Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BXvcwTmHYXAcGGmn4ZPXUVJm6x9VPAmbpbUARgjvHJRH/1/3136372e3234392e38302e302f32342d3234203d3e20323635313639.roa
File:                     3136372e3234392e38302e302f32342d3234203d3e20323635313639.roa (raw, json)
Hash identifier:          myTD2eK3QoWvCHd/jTF3vdI+AjkPGHiekRtTbUTtb0Q=
Subject key identifier:   6F:4F:A8:13:DE:9E:22:9F:81:9B:7F:B0:1A:BA:23:17:F1:02:1B:BD
Certificate issuer:       /CN=E63A041BE4EC9A73C342C10EECB20754B5BD248D
Certificate serial:       67FA1B7F1B2954112021C5029DEF117095AF4655
Authority key identifier: E6:3A:04:1B:E4:EC:9A:73:C3:42:C1:0E:EC:B2:07:54:B5:BD:24:8D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E63A041BE4EC9A73C342C10EECB20754B5BD248D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BXvcwTmHYXAcGGmn4ZPXUVJm6x9VPAmbpbUARgjvHJRH/1/3136372e3234392e38302e302f32342d3234203d3e20323635313639.roa
Signing time:             Fri 07 Jun 2024 15:10:37 +0000
ROA not before:           Fri 07 Jun 2024 15:05:37 +0000
ROA not after:            Fri 06 Jun 2025 15:10:37 +0000
asID:                     265169
IP address blocks:        167.249.80.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BXvcwTmHYXAcGGmn4ZPXUVJm6x9VPAmbpbUARgjvHJRH/1/E63A041BE4EC9A73C342C10EECB20754B5BD248D.crl
                          rsync://rpki-repo.registro.br/repo/BXvcwTmHYXAcGGmn4ZPXUVJm6x9VPAmbpbUARgjvHJRH/1/E63A041BE4EC9A73C342C10EECB20754B5BD248D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E63A041BE4EC9A73C342C10EECB20754B5BD248D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 14:50:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:fa:1b:7f:1b:29:54:11:20:21:c5:02:9d:ef:11:70:95:af:46:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E63A041BE4EC9A73C342C10EECB20754B5BD248D
        Validity
            Not Before: Jun  7 15:05:37 2024 GMT
            Not After : Jun  6 15:10:37 2025 GMT
        Subject: CN=6F4FA813DE9E229F819B7FB01ABA2317F1021BBD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:dd:52:6f:89:f9:29:ad:7b:09:d8:f5:ca:25:
                    d5:2b:27:c4:77:58:3a:23:bb:97:06:22:39:95:37:
                    9c:e3:f7:33:0a:b0:3c:e1:f2:f0:ae:ba:a2:72:99:
                    79:01:ec:5c:17:09:e9:a3:77:da:64:2a:01:80:0b:
                    d2:78:1d:bd:c9:b8:26:68:67:09:01:1c:3d:5b:67:
                    59:25:31:6c:3b:ed:8f:90:2d:86:f4:4e:54:ae:05:
                    b5:8a:77:cc:8e:57:f8:2c:20:bb:60:d3:cf:86:7c:
                    25:74:30:ab:ec:9f:4f:26:50:05:1f:fd:f5:74:df:
                    de:9f:03:b4:32:a8:3d:4e:b2:70:e7:a0:97:70:e7:
                    22:ad:4d:6f:57:1a:50:8a:14:e2:be:23:d7:6b:99:
                    52:f5:78:b2:92:11:f9:f7:0b:e9:04:67:da:cf:58:
                    ec:91:e6:a8:05:46:b8:14:fc:3b:5b:8b:d6:5c:74:
                    02:d9:ca:65:13:9b:bc:75:0b:7a:7c:d7:0b:ea:bd:
                    8b:c4:b2:b2:59:05:74:a6:75:ef:54:35:ec:ba:ee:
                    6b:dd:9a:c2:6b:b5:c3:23:2d:9c:86:01:32:64:b5:
                    a0:3e:e4:f5:00:1c:28:1b:9c:e7:2e:0a:c7:5d:fd:
                    19:57:72:69:85:d9:9d:a9:91:d6:03:85:d7:a7:2b:
                    95:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:4F:A8:13:DE:9E:22:9F:81:9B:7F:B0:1A:BA:23:17:F1:02:1B:BD
            X509v3 Authority Key Identifier:
                keyid:E6:3A:04:1B:E4:EC:9A:73:C3:42:C1:0E:EC:B2:07:54:B5:BD:24:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BXvcwTmHYXAcGGmn4ZPXUVJm6x9VPAmbpbUARgjvHJRH/1/E63A041BE4EC9A73C342C10EECB20754B5BD248D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E63A041BE4EC9A73C342C10EECB20754B5BD248D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BXvcwTmHYXAcGGmn4ZPXUVJm6x9VPAmbpbUARgjvHJRH/1/3136372e3234392e38302e302f32342d3234203d3e20323635313639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.249.80.0/24

    Signature Algorithm: sha256WithRSAEncryption
         30:7b:5e:63:ef:ad:7e:77:4e:cb:b5:cf:cf:15:35:7c:65:d7:
         26:e2:00:71:98:21:d5:7a:04:f9:97:a0:83:b7:3a:4f:2a:de:
         ce:63:23:e7:e6:22:0a:c2:28:5e:02:aa:1f:2e:82:da:40:75:
         e3:b1:13:25:90:80:28:10:11:66:c8:8f:a7:73:30:80:42:81:
         8a:cd:46:58:c2:a3:a0:e0:ce:d3:70:9a:6e:d2:c6:70:e3:86:
         a1:5e:1f:10:cb:38:ce:d1:d5:80:fb:d7:97:8a:62:bc:7c:78:
         8f:5d:44:9b:23:f3:f3:69:82:9f:63:d8:06:10:b0:7d:6a:38:
         86:69:b8:54:4c:a4:5f:32:1d:c4:e2:6a:e6:d8:1d:71:65:7c:
         da:df:27:80:ff:0f:96:52:59:77:6b:1f:b5:46:98:f6:ed:ea:
         e3:90:24:5f:81:fb:d1:ab:3a:7e:10:b0:7f:41:bf:c3:94:10:
         43:d0:d7:85:12:f0:6a:86:1a:98:07:c2:63:fe:67:07:44:59:
         57:c7:fc:8b:15:03:b4:14:f0:54:4a:5a:bb:b9:8d:3e:60:88:
         55:83:52:f8:e0:ce:4e:76:08:a1:23:b8:c9:b9:75:42:a7:c5:
         7c:ee:f9:97:eb:6b:d7:0b:4d:1d:50:3b:c6:a2:10:44:f7:5c:
         76:c0:0a:98
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUZ/obfxspVBEgIcUCne8RcJWvRlUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTYzQTA0MUJFNEVDOUE3M0MzNDJDMTBFRUNCMjA3NTRC
NUJEMjQ4RDAeFw0yNDA2MDcxNTA1MzdaFw0yNTA2MDYxNTEwMzdaMDMxMTAvBgNV
BAMTKDZGNEZBODEzREU5RTIyOUY4MTlCN0ZCMDFBQkEyMzE3RjEwMjFCQkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCw3VJvifkprXsJ2PXKJdUrJ8R3
WDoju5cGIjmVN5zj9zMKsDzh8vCuuqJymXkB7FwXCemjd9pkKgGAC9J4Hb3JuCZo
ZwkBHD1bZ1klMWw77Y+QLYb0TlSuBbWKd8yOV/gsILtg08+GfCV0MKvsn08mUAUf
/fV0396fA7QyqD1OsnDnoJdw5yKtTW9XGlCKFOK+I9drmVL1eLKSEfn3C+kEZ9rP
WOyR5qgFRrgU/Dtbi9ZcdALZymUTm7x1C3p81wvqvYvEsrJZBXSmde9UNey67mvd
msJrtcMjLZyGATJktaA+5PUAHCgbnOcuCsdd/RlXcmmF2Z2pkdYDhdenK5U7AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUb0+oE96eIp+Bm3+wGrojF/ECG70wHwYDVR0j
BBgwFoAU5joEG+TsmnPDQsEO7LIHVLW9JI0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQlh2Y3dUbUhZWEFjR0dtbjRaUFhVVkptNng5VlBBbWJwYlVBUmdqdkhK
UkgvMS9FNjNBMDQxQkU0RUM5QTczQzM0MkMxMEVFQ0IyMDc1NEI1QkQyNDhELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0U2M0EwNDFCRTRFQzlBNzND
MzQyQzEwRUVDQjIwNzU0QjVCRDI0OEQuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0JYdmN3VG1IWVhBY0dHbW40WlBYVVZKbTZ4OVZQQW1icGJVQVJnanZISlJILzEv
MzEzNjM3MmUzMjM0MzkyZTM4MzAyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzUzMTM2Mzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBACn+VAwDQYJKoZIhvcNAQELBQADggEBADB7XmPv
rX53Tsu1z88VNXxl1ybiAHGYIdV6BPmXoIO3Ok8q3s5jI+fmIgrCKF4Cqh8ugtpA
deOxEyWQgCgQEWbIj6dzMIBCgYrNRljCo6DgztNwmm7SxnDjhqFeHxDLOM7R1YD7
15eKYrx8eI9dRJsj8/Npgp9j2AYQsH1qOIZpuFRMpF8yHcTiaubYHXFlfNrfJ4D/
D5ZSWXdrH7VGmPbt6uOQJF+B+9GrOn4QsH9Bv8OUEEPQ14US8GqGGpgHwmP+ZwdE
WVfH/IsVA7QU8FRKWru5jT5giFWDUvjgzk52CKEjuMm5dUKnxXzu+Zfra9cLTR1Q
O8aiEET3XHbACpg=
-----END CERTIFICATE-----
Generated at Fri Nov 22 13:31:57 2024 by rpki-client on console-fra.rpki-client.org