Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6vPVV8Cuz1XC7HGrSkbWnjsQQ3Vg4kwdqdbjjuApxPsV/1/3230312e3135302e3132342e302f32322d3232203d3e203631383736.roa
File:                     3230312e3135302e3132342e302f32322d3232203d3e203631383736.roa (raw, json)
Hash identifier:          5/iN39PRHXM1fxDosMMp1IVkMmL3fnK6E3uM6Tr0ew4=
Subject key identifier:   27:9E:61:6E:C6:EA:79:D4:2B:52:5E:05:00:91:94:4D:59:93:BC:90
Certificate issuer:       /CN=F3793A6AC4BE98BBDAF0FE4B1E575738468A18CD
Certificate serial:       6B77500078B40FF5E6C37311410F5C089555D400
Authority key identifier: F3:79:3A:6A:C4:BE:98:BB:DA:F0:FE:4B:1E:57:57:38:46:8A:18:CD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F3793A6AC4BE98BBDAF0FE4B1E575738468A18CD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6vPVV8Cuz1XC7HGrSkbWnjsQQ3Vg4kwdqdbjjuApxPsV/1/3230312e3135302e3132342e302f32322d3232203d3e203631383736.roa
Signing time:             Wed 03 Apr 2024 18:31:51 +0000
ROA not before:           Wed 03 Apr 2024 18:26:51 +0000
ROA not after:            Wed 02 Apr 2025 18:31:51 +0000
asID:                     61876
IP address blocks:        201.150.124.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6vPVV8Cuz1XC7HGrSkbWnjsQQ3Vg4kwdqdbjjuApxPsV/1/F3793A6AC4BE98BBDAF0FE4B1E575738468A18CD.crl
                          rsync://rpki-repo.registro.br/repo/6vPVV8Cuz1XC7HGrSkbWnjsQQ3Vg4kwdqdbjjuApxPsV/1/F3793A6AC4BE98BBDAF0FE4B1E575738468A18CD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F3793A6AC4BE98BBDAF0FE4B1E575738468A18CD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 20:53:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:77:50:00:78:b4:0f:f5:e6:c3:73:11:41:0f:5c:08:95:55:d4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3793A6AC4BE98BBDAF0FE4B1E575738468A18CD
        Validity
            Not Before: Apr  3 18:26:51 2024 GMT
            Not After : Apr  2 18:31:51 2025 GMT
        Subject: CN=279E616EC6EA79D42B525E050091944D5993BC90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:f5:f1:1f:23:47:cb:25:6d:36:a8:3a:9d:09:
                    00:54:02:9e:17:ae:b3:5d:5b:69:5f:f6:ae:ca:21:
                    79:4e:00:fe:af:f7:97:0e:a4:5d:d1:19:cc:97:ee:
                    cf:70:ea:e6:53:4a:4e:09:6c:a8:18:14:b4:50:9d:
                    43:02:81:10:1d:25:3e:d7:3c:d1:fe:4b:ab:18:d6:
                    b8:31:d3:f2:ca:f9:f8:4f:b7:21:26:f9:33:65:2c:
                    de:33:b6:00:e0:90:89:d9:95:d3:c7:76:83:36:92:
                    c0:75:1d:1b:b2:1c:06:72:b4:b7:8a:81:73:9c:48:
                    e0:bc:e1:c7:fc:db:10:56:f2:fa:60:69:48:62:8b:
                    32:5c:3f:48:fd:ff:3b:57:db:3b:e7:12:4e:6d:bb:
                    3a:48:7f:ce:f7:b6:8a:1c:24:b4:8a:59:b2:05:7e:
                    70:90:23:34:30:81:b4:6a:6e:d1:1a:ed:9c:57:51:
                    27:a7:40:ab:e3:5c:65:2f:b6:27:92:8b:56:f0:77:
                    d6:2d:bc:73:f6:ef:95:22:dc:6e:52:8a:fa:2a:0c:
                    ad:90:8d:16:5e:f0:36:8b:b2:90:00:a6:72:2f:f8:
                    c7:d7:14:6d:e0:65:fe:43:66:89:99:f1:fc:fa:3c:
                    48:a8:66:ec:3d:41:5f:19:60:31:e9:42:be:27:c0:
                    85:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:9E:61:6E:C6:EA:79:D4:2B:52:5E:05:00:91:94:4D:59:93:BC:90
            X509v3 Authority Key Identifier:
                keyid:F3:79:3A:6A:C4:BE:98:BB:DA:F0:FE:4B:1E:57:57:38:46:8A:18:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6vPVV8Cuz1XC7HGrSkbWnjsQQ3Vg4kwdqdbjjuApxPsV/1/F3793A6AC4BE98BBDAF0FE4B1E575738468A18CD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F3793A6AC4BE98BBDAF0FE4B1E575738468A18CD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6vPVV8Cuz1XC7HGrSkbWnjsQQ3Vg4kwdqdbjjuApxPsV/1/3230312e3135302e3132342e302f32322d3232203d3e203631383736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.150.124.0/22

    Signature Algorithm: sha256WithRSAEncryption
         99:6e:88:f8:4a:63:17:70:45:41:8c:59:3b:b0:29:51:9a:95:
         ec:b3:42:05:2b:38:de:a7:a6:9c:00:4f:ad:d9:01:e2:6d:46:
         b8:db:51:f3:19:25:7a:89:93:51:e6:da:aa:e0:44:c0:c5:69:
         da:94:94:a9:40:4e:1f:6b:8a:12:28:35:7a:17:a0:63:91:8c:
         0b:df:31:8d:4e:17:a8:96:ad:58:6a:85:21:85:cf:25:15:b5:
         35:aa:ce:b7:63:88:99:2a:a3:7c:d5:8e:72:4d:9c:a0:68:92:
         75:fe:26:6d:b3:a5:d1:d2:72:4f:20:02:aa:6f:1d:a5:af:6b:
         e6:64:46:7e:45:7c:6f:7b:97:bc:c0:44:7d:44:1a:22:63:72:
         6e:b7:96:e2:63:e0:b7:af:68:02:0f:16:91:01:89:52:82:fc:
         5a:aa:e7:33:bd:b9:3b:bd:58:ee:d0:b3:a1:1f:3e:8a:a5:c3:
         12:50:54:d2:32:42:52:60:99:c8:78:d6:3d:0c:ae:57:a9:78:
         80:21:0d:1a:fc:d4:b6:4a:81:6f:37:a5:14:77:3e:16:7a:7b:
         1b:97:27:cd:12:6b:58:10:74:98:34:90:3b:20:b9:f5:d8:4d:
         17:a0:b3:1b:25:a2:1f:60:5d:d5:96:7f:1c:80:e5:6a:ab:61:
         94:41:4b:dc
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUa3dQAHi0D/Xmw3MRQQ9cCJVV1AAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjM3OTNBNkFDNEJFOThCQkRBRjBGRTRCMUU1NzU3Mzg0
NjhBMThDRDAeFw0yNDA0MDMxODI2NTFaFw0yNTA0MDIxODMxNTFaMDMxMTAvBgNV
BAMTKDI3OUU2MTZFQzZFQTc5RDQyQjUyNUUwNTAwOTE5NDRENTk5M0JDOTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDw9fEfI0fLJW02qDqdCQBUAp4X
rrNdW2lf9q7KIXlOAP6v95cOpF3RGcyX7s9w6uZTSk4JbKgYFLRQnUMCgRAdJT7X
PNH+S6sY1rgx0/LK+fhPtyEm+TNlLN4ztgDgkInZldPHdoM2ksB1HRuyHAZytLeK
gXOcSOC84cf82xBW8vpgaUhiizJcP0j9/ztX2zvnEk5tuzpIf873toocJLSKWbIF
fnCQIzQwgbRqbtEa7ZxXUSenQKvjXGUvtieSi1bwd9YtvHP275Ui3G5SivoqDK2Q
jRZe8DaLspAApnIv+MfXFG3gZf5DZomZ8fz6PEioZuw9QV8ZYDHpQr4nwIV/AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUJ55hbsbqedQrUl4FAJGUTVmTvJAwHwYDVR0j
BBgwFoAU83k6asS+mLva8P5LHldXOEaKGM0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNnZQVlY4Q3V6MVhDN0hHclNrYlduanNRUTNWZzRrd2RxZGJqanVBcHhQ
c1YvMS9GMzc5M0E2QUM0QkU5OEJCREFGMEZFNEIxRTU3NTczODQ2OEExOENELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0YzNzkzQTZBQzRCRTk4QkJE
QUYwRkU0QjFFNTc1NzM4NDY4QTE4Q0QuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzZ2UFZWOEN1ejFYQzdIR3JTa2JXbmpzUVEzVmc0a3dkcWRiamp1QXB4UHNWLzEv
MzIzMDMxMmUzMTM1MzAyZTMxMzIzNDJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDM2
MzEzODM3MzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBALJlnwwDQYJKoZIhvcNAQELBQADggEBAJluiPhK
YxdwRUGMWTuwKVGaleyzQgUrON6nppwAT63ZAeJtRrjbUfMZJXqJk1Hm2qrgRMDF
adqUlKlATh9rihIoNXoXoGORjAvfMY1OF6iWrVhqhSGFzyUVtTWqzrdjiJkqo3zV
jnJNnKBoknX+Jm2zpdHSck8gAqpvHaWva+ZkRn5FfG97l7zARH1EGiJjcm63luJj
4LevaAIPFpEBiVKC/Fqq5zO9uTu9WO7Qs6EfPoqlwxJQVNIyQlJgmch41j0Mrlep
eIAhDRr81LZKgW83pRR3PhZ6exuXJ80Sa1gQdJg0kDsgufXYTRegsxsloh9gXdWW
fxyA5WqrYZRBS9w=
-----END CERTIFICATE-----
Generated at Fri Jun 28 19:18:01 2024 by rpki-client on console-fra.rpki-client.org