Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6y5Q9C9LwfreSLkK8XsMF7xAjw5h9KqjybmNVvPwg4uC/2/3136342e3136332e3130382e302f32342d3234203d3e20323635393530.roa
File:                     3136342e3136332e3130382e302f32342d3234203d3e20323635393530.roa (raw, json)
Hash identifier:          astOXmOplWVX0OIw+fA6J0fZYWiPU/Ck0RvA1KcszcU=
Subject key identifier:   7F:F0:B4:FE:EE:64:13:E1:4B:1B:93:6E:43:2C:D5:EF:25:C8:84:53
Certificate issuer:       /CN=B87CE29C7C1D5FA3C283B0AE0AD75B5364556618
Certificate serial:       68091CBFDEEDB66DDE2E10EE773970120535C2D5
Authority key identifier: B8:7C:E2:9C:7C:1D:5F:A3:C2:83:B0:AE:0A:D7:5B:53:64:55:66:18
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B87CE29C7C1D5FA3C283B0AE0AD75B5364556618.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6y5Q9C9LwfreSLkK8XsMF7xAjw5h9KqjybmNVvPwg4uC/2/3136342e3136332e3130382e302f32342d3234203d3e20323635393530.roa
Signing time:             Wed 03 Apr 2024 19:18:33 +0000
ROA not before:           Wed 03 Apr 2024 19:13:33 +0000
ROA not after:            Wed 02 Apr 2025 19:18:33 +0000
asID:                     265950
IP address blocks:        164.163.108.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6y5Q9C9LwfreSLkK8XsMF7xAjw5h9KqjybmNVvPwg4uC/2/B87CE29C7C1D5FA3C283B0AE0AD75B5364556618.crl
                          rsync://rpki-repo.registro.br/repo/6y5Q9C9LwfreSLkK8XsMF7xAjw5h9KqjybmNVvPwg4uC/2/B87CE29C7C1D5FA3C283B0AE0AD75B5364556618.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B87CE29C7C1D5FA3C283B0AE0AD75B5364556618.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 23:37:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:09:1c:bf:de:ed:b6:6d:de:2e:10:ee:77:39:70:12:05:35:c2:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B87CE29C7C1D5FA3C283B0AE0AD75B5364556618
        Validity
            Not Before: Apr  3 19:13:33 2024 GMT
            Not After : Apr  2 19:18:33 2025 GMT
        Subject: CN=7FF0B4FEEE6413E14B1B936E432CD5EF25C88453
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:6a:82:77:e5:e8:a8:e6:55:7a:95:b0:c6:ce:
                    e5:ea:0e:9f:4c:77:07:f5:5f:b3:e2:60:2c:4a:59:
                    18:7c:b6:57:c5:6b:61:a7:37:14:69:72:8a:4c:a7:
                    97:5b:84:bf:f9:9f:e5:4f:cb:c0:0e:85:fc:95:85:
                    3b:4a:8c:b2:4e:f1:b0:69:7a:dc:9a:25:34:82:2b:
                    1d:24:62:51:c5:e5:10:b5:5e:56:6b:82:9d:e5:c6:
                    9e:09:5d:20:a6:f5:33:56:e2:3c:8a:f6:ab:2c:da:
                    df:10:51:db:3f:c8:0d:e2:8e:ce:26:aa:35:a1:17:
                    af:03:d5:5f:e4:b6:f0:a7:56:e9:48:2a:89:74:43:
                    f7:5f:1f:5b:b8:0f:74:41:2c:58:2b:af:fc:55:84:
                    1b:ad:57:f4:07:66:17:6b:f5:24:bb:15:6b:2a:57:
                    c4:3f:44:45:e4:44:24:cb:3b:74:79:38:02:35:15:
                    52:af:09:aa:e6:00:05:0d:c9:d2:2e:10:14:d1:91:
                    b0:ca:c5:92:a4:b5:b1:c4:7a:f0:d2:7f:83:ed:85:
                    97:86:d0:af:5d:f3:20:73:3b:42:ae:c4:04:31:c5:
                    86:4e:e7:b8:68:b6:3a:a8:67:92:d3:8a:1c:6e:16:
                    ae:3e:61:56:73:c8:6e:7f:a1:14:b6:df:fa:25:83:
                    d8:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:F0:B4:FE:EE:64:13:E1:4B:1B:93:6E:43:2C:D5:EF:25:C8:84:53
            X509v3 Authority Key Identifier:
                keyid:B8:7C:E2:9C:7C:1D:5F:A3:C2:83:B0:AE:0A:D7:5B:53:64:55:66:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6y5Q9C9LwfreSLkK8XsMF7xAjw5h9KqjybmNVvPwg4uC/2/B87CE29C7C1D5FA3C283B0AE0AD75B5364556618.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B87CE29C7C1D5FA3C283B0AE0AD75B5364556618.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6y5Q9C9LwfreSLkK8XsMF7xAjw5h9KqjybmNVvPwg4uC/2/3136342e3136332e3130382e302f32342d3234203d3e20323635393530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.163.108.0/24

    Signature Algorithm: sha256WithRSAEncryption
         36:b9:29:73:86:b6:8a:25:32:e3:87:18:16:a0:60:9e:da:ad:
         6f:0b:b6:62:0a:7d:31:42:6d:8e:6b:f5:6b:e0:34:6a:67:b9:
         94:ef:fc:64:6e:94:fd:9b:76:61:45:0d:05:0a:0a:3a:2c:d6:
         36:be:92:20:f2:b0:87:a9:c2:09:5f:84:e1:8b:68:23:52:da:
         5e:8e:f9:fe:dc:00:d1:f7:e5:51:17:bb:4d:aa:b4:d5:41:25:
         59:0d:05:8e:4c:2d:dd:3c:5c:36:d7:54:f4:35:7a:03:d5:05:
         76:6f:c6:9b:72:50:80:c1:77:3b:c2:d8:74:01:15:d7:aa:5c:
         4f:5d:7d:64:2b:1d:ae:a7:c3:dc:f6:b5:45:fd:46:29:fd:77:
         1d:0a:4b:bf:b1:48:a9:02:f2:91:5b:af:9d:5e:0a:a9:3d:b1:
         36:73:d3:c5:1d:e6:71:a6:cc:6b:33:09:3e:69:ab:01:b8:d9:
         a5:56:56:34:de:ca:ce:9f:37:6c:e4:31:59:86:17:93:ce:6a:
         df:3a:92:54:a3:fc:f8:91:7f:20:5a:be:5c:7c:d2:4b:67:92:
         4f:ff:a3:df:ce:d9:1d:34:2b:6b:15:e2:3f:95:9c:06:66:5f:
         35:96:5f:f1:e6:53:f8:4c:a7:a0:41:0f:26:0c:2e:e3:00:bf:
         9e:fe:45:ae
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUaAkcv97ttm3eLhDudzlwEgU1wtUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjg3Q0UyOUM3QzFENUZBM0MyODNCMEFFMEFENzVCNTM2
NDU1NjYxODAeFw0yNDA0MDMxOTEzMzNaFw0yNTA0MDIxOTE4MzNaMDMxMTAvBgNV
BAMTKDdGRjBCNEZFRUU2NDEzRTE0QjFCOTM2RTQzMkNENUVGMjVDODg0NTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgaoJ35eio5lV6lbDGzuXqDp9M
dwf1X7PiYCxKWRh8tlfFa2GnNxRpcopMp5dbhL/5n+VPy8AOhfyVhTtKjLJO8bBp
etyaJTSCKx0kYlHF5RC1XlZrgp3lxp4JXSCm9TNW4jyK9qss2t8QUds/yA3ijs4m
qjWhF68D1V/ktvCnVulIKol0Q/dfH1u4D3RBLFgrr/xVhButV/QHZhdr9SS7FWsq
V8Q/REXkRCTLO3R5OAI1FVKvCarmAAUNydIuEBTRkbDKxZKktbHEevDSf4PthZeG
0K9d8yBzO0KuxAQxxYZO57hotjqoZ5LTihxuFq4+YVZzyG5/oRS23/olg9iNAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUf/C0/u5kE+FLG5NuQyzV7yXIhFMwHwYDVR0j
BBgwFoAUuHzinHwdX6PCg7CuCtdbU2RVZhgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNnk1UTlDOUx3ZnJlU0xrSzhYc01GN3hBanc1aDlLcWp5Ym1OVnZQd2c0
dUMvMi9CODdDRTI5QzdDMUQ1RkEzQzI4M0IwQUUwQUQ3NUI1MzY0NTU2NjE4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0I4N0NFMjlDN0MxRDVGQTND
MjgzQjBBRTBBRDc1QjUzNjQ1NTY2MTguY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzZ5NVE5QzlMd2ZyZVNMa0s4WHNNRjd4QWp3NWg5S3FqeWJtTlZ2UHdnNHVDLzIv
MzEzNjM0MmUzMTM2MzMyZTMxMzAzODJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzYzNTM5MzUzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAKSjbDANBgkqhkiG9w0BAQsFAAOCAQEANrkp
c4a2iiUy44cYFqBgntqtbwu2Ygp9MUJtjmv1a+A0ame5lO/8ZG6U/Zt2YUUNBQoK
OizWNr6SIPKwh6nCCV+E4YtoI1LaXo75/twA0fflURe7Taq01UElWQ0Fjkwt3Txc
NtdU9DV6A9UFdm/Gm3JQgMF3O8LYdAEV16pcT119ZCsdrqfD3Pa1Rf1GKf13HQpL
v7FIqQLykVuvnV4KqT2xNnPTxR3mcabMazMJPmmrAbjZpVZWNN7Kzp83bOQxWYYX
k85q3zqSVKP8+JF/IFq+XHzSS2eST/+j387ZHTQraxXiP5WcBmZfNZZf8eZT+Eyn
oEEPJgwu4wC/nv5Frg==
-----END CERTIFICATE-----
Generated at Fri Nov 22 22:10:00 2024 by rpki-client on console-ams.rpki-client.org