Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6aFyUzsQv515RBuYaapg7ot8v2yBWytcpfn57shREgHY/1/3136382e3139352e3231322e302f32322d3332203d3e20323635343338.roa
File:                     3136382e3139352e3231322e302f32322d3332203d3e20323635343338.roa (raw, json)
Hash identifier:          WCox5XHIrn/xo9qGia1xcAfXMIPKyKk3gUKNKlS3fc4=
Subject key identifier:   5B:7D:D6:3D:F6:15:53:A5:1F:29:03:79:48:FB:19:DE:08:24:30:A1
Certificate issuer:       /CN=6F3DC6ECFDEB92A996C6A9AD8D1724E7151ED645
Certificate serial:       1A409F0433C9E0A6438F9736B656128ADC4DFE84
Authority key identifier: 6F:3D:C6:EC:FD:EB:92:A9:96:C6:A9:AD:8D:17:24:E7:15:1E:D6:45
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F3DC6ECFDEB92A996C6A9AD8D1724E7151ED645.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6aFyUzsQv515RBuYaapg7ot8v2yBWytcpfn57shREgHY/1/3136382e3139352e3231322e302f32322d3332203d3e20323635343338.roa
Signing time:             Thu 04 Apr 2024 00:45:34 +0000
ROA not before:           Thu 04 Apr 2024 00:40:34 +0000
ROA not after:            Thu 03 Apr 2025 00:45:34 +0000
asID:                     265438
IP address blocks:        168.195.212.0/22 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6aFyUzsQv515RBuYaapg7ot8v2yBWytcpfn57shREgHY/1/6F3DC6ECFDEB92A996C6A9AD8D1724E7151ED645.crl
                          rsync://rpki-repo.registro.br/repo/6aFyUzsQv515RBuYaapg7ot8v2yBWytcpfn57shREgHY/1/6F3DC6ECFDEB92A996C6A9AD8D1724E7151ED645.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F3DC6ECFDEB92A996C6A9AD8D1724E7151ED645.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 19:40:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:40:9f:04:33:c9:e0:a6:43:8f:97:36:b6:56:12:8a:dc:4d:fe:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6F3DC6ECFDEB92A996C6A9AD8D1724E7151ED645
        Validity
            Not Before: Apr  4 00:40:34 2024 GMT
            Not After : Apr  3 00:45:34 2025 GMT
        Subject: CN=5B7DD63DF61553A51F29037948FB19DE082430A1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:35:d7:19:28:9b:b1:8e:27:8b:ac:37:5e:15:
                    9d:54:4e:9a:76:c5:a9:69:8d:42:6c:5e:b0:30:7a:
                    66:3c:5f:7b:56:05:f1:82:24:a6:e4:15:2d:bf:4c:
                    0f:7d:58:fe:fc:68:0b:6b:d8:ae:e0:fc:68:d6:31:
                    82:27:17:08:8a:c6:d5:a1:ed:20:7c:ac:fb:df:24:
                    7b:95:58:49:ad:2e:f8:d3:97:75:e9:11:7e:bb:40:
                    ec:c7:f4:5a:ec:65:0c:fd:83:42:c9:f3:9b:20:4a:
                    41:b8:b6:a0:4b:fd:20:a3:2b:f7:dd:63:23:44:26:
                    53:7a:e5:1a:b5:ff:da:21:f7:d0:0c:f3:a2:b3:61:
                    17:b4:88:4c:54:36:34:09:9a:4c:6c:7d:da:23:d8:
                    87:b8:32:de:a7:a1:f6:06:19:f5:71:e5:de:d9:fe:
                    ac:79:1d:b4:d8:0c:02:ed:99:e1:2b:78:aa:dc:3d:
                    68:22:53:2a:66:97:6f:a9:59:ff:c5:f4:4b:cb:b5:
                    6f:0e:49:12:04:0b:53:fa:d7:0a:28:a5:be:28:4c:
                    15:ae:35:ba:a5:0e:f6:dc:75:d3:46:ea:26:b6:a5:
                    09:a0:73:0e:ef:4a:f9:c8:eb:0b:fc:99:c6:49:7d:
                    d7:3b:30:c3:05:2e:e5:b9:5a:9d:32:b0:e2:9d:15:
                    c2:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:7D:D6:3D:F6:15:53:A5:1F:29:03:79:48:FB:19:DE:08:24:30:A1
            X509v3 Authority Key Identifier:
                keyid:6F:3D:C6:EC:FD:EB:92:A9:96:C6:A9:AD:8D:17:24:E7:15:1E:D6:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6aFyUzsQv515RBuYaapg7ot8v2yBWytcpfn57shREgHY/1/6F3DC6ECFDEB92A996C6A9AD8D1724E7151ED645.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F3DC6ECFDEB92A996C6A9AD8D1724E7151ED645.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6aFyUzsQv515RBuYaapg7ot8v2yBWytcpfn57shREgHY/1/3136382e3139352e3231322e302f32322d3332203d3e20323635343338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.195.212.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ab:76:df:74:72:6f:ee:53:56:e0:78:4c:e9:d4:1c:8d:93:4f:
         92:35:de:c7:a2:80:d1:30:a4:fc:68:ad:f3:c3:c6:84:10:40:
         5f:34:d1:0c:3f:db:ef:de:42:cd:91:d5:fd:3e:df:2d:af:d6:
         84:85:8c:00:04:f8:fc:49:d1:a6:f3:57:c3:f3:c5:4f:4d:d4:
         52:b0:5e:25:49:d1:e2:53:53:10:49:69:dd:fc:37:b3:dc:82:
         76:3f:33:55:bb:94:fd:c3:68:92:5d:25:32:ec:69:94:49:40:
         f8:26:4f:9c:11:41:aa:78:67:44:59:67:92:09:a0:3b:86:3a:
         3e:74:fc:22:09:ad:31:88:70:5e:be:25:d1:44:17:b4:b6:b4:
         b5:3b:80:b0:8b:eb:59:72:33:cf:9d:fc:68:4f:31:0a:e5:f9:
         bf:13:97:52:3c:e9:73:12:47:74:7c:75:a8:9e:c0:34:31:5d:
         c6:cb:bb:a5:8b:2e:a8:01:17:ae:cc:8f:7e:d1:74:48:45:33:
         66:3e:02:63:ce:5e:93:b3:1e:46:b8:cf:3a:ad:f5:e5:20:18:
         e1:86:e9:58:fe:2f:cb:07:70:07:5f:2a:3b:cb:d8:a4:82:42:
         79:2c:f1:37:e7:d1:4d:d1:6a:20:82:54:77:21:dd:95:12:c0:
         9c:5e:cb:5a
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUGkCfBDPJ4KZDj5c2tlYSitxN/oQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkYzREM2RUNGREVCOTJBOTk2QzZBOUFEOEQxNzI0RTcx
NTFFRDY0NTAeFw0yNDA0MDQwMDQwMzRaFw0yNTA0MDMwMDQ1MzRaMDMxMTAvBgNV
BAMTKDVCN0RENjNERjYxNTUzQTUxRjI5MDM3OTQ4RkIxOURFMDgyNDMwQTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCaNdcZKJuxjieLrDdeFZ1UTpp2
xalpjUJsXrAwemY8X3tWBfGCJKbkFS2/TA99WP78aAtr2K7g/GjWMYInFwiKxtWh
7SB8rPvfJHuVWEmtLvjTl3XpEX67QOzH9FrsZQz9g0LJ85sgSkG4tqBL/SCjK/fd
YyNEJlN65Rq1/9oh99AM86KzYRe0iExUNjQJmkxsfdoj2Ie4Mt6nofYGGfVx5d7Z
/qx5HbTYDALtmeEreKrcPWgiUypml2+pWf/F9EvLtW8OSRIEC1P61woopb4oTBWu
NbqlDvbcddNG6ia2pQmgcw7vSvnI6wv8mcZJfdc7MMMFLuW5Wp0ysOKdFcLvAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUW33WPfYVU6UfKQN5SPsZ3ggkMKEwHwYDVR0j
BBgwFoAUbz3G7P3rkqmWxqmtjRck5xUe1kUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNmFGeVV6c1F2NTE1UkJ1WWFhcGc3b3Q4djJ5Qld5dGNwZm41N3NoUkVn
SFkvMS82RjNEQzZFQ0ZERUI5MkE5OTZDNkE5QUQ4RDE3MjRFNzE1MUVENjQ1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzZGM0RDNkVDRkRFQjkyQTk5
NkM2QTlBRDhEMTcyNEU3MTUxRUQ2NDUuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzZhRnlVenNRdjUxNVJCdVlhYXBnN290OHYyeUJXeXRjcGZuNTdzaFJFZ0hZLzEv
MzEzNjM4MmUzMTM5MzUyZTMyMzEzMjJlMzAyZjMyMzIyZDMzMzIyMDNkM2UyMDMy
MzYzNTM0MzMzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAqjD1DANBgkqhkiG9w0BAQsFAAOCAQEAq3bf
dHJv7lNW4HhM6dQcjZNPkjXex6KA0TCk/Git88PGhBBAXzTRDD/b795CzZHV/T7f
La/WhIWMAAT4/EnRpvNXw/PFT03UUrBeJUnR4lNTEElp3fw3s9yCdj8zVbuU/cNo
kl0lMuxplElA+CZPnBFBqnhnRFlnkgmgO4Y6PnT8IgmtMYhwXr4l0UQXtLa0tTuA
sIvrWXIzz538aE8xCuX5vxOXUjzpcxJHdHx1qJ7ANDFdxsu7pYsuqAEXrsyPftF0
SEUzZj4CY85ek7MeRrjPOq315SAY4YbpWP4vywdwB18qO8vYpIJCeSzxN+fRTdFq
IIJUdyHdlRLAnF7LWg==
-----END CERTIFICATE-----
Generated at Fri Nov 22 19:44:18 2024 by rpki-client on console-ams.rpki-client.org