpCbcOqWE/
YtfAXKFBIj3Dy3bKxKu15QY1xyDlMeWXOcGWvjn00vtlC27BlOF7U3GJ/bITB6zU
sktQnaEylOW2UUoEMuyWVHNIn2t3WGK6MWJaVIgP8LAEg+q8gNiuZPbfIkACtB7R
FBzWT5ww/UTsGuMFAOqLtGHWuoXgkIiF8053FA4zmeFO0+afoLEL5JuHHY0U1qcP
QyY1n9qoKzekly4=
-----END CERTIFICATE-----
Generated at Sat Nov 23 00:48:15 2024 by rpki-client on console-fra.rpki-client.org