Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8kKmpLr1dYB2dag54xkUMr3nxvCgzR5RDNCCUjwAWVox/1/3136382e3139372e35362e302f32322d3234203d3e20323634303235.roa
File:                     3136382e3139372e35362e302f32322d3234203d3e20323634303235.roa (raw, json)
Hash identifier:          2UfVfd6I8m78VXvY5mxiCOScTpGO3IERv2NULZYXagQ=
Subject key identifier:   3B:16:3F:D2:B3:DE:CA:DB:AE:40:FE:A2:61:AC:93:D2:58:96:AD:79
Certificate issuer:       /CN=E63AD268C28EF88AA5B5563AE16151F11DECEE8D
Certificate serial:       7604E16E41D76ED6B55BAD4F96A9AFB000637F4A
Authority key identifier: E6:3A:D2:68:C2:8E:F8:8A:A5:B5:56:3A:E1:61:51:F1:1D:EC:EE:8D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E63AD268C28EF88AA5B5563AE16151F11DECEE8D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8kKmpLr1dYB2dag54xkUMr3nxvCgzR5RDNCCUjwAWVox/1/3136382e3139372e35362e302f32322d3234203d3e20323634303235.roa
Signing time:             Thu 06 Mar 2025 00:33:05 +0000
ROA not before:           Thu 06 Mar 2025 00:28:05 +0000
ROA not after:            Thu 05 Mar 2026 00:33:05 +0000
asID:                     264025
IP address blocks:        168.197.56.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8kKmpLr1dYB2dag54xkUMr3nxvCgzR5RDNCCUjwAWVox/1/E63AD268C28EF88AA5B5563AE16151F11DECEE8D.crl
                          rsync://rpki-repo.registro.br/repo/8kKmpLr1dYB2dag54xkUMr3nxvCgzR5RDNCCUjwAWVox/1/E63AD268C28EF88AA5B5563AE16151F11DECEE8D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E63AD268C28EF88AA5B5563AE16151F11DECEE8D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Apr 2025 10:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:04:e1:6e:41:d7:6e:d6:b5:5b:ad:4f:96:a9:af:b0:00:63:7f:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E63AD268C28EF88AA5B5563AE16151F11DECEE8D
        Validity
            Not Before: Mar  6 00:28:05 2025 GMT
            Not After : Mar  5 00:33:05 2026 GMT
        Subject: CN=3B163FD2B3DECADBAE40FEA261AC93D25896AD79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:50:15:90:3c:ed:fb:5c:43:8c:a5:f5:ae:96:
                    d5:6b:ef:fc:74:8c:1c:75:7e:d1:df:47:4e:e0:9a:
                    29:31:a6:31:d0:4f:4c:65:d7:b7:8e:3e:91:1f:d5:
                    21:e2:41:d4:03:78:cd:95:fb:f9:2a:ce:63:6e:5a:
                    18:17:a9:f6:8f:d4:e2:d4:3d:12:b7:32:60:87:20:
                    8d:f2:9e:7c:46:b9:73:d7:fd:d3:8b:74:33:2b:ac:
                    51:df:a3:01:81:09:81:41:84:52:35:5f:73:2c:57:
                    cb:7f:7c:64:cd:10:10:8f:36:c6:3a:5b:39:24:07:
                    8c:42:49:1c:d4:45:ac:16:a9:3c:3f:55:a0:3b:b3:
                    75:15:de:8d:a2:85:ee:48:81:1f:ed:20:ef:48:94:
                    5c:8c:1f:b9:6e:67:5f:be:9c:66:70:f8:5d:02:43:
                    e6:b5:ca:41:20:1b:10:0f:f9:88:5c:32:b9:0c:03:
                    84:29:b6:23:a2:2f:5c:16:33:3c:93:93:9e:c2:f0:
                    4d:2f:14:7b:91:8a:79:3e:c7:72:83:97:71:dd:fb:
                    dd:e8:14:29:3d:39:8d:27:b0:c9:3f:5d:f8:0d:8c:
                    5f:75:1f:1f:ce:45:cd:dd:d8:79:54:56:e3:d3:9d:
                    27:66:5c:ad:1f:6c:e0:5f:7b:a4:6d:35:41:c1:26:
                    b8:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:16:3F:D2:B3:DE:CA:DB:AE:40:FE:A2:61:AC:93:D2:58:96:AD:79
            X509v3 Authority Key Identifier:
                keyid:E6:3A:D2:68:C2:8E:F8:8A:A5:B5:56:3A:E1:61:51:F1:1D:EC:EE:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8kKmpLr1dYB2dag54xkUMr3nxvCgzR5RDNCCUjwAWVox/1/E63AD268C28EF88AA5B5563AE16151F11DECEE8D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E63AD268C28EF88AA5B5563AE16151F11DECEE8D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8kKmpLr1dYB2dag54xkUMr3nxvCgzR5RDNCCUjwAWVox/1/3136382e3139372e35362e302f32322d3234203d3e20323634303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.197.56.0/22

    Signature Algorithm: sha256WithRSAEncryption
         35:e4:f6:20:a2:6c:d1:13:fb:f8:39:ad:ba:62:f0:1b:9c:0f:
         55:7e:a0:49:3b:d9:c3:3e:10:e4:76:ca:02:5f:d0:4a:36:13:
         92:e2:c7:39:af:65:50:51:5b:97:ba:87:19:50:58:e4:98:f4:
         1a:c9:31:07:d0:db:02:3f:cf:69:9b:21:3d:05:a4:ee:61:73:
         57:ed:34:b9:bb:0d:c1:86:d4:11:2d:d5:0e:9a:65:0e:79:10:
         20:7b:4f:0f:ce:6c:1c:6c:9e:b5:58:f4:b7:e4:34:d0:bd:f2:
         b7:2d:14:1d:99:aa:62:71:b6:ae:36:52:cf:99:f8:eb:13:67:
         a6:8e:10:3a:76:84:5c:1b:5d:db:2e:94:40:a2:0c:2e:4d:7d:
         ac:3c:63:4a:b8:bc:97:da:f3:2f:e0:2a:56:f7:06:37:1d:b5:
         85:d3:81:1c:8c:64:78:9c:a0:cb:2f:8b:4b:54:1b:90:5e:ea:
         d0:5f:16:42:d9:89:20:a7:d0:8f:92:22:23:18:bc:62:d8:30:
         25:c8:07:c8:19:61:79:2b:58:ae:fe:2b:69:ea:25:aa:dd:07:
         1f:41:31:63:e5:7f:95:2c:b7:dd:37:fd:3d:8f:da:a0:6f:74:
         91:20:00:43:04:1a:b2:02:60:0b:c9:d0:c2:73:6f:5d:d6:c7:
         90:b0:da:20
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUdgThbkHXbta1W61PlqmvsABjf0owDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTYzQUQyNjhDMjhFRjg4QUE1QjU1NjNBRTE2MTUxRjEx
REVDRUU4RDAeFw0yNTAzMDYwMDI4MDVaFw0yNjAzMDUwMDMzMDVaMDMxMTAvBgNV
BAMTKDNCMTYzRkQyQjNERUNBREJBRTQwRkVBMjYxQUM5M0QyNTg5NkFENzkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSUBWQPO37XEOMpfWultVr7/x0
jBx1ftHfR07gmikxpjHQT0xl17eOPpEf1SHiQdQDeM2V+/kqzmNuWhgXqfaP1OLU
PRK3MmCHII3ynnxGuXPX/dOLdDMrrFHfowGBCYFBhFI1X3MsV8t/fGTNEBCPNsY6
WzkkB4xCSRzURawWqTw/VaA7s3UV3o2ihe5IgR/tIO9IlFyMH7luZ1++nGZw+F0C
Q+a1ykEgGxAP+YhcMrkMA4QptiOiL1wWMzyTk57C8E0vFHuRink+x3KDl3Hd+93o
FCk9OY0nsMk/XfgNjF91Hx/ORc3d2HlUVuPTnSdmXK0fbOBfe6RtNUHBJri9AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUOxY/0rPeytuuQP6iYayT0liWrXkwHwYDVR0j
BBgwFoAU5jrSaMKO+IqltVY64WFR8R3s7o0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOGtLbXBMcjFkWUIyZGFnNTR4a1VNcjNueHZDZ3pSNVJETkNDVWp3QVdW
b3gvMS9FNjNBRDI2OEMyOEVGODhBQTVCNTU2M0FFMTYxNTFGMTFERUNFRThELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0U2M0FEMjY4QzI4RUY4OEFB
NUI1NTYzQUUxNjE1MUYxMURFQ0VFOEQuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhrS21wTHIxZFlCMmRhZzU0eGtVTXIzbnh2Q2d6UjVSRE5DQ1Vqd0FXVm94LzEv
MzEzNjM4MmUzMTM5MzcyZTM1MzYyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM2
MzQzMDMyMzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAKoxTgwDQYJKoZIhvcNAQELBQADggEBADXk9iCi
bNET+/g5rbpi8BucD1V+oEk72cM+EOR2ygJf0Eo2E5LixzmvZVBRW5e6hxlQWOSY
9BrJMQfQ2wI/z2mbIT0FpO5hc1ftNLm7DcGG1BEt1Q6aZQ55ECB7Tw/ObBxsnrVY
9LfkNNC98rctFB2ZqmJxtq42Us+Z+OsTZ6aOEDp2hFwbXdsulECiDC5Nfaw8Y0q4
vJfa8y/gKlb3BjcdtYXTgRyMZHicoMsvi0tUG5Be6tBfFkLZiSCn0I+SIiMYvGLY
MCXIB8gZYXkrWK7+K2nqJardBx9BMWPlf5Ust903/T2P2qBvdJEgAEMEGrICYAvJ
0MJzb13Wx5Cw2iA=
-----END CERTIFICATE-----
Generated at Sun Apr 6 12:51:12 2025 by rpki-client