Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4XopuNYA2NUaPnn15rcj4LyQy9Gw9xktbGXmRySmAqZE/1/3139322e3134312e3131322e302f32322d3232203d3e20323637343633.roa
File:                     3139322e3134312e3131322e302f32322d3232203d3e20323637343633.roa (raw, json)
Hash identifier:          Ywm2gD3JzpR860Fk/RjzurJL3gqP/VqL9jydm4hmqqg=
Subject key identifier:   68:33:6D:D3:E8:41:3B:85:71:FE:41:34:78:FB:11:D7:E1:25:F7:EB
Certificate issuer:       /CN=D6FA304477B282D06DA853CA151FF15FE4EA7B9C
Certificate serial:       0F4EEE36CFC6D3EBC96D521690B08F4F9EF3BE98
Authority key identifier: D6:FA:30:44:77:B2:82:D0:6D:A8:53:CA:15:1F:F1:5F:E4:EA:7B:9C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D6FA304477B282D06DA853CA151FF15FE4EA7B9C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4XopuNYA2NUaPnn15rcj4LyQy9Gw9xktbGXmRySmAqZE/1/3139322e3134312e3131322e302f32322d3232203d3e20323637343633.roa
Signing time:             Thu 04 Apr 2024 01:58:14 +0000
ROA not before:           Thu 04 Apr 2024 01:53:14 +0000
ROA not after:            Thu 03 Apr 2025 01:58:14 +0000
asID:                     267463
IP address blocks:        192.141.112.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4XopuNYA2NUaPnn15rcj4LyQy9Gw9xktbGXmRySmAqZE/1/D6FA304477B282D06DA853CA151FF15FE4EA7B9C.crl
                          rsync://rpki-repo.registro.br/repo/4XopuNYA2NUaPnn15rcj4LyQy9Gw9xktbGXmRySmAqZE/1/D6FA304477B282D06DA853CA151FF15FE4EA7B9C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D6FA304477B282D06DA853CA151FF15FE4EA7B9C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 30 Jun 2024 04:30:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:4e:ee:36:cf:c6:d3:eb:c9:6d:52:16:90:b0:8f:4f:9e:f3:be:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D6FA304477B282D06DA853CA151FF15FE4EA7B9C
        Validity
            Not Before: Apr  4 01:53:14 2024 GMT
            Not After : Apr  3 01:58:14 2025 GMT
        Subject: CN=68336DD3E8413B8571FE413478FB11D7E125F7EB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:2b:fe:d3:22:3f:2a:bf:f3:c0:ce:c7:a9:1c:
                    b0:4e:3e:5b:01:41:0a:88:76:fe:c3:d1:e9:8c:77:
                    22:b8:64:16:57:d0:8f:2d:bb:c8:57:f0:6c:50:e8:
                    d4:ce:8c:73:db:bf:56:78:39:3d:61:58:89:bd:a3:
                    51:7a:25:a2:c4:9f:61:9f:18:73:3d:22:a6:f4:36:
                    9a:02:89:36:30:13:14:57:0e:87:c9:42:ba:22:ee:
                    35:c5:f2:9e:82:81:4c:9d:2b:a7:f3:87:b5:e5:a2:
                    ee:c4:b1:c2:70:80:56:0a:30:b7:31:cd:38:5a:10:
                    3f:20:e4:81:29:2d:f6:8c:66:f7:ae:ef:17:d5:bc:
                    d7:44:d8:f0:00:e5:82:55:31:bf:ee:2b:dd:68:7f:
                    b9:d7:54:53:c5:53:76:58:c9:e4:33:62:9d:c4:4f:
                    50:63:8f:22:e6:88:ae:10:27:41:52:83:5c:5a:35:
                    72:d7:39:f5:c1:48:47:6f:cd:b0:aa:a1:a4:21:7a:
                    dd:bd:54:b7:6e:9d:2c:31:8c:b9:9d:ca:71:c4:c0:
                    91:1c:94:cd:d1:9c:63:6b:24:87:f2:57:c3:13:8d:
                    0d:c7:ce:ff:2f:9c:a4:53:79:1a:3a:b0:f8:fa:76:
                    aa:46:44:03:2c:5d:66:a4:ba:46:ee:a0:f7:0c:10:
                    61:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:33:6D:D3:E8:41:3B:85:71:FE:41:34:78:FB:11:D7:E1:25:F7:EB
            X509v3 Authority Key Identifier:
                keyid:D6:FA:30:44:77:B2:82:D0:6D:A8:53:CA:15:1F:F1:5F:E4:EA:7B:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4XopuNYA2NUaPnn15rcj4LyQy9Gw9xktbGXmRySmAqZE/1/D6FA304477B282D06DA853CA151FF15FE4EA7B9C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D6FA304477B282D06DA853CA151FF15FE4EA7B9C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4XopuNYA2NUaPnn15rcj4LyQy9Gw9xktbGXmRySmAqZE/1/3139322e3134312e3131322e302f32322d3232203d3e20323637343633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.141.112.0/22

    Signature Algorithm: sha256WithRSAEncryption
         93:ee:46:9c:86:37:26:0a:c4:ce:10:4c:11:c2:7d:49:d9:b6:
         37:03:7a:07:8e:07:7d:d6:c8:95:5e:57:00:ad:ed:44:11:f0:
         bd:c5:0c:21:54:1d:2d:69:38:69:88:c2:72:e9:2c:86:ce:b3:
         1f:b6:fe:4d:00:80:d7:ba:cd:d7:16:d5:7b:2f:81:15:6b:49:
         b5:0e:0c:57:49:e2:c6:ec:6f:32:13:fe:19:4b:83:89:af:12:
         d0:2c:3a:c6:01:dd:54:75:39:10:f8:ac:28:4f:38:e1:22:42:
         79:53:2b:51:d3:23:89:91:2c:13:a7:2e:c2:18:9b:0d:1b:3b:
         7b:ed:03:03:e7:ec:c7:f3:0c:a3:9d:30:80:0f:a9:bd:2b:47:
         24:b8:86:0e:f4:c7:a5:e8:7a:aa:4b:47:83:93:5d:c3:44:55:
         03:cf:20:10:5e:c8:a0:3a:e1:95:77:d4:3f:16:fb:f1:f3:c3:
         05:2a:3c:ac:51:c0:2c:6b:bd:6e:d6:20:79:1d:d5:0c:1c:0f:
         0b:c3:46:ed:7e:07:92:8d:8b:20:2b:3e:8a:df:e0:e0:31:d2:
         66:97:76:76:4b:27:3a:e7:58:23:ff:48:e1:56:45:72:3d:87:
         53:2e:c6:40:01:7d:f9:ff:38:e8:d4:20:3c:af:ee:fe:09:f3:
         f6:d6:72:60
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUD07uNs/G0+vJbVIWkLCPT57zvpgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDZGQTMwNDQ3N0IyODJEMDZEQTg1M0NBMTUxRkYxNUZF
NEVBN0I5QzAeFw0yNDA0MDQwMTUzMTRaFw0yNTA0MDMwMTU4MTRaMDMxMTAvBgNV
BAMTKDY4MzM2REQzRTg0MTNCODU3MUZFNDEzNDc4RkIxMUQ3RTEyNUY3RUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDrK/7TIj8qv/PAzsepHLBOPlsB
QQqIdv7D0emMdyK4ZBZX0I8tu8hX8GxQ6NTOjHPbv1Z4OT1hWIm9o1F6JaLEn2Gf
GHM9Iqb0NpoCiTYwExRXDofJQroi7jXF8p6CgUydK6fzh7Xlou7EscJwgFYKMLcx
zThaED8g5IEpLfaMZveu7xfVvNdE2PAA5YJVMb/uK91of7nXVFPFU3ZYyeQzYp3E
T1BjjyLmiK4QJ0FSg1xaNXLXOfXBSEdvzbCqoaQhet29VLdunSwxjLmdynHEwJEc
lM3RnGNrJIfyV8MTjQ3Hzv8vnKRTeRo6sPj6dqpGRAMsXWakukbuoPcMEGFHAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUaDNt0+hBO4Vx/kE0ePsR1+El9+swHwYDVR0j
BBgwFoAU1vowRHeygtBtqFPKFR/xX+Tqe5wwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNFhvcHVOWUEyTlVhUG5uMTVyY2o0THlReTlHdzl4a3RiR1htUnlTbUFx
WkUvMS9ENkZBMzA0NDc3QjI4MkQwNkRBODUzQ0ExNTFGRjE1RkU0RUE3QjlDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Q2RkEzMDQ0NzdCMjgyRDA2
REE4NTNDQTE1MUZGMTVGRTRFQTdCOUMuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRYb3B1TllBMk5VYVBubjE1cmNqNEx5UXk5R3c5eGt0YkdYbVJ5U21BcVpFLzEv
MzEzOTMyMmUzMTM0MzEyZTMxMzEzMjJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDMy
MzYzNzM0MzYzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAsCNcDANBgkqhkiG9w0BAQsFAAOCAQEAk+5G
nIY3JgrEzhBMEcJ9Sdm2NwN6B44HfdbIlV5XAK3tRBHwvcUMIVQdLWk4aYjCcuks
hs6zH7b+TQCA17rN1xbVey+BFWtJtQ4MV0nixuxvMhP+GUuDia8S0Cw6xgHdVHU5
EPisKE844SJCeVMrUdMjiZEsE6cuwhibDRs7e+0DA+fsx/MMo50wgA+pvStHJLiG
DvTHpeh6qktHg5Ndw0RVA88gEF7IoDrhlXfUPxb78fPDBSo8rFHALGu9btYgeR3V
DBwPC8NG7X4Hko2LICs+it/g4DHSZpd2dksnOudYI/9I4VZFcj2HUy7GQAF9+f84
6NQgPK/u/gnz9tZyYA==
-----END CERTIFICATE-----
Generated at Sat Jun 29 03:14:54 2024 by rpki-client on console-fra.rpki-client.org