Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6ahmpsQfnRn1iFyCyod8a8PXichWgwJaj3eSNVrUq4m/0/3136342e3136332e3233322e302f32322d3232203d3e20323635393833.roa
File:                     3136342e3136332e3233322e302f32322d3232203d3e20323635393833.roa (raw, json)
Hash identifier:          fy4Dmj+WqTJBkiFRs9uuazYPuDgBtc28Xo4R9lArMuY=
Subject key identifier:   27:D3:6D:B3:E6:30:DD:5E:A8:DF:55:EA:D5:16:EC:8E:B3:A3:DB:AD
Certificate issuer:       /CN=C54547ACB75BBBCF83A5C4E8CEFE0C8EA3CDB017
Certificate serial:       4FD79451AE2E58222E2BB5AA4EB2124CD6899C9A
Authority key identifier: C5:45:47:AC:B7:5B:BB:CF:83:A5:C4:E8:CE:FE:0C:8E:A3:CD:B0:17
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C54547ACB75BBBCF83A5C4E8CEFE0C8EA3CDB017.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6ahmpsQfnRn1iFyCyod8a8PXichWgwJaj3eSNVrUq4m/0/3136342e3136332e3233322e302f32322d3232203d3e20323635393833.roa
Signing time:             Thu 18 Apr 2024 11:39:11 +0000
ROA not before:           Thu 18 Apr 2024 11:34:11 +0000
ROA not after:            Thu 17 Apr 2025 11:39:11 +0000
asID:                     265983
IP address blocks:        164.163.232.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6ahmpsQfnRn1iFyCyod8a8PXichWgwJaj3eSNVrUq4m/0/C54547ACB75BBBCF83A5C4E8CEFE0C8EA3CDB017.crl
                          rsync://rpki-repo.registro.br/repo/6ahmpsQfnRn1iFyCyod8a8PXichWgwJaj3eSNVrUq4m/0/C54547ACB75BBBCF83A5C4E8CEFE0C8EA3CDB017.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C54547ACB75BBBCF83A5C4E8CEFE0C8EA3CDB017.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 06:55:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:d7:94:51:ae:2e:58:22:2e:2b:b5:aa:4e:b2:12:4c:d6:89:9c:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C54547ACB75BBBCF83A5C4E8CEFE0C8EA3CDB017
        Validity
            Not Before: Apr 18 11:34:11 2024 GMT
            Not After : Apr 17 11:39:11 2025 GMT
        Subject: CN=27D36DB3E630DD5EA8DF55EAD516EC8EB3A3DBAD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:1f:7c:e6:a8:6f:6f:e3:40:c3:a2:17:41:0a:
                    2c:7f:a1:82:48:7c:52:09:a2:0d:63:f7:31:36:ad:
                    f9:ca:78:d7:10:9b:f6:ee:09:2b:a6:fc:f1:54:4c:
                    83:14:57:6c:75:8b:ff:89:86:13:1f:e5:22:77:80:
                    49:9a:a1:98:90:40:16:6d:6d:82:ad:a3:76:28:58:
                    bc:f3:97:e0:e7:76:8b:8a:78:97:1d:d7:d6:b2:f0:
                    49:13:15:29:c5:89:09:6e:75:b8:ea:8f:d8:33:48:
                    c0:b3:47:f9:6c:61:c0:9c:06:02:15:ac:79:fc:2d:
                    96:51:b8:cf:ad:ad:0e:6d:17:db:f2:ce:c8:bf:d5:
                    dd:35:d0:c4:cf:3d:7a:d2:3b:fc:9d:7a:6b:04:a5:
                    1b:b4:aa:d8:48:34:06:c8:a9:8d:37:d3:58:84:bf:
                    1f:fa:4d:73:d2:ae:1c:f0:8b:a7:54:95:5a:6f:b6:
                    b7:45:8a:9a:33:4d:3a:8e:4b:49:9e:6e:16:95:6b:
                    28:85:2b:03:c0:8e:d7:fb:d6:a4:8b:31:a5:de:2e:
                    dd:1e:67:8d:da:6d:60:ad:8b:98:9c:b9:4e:90:1c:
                    7e:61:3d:b0:8d:96:8f:62:6c:2a:66:97:e9:95:33:
                    e2:fa:51:83:7a:13:27:b8:65:82:09:ad:3e:ed:23:
                    1e:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:D3:6D:B3:E6:30:DD:5E:A8:DF:55:EA:D5:16:EC:8E:B3:A3:DB:AD
            X509v3 Authority Key Identifier:
                keyid:C5:45:47:AC:B7:5B:BB:CF:83:A5:C4:E8:CE:FE:0C:8E:A3:CD:B0:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6ahmpsQfnRn1iFyCyod8a8PXichWgwJaj3eSNVrUq4m/0/C54547ACB75BBBCF83A5C4E8CEFE0C8EA3CDB017.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C54547ACB75BBBCF83A5C4E8CEFE0C8EA3CDB017.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6ahmpsQfnRn1iFyCyod8a8PXichWgwJaj3eSNVrUq4m/0/3136342e3136332e3233322e302f32322d3232203d3e20323635393833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.163.232.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3e:6b:65:52:12:6c:e0:68:9e:29:be:40:f1:ff:0a:11:15:fb:
         49:f0:03:63:eb:fd:94:97:ae:eb:fe:42:68:d6:2f:ee:8a:94:
         6f:ff:46:29:cf:8c:cc:05:03:1c:8a:e6:80:31:8c:eb:d3:41:
         92:6f:c7:7c:43:99:c4:40:8c:5c:10:77:2a:ad:06:1b:68:84:
         35:4a:c7:ff:d0:6e:73:74:80:7c:2c:94:97:ec:99:4f:4b:48:
         59:2d:e6:ca:df:86:57:b5:6d:1f:ef:74:56:5b:83:32:a8:ad:
         ac:00:4e:d5:21:1e:39:c7:24:b4:3d:b5:38:b3:d4:c7:24:e2:
         94:bc:3c:1f:57:b5:4e:a4:ec:ad:95:6e:f1:83:67:16:a8:b5:
         61:e5:32:45:3d:c0:26:e1:2d:38:a9:63:62:14:0a:43:c7:ee:
         31:0a:65:84:a0:1e:51:90:94:5c:f8:62:47:28:de:b5:bd:0e:
         bd:15:dd:57:bf:f9:63:06:e2:25:32:cb:52:5b:da:1a:11:02:
         ac:1d:84:b4:43:7e:f2:b3:e3:dd:c2:ac:c9:48:c1:47:8a:7f:
         f7:11:4a:d6:2c:dd:a7:c8:bc:af:dd:cb:56:1c:46:11:cb:84:
         91:05:9a:73:44:4d:ec:39:3d:dd:86:ac:13:5b:4d:96:c3:00:
         84:cd:24:e4
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUT9eUUa4uWCIuK7WqTrISTNaJnJowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzU0NTQ3QUNCNzVCQkJDRjgzQTVDNEU4Q0VGRTBDOEVB
M0NEQjAxNzAeFw0yNDA0MTgxMTM0MTFaFw0yNTA0MTcxMTM5MTFaMDMxMTAvBgNV
BAMTKDI3RDM2REIzRTYzMERENUVBOERGNTVFQUQ1MTZFQzhFQjNBM0RCQUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+H3zmqG9v40DDohdBCix/oYJI
fFIJog1j9zE2rfnKeNcQm/buCSum/PFUTIMUV2x1i/+JhhMf5SJ3gEmaoZiQQBZt
bYKto3YoWLzzl+DndouKeJcd19ay8EkTFSnFiQludbjqj9gzSMCzR/lsYcCcBgIV
rHn8LZZRuM+trQ5tF9vyzsi/1d010MTPPXrSO/ydemsEpRu0qthINAbIqY0301iE
vx/6TXPSrhzwi6dUlVpvtrdFipozTTqOS0mebhaVayiFKwPAjtf71qSLMaXeLt0e
Z43abWCti5icuU6QHH5hPbCNlo9ibCpml+mVM+L6UYN6Eye4ZYIJrT7tIx6NAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUJ9Nts+Yw3V6o31Xq1RbsjrOj260wHwYDVR0j
BBgwFoAUxUVHrLdbu8+DpcTozv4MjqPNsBcwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby82YWhtcHNRZm5SbjFpRnlDeW9kOGE4UFhpY2hXZ3dKYWozZVNOVnJVcTRt
LzAvQzU0NTQ3QUNCNzVCQkJDRjgzQTVDNEU4Q0VGRTBDOEVBM0NEQjAxNy5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS9DNTQ1NDdBQ0I3NUJCQkNGODNB
NUM0RThDRUZFMEM4RUEzQ0RCMDE3LmNlcjCBrwYIKwYBBQUHAQsEgaIwgZ8wgZwG
CCsGAQUFBzALhoGPcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby82
YWhtcHNRZm5SbjFpRnlDeW9kOGE4UFhpY2hXZ3dKYWozZVNOVnJVcTRtLzAvMzEz
NjM0MmUzMTM2MzMyZTMyMzMzMjJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDMyMzYz
NTM5MzgzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcB
BwEB/wQQMA4wDAQCAAEwBgMEAqSj6DANBgkqhkiG9w0BAQsFAAOCAQEAPmtlUhJs
4GieKb5A8f8KERX7SfADY+v9lJeu6/5CaNYv7oqUb/9GKc+MzAUDHIrmgDGM69NB
km/HfEOZxECMXBB3Kq0GG2iENUrH/9Buc3SAfCyUl+yZT0tIWS3myt+GV7VtH+90
VluDMqitrABO1SEeOccktD21OLPUxyTilLw8H1e1TqTsrZVu8YNnFqi1YeUyRT3A
JuEtOKljYhQKQ8fuMQplhKAeUZCUXPhiRyjetb0OvRXdV7/5YwbiJTLLUlvaGhEC
rB2EtEN+8rPj3cKsyUjBR4p/9xFK1izdp8i8r93LVhxGEcuEkQWac0RN7Dk93Yas
E1tNlsMAhM0k5A==
-----END CERTIFICATE-----
Generated at Fri Jun 28 09:50:57 2024 by rpki-client on console-ams.rpki-client.org