Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/68bEC1wWogkFoTJqmtJhcDg38B4BisDD7Ztxq7syE998/1/3136372e3235302e38302e302f32322d3234203d3e20323632353032.roa
File:                     3136372e3235302e38302e302f32322d3234203d3e20323632353032.roa (raw, json)
Hash identifier:          HhWTYUhGhs3WqyzKPv6LcLCIFpUKYIrjxtgIxZeLIJs=
Subject key identifier:   D3:82:2D:47:E5:20:27:FD:1C:7C:50:2F:7C:E5:6E:AC:9A:8B:7A:4A
Certificate issuer:       /CN=B083E1F6554A0DAB0E83AC5CDA1783B3B5A995C8
Certificate serial:       821CB0A66202557A408D0FE57C333DD78F576F
Authority key identifier: B0:83:E1:F6:55:4A:0D:AB:0E:83:AC:5C:DA:17:83:B3:B5:A9:95:C8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B083E1F6554A0DAB0E83AC5CDA1783B3B5A995C8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/68bEC1wWogkFoTJqmtJhcDg38B4BisDD7Ztxq7syE998/1/3136372e3235302e38302e302f32322d3234203d3e20323632353032.roa
Signing time:             Thu 04 Apr 2024 12:33:46 +0000
ROA not before:           Thu 04 Apr 2024 12:28:46 +0000
ROA not after:            Thu 03 Apr 2025 12:33:46 +0000
asID:                     262502
IP address blocks:        167.250.80.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/68bEC1wWogkFoTJqmtJhcDg38B4BisDD7Ztxq7syE998/1/B083E1F6554A0DAB0E83AC5CDA1783B3B5A995C8.crl
                          rsync://rpki-repo.registro.br/repo/68bEC1wWogkFoTJqmtJhcDg38B4BisDD7Ztxq7syE998/1/B083E1F6554A0DAB0E83AC5CDA1783B3B5A995C8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B083E1F6554A0DAB0E83AC5CDA1783B3B5A995C8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 09:42:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            82:1c:b0:a6:62:02:55:7a:40:8d:0f:e5:7c:33:3d:d7:8f:57:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B083E1F6554A0DAB0E83AC5CDA1783B3B5A995C8
        Validity
            Not Before: Apr  4 12:28:46 2024 GMT
            Not After : Apr  3 12:33:46 2025 GMT
        Subject: CN=D3822D47E52027FD1C7C502F7CE56EAC9A8B7A4A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:99:94:25:f3:ce:be:18:71:51:53:25:8f:77:
                    8d:e1:44:31:04:82:8f:87:ac:e6:8f:ae:e7:33:ea:
                    0a:67:ca:b7:5b:1f:c6:3e:16:32:c4:48:21:3b:5b:
                    42:51:2c:50:1b:94:54:e5:e0:8c:1b:c7:3e:36:98:
                    9c:c8:59:30:f6:8b:ae:ff:d4:9e:90:34:e1:6b:93:
                    e6:13:47:47:0d:b4:b2:ac:ad:cb:46:43:04:39:34:
                    e5:2e:57:8b:67:24:43:80:ae:53:2f:91:9b:c6:7a:
                    df:62:e9:ed:b3:c2:4f:13:d9:69:98:90:8f:c3:83:
                    00:6c:a5:9c:c4:30:58:16:84:1b:8d:72:f8:78:b9:
                    93:e3:4c:05:90:ad:7e:ec:e6:3a:d6:ba:34:43:5d:
                    8b:aa:10:ec:c6:c7:02:76:6b:a2:66:59:04:55:fc:
                    24:b9:b2:75:c3:48:e0:55:fb:6d:21:f1:28:0b:62:
                    b3:82:8f:3e:3a:fc:67:f1:2e:0c:fd:37:af:cf:1b:
                    aa:20:60:64:56:d8:56:24:be:ed:c0:4b:50:ba:f3:
                    5e:9b:c1:e8:9a:30:c8:db:8b:c3:8d:26:3a:b8:bb:
                    89:1c:10:27:79:9a:17:b7:e4:8f:b9:df:41:0a:8b:
                    c7:9f:ee:38:c9:11:21:fd:3b:db:6c:22:12:f0:56:
                    da:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:82:2D:47:E5:20:27:FD:1C:7C:50:2F:7C:E5:6E:AC:9A:8B:7A:4A
            X509v3 Authority Key Identifier:
                keyid:B0:83:E1:F6:55:4A:0D:AB:0E:83:AC:5C:DA:17:83:B3:B5:A9:95:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/68bEC1wWogkFoTJqmtJhcDg38B4BisDD7Ztxq7syE998/1/B083E1F6554A0DAB0E83AC5CDA1783B3B5A995C8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B083E1F6554A0DAB0E83AC5CDA1783B3B5A995C8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/68bEC1wWogkFoTJqmtJhcDg38B4BisDD7Ztxq7syE998/1/3136372e3235302e38302e302f32322d3234203d3e20323632353032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.250.80.0/22

    Signature Algorithm: sha256WithRSAEncryption
         c8:76:37:26:e1:cc:62:da:17:45:aa:f6:f1:dd:56:c1:46:43:
         e2:1e:ef:7b:83:5a:1f:c0:fd:b0:de:64:84:b9:08:ab:ff:6e:
         9d:d4:4f:9b:09:30:93:c2:ed:2e:84:33:f9:fc:81:97:25:71:
         05:3e:05:2c:e3:8d:30:14:be:53:10:31:dc:57:eb:3c:e3:7f:
         f6:8a:15:b6:1a:41:a5:a0:15:7c:7e:cc:76:8c:0b:1c:29:46:
         ef:08:17:44:e0:4b:ec:7a:99:9a:67:71:ff:a4:3b:bf:83:86:
         33:17:71:a5:13:ad:33:19:ff:43:30:c5:65:7a:b7:de:65:cf:
         4f:d7:bc:85:a3:33:96:7d:f6:0f:ec:06:b2:48:69:40:82:5d:
         76:72:68:28:e2:c5:12:8e:98:90:30:2d:bc:66:e9:16:d4:40:
         de:e4:45:87:d5:75:ad:c4:ec:2a:d1:dd:a8:3f:c7:a0:b1:90:
         3a:a6:ec:36:50:ed:96:87:49:35:07:1d:bd:f3:b5:03:52:ad:
         df:ce:e6:08:79:ba:99:aa:5d:3f:cf:81:d9:a9:ed:a1:ab:b5:
         6f:13:0f:a6:59:04:15:7a:66:68:ee:ae:c4:d5:eb:be:b2:89:
         6e:49:53:b4:2a:da:29:e7:2d:0d:ec:c7:91:01:d2:b1:56:34:
         fc:cc:1d:71
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUAIIcsKZiAlV6QI0P5XwzPdePV28wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjA4M0UxRjY1NTRBMERBQjBFODNBQzVDREExNzgzQjNC
NUE5OTVDODAeFw0yNDA0MDQxMjI4NDZaFw0yNTA0MDMxMjMzNDZaMDMxMTAvBgNV
BAMTKEQzODIyRDQ3RTUyMDI3RkQxQzdDNTAyRjdDRTU2RUFDOUE4QjdBNEEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDvmZQl886+GHFRUyWPd43hRDEE
go+HrOaPrucz6gpnyrdbH8Y+FjLESCE7W0JRLFAblFTl4Iwbxz42mJzIWTD2i67/
1J6QNOFrk+YTR0cNtLKsrctGQwQ5NOUuV4tnJEOArlMvkZvGet9i6e2zwk8T2WmY
kI/DgwBspZzEMFgWhBuNcvh4uZPjTAWQrX7s5jrWujRDXYuqEOzGxwJ2a6JmWQRV
/CS5snXDSOBV+20h8SgLYrOCjz46/GfxLgz9N6/PG6ogYGRW2FYkvu3AS1C6816b
weiaMMjbi8ONJjq4u4kcECd5mhe35I+530EKi8ef7jjJESH9O9tsIhLwVtpvAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU04ItR+UgJ/0cfFAvfOVurJqLekowHwYDVR0j
BBgwFoAUsIPh9lVKDasOg6xc2heDs7WplcgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNjhiRUMxd1dvZ2tGb1RKcW10SmhjRGczOEI0QmlzREQ3WnR4cTdzeUU5
OTgvMS9CMDgzRTFGNjU1NEEwREFCMEU4M0FDNUNEQTE3ODNCM0I1QTk5NUM4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0IwODNFMUY2NTU0QTBEQUIw
RTgzQUM1Q0RBMTc4M0IzQjVBOTk1QzguY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzY4YkVDMXdXb2drRm9USnFtdEpoY0RnMzhCNEJpc0REN1p0eHE3c3lFOTk4LzEv
MzEzNjM3MmUzMjM1MzAyZTM4MzAyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM2
MzIzNTMwMzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAKn+lAwDQYJKoZIhvcNAQELBQADggEBAMh2Nybh
zGLaF0Wq9vHdVsFGQ+Ie73uDWh/A/bDeZIS5CKv/bp3UT5sJMJPC7S6EM/n8gZcl
cQU+BSzjjTAUvlMQMdxX6zzjf/aKFbYaQaWgFXx+zHaMCxwpRu8IF0TgS+x6mZpn
cf+kO7+DhjMXcaUTrTMZ/0MwxWV6t95lz0/XvIWjM5Z99g/sBrJIaUCCXXZyaCji
xRKOmJAwLbxm6RbUQN7kRYfVda3E7CrR3ag/x6CxkDqm7DZQ7ZaHSTUHHb3ztQNS
rd/O5gh5upmqXT/Pgdmp7aGrtW8TD6ZZBBV6ZmjursTV676yiW5JU7Qq2innLQ3s
x5EB0rFWNPzMHXE=
-----END CERTIFICATE-----
Generated at Fri Jun 28 12:21:48 2024 by rpki-client on console-fra.rpki-client.org