Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4erqKUcKg9JvxMspUgu9JjdkfErNhpq1KDNg68PJtHg3/1/3136342e3136332e3232302e302f32332d3233203d3e20323637343535.roa
File:                     3136342e3136332e3232302e302f32332d3233203d3e20323637343535.roa (raw, json)
Hash identifier:          7VTy9BOfa2J8f12iIcgkisttBY2aBW4djkgXkLZw4gE=
Subject key identifier:   2A:F1:44:AB:DF:2C:23:5E:45:8C:7B:22:5B:A2:39:93:BC:9B:CF:02
Certificate issuer:       /CN=B93B24DDC8B540595BCE75FEC923721BE80FEA1D
Certificate serial:       2817BD51CCE05244BFE2C507BFB9C389F3FA684A
Authority key identifier: B9:3B:24:DD:C8:B5:40:59:5B:CE:75:FE:C9:23:72:1B:E8:0F:EA:1D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B93B24DDC8B540595BCE75FEC923721BE80FEA1D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4erqKUcKg9JvxMspUgu9JjdkfErNhpq1KDNg68PJtHg3/1/3136342e3136332e3232302e302f32332d3233203d3e20323637343535.roa
Signing time:             Thu 04 Apr 2024 02:31:18 +0000
ROA not before:           Thu 04 Apr 2024 02:26:18 +0000
ROA not after:            Thu 03 Apr 2025 02:31:18 +0000
asID:                     267455
IP address blocks:        164.163.220.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4erqKUcKg9JvxMspUgu9JjdkfErNhpq1KDNg68PJtHg3/1/B93B24DDC8B540595BCE75FEC923721BE80FEA1D.crl
                          rsync://rpki-repo.registro.br/repo/4erqKUcKg9JvxMspUgu9JjdkfErNhpq1KDNg68PJtHg3/1/B93B24DDC8B540595BCE75FEC923721BE80FEA1D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B93B24DDC8B540595BCE75FEC923721BE80FEA1D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 11:21:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:17:bd:51:cc:e0:52:44:bf:e2:c5:07:bf:b9:c3:89:f3:fa:68:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B93B24DDC8B540595BCE75FEC923721BE80FEA1D
        Validity
            Not Before: Apr  4 02:26:18 2024 GMT
            Not After : Apr  3 02:31:18 2025 GMT
        Subject: CN=2AF144ABDF2C235E458C7B225BA23993BC9BCF02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:8f:f3:b1:9e:78:0d:1e:dd:70:e5:fe:f5:52:
                    a3:ae:95:2e:1a:62:00:91:c5:a6:4b:d4:8d:c4:54:
                    40:82:d8:b0:18:63:da:93:64:1e:d0:88:b0:c9:be:
                    74:8a:47:86:0b:df:73:c0:b4:81:af:c9:60:52:0e:
                    57:03:e4:1c:da:12:88:da:f4:1e:f4:1e:bc:b5:da:
                    01:6f:a4:81:59:af:16:7c:cc:13:ee:32:bf:91:ae:
                    fb:d5:07:c4:de:94:51:9c:d7:70:f4:fd:5d:cf:71:
                    0a:a8:88:77:b5:df:99:c3:05:98:af:22:bb:8a:ae:
                    e2:52:9f:1b:26:d8:7d:52:42:5f:c2:07:38:4a:b9:
                    39:58:cc:d8:18:73:f9:97:8a:61:62:4d:80:19:dd:
                    0d:75:55:2c:7d:f1:3c:d8:50:ca:3c:09:66:1a:40:
                    02:30:f1:41:9e:5c:a5:30:49:91:9f:4b:0c:a9:90:
                    f2:7b:5f:1e:34:6d:9b:50:0a:9e:95:d1:11:23:ff:
                    13:e8:12:de:53:ca:fa:3d:94:c4:75:76:b6:59:67:
                    24:c2:2e:94:bc:f6:d6:05:df:b6:58:e7:35:5a:95:
                    3f:61:ba:62:8b:56:5b:f5:ee:06:f5:8f:56:07:43:
                    09:4f:6f:f3:1b:b6:46:09:fa:d1:f2:69:55:d0:02:
                    71:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:F1:44:AB:DF:2C:23:5E:45:8C:7B:22:5B:A2:39:93:BC:9B:CF:02
            X509v3 Authority Key Identifier:
                keyid:B9:3B:24:DD:C8:B5:40:59:5B:CE:75:FE:C9:23:72:1B:E8:0F:EA:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4erqKUcKg9JvxMspUgu9JjdkfErNhpq1KDNg68PJtHg3/1/B93B24DDC8B540595BCE75FEC923721BE80FEA1D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B93B24DDC8B540595BCE75FEC923721BE80FEA1D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4erqKUcKg9JvxMspUgu9JjdkfErNhpq1KDNg68PJtHg3/1/3136342e3136332e3232302e302f32332d3233203d3e20323637343535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.163.220.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6a:34:c9:a5:20:5e:e6:03:f6:ac:bc:a6:89:16:aa:06:6e:8d:
         ed:ab:9b:18:bb:83:9b:5e:6e:16:6d:06:46:86:51:5b:53:c1:
         c7:c5:d3:06:ca:b1:ec:f5:44:d3:53:f9:06:bd:ff:b9:f0:aa:
         55:c0:85:56:66:7f:25:73:c1:44:2f:64:9d:ba:21:4c:08:69:
         16:a9:ab:36:82:84:18:fa:4c:27:d3:f3:4e:89:90:82:57:9c:
         d5:f5:eb:9c:52:fa:f1:9e:b0:57:6e:40:0f:fa:6b:d2:da:39:
         41:77:a9:07:05:a6:3a:67:07:45:6a:60:a1:01:31:5a:5d:35:
         84:37:1c:4b:f7:f8:a1:b9:1d:4a:68:06:0c:3d:e7:03:a5:ec:
         b8:aa:e9:a7:eb:6b:53:80:bf:87:10:18:8d:ee:c2:dc:a5:91:
         72:9d:57:97:66:ee:58:39:e9:df:0d:ac:4c:7f:2f:06:11:5e:
         d9:94:f4:53:cc:2d:52:2b:f7:87:b2:fb:30:e6:df:67:69:a4:
         52:a6:f7:32:0e:2e:ef:e5:cf:88:66:95:1b:50:fd:df:ca:3e:
         cb:9e:d8:46:49:44:ae:00:0d:17:8a:c8:dc:3f:d0:c1:93:80:
         ba:39:5c:5a:47:0a:88:9b:a4:67:3c:3b:71:82:3d:e1:6f:84:
         3b:fa:47:0a
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUKBe9UczgUkS/4sUHv7nDifP6aEowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjkzQjI0RERDOEI1NDA1OTVCQ0U3NUZFQzkyMzcyMUJF
ODBGRUExRDAeFw0yNDA0MDQwMjI2MThaFw0yNTA0MDMwMjMxMThaMDMxMTAvBgNV
BAMTKDJBRjE0NEFCREYyQzIzNUU0NThDN0IyMjVCQTIzOTkzQkM5QkNGMDIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2j/OxnngNHt1w5f71UqOulS4a
YgCRxaZL1I3EVECC2LAYY9qTZB7QiLDJvnSKR4YL33PAtIGvyWBSDlcD5BzaEoja
9B70Hry12gFvpIFZrxZ8zBPuMr+RrvvVB8TelFGc13D0/V3PcQqoiHe135nDBZiv
IruKruJSnxsm2H1SQl/CBzhKuTlYzNgYc/mXimFiTYAZ3Q11VSx98TzYUMo8CWYa
QAIw8UGeXKUwSZGfSwypkPJ7Xx40bZtQCp6V0REj/xPoEt5Tyvo9lMR1drZZZyTC
LpS89tYF37ZY5zValT9humKLVlv17gb1j1YHQwlPb/MbtkYJ+tHyaVXQAnH9AgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUKvFEq98sI15FjHsiW6I5k7ybzwIwHwYDVR0j
BBgwFoAUuTsk3ci1QFlbznX+ySNyG+gP6h0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNGVycUtVY0tnOUp2eE1zcFVndTlKamRrZkVyTmhwcTFLRE5nNjhQSnRI
ZzMvMS9COTNCMjREREM4QjU0MDU5NUJDRTc1RkVDOTIzNzIxQkU4MEZFQTFELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0I5M0IyNEREQzhCNTQwNTk1
QkNFNzVGRUM5MjM3MjFCRTgwRkVBMUQuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRlcnFLVWNLZzlKdnhNc3BVZ3U5Smpka2ZFck5ocHExS0ROZzY4UEp0SGczLzEv
MzEzNjM0MmUzMTM2MzMyZTMyMzIzMDJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDMy
MzYzNzM0MzUzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAaSj3DANBgkqhkiG9w0BAQsFAAOCAQEAajTJ
pSBe5gP2rLymiRaqBm6N7aubGLuDm15uFm0GRoZRW1PBx8XTBsqx7PVE01P5Br3/
ufCqVcCFVmZ/JXPBRC9knbohTAhpFqmrNoKEGPpMJ9PzTomQglec1fXrnFL68Z6w
V25AD/pr0to5QXepBwWmOmcHRWpgoQExWl01hDccS/f4obkdSmgGDD3nA6XsuKrp
p+trU4C/hxAYje7C3KWRcp1Xl2buWDnp3w2sTH8vBhFe2ZT0U8wtUiv3h7L7MObf
Z2mkUqb3Mg4u7+XPiGaVG1D938o+y57YRklErgANF4rI3D/QwZOAujlcWkcKiJuk
Zzw7cYI94W+EO/pHCg==
-----END CERTIFICATE-----
Generated at Fri Nov 22 11:44:09 2024 by rpki-client on console-ams.rpki-client.org