Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6SSqTpiCLEJnD1eo6tooSsQ3Lp2LRL23tGN73DrDFgc6/1/3136382e3232372e3137322e302f32322d3332203d3e20323634383831.roa
File:                     3136382e3232372e3137322e302f32322d3332203d3e20323634383831.roa (raw, json)
Hash identifier:          4KUH2rcbgbQYWk24NtVdzZEsgAVPi0yYpRlcudhQkoY=
Subject key identifier:   04:92:11:4C:DE:67:56:87:6B:DF:53:D5:0D:37:B4:16:FD:27:12:B9
Certificate issuer:       /CN=EA3BF4282B2E55EC948E8D55C9C500F53DD2E574
Certificate serial:       68392C7D6BB229A126E5E4EC6881CB244E6A69DD
Authority key identifier: EA:3B:F4:28:2B:2E:55:EC:94:8E:8D:55:C9:C5:00:F5:3D:D2:E5:74
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EA3BF4282B2E55EC948E8D55C9C500F53DD2E574.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6SSqTpiCLEJnD1eo6tooSsQ3Lp2LRL23tGN73DrDFgc6/1/3136382e3232372e3137322e302f32322d3332203d3e20323634383831.roa
Signing time:             Thu 04 Apr 2024 13:24:46 +0000
ROA not before:           Thu 04 Apr 2024 13:19:46 +0000
ROA not after:            Thu 03 Apr 2025 13:24:46 +0000
asID:                     264881
IP address blocks:        168.227.172.0/22 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6SSqTpiCLEJnD1eo6tooSsQ3Lp2LRL23tGN73DrDFgc6/1/EA3BF4282B2E55EC948E8D55C9C500F53DD2E574.crl
                          rsync://rpki-repo.registro.br/repo/6SSqTpiCLEJnD1eo6tooSsQ3Lp2LRL23tGN73DrDFgc6/1/EA3BF4282B2E55EC948E8D55C9C500F53DD2E574.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EA3BF4282B2E55EC948E8D55C9C500F53DD2E574.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:39:2c:7d:6b:b2:29:a1:26:e5:e4:ec:68:81:cb:24:4e:6a:69:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EA3BF4282B2E55EC948E8D55C9C500F53DD2E574
        Validity
            Not Before: Apr  4 13:19:46 2024 GMT
            Not After : Apr  3 13:24:46 2025 GMT
        Subject: CN=0492114CDE6756876BDF53D50D37B416FD2712B9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:46:e6:2e:43:b2:13:0d:e9:93:a7:3d:0f:c0:
                    af:13:8d:23:49:37:13:a8:0a:a3:f8:b8:d2:db:69:
                    fb:0e:76:1a:3d:8c:e3:0e:6d:af:2d:df:52:de:d6:
                    e3:67:16:d3:a7:75:f9:6f:71:6e:9c:f1:29:46:37:
                    46:59:97:80:e3:bf:bf:03:35:15:59:c5:fe:cf:72:
                    38:65:4b:cb:5f:89:c0:80:af:dd:45:3d:21:33:f5:
                    1e:43:13:86:62:9a:62:a9:cf:95:81:2e:61:fe:f4:
                    9d:13:7d:fe:12:37:42:e4:a2:9d:90:2d:9b:6c:39:
                    f3:5f:f0:50:02:38:0f:4e:88:a0:ac:f2:e1:20:e0:
                    75:b6:1c:94:90:3a:35:67:51:e3:fb:f9:98:67:bc:
                    6f:e9:24:58:a3:97:d1:70:0e:aa:76:26:c4:25:6a:
                    ed:29:31:65:75:4b:a2:31:5e:94:7a:ed:82:de:00:
                    6c:52:b1:58:0c:13:77:c1:b8:52:f1:31:de:95:8a:
                    f5:8c:cf:cc:3d:86:35:f9:a3:fc:6d:4c:68:ec:e9:
                    82:91:b4:3c:27:19:eb:5d:99:4c:6a:55:1f:e7:76:
                    24:8a:5d:c2:ad:ea:94:ff:48:23:9f:28:72:be:af:
                    66:87:32:f6:0b:07:a0:35:e6:d0:65:7c:82:e0:fe:
                    58:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:92:11:4C:DE:67:56:87:6B:DF:53:D5:0D:37:B4:16:FD:27:12:B9
            X509v3 Authority Key Identifier:
                keyid:EA:3B:F4:28:2B:2E:55:EC:94:8E:8D:55:C9:C5:00:F5:3D:D2:E5:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6SSqTpiCLEJnD1eo6tooSsQ3Lp2LRL23tGN73DrDFgc6/1/EA3BF4282B2E55EC948E8D55C9C500F53DD2E574.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EA3BF4282B2E55EC948E8D55C9C500F53DD2E574.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6SSqTpiCLEJnD1eo6tooSsQ3Lp2LRL23tGN73DrDFgc6/1/3136382e3232372e3137322e302f32322d3332203d3e20323634383831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.227.172.0/22

    Signature Algorithm: sha256WithRSAEncryption
         89:28:01:00:57:4a:a5:e2:58:e3:b8:c6:5b:91:49:0d:45:59:
         56:d6:95:b8:06:c6:63:b3:6e:54:de:51:80:de:fe:e5:7d:e6:
         1e:7e:2d:a0:1c:8e:6d:12:0d:71:66:99:04:df:ab:22:3e:59:
         db:00:53:df:68:ea:4c:df:0c:72:f0:aa:b5:38:ec:e7:6a:7f:
         ba:bc:48:f8:c9:44:17:79:5c:48:64:7f:57:69:bd:95:e8:6d:
         10:3c:7d:1d:00:65:7c:cd:47:e8:f7:37:61:98:c1:79:bd:34:
         6b:96:49:d1:70:06:75:a2:da:fc:3e:69:f1:f0:78:fd:a0:3b:
         5a:a0:2b:25:1a:d2:7b:a7:eb:64:4d:a0:a9:ba:86:5b:61:f9:
         91:40:2c:d0:23:0a:02:57:63:e3:9f:0e:c9:a5:78:38:57:3b:
         ee:a9:06:f9:af:3d:6b:08:e2:f0:d9:7c:d9:dc:83:cf:43:f3:
         fa:9d:6c:56:30:96:9c:17:1f:f9:fe:d4:06:dd:70:e0:00:45:
         ea:d8:97:bc:14:f3:9c:9f:65:54:85:ef:7e:be:b1:fc:5e:21:
         7a:f6:36:3e:c5:22:fc:48:08:65:23:5f:e0:60:7f:60:f3:26:
         9c:8d:de:b9:a7:e0:6f:95:0e:b6:c5:4a:e5:4b:43:56:b0:61:
         54:f6:7f:fd
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUaDksfWuyKaEm5eTsaIHLJE5qad0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUEzQkY0MjgyQjJFNTVFQzk0OEU4RDU1QzlDNTAwRjUz
REQyRTU3NDAeFw0yNDA0MDQxMzE5NDZaFw0yNTA0MDMxMzI0NDZaMDMxMTAvBgNV
BAMTKDA0OTIxMTRDREU2NzU2ODc2QkRGNTNENTBEMzdCNDE2RkQyNzEyQjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYRuYuQ7ITDemTpz0PwK8TjSNJ
NxOoCqP4uNLbafsOdho9jOMOba8t31Le1uNnFtOndflvcW6c8SlGN0ZZl4Djv78D
NRVZxf7PcjhlS8tficCAr91FPSEz9R5DE4ZimmKpz5WBLmH+9J0Tff4SN0Lkop2Q
LZtsOfNf8FACOA9OiKCs8uEg4HW2HJSQOjVnUeP7+ZhnvG/pJFijl9FwDqp2JsQl
au0pMWV1S6IxXpR67YLeAGxSsVgME3fBuFLxMd6VivWMz8w9hjX5o/xtTGjs6YKR
tDwnGetdmUxqVR/ndiSKXcKt6pT/SCOfKHK+r2aHMvYLB6A15tBlfILg/lhbAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUBJIRTN5nVodr31PVDTe0Fv0nErkwHwYDVR0j
BBgwFoAU6jv0KCsuVeyUjo1VycUA9T3S5XQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNlNTcVRwaUNMRUpuRDFlbzZ0b29Tc1EzTHAyTFJMMjN0R043M0RyREZn
YzYvMS9FQTNCRjQyODJCMkU1NUVDOTQ4RThENTVDOUM1MDBGNTNERDJFNTc0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0VBM0JGNDI4MkIyRTU1RUM5
NDhFOEQ1NUM5QzUwMEY1M0REMkU1NzQuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzZTU3FUcGlDTEVKbkQxZW82dG9vU3NRM0xwMkxSTDIzdEdONzNEckRGZ2M2LzEv
MzEzNjM4MmUzMjMyMzcyZTMxMzczMjJlMzAyZjMyMzIyZDMzMzIyMDNkM2UyMDMy
MzYzNDM4MzgzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAqjjrDANBgkqhkiG9w0BAQsFAAOCAQEAiSgB
AFdKpeJY47jGW5FJDUVZVtaVuAbGY7NuVN5RgN7+5X3mHn4toByObRINcWaZBN+r
Ij5Z2wBT32jqTN8McvCqtTjs52p/urxI+MlEF3lcSGR/V2m9lehtEDx9HQBlfM1H
6Pc3YZjBeb00a5ZJ0XAGdaLa/D5p8fB4/aA7WqArJRrSe6frZE2gqbqGW2H5kUAs
0CMKAldj458OyaV4OFc77qkG+a89awji8Nl82dyDz0Pz+p1sVjCWnBcf+f7UBt1w
4ABF6tiXvBTznJ9lVIXvfr6x/F4hevY2PsUi/EgIZSNf4GB/YPMmnI3euafgb5UO
tsVK5UtDVrBhVPZ//Q==
-----END CERTIFICATE-----
Generated at Sat Nov 23 01:25:32 2024 by rpki-client on console-ams.rpki-client.org