Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BnwUHpu6rWLBqpzdFWXVvUAEmFYXvx7anSLtWhqjgLyF/1/3136382e3139352e3232322e302f32332d3233203d3e20323633343231.roa
File:                     3136382e3139352e3232322e302f32332d3233203d3e20323633343231.roa (raw, json)
Hash identifier:          AD/NtIGfCFuKbnMvHLxJGr2Sbwjye+2aGEivHa4rGfs=
Subject key identifier:   8D:6A:13:A7:E6:44:54:A7:82:26:01:47:42:3A:C9:C2:61:C3:27:34
Certificate issuer:       /CN=0AA8D7B646E946A90F6891011A6A1CFAB6056A95
Certificate serial:       1B8648E1063CC728452A8A9EC7C83C58B87C03AA
Authority key identifier: 0A:A8:D7:B6:46:E9:46:A9:0F:68:91:01:1A:6A:1C:FA:B6:05:6A:95
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0AA8D7B646E946A90F6891011A6A1CFAB6056A95.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BnwUHpu6rWLBqpzdFWXVvUAEmFYXvx7anSLtWhqjgLyF/1/3136382e3139352e3232322e302f32332d3233203d3e20323633343231.roa
Signing time:             Thu 04 Apr 2024 07:44:47 +0000
ROA not before:           Thu 04 Apr 2024 07:39:47 +0000
ROA not after:            Thu 03 Apr 2025 07:44:47 +0000
asID:                     263421
IP address blocks:        168.195.222.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BnwUHpu6rWLBqpzdFWXVvUAEmFYXvx7anSLtWhqjgLyF/1/0AA8D7B646E946A90F6891011A6A1CFAB6056A95.crl
                          rsync://rpki-repo.registro.br/repo/BnwUHpu6rWLBqpzdFWXVvUAEmFYXvx7anSLtWhqjgLyF/1/0AA8D7B646E946A90F6891011A6A1CFAB6056A95.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0AA8D7B646E946A90F6891011A6A1CFAB6056A95.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 30 Jun 2024 01:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:86:48:e1:06:3c:c7:28:45:2a:8a:9e:c7:c8:3c:58:b8:7c:03:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0AA8D7B646E946A90F6891011A6A1CFAB6056A95
        Validity
            Not Before: Apr  4 07:39:47 2024 GMT
            Not After : Apr  3 07:44:47 2025 GMT
        Subject: CN=8D6A13A7E64454A782260147423AC9C261C32734
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:05:52:2b:30:72:58:54:95:f9:77:98:fa:9e:
                    42:c2:47:2b:b0:df:28:80:ec:da:ac:0e:39:3f:36:
                    2c:e0:c7:3d:58:62:72:86:a6:17:6e:46:94:8a:56:
                    bf:5d:8e:89:e0:b4:2a:04:cf:d2:75:18:cc:28:7d:
                    4e:31:66:1c:a6:39:4b:c6:56:2c:73:b6:00:35:47:
                    8e:8a:5e:52:f1:9a:48:79:98:b6:92:4f:4a:62:4b:
                    4c:a6:a3:4f:59:01:0b:cd:1d:22:b7:3f:bd:21:a9:
                    84:0a:46:1f:04:50:f3:ec:3d:98:df:47:0f:88:2f:
                    ae:2a:e2:2b:7f:4e:69:be:77:81:b9:1b:7e:30:c4:
                    0f:d7:f5:f9:c2:25:2b:fc:3b:36:63:e6:f1:00:57:
                    92:9a:4d:4a:ac:50:e8:55:09:96:a0:73:02:a0:76:
                    8b:5e:cb:fd:34:4c:ab:ce:21:d4:a5:8e:20:27:3e:
                    cf:7c:0c:e8:e2:e0:f0:c3:d0:55:8d:49:3c:99:3b:
                    35:53:b8:6b:57:71:19:ab:f2:9c:46:f6:bb:4b:68:
                    ed:5d:dd:52:9d:3b:13:6f:5c:9e:2e:f3:19:9b:61:
                    d4:7f:82:88:ed:4c:76:f3:37:36:ef:2e:d5:b2:17:
                    4c:ce:96:45:20:6a:c0:94:e5:63:c5:62:c9:43:a6:
                    56:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:6A:13:A7:E6:44:54:A7:82:26:01:47:42:3A:C9:C2:61:C3:27:34
            X509v3 Authority Key Identifier:
                keyid:0A:A8:D7:B6:46:E9:46:A9:0F:68:91:01:1A:6A:1C:FA:B6:05:6A:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BnwUHpu6rWLBqpzdFWXVvUAEmFYXvx7anSLtWhqjgLyF/1/0AA8D7B646E946A90F6891011A6A1CFAB6056A95.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0AA8D7B646E946A90F6891011A6A1CFAB6056A95.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BnwUHpu6rWLBqpzdFWXVvUAEmFYXvx7anSLtWhqjgLyF/1/3136382e3139352e3232322e302f32332d3233203d3e20323633343231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.195.222.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a4:13:bb:ef:46:83:d9:19:db:97:84:87:ab:ba:e7:1c:fe:2c:
         44:75:52:e2:9a:f0:93:83:59:8d:e3:e3:25:a3:b3:39:0c:c3:
         b6:2c:f8:a9:d8:0c:e5:8f:14:4f:de:aa:22:78:62:f7:3e:90:
         be:a1:52:32:91:a1:f2:b9:2a:30:18:48:96:70:a6:4b:25:4a:
         11:e5:a8:31:00:3d:7f:84:d5:e3:31:37:13:e8:cd:fd:1b:8a:
         06:2f:ab:0c:d7:4f:ce:3e:44:b0:f9:57:19:db:5e:e2:89:e1:
         85:01:ff:a4:eb:94:ef:a5:e0:4b:22:0c:ca:4e:1f:69:a2:e5:
         a4:40:ac:26:43:03:5f:78:1a:4b:f8:a3:18:d7:62:20:e5:c7:
         e7:bf:58:62:ac:5b:c7:68:a3:d5:4d:4c:13:95:23:df:56:c7:
         1a:4a:65:ee:7c:ad:b0:3b:7e:2d:be:ca:db:8c:9f:ad:8e:92:
         14:fe:f9:d4:9c:a4:d5:4e:28:77:49:f7:d8:b5:6e:1f:12:91:
         64:d6:85:24:67:64:8d:08:65:00:69:9d:6a:d0:78:92:de:da:
         62:da:0b:83:63:a5:11:c5:2d:18:17:0a:79:99:52:14:23:64:
         64:1f:08:f6:46:77:9e:bd:9f:5f:1b:c8:a8:3a:71:e0:e1:7b:
         e4:2c:45:ae
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUG4ZI4QY8xyhFKoqex8g8WLh8A6owDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEFBOEQ3QjY0NkU5NDZBOTBGNjg5MTAxMUE2QTFDRkFC
NjA1NkE5NTAeFw0yNDA0MDQwNzM5NDdaFw0yNTA0MDMwNzQ0NDdaMDMxMTAvBgNV
BAMTKDhENkExM0E3RTY0NDU0QTc4MjI2MDE0NzQyM0FDOUMyNjFDMzI3MzQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyBVIrMHJYVJX5d5j6nkLCRyuw
3yiA7NqsDjk/Nizgxz1YYnKGphduRpSKVr9djongtCoEz9J1GMwofU4xZhymOUvG
VixztgA1R46KXlLxmkh5mLaST0piS0ymo09ZAQvNHSK3P70hqYQKRh8EUPPsPZjf
Rw+IL64q4it/Tmm+d4G5G34wxA/X9fnCJSv8OzZj5vEAV5KaTUqsUOhVCZagcwKg
dotey/00TKvOIdSljiAnPs98DOji4PDD0FWNSTyZOzVTuGtXcRmr8pxG9rtLaO1d
3VKdOxNvXJ4u8xmbYdR/gojtTHbzNzbvLtWyF0zOlkUgasCU5WPFYslDplZrAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUjWoTp+ZEVKeCJgFHQjrJwmHDJzQwHwYDVR0j
BBgwFoAUCqjXtkbpRqkPaJEBGmoc+rYFapUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQm53VUhwdTZyV0xCcXB6ZEZXWFZ2VUFFbUZZWHZ4N2FuU0x0V2hxamdM
eUYvMS8wQUE4RDdCNjQ2RTk0NkE5MEY2ODkxMDExQTZBMUNGQUI2MDU2QTk1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzBBQThEN0I2NDZFOTQ2QTkw
RjY4OTEwMTFBNkExQ0ZBQjYwNTZBOTUuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0Jud1VIcHU2cldMQnFwemRGV1hWdlVBRW1GWVh2eDdhblNMdFdocWpnTHlGLzEv
MzEzNjM4MmUzMTM5MzUyZTMyMzIzMjJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDMy
MzYzMzM0MzIzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAajD3jANBgkqhkiG9w0BAQsFAAOCAQEApBO7
70aD2Rnbl4SHq7rnHP4sRHVS4prwk4NZjePjJaOzOQzDtiz4qdgM5Y8UT96qInhi
9z6QvqFSMpGh8rkqMBhIlnCmSyVKEeWoMQA9f4TV4zE3E+jN/RuKBi+rDNdPzj5E
sPlXGdte4onhhQH/pOuU76XgSyIMyk4faaLlpECsJkMDX3gaS/ijGNdiIOXH579Y
Yqxbx2ij1U1ME5Uj31bHGkpl7nytsDt+Lb7K24yfrY6SFP751Jyk1U4od0n32LVu
HxKRZNaFJGdkjQhlAGmdatB4kt7aYtoLg2OlEcUtGBcKeZlSFCNkZB8I9kZ3nr2f
XxvIqDpx4OF75CxFrg==
-----END CERTIFICATE-----
Generated at Sat Jun 29 00:20:54 2024 by rpki-client on console-ams.rpki-client.org