Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8tZ5pzhDMYqgsvsXb8fJc5ZRfkT28fN8LS2YXremdMK5/0/3136382e39302e3134382e302f32342d3234203d3e20323635323835.roa
File:                     3136382e39302e3134382e302f32342d3234203d3e20323635323835.roa (raw, json)
Hash identifier:          yn7bVHRk6Lx88QFCNU9iKj2lp5P17iIP3iv53ab1ZjU=
Subject key identifier:   61:C0:93:E8:6A:C8:0A:3A:47:37:59:34:3F:73:7C:3E:CC:6D:BC:BC
Certificate issuer:       /CN=3F318214B1BD2E89818793B6E4B9967278CA87A1
Certificate serial:       601BF59BFFE238EE80F4AA725289F7B17F98AF59
Authority key identifier: 3F:31:82:14:B1:BD:2E:89:81:87:93:B6:E4:B9:96:72:78:CA:87:A1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3F318214B1BD2E89818793B6E4B9967278CA87A1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8tZ5pzhDMYqgsvsXb8fJc5ZRfkT28fN8LS2YXremdMK5/0/3136382e39302e3134382e302f32342d3234203d3e20323635323835.roa
Signing time:             Thu 04 Jul 2024 13:20:32 +0000
ROA not before:           Thu 04 Jul 2024 13:15:32 +0000
ROA not after:            Thu 03 Jul 2025 13:20:32 +0000
asID:                     265285
IP address blocks:        168.90.148.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8tZ5pzhDMYqgsvsXb8fJc5ZRfkT28fN8LS2YXremdMK5/0/3F318214B1BD2E89818793B6E4B9967278CA87A1.crl
                          rsync://rpki-repo.registro.br/repo/8tZ5pzhDMYqgsvsXb8fJc5ZRfkT28fN8LS2YXremdMK5/0/3F318214B1BD2E89818793B6E4B9967278CA87A1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3F318214B1BD2E89818793B6E4B9967278CA87A1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 18:55:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:1b:f5:9b:ff:e2:38:ee:80:f4:aa:72:52:89:f7:b1:7f:98:af:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3F318214B1BD2E89818793B6E4B9967278CA87A1
        Validity
            Not Before: Jul  4 13:15:32 2024 GMT
            Not After : Jul  3 13:20:32 2025 GMT
        Subject: CN=61C093E86AC80A3A473759343F737C3ECC6DBCBC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:fe:17:02:5d:7a:27:c5:f8:65:94:cd:35:5d:
                    ea:16:30:b1:d0:6d:9c:41:bd:02:25:48:88:10:ac:
                    d3:09:a2:44:fa:b0:be:a7:25:50:c4:af:be:6d:33:
                    35:8c:91:dc:ed:ad:aa:e9:4b:34:b6:f7:c6:8e:2b:
                    3b:6f:45:94:33:1a:98:b3:40:20:96:76:1f:eb:e0:
                    26:7f:51:df:c8:38:9b:a7:c2:83:91:7a:5b:eb:1f:
                    be:85:38:2e:a4:74:43:25:2c:ae:34:e4:2e:60:f8:
                    38:68:ce:92:73:e5:0b:95:2d:0d:b3:0f:f5:a6:f8:
                    a8:7e:ae:b0:2f:65:59:6f:78:90:76:6a:02:85:dd:
                    f3:f0:4a:2a:a3:29:b1:66:c9:f6:30:3c:6e:bd:d0:
                    9d:99:f0:32:b7:c1:ce:4c:d9:3f:ec:57:02:b8:f2:
                    0e:81:64:80:7a:a5:de:62:ad:fc:83:7a:d0:d6:58:
                    30:e4:20:2d:c6:ed:1b:e7:c4:46:00:d0:a9:ae:f9:
                    57:8b:50:68:f2:34:0a:e4:16:4e:2a:4b:62:19:d0:
                    dd:04:66:a6:52:ca:04:8c:92:8b:a8:c3:0f:7c:f5:
                    be:a8:e0:89:a3:1a:4d:3d:16:a9:6d:98:03:2f:d4:
                    69:16:78:94:a6:13:25:d9:eb:63:e7:b0:f6:e4:22:
                    47:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:C0:93:E8:6A:C8:0A:3A:47:37:59:34:3F:73:7C:3E:CC:6D:BC:BC
            X509v3 Authority Key Identifier:
                keyid:3F:31:82:14:B1:BD:2E:89:81:87:93:B6:E4:B9:96:72:78:CA:87:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8tZ5pzhDMYqgsvsXb8fJc5ZRfkT28fN8LS2YXremdMK5/0/3F318214B1BD2E89818793B6E4B9967278CA87A1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3F318214B1BD2E89818793B6E4B9967278CA87A1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8tZ5pzhDMYqgsvsXb8fJc5ZRfkT28fN8LS2YXremdMK5/0/3136382e39302e3134382e302f32342d3234203d3e20323635323835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.90.148.0/24

    Signature Algorithm: sha256WithRSAEncryption
         02:85:3e:3c:d2:4d:42:1c:03:5e:96:b4:ce:9f:95:f6:92:b5:
         f3:3a:85:d7:62:dc:2d:60:19:81:d7:19:ef:56:53:f7:35:66:
         e9:33:c5:e4:5b:94:5e:5e:6e:dd:52:d9:ae:df:b2:71:7a:89:
         c1:73:57:bc:1e:a3:e3:2a:42:f0:4a:86:68:cd:a7:3d:01:bb:
         0e:41:42:21:a6:a6:9e:6e:9e:35:f2:32:c4:8e:7b:cd:8e:32:
         67:89:2c:bb:db:16:24:b6:16:d1:68:6d:c7:3e:2e:03:6a:53:
         48:79:15:6f:28:3e:b9:ac:ca:49:a0:4c:e6:61:94:2a:4b:f8:
         1c:ef:aa:0f:48:23:7c:ab:72:28:5d:e2:2d:da:24:6f:be:48:
         d3:09:7e:d4:c1:2d:39:2e:1e:99:a6:19:65:2c:63:08:3b:af:
         2b:ce:1e:fa:29:b3:8b:79:f0:e2:b2:bb:40:92:af:80:3d:ea:
         4e:73:53:83:62:0d:b0:cb:65:03:30:4c:8c:21:db:5a:99:69:
         de:67:ea:df:19:72:65:2b:de:85:4f:74:a1:16:51:ff:ac:e3:
         40:4e:47:5c:01:8c:9c:ed:5b:ec:a0:d1:26:9e:94:49:32:6f:
         56:e3:aa:cc:cc:dd:a1:f5:ef:6c:60:66:0c:f0:08:83:31:6e:
         8c:8b:6f:05
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUYBv1m//iOO6A9KpyUon3sX+Yr1kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0YzMTgyMTRCMUJEMkU4OTgxODc5M0I2RTRCOTk2NzI3
OENBODdBMTAeFw0yNDA3MDQxMzE1MzJaFw0yNTA3MDMxMzIwMzJaMDMxMTAvBgNV
BAMTKDYxQzA5M0U4NkFDODBBM0E0NzM3NTkzNDNGNzM3QzNFQ0M2REJDQkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDM/hcCXXonxfhllM01XeoWMLHQ
bZxBvQIlSIgQrNMJokT6sL6nJVDEr75tMzWMkdztrarpSzS298aOKztvRZQzGpiz
QCCWdh/r4CZ/Ud/IOJunwoORelvrH76FOC6kdEMlLK405C5g+DhozpJz5QuVLQ2z
D/Wm+Kh+rrAvZVlveJB2agKF3fPwSiqjKbFmyfYwPG690J2Z8DK3wc5M2T/sVwK4
8g6BZIB6pd5irfyDetDWWDDkIC3G7RvnxEYA0Kmu+VeLUGjyNArkFk4qS2IZ0N0E
ZqZSygSMkouoww989b6o4ImjGk09FqltmAMv1GkWeJSmEyXZ62PnsPbkIkdTAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUYcCT6GrICjpHN1k0P3N8PsxtvLwwHwYDVR0j
BBgwFoAUPzGCFLG9LomBh5O25LmWcnjKh6EwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOHRaNXB6aERNWXFnc3ZzWGI4ZkpjNVpSZmtUMjhmTjhMUzJZWHJlbWRN
SzUvMC8zRjMxODIxNEIxQkQyRTg5ODE4NzkzQjZFNEI5OTY3Mjc4Q0E4N0ExLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzNGMzE4MjE0QjFCRDJFODk4
MTg3OTNCNkU0Qjk5NjcyNzhDQTg3QTEuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
Lzh0WjVwemhETVlxZ3N2c1hiOGZKYzVaUmZrVDI4Zk44TFMyWVhyZW1kTUs1LzAv
MzEzNjM4MmUzOTMwMmUzMTM0MzgyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzUzMjM4MzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBACoWpQwDQYJKoZIhvcNAQELBQADggEBAAKFPjzS
TUIcA16WtM6flfaStfM6hddi3C1gGYHXGe9WU/c1ZukzxeRblF5ebt1S2a7fsnF6
icFzV7weo+MqQvBKhmjNpz0Buw5BQiGmpp5unjXyMsSOe82OMmeJLLvbFiS2FtFo
bcc+LgNqU0h5FW8oPrmsykmgTOZhlCpL+Bzvqg9II3yrcihd4i3aJG++SNMJftTB
LTkuHpmmGWUsYwg7ryvOHvops4t58OKyu0CSr4A96k5zU4NiDbDLZQMwTIwh21qZ
ad5n6t8ZcmUr3oVPdKEWUf+s40BOR1wBjJztW+yg0SaelEkyb1bjqszM3aH172xg
ZgzwCIMxboyLbwU=
-----END CERTIFICATE-----
Generated at Sat Sep 28 19:42:05 2024 by rpki-client on console-fra.rpki-client.org