Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ArT8vrDjqy4bWaMCtFP24CFU5hMzWhHRkjvgxZyQBQkp/0/3136382e3232382e3136382e302f32342d3234203d3e20323632363131.roa
File:                     3136382e3232382e3136382e302f32342d3234203d3e20323632363131.roa (raw, json)
Hash identifier:          OeopXlWkx0YWrDKG37i5OlMJ3YM+wR8unH6SCZBRBrs=
Subject key identifier:   D2:B4:13:26:CC:ED:AB:80:57:6F:FE:CE:B9:BD:1D:B4:CD:7B:68:A5
Certificate issuer:       /CN=D2B24673AF94F6E8A7171887B60BF4EBE9D15E73
Certificate serial:       590072626EF9E64FA8F96A7D4BBD3B373BB86D6A
Authority key identifier: D2:B2:46:73:AF:94:F6:E8:A7:17:18:87:B6:0B:F4:EB:E9:D1:5E:73
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2B24673AF94F6E8A7171887B60BF4EBE9D15E73.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ArT8vrDjqy4bWaMCtFP24CFU5hMzWhHRkjvgxZyQBQkp/0/3136382e3232382e3136382e302f32342d3234203d3e20323632363131.roa
Signing time:             Wed 17 Apr 2024 14:20:27 +0000
ROA not before:           Wed 17 Apr 2024 14:15:27 +0000
ROA not after:            Wed 16 Apr 2025 14:20:27 +0000
asID:                     262611
IP address blocks:        168.228.168.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ArT8vrDjqy4bWaMCtFP24CFU5hMzWhHRkjvgxZyQBQkp/0/D2B24673AF94F6E8A7171887B60BF4EBE9D15E73.crl
                          rsync://rpki-repo.registro.br/repo/ArT8vrDjqy4bWaMCtFP24CFU5hMzWhHRkjvgxZyQBQkp/0/D2B24673AF94F6E8A7171887B60BF4EBE9D15E73.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2B24673AF94F6E8A7171887B60BF4EBE9D15E73.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 09:17:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:00:72:62:6e:f9:e6:4f:a8:f9:6a:7d:4b:bd:3b:37:3b:b8:6d:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D2B24673AF94F6E8A7171887B60BF4EBE9D15E73
        Validity
            Not Before: Apr 17 14:15:27 2024 GMT
            Not After : Apr 16 14:20:27 2025 GMT
        Subject: CN=D2B41326CCEDAB80576FFECEB9BD1DB4CD7B68A5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:8d:62:fa:89:e7:d3:7d:d9:46:ac:0a:6c:e5:
                    a0:32:4e:d9:e2:98:b1:07:6c:a0:46:ca:70:67:8d:
                    ab:f8:52:23:09:7d:15:a5:fc:5c:d7:d1:04:b5:19:
                    d7:7d:e4:c8:d2:71:c5:49:10:94:bc:11:47:a6:71:
                    19:0f:5d:ce:88:61:1b:fa:02:5b:c2:65:1f:62:97:
                    d2:d9:13:43:f8:ed:50:78:f2:ca:97:fb:89:ff:1b:
                    32:a8:84:dd:0e:66:be:86:f9:40:c0:d9:4d:a9:8a:
                    67:08:2f:0d:02:c6:80:dd:dc:0f:1a:fc:7f:55:3b:
                    96:17:b7:6a:76:0f:2a:8e:99:d8:59:b2:43:58:0b:
                    a5:f3:ba:64:59:a5:17:17:3c:fb:4f:d9:59:ae:ae:
                    4b:1c:74:88:75:5f:9a:3b:eb:e6:eb:af:15:3a:a7:
                    12:2f:a5:8d:c9:b9:43:7d:6e:81:fd:dc:9b:aa:3e:
                    55:40:2d:9d:e9:15:67:7b:ab:06:7a:2c:e4:d0:c4:
                    be:a3:d7:fb:40:c5:1c:f2:b0:de:d1:25:41:b8:0d:
                    0c:98:3a:60:9f:bc:44:48:16:03:3a:0a:b5:d2:42:
                    e8:e5:9a:e6:a0:2a:99:e4:80:27:4d:4c:37:94:ca:
                    83:ab:be:f5:cf:02:15:a8:2b:89:2b:45:ec:76:3f:
                    6a:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:B4:13:26:CC:ED:AB:80:57:6F:FE:CE:B9:BD:1D:B4:CD:7B:68:A5
            X509v3 Authority Key Identifier:
                keyid:D2:B2:46:73:AF:94:F6:E8:A7:17:18:87:B6:0B:F4:EB:E9:D1:5E:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ArT8vrDjqy4bWaMCtFP24CFU5hMzWhHRkjvgxZyQBQkp/0/D2B24673AF94F6E8A7171887B60BF4EBE9D15E73.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2B24673AF94F6E8A7171887B60BF4EBE9D15E73.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ArT8vrDjqy4bWaMCtFP24CFU5hMzWhHRkjvgxZyQBQkp/0/3136382e3232382e3136382e302f32342d3234203d3e20323632363131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.228.168.0/24

    Signature Algorithm: sha256WithRSAEncryption
         93:c7:7a:48:ae:91:28:52:4a:2f:67:66:5e:bf:27:c7:64:91:
         c8:96:14:24:3f:0f:34:ee:a6:87:51:ee:12:df:3e:c2:db:ef:
         d5:68:db:84:26:32:b7:bf:bc:b0:93:62:23:05:47:d9:8c:b3:
         79:80:4a:b7:c4:36:73:d1:b7:34:96:5b:2c:23:50:d2:69:d6:
         00:b9:c2:f7:f7:15:7f:d9:14:ff:fe:34:86:69:eb:fe:ad:7a:
         f1:3b:90:6a:ed:4f:14:41:3c:f8:54:e3:25:95:38:ae:bc:35:
         00:7a:77:aa:81:e0:26:38:a4:f8:05:ea:42:66:a4:f4:45:fc:
         95:9c:b9:9a:bb:39:f9:dc:d5:50:42:ee:14:59:88:13:a4:af:
         eb:3d:d6:00:ad:db:f2:14:69:62:cb:9c:4f:00:a7:ef:3e:37:
         c7:a3:a9:21:68:10:83:76:63:83:8c:67:25:eb:89:37:71:20:
         ac:ad:fd:d3:82:b3:e5:f3:98:7d:1e:9f:53:e7:d7:78:d3:bb:
         1e:d8:8b:0e:26:7e:c2:d2:c4:ac:8c:15:6e:cb:d3:26:3f:46:
         40:58:88:f8:07:71:c8:18:f0:dc:7e:42:45:8b:a9:77:a3:6c:
         33:2b:5d:05:4f:e7:cf:f1:4c:e9:2d:dd:45:e7:ea:e5:90:28:
         67:1c:43:29
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUWQByYm755k+o+Wp9S707Nzu4bWowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDJCMjQ2NzNBRjk0RjZFOEE3MTcxODg3QjYwQkY0RUJF
OUQxNUU3MzAeFw0yNDA0MTcxNDE1MjdaFw0yNTA0MTYxNDIwMjdaMDMxMTAvBgNV
BAMTKEQyQjQxMzI2Q0NFREFCODA1NzZGRkVDRUI5QkQxREI0Q0Q3QjY4QTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjjWL6iefTfdlGrAps5aAyTtni
mLEHbKBGynBnjav4UiMJfRWl/FzX0QS1Gdd95MjSccVJEJS8EUemcRkPXc6IYRv6
AlvCZR9il9LZE0P47VB48sqX+4n/GzKohN0OZr6G+UDA2U2pimcILw0CxoDd3A8a
/H9VO5YXt2p2DyqOmdhZskNYC6XzumRZpRcXPPtP2VmurkscdIh1X5o76+brrxU6
pxIvpY3JuUN9boH93JuqPlVALZ3pFWd7qwZ6LOTQxL6j1/tAxRzysN7RJUG4DQyY
OmCfvERIFgM6CrXSQujlmuagKpnkgCdNTDeUyoOrvvXPAhWoK4krRex2P2otAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQU0rQTJsztq4BXb/7Oub0dtM17aKUwHwYDVR0j
BBgwFoAU0rJGc6+U9uinFxiHtgv06+nRXnMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQXJUOHZyRGpxeTRiV2FNQ3RGUDI0Q0ZVNWhNeldoSFJranZneFp5UUJR
a3AvMC9EMkIyNDY3M0FGOTRGNkU4QTcxNzE4ODdCNjBCRjRFQkU5RDE1RTczLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0QyQjI0NjczQUY5NEY2RThB
NzE3MTg4N0I2MEJGNEVCRTlEMTVFNzMuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0FyVDh2ckRqcXk0YldhTUN0RlAyNENGVTVoTXpXaEhSa2p2Z3haeVFCUWtwLzAv
MzEzNjM4MmUzMjMyMzgyZTMxMzYzODJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzYzMjM2MzEzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAKjkqDANBgkqhkiG9w0BAQsFAAOCAQEAk8d6
SK6RKFJKL2dmXr8nx2SRyJYUJD8PNO6mh1HuEt8+wtvv1WjbhCYyt7+8sJNiIwVH
2YyzeYBKt8Q2c9G3NJZbLCNQ0mnWALnC9/cVf9kU//40hmnr/q168TuQau1PFEE8
+FTjJZU4rrw1AHp3qoHgJjik+AXqQmak9EX8lZy5mrs5+dzVUELuFFmIE6Sv6z3W
AK3b8hRpYsucTwCn7z43x6OpIWgQg3Zjg4xnJeuJN3EgrK3904Kz5fOYfR6fU+fX
eNO7HtiLDiZ+wtLErIwVbsvTJj9GQFiI+AdxyBjw3H5CRYupd6NsMytdBU/nz/FM
6S3dRefq5ZAoZxxDKQ==
-----END CERTIFICATE-----
Generated at Mon Nov 25 09:02:16 2024 by rpki-client on console-ams.rpki-client.org