Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6tkwEXmKPjhs3e3Z97Xs294nuy6C4dPeb64QuiHVYD19/1/3136382e3232372e3132342e302f32332d3233203d3e20323634383739.roa
File:                     3136382e3232372e3132342e302f32332d3233203d3e20323634383739.roa (raw, json)
Hash identifier:          4mtygxOS9HswZU60ILOJ9lzSqjDs0dafso00qsju5ac=
Subject key identifier:   C2:6D:DF:93:3B:37:19:94:D2:A8:94:01:10:6D:F9:8C:7A:25:EF:F8
Certificate issuer:       /CN=D93228E088FC63E499DDCF6E203558BDFBA33FC4
Certificate serial:       10C6E29DBE5D0AD0084FB7A8EE2BC935EE2F483B
Authority key identifier: D9:32:28:E0:88:FC:63:E4:99:DD:CF:6E:20:35:58:BD:FB:A3:3F:C4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D93228E088FC63E499DDCF6E203558BDFBA33FC4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6tkwEXmKPjhs3e3Z97Xs294nuy6C4dPeb64QuiHVYD19/1/3136382e3232372e3132342e302f32332d3233203d3e20323634383739.roa
Signing time:             Thu 04 Apr 2024 11:23:20 +0000
ROA not before:           Thu 04 Apr 2024 11:18:20 +0000
ROA not after:            Thu 03 Apr 2025 11:23:20 +0000
asID:                     264879
IP address blocks:        168.227.124.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6tkwEXmKPjhs3e3Z97Xs294nuy6C4dPeb64QuiHVYD19/1/D93228E088FC63E499DDCF6E203558BDFBA33FC4.crl
                          rsync://rpki-repo.registro.br/repo/6tkwEXmKPjhs3e3Z97Xs294nuy6C4dPeb64QuiHVYD19/1/D93228E088FC63E499DDCF6E203558BDFBA33FC4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D93228E088FC63E499DDCF6E203558BDFBA33FC4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 22:33:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:c6:e2:9d:be:5d:0a:d0:08:4f:b7:a8:ee:2b:c9:35:ee:2f:48:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D93228E088FC63E499DDCF6E203558BDFBA33FC4
        Validity
            Not Before: Apr  4 11:18:20 2024 GMT
            Not After : Apr  3 11:23:20 2025 GMT
        Subject: CN=C26DDF933B371994D2A89401106DF98C7A25EFF8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:b3:8f:1d:d8:d3:29:bd:7b:a9:5c:13:c4:41:
                    67:cb:cb:6a:75:aa:59:4e:46:db:2b:80:77:5b:91:
                    76:b4:23:71:1c:83:b3:00:97:05:05:dc:01:97:c2:
                    2b:c1:4d:64:ff:63:d7:3d:3f:11:df:26:3e:aa:2c:
                    cc:75:75:71:ae:9b:0b:86:f7:6c:5d:9d:06:a5:a2:
                    c6:02:28:7b:68:c2:81:2b:69:aa:8a:0f:00:f2:bc:
                    a8:b0:71:aa:22:a6:81:1a:63:4b:9c:b7:9b:9e:10:
                    9a:13:72:0a:23:b2:bd:97:5b:4b:6d:2e:13:21:37:
                    25:23:87:78:f2:29:8c:30:cc:15:6a:c4:37:1e:a8:
                    cd:bc:83:e3:e9:e8:d8:b5:07:e8:03:14:ff:d0:e2:
                    ae:89:d5:9f:e6:c0:51:e8:46:5f:82:4b:97:44:e6:
                    c6:cf:37:2f:15:70:8b:a0:49:96:34:a4:4f:30:ff:
                    e5:77:24:aa:46:7f:01:88:05:21:68:6e:3e:20:dc:
                    83:bd:e0:ab:f6:88:b6:79:be:c5:04:66:34:17:61:
                    2e:bf:a6:6b:2e:07:04:fe:e8:a9:2d:12:78:e2:37:
                    77:a4:50:4a:95:6b:5a:d9:3e:c7:a2:3a:d6:79:00:
                    3c:4e:ef:fa:f9:68:b4:be:a0:68:c2:a5:32:67:8c:
                    4c:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:6D:DF:93:3B:37:19:94:D2:A8:94:01:10:6D:F9:8C:7A:25:EF:F8
            X509v3 Authority Key Identifier:
                keyid:D9:32:28:E0:88:FC:63:E4:99:DD:CF:6E:20:35:58:BD:FB:A3:3F:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6tkwEXmKPjhs3e3Z97Xs294nuy6C4dPeb64QuiHVYD19/1/D93228E088FC63E499DDCF6E203558BDFBA33FC4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D93228E088FC63E499DDCF6E203558BDFBA33FC4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6tkwEXmKPjhs3e3Z97Xs294nuy6C4dPeb64QuiHVYD19/1/3136382e3232372e3132342e302f32332d3233203d3e20323634383739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.227.124.0/23

    Signature Algorithm: sha256WithRSAEncryption
         39:52:1b:e5:30:25:64:c3:0f:52:35:95:2e:de:36:89:2d:a5:
         d8:93:80:d3:d0:d3:be:ae:e0:dd:41:54:97:c6:49:b9:6d:2a:
         62:8b:e3:e5:64:59:e5:ca:80:93:ad:98:a1:57:2d:d8:4f:8d:
         c1:bf:3d:e2:39:b5:37:e1:7b:61:3c:a4:a3:f4:83:c0:9a:0a:
         9f:b2:02:85:75:11:65:ea:54:01:6a:83:74:8c:c9:70:f7:8c:
         5d:54:e5:b7:aa:68:c8:af:d2:67:69:3f:32:ca:80:94:eb:22:
         03:43:ce:20:29:ff:a1:75:46:ba:c2:10:6b:88:d2:1d:bb:cb:
         0a:60:cd:69:81:97:d4:0c:cb:a4:99:35:75:0d:72:bd:e0:6e:
         bf:00:bf:92:17:d3:eb:03:54:ef:ea:af:c9:7e:94:da:47:3f:
         89:5a:f8:60:fc:a2:9e:93:13:aa:3e:50:b8:dd:de:13:8e:53:
         81:a9:5c:9e:29:16:8c:89:af:dd:a7:69:7e:8c:b8:3d:9f:d3:
         cb:e1:cf:83:44:9b:fb:85:eb:cc:43:09:db:92:a6:4e:d9:c9:
         4a:a3:81:46:c9:05:a4:83:b3:cd:73:72:28:67:70:db:3e:88:
         a7:fa:68:ce:24:e9:e1:f1:a4:dc:24:68:97:d4:9a:93:bf:ff:
         26:4e:e2:7a
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUEMbinb5dCtAIT7eo7ivJNe4vSDswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDkzMjI4RTA4OEZDNjNFNDk5RERDRjZFMjAzNTU4QkRG
QkEzM0ZDNDAeFw0yNDA0MDQxMTE4MjBaFw0yNTA0MDMxMTIzMjBaMDMxMTAvBgNV
BAMTKEMyNkRERjkzM0IzNzE5OTREMkE4OTQwMTEwNkRGOThDN0EyNUVGRjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2s48d2NMpvXupXBPEQWfLy2p1
qllORtsrgHdbkXa0I3Ecg7MAlwUF3AGXwivBTWT/Y9c9PxHfJj6qLMx1dXGumwuG
92xdnQalosYCKHtowoEraaqKDwDyvKiwcaoipoEaY0uct5ueEJoTcgojsr2XW0tt
LhMhNyUjh3jyKYwwzBVqxDceqM28g+Pp6Ni1B+gDFP/Q4q6J1Z/mwFHoRl+CS5dE
5sbPNy8VcIugSZY0pE8w/+V3JKpGfwGIBSFobj4g3IO94Kv2iLZ5vsUEZjQXYS6/
pmsuBwT+6KktEnjiN3ekUEqVa1rZPseiOtZ5ADxO7/r5aLS+oGjCpTJnjEx9AgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUwm3fkzs3GZTSqJQBEG35jHol7/gwHwYDVR0j
BBgwFoAU2TIo4Ij8Y+SZ3c9uIDVYvfujP8QwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNnRrd0VYbUtQamhzM2UzWjk3WHMyOTRudXk2QzRkUGViNjRRdWlIVllE
MTkvMS9EOTMyMjhFMDg4RkM2M0U0OTlERENGNkUyMDM1NThCREZCQTMzRkM0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Q5MzIyOEUwODhGQzYzRTQ5
OUREQ0Y2RTIwMzU1OEJERkJBMzNGQzQuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzZ0a3dFWG1LUGpoczNlM1o5N1hzMjk0bnV5NkM0ZFBlYjY0UXVpSFZZRDE5LzEv
MzEzNjM4MmUzMjMyMzcyZTMxMzIzNDJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDMy
MzYzNDM4MzczOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAajjfDANBgkqhkiG9w0BAQsFAAOCAQEAOVIb
5TAlZMMPUjWVLt42iS2l2JOA09DTvq7g3UFUl8ZJuW0qYovj5WRZ5cqAk62YoVct
2E+Nwb894jm1N+F7YTyko/SDwJoKn7IChXURZepUAWqDdIzJcPeMXVTlt6poyK/S
Z2k/MsqAlOsiA0POICn/oXVGusIQa4jSHbvLCmDNaYGX1AzLpJk1dQ1yveBuvwC/
khfT6wNU7+qvyX6U2kc/iVr4YPyinpMTqj5QuN3eE45TgalcnikWjImv3adpfoy4
PZ/Ty+HPg0Sb+4XrzEMJ25KmTtnJSqOBRskFpIOzzXNyKGdw2z6Ip/poziTp4fGk
3CRol9Sak7//Jk7ieg==
-----END CERTIFICATE-----
Generated at Mon Nov 25 23:53:03 2024 by rpki-client on console-ams.rpki-client.org