Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C7d4bFfKuVzU8dxoCSqvsD3UBWkVaDwuurLqHfZWEDoc/0/3136382e3132312e36382e302f32342d3234203d3e20323635333030.roa
File:                     3136382e3132312e36382e302f32342d3234203d3e20323635333030.roa (raw, json)
Hash identifier:          wUWwlSIII2QORs+4iabAWwddaDWSQLN8t+ovwHDVkdc=
Subject key identifier:   98:38:87:C5:44:E6:A9:71:F8:87:59:FF:5C:DD:F2:A8:B1:1D:C3:BA
Certificate issuer:       /CN=6A8306BAA9B2C90FC29708796503E6EE751CFB0F
Certificate serial:       3D1225112550B126C1A9DF8EAD68082B79B363CE
Authority key identifier: 6A:83:06:BA:A9:B2:C9:0F:C2:97:08:79:65:03:E6:EE:75:1C:FB:0F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6A8306BAA9B2C90FC29708796503E6EE751CFB0F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C7d4bFfKuVzU8dxoCSqvsD3UBWkVaDwuurLqHfZWEDoc/0/3136382e3132312e36382e302f32342d3234203d3e20323635333030.roa
Signing time:             Mon 25 Nov 2024 17:35:04 +0000
ROA not before:           Mon 25 Nov 2024 17:30:04 +0000
ROA not after:            Mon 24 Nov 2025 17:35:04 +0000
asID:                     265300
IP address blocks:        168.121.68.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/C7d4bFfKuVzU8dxoCSqvsD3UBWkVaDwuurLqHfZWEDoc/0/6A8306BAA9B2C90FC29708796503E6EE751CFB0F.crl
                          rsync://rpki-repo.registro.br/repo/C7d4bFfKuVzU8dxoCSqvsD3UBWkVaDwuurLqHfZWEDoc/0/6A8306BAA9B2C90FC29708796503E6EE751CFB0F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6A8306BAA9B2C90FC29708796503E6EE751CFB0F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 20:04:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:12:25:11:25:50:b1:26:c1:a9:df:8e:ad:68:08:2b:79:b3:63:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6A8306BAA9B2C90FC29708796503E6EE751CFB0F
        Validity
            Not Before: Nov 25 17:30:04 2024 GMT
            Not After : Nov 24 17:35:04 2025 GMT
        Subject: CN=983887C544E6A971F88759FF5CDDF2A8B11DC3BA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:99:75:46:a4:3a:c8:e2:c8:ad:cf:3b:1c:e9:
                    90:0f:b4:f5:3b:7a:ee:2c:27:f6:e2:35:93:4f:ad:
                    1b:02:09:3b:a1:08:9f:9f:b4:c3:d5:98:82:7b:59:
                    aa:46:ac:41:e9:6a:3e:48:89:84:41:ab:df:9b:a8:
                    a7:2d:65:97:d4:ff:63:b5:b8:02:40:81:51:89:82:
                    d8:78:35:62:84:72:1e:ff:e8:67:15:11:31:94:b7:
                    34:80:fc:16:23:83:ab:9f:32:94:38:9f:fc:4c:9c:
                    2b:67:71:e8:65:d9:36:8d:aa:2b:95:28:b2:b0:82:
                    fd:d7:06:67:87:46:59:96:56:85:b6:6e:a2:8e:a6:
                    77:1d:e0:4c:b7:85:58:76:d6:62:e7:b8:b7:eb:5f:
                    10:b4:c3:0b:65:bb:a3:b9:ed:9f:2f:3a:ad:b3:a0:
                    9c:94:c9:6f:44:4a:32:03:f1:81:1b:89:d1:c0:32:
                    b0:f5:67:16:63:ef:f8:78:71:c8:4c:79:0b:bd:dc:
                    6e:5f:8b:c7:98:46:f4:74:6e:66:f4:3b:6c:0d:e4:
                    26:fe:70:19:ba:0f:ff:3c:a5:f4:b7:63:41:cb:cc:
                    75:f7:44:b6:e7:03:b7:56:ff:b3:d3:00:63:0c:ca:
                    00:b2:9e:79:fa:b7:6a:4f:06:b9:35:c7:8d:2a:7b:
                    71:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:38:87:C5:44:E6:A9:71:F8:87:59:FF:5C:DD:F2:A8:B1:1D:C3:BA
            X509v3 Authority Key Identifier:
                keyid:6A:83:06:BA:A9:B2:C9:0F:C2:97:08:79:65:03:E6:EE:75:1C:FB:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C7d4bFfKuVzU8dxoCSqvsD3UBWkVaDwuurLqHfZWEDoc/0/6A8306BAA9B2C90FC29708796503E6EE751CFB0F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6A8306BAA9B2C90FC29708796503E6EE751CFB0F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C7d4bFfKuVzU8dxoCSqvsD3UBWkVaDwuurLqHfZWEDoc/0/3136382e3132312e36382e302f32342d3234203d3e20323635333030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.121.68.0/24

    Signature Algorithm: sha256WithRSAEncryption
         06:b2:d5:66:77:ef:47:d6:45:1d:e7:1b:06:85:e3:34:63:3b:
         9b:76:99:0c:90:10:5a:ba:b0:2d:12:58:c1:ed:d4:60:e2:ec:
         a6:51:6d:08:e5:44:93:c7:b1:68:86:26:95:a5:01:5c:35:63:
         37:d6:50:be:74:e5:6e:bb:65:ab:f4:56:41:00:03:fb:6b:45:
         17:37:a9:54:1b:33:28:63:08:6e:40:4f:b2:be:78:a1:4d:97:
         7b:17:77:c2:94:ce:24:3b:9f:00:4b:8d:84:ba:9e:37:13:13:
         b5:9b:e3:29:1f:e9:21:f3:ed:55:d0:6c:c1:d9:d7:b8:33:5f:
         35:bf:8e:7e:77:c4:83:4e:a0:f5:7e:81:ef:4f:d2:aa:c2:89:
         24:67:36:fc:2b:98:df:4d:81:f0:78:ca:89:6f:a4:4a:94:2b:
         7e:43:1b:fe:75:43:8c:97:79:10:ba:16:1d:96:7e:af:6e:65:
         99:a6:81:14:0d:a3:e4:80:6b:30:6c:ed:43:19:99:8d:2c:be:
         33:09:05:39:b7:8e:98:83:ec:b5:4e:aa:e2:7b:26:c7:b1:06:
         69:20:21:5e:90:a5:a0:c0:53:3f:3d:1c:bb:69:0b:e1:46:92:
         06:b0:72:92:88:ee:f0:f3:fb:03:9d:78:bf:c8:7f:8d:81:79:
         93:e1:f2:16
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUPRIlESVQsSbBqd+OrWgIK3mzY84wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkE4MzA2QkFBOUIyQzkwRkMyOTcwODc5NjUwM0U2RUU3
NTFDRkIwRjAeFw0yNDExMjUxNzMwMDRaFw0yNTExMjQxNzM1MDRaMDMxMTAvBgNV
BAMTKDk4Mzg4N0M1NDRFNkE5NzFGODg3NTlGRjVDRERGMkE4QjExREMzQkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRmXVGpDrI4sitzzsc6ZAPtPU7
eu4sJ/biNZNPrRsCCTuhCJ+ftMPVmIJ7WapGrEHpaj5IiYRBq9+bqKctZZfU/2O1
uAJAgVGJgth4NWKEch7/6GcVETGUtzSA/BYjg6ufMpQ4n/xMnCtncehl2TaNqiuV
KLKwgv3XBmeHRlmWVoW2bqKOpncd4Ey3hVh21mLnuLfrXxC0wwtlu6O57Z8vOq2z
oJyUyW9ESjID8YEbidHAMrD1ZxZj7/h4cchMeQu93G5fi8eYRvR0bmb0O2wN5Cb+
cBm6D/88pfS3Y0HLzHX3RLbnA7dW/7PTAGMMygCynnn6t2pPBrk1x40qe3FHAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUmDiHxUTmqXH4h1n/XN3yqLEdw7owHwYDVR0j
BBgwFoAUaoMGuqmyyQ/Clwh5ZQPm7nUc+w8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQzdkNGJGZkt1VnpVOGR4b0NTcXZzRDNVQldrVmFEd3V1ckxxSGZaV0VE
b2MvMC82QTgzMDZCQUE5QjJDOTBGQzI5NzA4Nzk2NTAzRTZFRTc1MUNGQjBGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzZBODMwNkJBQTlCMkM5MEZD
Mjk3MDg3OTY1MDNFNkVFNzUxQ0ZCMEYuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0M3ZDRiRmZLdVZ6VThkeG9DU3F2c0QzVUJXa1ZhRHd1dXJMcUhmWldFRG9jLzAv
MzEzNjM4MmUzMTMyMzEyZTM2MzgyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzUzMzMwMzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBACoeUQwDQYJKoZIhvcNAQELBQADggEBAAay1WZ3
70fWRR3nGwaF4zRjO5t2mQyQEFq6sC0SWMHt1GDi7KZRbQjlRJPHsWiGJpWlAVw1
YzfWUL505W67Zav0VkEAA/trRRc3qVQbMyhjCG5AT7K+eKFNl3sXd8KUziQ7nwBL
jYS6njcTE7Wb4ykf6SHz7VXQbMHZ17gzXzW/jn53xINOoPV+ge9P0qrCiSRnNvwr
mN9NgfB4yolvpEqUK35DG/51Q4yXeRC6Fh2Wfq9uZZmmgRQNo+SAazBs7UMZmY0s
vjMJBTm3jpiD7LVOquJ7JsexBmkgIV6QpaDAUz89HLtpC+FGkgawcpKI7vDz+wOd
eL/If42BeZPh8hY=
-----END CERTIFICATE-----
Generated at Mon Nov 25 19:46:38 2024 by rpki-client on console-fra.rpki-client.org