Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BXvcwTmHYXAcGGmn4ZPXUVJm6x9VPAmbpbUARgjvHJRH/1/3136372e3234392e38322e302f32332d3233203d3e20323635313639.roa
File:                     3136372e3234392e38322e302f32332d3233203d3e20323635313639.roa (raw, json)
Hash identifier:          YMHXnBYJQHUjnWUyEjEVXd8S16fwSGX25RDz23uEJ70=
Subject key identifier:   F6:5C:90:7E:A2:19:60:4F:EF:DA:C7:43:5D:3F:B3:E8:98:0F:7C:B9
Certificate issuer:       /CN=E63A041BE4EC9A73C342C10EECB20754B5BD248D
Certificate serial:       71821906A16663EC59AE6912D85BD367F9EDD06E
Authority key identifier: E6:3A:04:1B:E4:EC:9A:73:C3:42:C1:0E:EC:B2:07:54:B5:BD:24:8D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E63A041BE4EC9A73C342C10EECB20754B5BD248D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BXvcwTmHYXAcGGmn4ZPXUVJm6x9VPAmbpbUARgjvHJRH/1/3136372e3234392e38322e302f32332d3233203d3e20323635313639.roa
Signing time:             Thu 04 Apr 2024 00:22:49 +0000
ROA not before:           Thu 04 Apr 2024 00:17:49 +0000
ROA not after:            Thu 03 Apr 2025 00:22:49 +0000
asID:                     265169
IP address blocks:        167.249.82.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BXvcwTmHYXAcGGmn4ZPXUVJm6x9VPAmbpbUARgjvHJRH/1/E63A041BE4EC9A73C342C10EECB20754B5BD248D.crl
                          rsync://rpki-repo.registro.br/repo/BXvcwTmHYXAcGGmn4ZPXUVJm6x9VPAmbpbUARgjvHJRH/1/E63A041BE4EC9A73C342C10EECB20754B5BD248D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E63A041BE4EC9A73C342C10EECB20754B5BD248D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 14:50:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:82:19:06:a1:66:63:ec:59:ae:69:12:d8:5b:d3:67:f9:ed:d0:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E63A041BE4EC9A73C342C10EECB20754B5BD248D
        Validity
            Not Before: Apr  4 00:17:49 2024 GMT
            Not After : Apr  3 00:22:49 2025 GMT
        Subject: CN=F65C907EA219604FEFDAC7435D3FB3E8980F7CB9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:7c:6d:6b:c6:8d:f8:6a:9f:0f:2c:69:66:29:
                    7d:7f:d0:b3:ec:8d:66:a0:1d:c2:b7:36:1e:7e:b4:
                    4a:72:ea:24:59:c0:0f:32:41:dd:aa:27:30:63:f9:
                    32:9f:47:93:99:cb:41:3f:8c:91:d1:21:14:e0:e8:
                    33:56:f3:e5:30:e2:6d:e2:b2:33:55:1d:39:f2:18:
                    4c:5f:a0:5b:6c:c8:13:ec:76:ca:f5:a0:fd:9e:b8:
                    6f:e7:12:a2:f7:77:35:20:e4:e9:c3:88:aa:21:7e:
                    67:18:56:5f:43:b0:24:4b:9a:61:18:69:a9:2e:46:
                    df:13:8e:22:45:c7:a3:16:c0:7a:b5:81:8c:d4:04:
                    30:26:7a:e5:98:3e:3a:d8:50:61:3b:6e:15:b3:62:
                    c4:fc:d7:77:7b:70:9e:16:8f:78:2f:54:28:51:14:
                    03:f5:7a:52:4a:96:dd:e6:d8:3c:9d:fa:6b:5f:06:
                    98:61:c7:bf:fa:39:c2:e4:d5:71:da:43:0c:fa:37:
                    cd:2a:50:a1:e4:70:86:09:96:54:a5:53:69:31:78:
                    f4:e8:49:2d:3b:ef:82:4c:2b:29:c8:70:70:f6:2e:
                    f5:a2:53:0c:1c:4e:cf:15:3a:60:ca:d0:a8:eb:86:
                    df:82:ae:66:f7:26:8b:93:68:f7:5c:f4:41:e6:88:
                    eb:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:5C:90:7E:A2:19:60:4F:EF:DA:C7:43:5D:3F:B3:E8:98:0F:7C:B9
            X509v3 Authority Key Identifier:
                keyid:E6:3A:04:1B:E4:EC:9A:73:C3:42:C1:0E:EC:B2:07:54:B5:BD:24:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BXvcwTmHYXAcGGmn4ZPXUVJm6x9VPAmbpbUARgjvHJRH/1/E63A041BE4EC9A73C342C10EECB20754B5BD248D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E63A041BE4EC9A73C342C10EECB20754B5BD248D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BXvcwTmHYXAcGGmn4ZPXUVJm6x9VPAmbpbUARgjvHJRH/1/3136372e3234392e38322e302f32332d3233203d3e20323635313639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.249.82.0/23

    Signature Algorithm: sha256WithRSAEncryption
         75:50:94:b5:aa:e1:40:50:6d:0d:95:ab:d4:20:5a:c2:b2:b9:
         fb:83:0f:ad:2a:52:73:a7:bd:f7:aa:3c:31:ca:f1:a0:5e:9f:
         41:4a:ee:47:e5:7a:93:81:f4:6b:84:ae:eb:84:1a:b9:1d:8c:
         66:80:ea:5b:d7:bf:2e:6e:1f:56:5e:2e:32:60:47:f4:19:f6:
         7e:7e:a8:00:ca:ab:46:58:97:18:3b:75:69:f8:8f:ae:79:25:
         f0:95:ac:e5:72:95:51:a6:ac:fd:15:32:df:fe:60:78:e7:38:
         5d:2f:1f:a4:02:64:ba:a4:d0:5f:a6:f5:1f:28:6d:91:30:f8:
         9e:25:ba:31:22:02:50:e0:2b:1e:98:ed:59:01:a0:eb:c0:f1:
         b7:fd:2d:b6:25:66:03:33:23:79:cd:c2:6d:7d:e9:26:f7:b5:
         ed:a5:c0:84:e5:92:ed:55:a1:1f:29:b8:4c:ff:3f:23:28:04:
         ec:94:6d:e1:65:6c:96:0d:b5:fe:ba:52:61:8e:0b:b9:26:5a:
         f8:c3:76:7d:45:a1:eb:1c:07:81:9e:be:5b:0f:1f:27:e4:e2:
         2a:0c:07:59:a6:aa:a2:27:f8:55:c3:75:00:32:2b:84:c1:0d:
         eb:16:27:e5:9f:be:a7:61:34:1b:ac:34:01:03:72:c4:ac:13:
         6c:2e:e4:43
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUcYIZBqFmY+xZrmkS2FvTZ/nt0G4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTYzQTA0MUJFNEVDOUE3M0MzNDJDMTBFRUNCMjA3NTRC
NUJEMjQ4RDAeFw0yNDA0MDQwMDE3NDlaFw0yNTA0MDMwMDIyNDlaMDMxMTAvBgNV
BAMTKEY2NUM5MDdFQTIxOTYwNEZFRkRBQzc0MzVEM0ZCM0U4OTgwRjdDQjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZfG1rxo34ap8PLGlmKX1/0LPs
jWagHcK3Nh5+tEpy6iRZwA8yQd2qJzBj+TKfR5OZy0E/jJHRIRTg6DNW8+Uw4m3i
sjNVHTnyGExfoFtsyBPsdsr1oP2euG/nEqL3dzUg5OnDiKohfmcYVl9DsCRLmmEY
aakuRt8TjiJFx6MWwHq1gYzUBDAmeuWYPjrYUGE7bhWzYsT813d7cJ4Wj3gvVChR
FAP1elJKlt3m2Dyd+mtfBphhx7/6OcLk1XHaQwz6N80qUKHkcIYJllSlU2kxePTo
SS0774JMKynIcHD2LvWiUwwcTs8VOmDK0Kjrht+Crmb3JouTaPdc9EHmiOt1AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU9lyQfqIZYE/v2sdDXT+z6JgPfLkwHwYDVR0j
BBgwFoAU5joEG+TsmnPDQsEO7LIHVLW9JI0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQlh2Y3dUbUhZWEFjR0dtbjRaUFhVVkptNng5VlBBbWJwYlVBUmdqdkhK
UkgvMS9FNjNBMDQxQkU0RUM5QTczQzM0MkMxMEVFQ0IyMDc1NEI1QkQyNDhELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0U2M0EwNDFCRTRFQzlBNzND
MzQyQzEwRUVDQjIwNzU0QjVCRDI0OEQuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0JYdmN3VG1IWVhBY0dHbW40WlBYVVZKbTZ4OVZQQW1icGJVQVJnanZISlJILzEv
MzEzNjM3MmUzMjM0MzkyZTM4MzIyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjM2
MzUzMTM2Mzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAGn+VIwDQYJKoZIhvcNAQELBQADggEBAHVQlLWq
4UBQbQ2Vq9QgWsKyufuDD60qUnOnvfeqPDHK8aBen0FK7kflepOB9GuEruuEGrkd
jGaA6lvXvy5uH1ZeLjJgR/QZ9n5+qADKq0ZYlxg7dWn4j655JfCVrOVylVGmrP0V
Mt/+YHjnOF0vH6QCZLqk0F+m9R8obZEw+J4lujEiAlDgKx6Y7VkBoOvA8bf9LbYl
ZgMzI3nNwm196Sb3te2lwITlku1VoR8puEz/PyMoBOyUbeFlbJYNtf66UmGOC7km
WvjDdn1FoescB4GevlsPHyfk4ioMB1mmqqIn+FXDdQAyK4TBDesWJ+WfvqdhNBus
NAEDcsSsE2wu5EM=
-----END CERTIFICATE-----
Generated at Fri Nov 22 13:31:57 2024 by rpki-client on console-fra.rpki-client.org