Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BxaaKBkRRPL5ATGrWB1wXGDfTNuBqVCUQZemw8Yqu1M1/0/3136382e3232372e3131352e302f32342d3234203d3e20323634383931.roa
File:                     3136382e3232372e3131352e302f32342d3234203d3e20323634383931.roa (raw, json)
Hash identifier:          Flouo9avWP0adTMf3UuRg8qCiHH7s3KJOUJOl0Wmqe8=
Subject key identifier:   52:BA:CF:77:2F:81:11:C1:FB:87:33:CA:77:F7:CF:94:DF:4C:30:E8
Certificate issuer:       /CN=6295613937297D5F10674AC45D3ACAB7545474C7
Certificate serial:       447DBA48B0271B0DFF7758E06321ABCB88DED82F
Authority key identifier: 62:95:61:39:37:29:7D:5F:10:67:4A:C4:5D:3A:CA:B7:54:54:74:C7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6295613937297D5F10674AC45D3ACAB7545474C7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BxaaKBkRRPL5ATGrWB1wXGDfTNuBqVCUQZemw8Yqu1M1/0/3136382e3232372e3131352e302f32342d3234203d3e20323634383931.roa
Signing time:             Wed 04 Sep 2024 12:36:01 +0000
ROA not before:           Wed 04 Sep 2024 12:31:01 +0000
ROA not after:            Wed 03 Sep 2025 12:36:01 +0000
asID:                     264891
IP address blocks:        168.227.115.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BxaaKBkRRPL5ATGrWB1wXGDfTNuBqVCUQZemw8Yqu1M1/0/6295613937297D5F10674AC45D3ACAB7545474C7.crl
                          rsync://rpki-repo.registro.br/repo/BxaaKBkRRPL5ATGrWB1wXGDfTNuBqVCUQZemw8Yqu1M1/0/6295613937297D5F10674AC45D3ACAB7545474C7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6295613937297D5F10674AC45D3ACAB7545474C7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 13:16:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:7d:ba:48:b0:27:1b:0d:ff:77:58:e0:63:21:ab:cb:88:de:d8:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6295613937297D5F10674AC45D3ACAB7545474C7
        Validity
            Not Before: Sep  4 12:31:01 2024 GMT
            Not After : Sep  3 12:36:01 2025 GMT
        Subject: CN=52BACF772F8111C1FB8733CA77F7CF94DF4C30E8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:a0:39:72:f4:c1:35:eb:e4:a8:11:f4:bd:36:
                    f1:1b:72:97:ee:72:3d:7a:09:2f:5d:47:e1:ce:5e:
                    13:e7:00:97:d4:87:0c:66:be:fb:16:e4:4e:77:92:
                    10:d8:53:d6:01:51:eb:14:7d:53:50:2b:96:c1:e8:
                    d1:c8:cb:c0:28:57:7d:d3:14:4a:fd:39:41:55:f9:
                    f2:35:14:9d:6a:bd:7a:cc:69:8f:12:19:3f:7e:26:
                    5b:1b:85:25:10:e1:47:08:e9:ab:9d:36:93:d7:a2:
                    de:b0:64:cd:2e:11:35:19:51:b4:b9:3d:98:91:02:
                    f0:4e:1b:02:95:10:09:83:3e:1f:7e:98:22:88:6e:
                    a8:95:d3:b6:d5:59:02:04:70:c5:96:07:ad:94:e6:
                    bc:e6:37:be:d5:4f:1b:79:7d:ce:ee:64:29:52:6a:
                    c8:a2:22:de:ea:fb:36:1b:74:94:75:ef:6f:52:a2:
                    07:93:90:24:a6:d8:bf:ba:f0:dc:16:41:06:8d:0f:
                    89:e8:4b:1f:1b:66:fc:35:b5:28:f6:76:41:4a:56:
                    07:7b:60:33:fc:ca:90:fc:6d:ad:fc:a7:34:98:ae:
                    af:7f:19:60:3d:c3:f0:1d:e5:e8:4e:a9:2f:62:fd:
                    c4:71:fa:3c:b0:73:f2:2d:0d:fc:d7:93:f9:0b:6b:
                    d9:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:BA:CF:77:2F:81:11:C1:FB:87:33:CA:77:F7:CF:94:DF:4C:30:E8
            X509v3 Authority Key Identifier:
                keyid:62:95:61:39:37:29:7D:5F:10:67:4A:C4:5D:3A:CA:B7:54:54:74:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BxaaKBkRRPL5ATGrWB1wXGDfTNuBqVCUQZemw8Yqu1M1/0/6295613937297D5F10674AC45D3ACAB7545474C7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6295613937297D5F10674AC45D3ACAB7545474C7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BxaaKBkRRPL5ATGrWB1wXGDfTNuBqVCUQZemw8Yqu1M1/0/3136382e3232372e3131352e302f32342d3234203d3e20323634383931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.227.115.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6a:49:df:ab:c9:5f:ed:7c:55:eb:5a:8a:a5:73:ce:3b:21:93:
         b8:3e:9e:02:b3:77:a5:d9:ff:00:17:24:c7:62:32:59:0a:9d:
         9f:9a:0a:61:ff:44:24:8b:50:4e:c2:45:4a:ce:1e:53:35:c5:
         41:e7:4f:bc:25:13:f0:4f:3c:8f:f8:08:9d:f2:91:3c:17:66:
         0a:7d:ef:87:b9:c1:cb:0a:27:63:72:78:15:6e:e6:ae:98:e1:
         c9:52:36:06:68:fc:93:2a:6b:a1:49:bb:93:4b:f4:1f:d9:2b:
         a1:62:f6:2d:89:c5:c7:25:3a:64:09:73:13:3e:7d:80:90:b1:
         0e:8a:15:21:e1:0a:43:51:a3:6d:99:09:3f:6d:bd:26:f4:6f:
         fa:cd:ee:f7:8a:3e:e8:50:cb:f4:37:a0:8c:af:c7:a9:f7:89:
         ea:5f:7f:b5:6d:73:5f:0e:4d:1a:70:b4:28:a8:b7:a6:e7:93:
         b3:36:c9:38:37:61:63:79:f2:eb:5e:63:07:36:b2:a7:de:4b:
         eb:59:37:44:7a:49:1d:b4:33:2d:71:2a:2a:39:a3:89:c2:90:
         be:29:d1:c0:84:4b:cf:5a:44:c0:a9:75:e0:dc:3e:e6:0d:27:
         59:78:c4:da:b3:96:13:ff:9f:ee:fd:d3:96:68:60:fc:27:69:
         6b:60:96:d8
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIURH26SLAnGw3/d1jgYyGry4je2C8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjI5NTYxMzkzNzI5N0Q1RjEwNjc0QUM0NUQzQUNBQjc1
NDU0NzRDNzAeFw0yNDA5MDQxMjMxMDFaFw0yNTA5MDMxMjM2MDFaMDMxMTAvBgNV
BAMTKDUyQkFDRjc3MkY4MTExQzFGQjg3MzNDQTc3RjdDRjk0REY0QzMwRTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDnoDly9ME16+SoEfS9NvEbcpfu
cj16CS9dR+HOXhPnAJfUhwxmvvsW5E53khDYU9YBUesUfVNQK5bB6NHIy8AoV33T
FEr9OUFV+fI1FJ1qvXrMaY8SGT9+JlsbhSUQ4UcI6audNpPXot6wZM0uETUZUbS5
PZiRAvBOGwKVEAmDPh9+mCKIbqiV07bVWQIEcMWWB62U5rzmN77VTxt5fc7uZClS
asiiIt7q+zYbdJR1729SogeTkCSm2L+68NwWQQaND4noSx8bZvw1tSj2dkFKVgd7
YDP8ypD8ba38pzSYrq9/GWA9w/Ad5ehOqS9i/cRx+jywc/ItDfzXk/kLa9m1AgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUUrrPdy+BEcH7hzPKd/fPlN9MMOgwHwYDVR0j
BBgwFoAUYpVhOTcpfV8QZ0rEXTrKt1RUdMcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQnhhYUtCa1JSUEw1QVRHcldCMXdYR0RmVE51QnFWQ1VRWmVtdzhZcXUx
TTEvMC82Mjk1NjEzOTM3Mjk3RDVGMTA2NzRBQzQ1RDNBQ0FCNzU0NTQ3NEM3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzYyOTU2MTM5MzcyOTdENUYx
MDY3NEFDNDVEM0FDQUI3NTQ1NDc0QzcuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0J4YWFLQmtSUlBMNUFUR3JXQjF3WEdEZlROdUJxVkNVUVplbXc4WXF1MU0xLzAv
MzEzNjM4MmUzMjMyMzcyZTMxMzEzNTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzYzNDM4MzkzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAKjjczANBgkqhkiG9w0BAQsFAAOCAQEAaknf
q8lf7XxV61qKpXPOOyGTuD6eArN3pdn/ABckx2IyWQqdn5oKYf9EJItQTsJFSs4e
UzXFQedPvCUT8E88j/gInfKRPBdmCn3vh7nBywonY3J4FW7mrpjhyVI2Bmj8kypr
oUm7k0v0H9kroWL2LYnFxyU6ZAlzEz59gJCxDooVIeEKQ1GjbZkJP229JvRv+s3u
94o+6FDL9DegjK/HqfeJ6l9/tW1zXw5NGnC0KKi3pueTszbJODdhY3ny615jBzay
p95L61k3RHpJHbQzLXEqKjmjicKQvinRwIRLz1pEwKl14Nw+5g0nWXjE2rOWE/+f
7v3Tlmhg/Cdpa2CW2A==
-----END CERTIFICATE-----
Generated at Fri Nov 22 11:14:49 2024 by rpki-client on console-fra.rpki-client.org