Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6qbLMkv9NeoEhgbgECEYMZ85Ctnq7dBJaL3RyaNDmXy5/1/3133312e3136312e3135362e302f32322d3234203d3e20323634333930.roa
File:                     3133312e3136312e3135362e302f32322d3234203d3e20323634333930.roa (raw, json)
Hash identifier:          YIS9Jlc6kBCsrhoRbWb2TrtLKUkRqcpaWe69Hjsqx/g=
Subject key identifier:   FC:AF:6C:A8:97:47:AA:B1:98:A8:C9:A4:FC:AA:E4:BE:58:F0:C2:D8
Certificate issuer:       /CN=7DD9337D328A8B57E99FCF1A8378EC259B235013
Certificate serial:       5F27D4F841BF459B4BA5FDE7A71A6AA1D6C6B6DF
Authority key identifier: 7D:D9:33:7D:32:8A:8B:57:E9:9F:CF:1A:83:78:EC:25:9B:23:50:13
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7DD9337D328A8B57E99FCF1A8378EC259B235013.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6qbLMkv9NeoEhgbgECEYMZ85Ctnq7dBJaL3RyaNDmXy5/1/3133312e3136312e3135362e302f32322d3234203d3e20323634333930.roa
Signing time:             Thu 04 Apr 2024 20:29:24 +0000
ROA not before:           Thu 04 Apr 2024 20:24:24 +0000
ROA not after:            Thu 03 Apr 2025 20:29:24 +0000
asID:                     264390
IP address blocks:        131.161.156.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6qbLMkv9NeoEhgbgECEYMZ85Ctnq7dBJaL3RyaNDmXy5/1/7DD9337D328A8B57E99FCF1A8378EC259B235013.crl
                          rsync://rpki-repo.registro.br/repo/6qbLMkv9NeoEhgbgECEYMZ85Ctnq7dBJaL3RyaNDmXy5/1/7DD9337D328A8B57E99FCF1A8378EC259B235013.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7DD9337D328A8B57E99FCF1A8378EC259B235013.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 07:55:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:27:d4:f8:41:bf:45:9b:4b:a5:fd:e7:a7:1a:6a:a1:d6:c6:b6:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7DD9337D328A8B57E99FCF1A8378EC259B235013
        Validity
            Not Before: Apr  4 20:24:24 2024 GMT
            Not After : Apr  3 20:29:24 2025 GMT
        Subject: CN=FCAF6CA89747AAB198A8C9A4FCAAE4BE58F0C2D8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:71:c5:d7:50:7a:51:1a:0f:bb:1b:bf:3e:ea:
                    74:d4:bb:85:d8:c1:ea:ef:73:c9:aa:37:fd:22:da:
                    6b:9c:f8:e2:72:8d:bf:0f:95:87:54:17:05:dd:45:
                    c3:60:b9:db:e0:fb:8b:ae:fa:40:21:04:da:3e:67:
                    86:25:b8:07:57:56:bf:da:71:da:8a:59:62:38:37:
                    9e:f2:d3:97:6a:5e:00:04:cc:60:19:5d:8e:9c:f2:
                    56:ef:31:0a:36:46:98:27:d8:9b:94:07:30:5f:b5:
                    6c:14:4e:92:4d:52:fd:b1:62:fd:a2:84:fd:7e:04:
                    ae:5c:e5:76:18:91:d6:9a:c7:61:87:f3:5a:2a:19:
                    5a:98:6e:6f:95:20:b3:4a:da:05:5f:a6:11:f5:19:
                    85:07:d2:97:46:d3:db:02:8a:24:d5:e5:95:f0:20:
                    a5:3b:82:c3:76:dc:7d:b7:71:1a:6c:0d:01:15:72:
                    8e:55:d6:33:20:05:8d:9c:78:bd:e6:cf:01:1d:d2:
                    64:d3:a0:d1:c0:ab:61:f0:58:ae:62:94:cd:85:41:
                    9a:15:52:fa:e7:91:6e:17:e1:ac:40:b7:5c:d6:34:
                    04:ce:a9:42:74:09:21:02:57:d8:af:1d:2f:6b:0d:
                    28:23:66:a5:e1:9a:81:0c:86:5f:6f:9f:69:60:d0:
                    7b:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:AF:6C:A8:97:47:AA:B1:98:A8:C9:A4:FC:AA:E4:BE:58:F0:C2:D8
            X509v3 Authority Key Identifier:
                keyid:7D:D9:33:7D:32:8A:8B:57:E9:9F:CF:1A:83:78:EC:25:9B:23:50:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6qbLMkv9NeoEhgbgECEYMZ85Ctnq7dBJaL3RyaNDmXy5/1/7DD9337D328A8B57E99FCF1A8378EC259B235013.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7DD9337D328A8B57E99FCF1A8378EC259B235013.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6qbLMkv9NeoEhgbgECEYMZ85Ctnq7dBJaL3RyaNDmXy5/1/3133312e3136312e3135362e302f32322d3234203d3e20323634333930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.161.156.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9c:e8:88:47:1c:6c:f1:2f:96:ba:ac:b0:f1:1f:2c:ab:40:75:
         92:7d:4f:fc:0d:d8:94:eb:6f:e6:e9:7d:2c:d6:35:6c:0a:9a:
         d4:50:70:34:ec:bb:3a:3b:a2:6a:dc:a4:cd:fd:62:80:62:e3:
         ea:8b:85:d0:77:c3:78:3d:7c:2c:2d:30:40:e2:fe:1d:fa:ea:
         4a:9b:4c:74:06:df:3b:16:34:0f:10:32:2e:0a:de:66:52:d4:
         ea:ac:a5:1a:9b:4a:36:a4:13:81:98:0c:1b:09:e3:38:00:1c:
         a7:6b:28:30:72:f5:51:c1:ff:6f:a9:d3:e0:3e:c8:b2:bd:cb:
         f4:e7:3f:e9:95:64:43:27:53:d2:ff:26:f0:4f:75:01:ae:e0:
         52:ca:ed:32:d7:3c:a5:8a:1b:c3:d1:3b:62:fa:be:dd:52:a0:
         45:c0:18:3a:bd:bb:6a:16:63:86:69:31:85:64:ac:42:16:8c:
         3b:0c:a6:9a:4e:0b:68:83:30:ca:a2:d2:22:bf:0c:dd:af:fd:
         69:c6:37:aa:17:9e:bf:b2:cc:0f:56:0a:24:69:02:f5:09:a2:
         9f:f9:66:9f:e2:b9:98:3a:f1:ae:e6:44:6e:c9:c6:86:b0:3f:
         f0:a1:ea:89:a4:22:f6:b4:02:2a:59:97:c6:7e:8e:02:05:4e:
         38:f0:56:44
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUXyfU+EG/RZtLpf3npxpqodbGtt8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0REOTMzN0QzMjhBOEI1N0U5OUZDRjFBODM3OEVDMjU5
QjIzNTAxMzAeFw0yNDA0MDQyMDI0MjRaFw0yNTA0MDMyMDI5MjRaMDMxMTAvBgNV
BAMTKEZDQUY2Q0E4OTc0N0FBQjE5OEE4QzlBNEZDQUFFNEJFNThGMEMyRDgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwccXXUHpRGg+7G78+6nTUu4XY
wervc8mqN/0i2muc+OJyjb8PlYdUFwXdRcNgudvg+4uu+kAhBNo+Z4YluAdXVr/a
cdqKWWI4N57y05dqXgAEzGAZXY6c8lbvMQo2Rpgn2JuUBzBftWwUTpJNUv2xYv2i
hP1+BK5c5XYYkdaax2GH81oqGVqYbm+VILNK2gVfphH1GYUH0pdG09sCiiTV5ZXw
IKU7gsN23H23cRpsDQEVco5V1jMgBY2ceL3mzwEd0mTToNHAq2HwWK5ilM2FQZoV
UvrnkW4X4axAt1zWNATOqUJ0CSECV9ivHS9rDSgjZqXhmoEMhl9vn2lg0Hu3AgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQU/K9sqJdHqrGYqMmk/KrkvljwwtgwHwYDVR0j
BBgwFoAUfdkzfTKKi1fpn88ag3jsJZsjUBMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNnFiTE1rdjlOZW9FaGdiZ0VDRVlNWjg1Q3RucTdkQkphTDNSeWFORG1Y
eTUvMS83REQ5MzM3RDMyOEE4QjU3RTk5RkNGMUE4Mzc4RUMyNTlCMjM1MDEzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzdERDkzMzdEMzI4QThCNTdF
OTlGQ0YxQTgzNzhFQzI1OUIyMzUwMTMuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzZxYkxNa3Y5TmVvRWhnYmdFQ0VZTVo4NUN0bnE3ZEJKYUwzUnlhTkRtWHk1LzEv
MzEzMzMxMmUzMTM2MzEyZTMxMzUzNjJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMy
MzYzNDMzMzkzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAoOhnDANBgkqhkiG9w0BAQsFAAOCAQEAnOiI
Rxxs8S+Wuqyw8R8sq0B1kn1P/A3YlOtv5ul9LNY1bAqa1FBwNOy7Ojuiatykzf1i
gGLj6ouF0HfDeD18LC0wQOL+HfrqSptMdAbfOxY0DxAyLgreZlLU6qylGptKNqQT
gZgMGwnjOAAcp2soMHL1UcH/b6nT4D7Isr3L9Oc/6ZVkQydT0v8m8E91Aa7gUsrt
Mtc8pYobw9E7Yvq+3VKgRcAYOr27ahZjhmkxhWSsQhaMOwymmk4LaIMwyqLSIr8M
3a/9acY3qheev7LMD1YKJGkC9Qmin/lmn+K5mDrxruZEbsnGhrA/8KHqiaQi9rQC
KlmXxn6OAgVOOPBWRA==
-----END CERTIFICATE-----
Generated at Fri Nov 22 06:34:00 2024 by rpki-client on console-ams.rpki-client.org