Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6MAPURaQMTkfjJd9YMGCjVf8f45rkVfmPdYWFDeoBV8A/1/3136302e3233382e3133302e302f32332d3233203d3e20323636353437.roa
File:                     3136302e3233382e3133302e302f32332d3233203d3e20323636353437.roa (raw, json)
Hash identifier:          wVvrUFEKd8lzOUtdDLOGQp9QeDJuoH8l0ZSuP68PFpU=
Subject key identifier:   1E:5E:31:76:57:F4:16:ED:0B:CA:3C:25:84:E4:DD:56:74:F0:EE:D7
Certificate issuer:       /CN=164081884269A17674589E45798EE6EE0A93A94E
Certificate serial:       44CCC5B65F63609DE9B6BF9357DB2B7FE66E07B9
Authority key identifier: 16:40:81:88:42:69:A1:76:74:58:9E:45:79:8E:E6:EE:0A:93:A9:4E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/164081884269A17674589E45798EE6EE0A93A94E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6MAPURaQMTkfjJd9YMGCjVf8f45rkVfmPdYWFDeoBV8A/1/3136302e3233382e3133302e302f32332d3233203d3e20323636353437.roa
Signing time:             Thu 04 Apr 2024 09:19:57 +0000
ROA not before:           Thu 04 Apr 2024 09:14:57 +0000
ROA not after:            Thu 03 Apr 2025 09:19:57 +0000
asID:                     266547
IP address blocks:        160.238.130.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6MAPURaQMTkfjJd9YMGCjVf8f45rkVfmPdYWFDeoBV8A/1/164081884269A17674589E45798EE6EE0A93A94E.crl
                          rsync://rpki-repo.registro.br/repo/6MAPURaQMTkfjJd9YMGCjVf8f45rkVfmPdYWFDeoBV8A/1/164081884269A17674589E45798EE6EE0A93A94E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/164081884269A17674589E45798EE6EE0A93A94E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:20:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:cc:c5:b6:5f:63:60:9d:e9:b6:bf:93:57:db:2b:7f:e6:6e:07:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=164081884269A17674589E45798EE6EE0A93A94E
        Validity
            Not Before: Apr  4 09:14:57 2024 GMT
            Not After : Apr  3 09:19:57 2025 GMT
        Subject: CN=1E5E317657F416ED0BCA3C2584E4DD5674F0EED7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:9e:ac:c3:c5:95:53:c1:04:d4:50:d5:d1:ac:
                    94:03:75:8b:1d:e3:40:43:35:53:bf:c7:5a:ab:cb:
                    ee:3d:66:c8:ed:14:43:44:60:c2:f6:7d:83:f5:dc:
                    43:a5:10:d5:10:c4:c1:ab:5c:ae:6b:bf:79:2b:27:
                    ad:b7:e3:71:de:1e:ac:4a:7d:ba:eb:f2:53:75:c0:
                    b1:13:a8:fa:cf:43:6a:46:22:d2:5a:c2:93:41:02:
                    d3:e1:ed:3c:14:52:b3:f2:9d:3b:2e:c3:f1:24:03:
                    19:4e:6a:02:97:37:ed:f7:ac:25:52:14:54:9b:d9:
                    9d:40:cc:42:8a:78:b7:fb:59:69:da:f5:bb:2a:9b:
                    d0:ef:59:e9:b7:7d:7d:f3:ab:34:f9:26:86:55:eb:
                    45:7e:a1:c7:b4:1d:04:c2:a0:fb:2d:90:56:fa:7e:
                    11:da:52:8e:f6:30:a9:f1:a8:df:ba:db:ba:07:a1:
                    14:9f:45:ae:5d:03:55:af:f5:5a:db:3b:c1:85:51:
                    44:85:53:b6:f3:26:3a:e1:9d:90:ee:4b:02:1d:f9:
                    e7:62:e5:f4:36:85:be:94:65:05:b7:83:9e:5e:4c:
                    d1:4b:73:42:ab:63:aa:a5:6c:68:23:64:59:5e:4a:
                    c7:2e:6c:ee:da:bd:ea:e7:27:13:35:b8:b2:97:cb:
                    d1:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:5E:31:76:57:F4:16:ED:0B:CA:3C:25:84:E4:DD:56:74:F0:EE:D7
            X509v3 Authority Key Identifier:
                keyid:16:40:81:88:42:69:A1:76:74:58:9E:45:79:8E:E6:EE:0A:93:A9:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6MAPURaQMTkfjJd9YMGCjVf8f45rkVfmPdYWFDeoBV8A/1/164081884269A17674589E45798EE6EE0A93A94E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/164081884269A17674589E45798EE6EE0A93A94E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6MAPURaQMTkfjJd9YMGCjVf8f45rkVfmPdYWFDeoBV8A/1/3136302e3233382e3133302e302f32332d3233203d3e20323636353437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.238.130.0/23

    Signature Algorithm: sha256WithRSAEncryption
         58:0f:b2:86:e2:0e:b5:cf:9f:f1:5d:92:9f:21:12:68:52:b9:
         98:c5:7b:da:ca:f2:fa:31:be:d7:90:20:3f:df:84:6f:72:d2:
         ad:47:21:2a:16:38:50:58:5b:6f:f6:e7:7a:dc:85:88:07:f8:
         18:5a:1b:bf:95:8f:a2:33:1d:17:9c:f9:48:b4:fc:da:1b:7b:
         7b:8a:65:dd:ba:df:20:65:44:5f:61:74:1f:48:15:60:a0:2c:
         97:ca:ce:4b:71:38:da:2d:8a:17:a3:75:06:3b:07:c2:a8:81:
         9b:75:c7:34:4c:77:4b:7b:45:07:d5:32:46:4d:57:29:0e:f7:
         7b:c9:03:ef:d0:f3:62:0b:f9:1a:53:43:0c:c6:75:7d:a7:74:
         8a:62:8d:85:6c:e4:00:0a:21:69:40:bf:55:c1:3a:47:65:fe:
         8b:2d:b2:14:2b:bb:80:d2:33:95:30:46:c3:d6:d0:ce:0f:3e:
         6a:94:00:95:11:52:6d:4e:51:65:0a:23:d3:34:19:93:92:c0:
         56:32:83:68:2f:35:c5:65:59:84:40:4f:37:f8:a1:98:d0:84:
         8d:6f:c9:32:92:fc:db:02:43:20:47:43:5f:a6:dc:49:03:bd:
         8a:a7:55:cb:64:7a:16:3d:e6:bd:fb:d3:e4:93:eb:7f:d3:6b:
         f6:7a:7b:a0
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIURMzFtl9jYJ3ptr+TV9srf+ZuB7kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTY0MDgxODg0MjY5QTE3Njc0NTg5RTQ1Nzk4RUU2RUUw
QTkzQTk0RTAeFw0yNDA0MDQwOTE0NTdaFw0yNTA0MDMwOTE5NTdaMDMxMTAvBgNV
BAMTKDFFNUUzMTc2NTdGNDE2RUQwQkNBM0MyNTg0RTRERDU2NzRGMEVFRDcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpnqzDxZVTwQTUUNXRrJQDdYsd
40BDNVO/x1qry+49ZsjtFENEYML2fYP13EOlENUQxMGrXK5rv3krJ62343HeHqxK
fbrr8lN1wLETqPrPQ2pGItJawpNBAtPh7TwUUrPynTsuw/EkAxlOagKXN+33rCVS
FFSb2Z1AzEKKeLf7WWna9bsqm9DvWem3fX3zqzT5JoZV60V+oce0HQTCoPstkFb6
fhHaUo72MKnxqN+627oHoRSfRa5dA1Wv9VrbO8GFUUSFU7bzJjrhnZDuSwId+edi
5fQ2hb6UZQW3g55eTNFLc0KrY6qlbGgjZFleSscubO7avernJxM1uLKXy9HJAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUHl4xdlf0Fu0LyjwlhOTdVnTw7tcwHwYDVR0j
BBgwFoAUFkCBiEJpoXZ0WJ5FeY7m7gqTqU4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNk1BUFVSYVFNVGtmakpkOVlNR0NqVmY4ZjQ1cmtWZm1QZFlXRkRlb0JW
OEEvMS8xNjQwODE4ODQyNjlBMTc2NzQ1ODlFNDU3OThFRTZFRTBBOTNBOTRFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzE2NDA4MTg4NDI2OUExNzY3
NDU4OUU0NTc5OEVFNkVFMEE5M0E5NEUuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzZNQVBVUmFRTVRrZmpKZDlZTUdDalZmOGY0NXJrVmZtUGRZV0ZEZW9CVjhBLzEv
MzEzNjMwMmUzMjMzMzgyZTMxMzMzMDJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDMy
MzYzNjM1MzQzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAaDugjANBgkqhkiG9w0BAQsFAAOCAQEAWA+y
huIOtc+f8V2SnyESaFK5mMV72sry+jG+15AgP9+Eb3LSrUchKhY4UFhbb/bnetyF
iAf4GFobv5WPojMdF5z5SLT82ht7e4pl3brfIGVEX2F0H0gVYKAsl8rOS3E42i2K
F6N1BjsHwqiBm3XHNEx3S3tFB9UyRk1XKQ73e8kD79DzYgv5GlNDDMZ1fad0imKN
hWzkAAohaUC/VcE6R2X+iy2yFCu7gNIzlTBGw9bQzg8+apQAlRFSbU5RZQoj0zQZ
k5LAVjKDaC81xWVZhEBPN/ihmNCEjW/JMpL82wJDIEdDX6bcSQO9iqdVy2R6Fj3m
vfvT5JPrf9Nr9np7oA==
-----END CERTIFICATE-----
Generated at Fri Nov 22 22:09:59 2024 by rpki-client on console-ams.rpki-client.org