Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C9r2AJGyzoqtWsqEF3HQbzR5qZaauCe1VgPLZfjVLddj/1/3136382e3232372e3136332e302f32342d3234203d3e20323633383630.roa
File:                     3136382e3232372e3136332e302f32342d3234203d3e20323633383630.roa (raw, json)
Hash identifier:          oEYSzEzoeAAh7BsJYGgwWbd6wRtD3lgqNVdzm6e4RTU=
Subject key identifier:   6A:E0:83:B1:F0:74:7C:D8:62:91:54:8E:6E:E6:28:31:4A:A7:50:35
Certificate issuer:       /CN=5695ED60EF09AD0148A9E0A70AAFAC61A6A21D78
Certificate serial:       3FB0A1C8C7CEE5FF4DF3D10657D988F38D66A601
Authority key identifier: 56:95:ED:60:EF:09:AD:01:48:A9:E0:A7:0A:AF:AC:61:A6:A2:1D:78
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5695ED60EF09AD0148A9E0A70AAFAC61A6A21D78.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C9r2AJGyzoqtWsqEF3HQbzR5qZaauCe1VgPLZfjVLddj/1/3136382e3232372e3136332e302f32342d3234203d3e20323633383630.roa
Signing time:             Wed 03 Apr 2024 22:04:48 +0000
ROA not before:           Wed 03 Apr 2024 21:59:48 +0000
ROA not after:            Wed 02 Apr 2025 22:04:48 +0000
asID:                     263860
IP address blocks:        168.227.163.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/C9r2AJGyzoqtWsqEF3HQbzR5qZaauCe1VgPLZfjVLddj/1/5695ED60EF09AD0148A9E0A70AAFAC61A6A21D78.crl
                          rsync://rpki-repo.registro.br/repo/C9r2AJGyzoqtWsqEF3HQbzR5qZaauCe1VgPLZfjVLddj/1/5695ED60EF09AD0148A9E0A70AAFAC61A6A21D78.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5695ED60EF09AD0148A9E0A70AAFAC61A6A21D78.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:b0:a1:c8:c7:ce:e5:ff:4d:f3:d1:06:57:d9:88:f3:8d:66:a6:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5695ED60EF09AD0148A9E0A70AAFAC61A6A21D78
        Validity
            Not Before: Apr  3 21:59:48 2024 GMT
            Not After : Apr  2 22:04:48 2025 GMT
        Subject: CN=6AE083B1F0747CD86291548E6EE628314AA75035
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:53:36:5a:2b:4f:11:d2:ec:42:7b:ce:1d:b2:
                    19:bb:fa:ce:2b:3a:b9:d4:2c:e5:bb:3c:74:e5:b0:
                    45:c8:b4:2a:13:de:66:fc:b0:82:9d:fa:af:d0:97:
                    12:bf:2b:dd:c3:fc:81:89:ad:fe:75:8e:7b:99:d3:
                    95:8e:ec:b4:57:66:8b:47:7c:17:6d:a6:22:0e:b1:
                    0d:52:8e:18:ca:1b:41:b5:ab:02:86:e8:f0:fc:59:
                    90:9c:c3:99:ca:db:a0:75:9f:92:05:8c:e6:5e:43:
                    11:29:27:23:9a:1f:85:f4:a6:41:61:80:e3:33:ff:
                    80:65:e7:8b:02:16:cc:21:08:d8:b2:ec:69:6a:8a:
                    84:99:98:0b:2f:d1:43:ba:33:08:e1:d1:e4:6f:0e:
                    9c:5a:af:4a:d7:5d:d4:e0:fb:cd:59:a2:2f:ac:f0:
                    de:76:12:29:99:db:73:b6:93:bc:1b:ce:20:a4:4f:
                    0c:9d:09:09:59:b5:99:5e:dd:bb:7f:49:1b:91:e9:
                    3e:4f:8f:d8:92:a0:fc:d9:ef:03:7d:cb:2e:46:17:
                    98:c1:c7:3c:39:07:a2:94:4c:dd:d7:d6:ca:f0:96:
                    67:de:45:93:f6:b9:52:1d:6e:e1:88:5e:a9:a9:8d:
                    4d:d3:5a:36:c3:b7:78:f6:52:8f:90:1e:93:c2:87:
                    49:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:E0:83:B1:F0:74:7C:D8:62:91:54:8E:6E:E6:28:31:4A:A7:50:35
            X509v3 Authority Key Identifier:
                keyid:56:95:ED:60:EF:09:AD:01:48:A9:E0:A7:0A:AF:AC:61:A6:A2:1D:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C9r2AJGyzoqtWsqEF3HQbzR5qZaauCe1VgPLZfjVLddj/1/5695ED60EF09AD0148A9E0A70AAFAC61A6A21D78.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5695ED60EF09AD0148A9E0A70AAFAC61A6A21D78.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C9r2AJGyzoqtWsqEF3HQbzR5qZaauCe1VgPLZfjVLddj/1/3136382e3232372e3136332e302f32342d3234203d3e20323633383630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.227.163.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6d:4e:7b:2f:90:62:16:a9:98:f9:c8:cb:c4:70:6b:99:0f:95:
         9b:2d:4e:f2:94:46:f5:cc:6d:c0:48:b2:8e:b4:11:63:a4:00:
         e9:ed:32:01:5d:0a:9a:fa:a9:87:01:1c:3d:1a:ad:52:7f:ab:
         9c:a2:db:a7:e7:a1:00:f9:14:db:76:1b:0d:20:d8:57:f3:1c:
         4e:4a:a7:a1:cf:43:7a:14:0a:59:c4:55:56:aa:7f:c6:80:01:
         96:62:52:18:24:ce:05:82:d4:72:d1:94:90:80:10:c6:a7:7a:
         72:a8:2e:cd:f0:ed:f9:ea:bb:fc:fe:98:73:b9:8f:0c:e3:8d:
         29:46:db:ab:29:24:be:a2:3d:ef:e3:a9:68:e2:ec:0d:71:0e:
         16:6d:b4:12:4e:c5:93:08:cd:67:5a:ca:1c:da:3f:53:9c:22:
         1b:6b:e1:59:93:96:6c:28:2e:e3:d3:8e:c4:8a:d6:93:ed:f2:
         b1:39:be:b8:52:1a:63:05:ef:10:cc:e5:8a:18:a4:1a:5d:cd:
         8c:d6:99:19:96:ad:9c:7a:c5:0a:6d:a0:4f:88:42:d2:5b:27:
         d7:40:0f:b9:13:7c:b4:d9:65:cf:41:ff:ff:a7:95:38:29:cd:
         89:00:e1:d2:c2:7f:e8:94:cc:af:ab:de:40:7b:35:ac:13:86:
         df:28:21:83
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUP7ChyMfO5f9N89EGV9mI841mpgEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTY5NUVENjBFRjA5QUQwMTQ4QTlFMEE3MEFBRkFDNjFB
NkEyMUQ3ODAeFw0yNDA0MDMyMTU5NDhaFw0yNTA0MDIyMjA0NDhaMDMxMTAvBgNV
BAMTKDZBRTA4M0IxRjA3NDdDRDg2MjkxNTQ4RTZFRTYyODMxNEFBNzUwMzUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTUzZaK08R0uxCe84dshm7+s4r
OrnULOW7PHTlsEXItCoT3mb8sIKd+q/QlxK/K93D/IGJrf51jnuZ05WO7LRXZotH
fBdtpiIOsQ1SjhjKG0G1qwKG6PD8WZCcw5nK26B1n5IFjOZeQxEpJyOaH4X0pkFh
gOMz/4Bl54sCFswhCNiy7GlqioSZmAsv0UO6Mwjh0eRvDpxar0rXXdTg+81Zoi+s
8N52EimZ23O2k7wbziCkTwydCQlZtZle3bt/SRuR6T5Pj9iSoPzZ7wN9yy5GF5jB
xzw5B6KUTN3X1srwlmfeRZP2uVIdbuGIXqmpjU3TWjbDt3j2Uo+QHpPCh0nPAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUauCDsfB0fNhikVSObuYoMUqnUDUwHwYDVR0j
BBgwFoAUVpXtYO8JrQFIqeCnCq+sYaaiHXgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQzlyMkFKR3l6b3F0V3NxRUYzSFFielI1cVphYXVDZTFWZ1BMWmZqVkxk
ZGovMS81Njk1RUQ2MEVGMDlBRDAxNDhBOUUwQTcwQUFGQUM2MUE2QTIxRDc4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzU2OTVFRDYwRUYwOUFEMDE0
OEE5RTBBNzBBQUZBQzYxQTZBMjFENzguY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0M5cjJBSkd5em9xdFdzcUVGM0hRYnpSNXFaYWF1Q2UxVmdQTFpmalZMZGRqLzEv
MzEzNjM4MmUzMjMyMzcyZTMxMzYzMzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzYzMzM4MzYzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAKjjozANBgkqhkiG9w0BAQsFAAOCAQEAbU57
L5BiFqmY+cjLxHBrmQ+Vmy1O8pRG9cxtwEiyjrQRY6QA6e0yAV0KmvqphwEcPRqt
Un+rnKLbp+ehAPkU23YbDSDYV/McTkqnoc9DehQKWcRVVqp/xoABlmJSGCTOBYLU
ctGUkIAQxqd6cqguzfDt+eq7/P6Yc7mPDOONKUbbqykkvqI97+OpaOLsDXEOFm20
Ek7FkwjNZ1rKHNo/U5wiG2vhWZOWbCgu49OOxIrWk+3ysTm+uFIaYwXvEMzlihik
Gl3NjNaZGZatnHrFCm2gT4hC0lsn10APuRN8tNllz0H//6eVOCnNiQDh0sJ/6JTM
r6veQHs1rBOG3yghgw==
-----END CERTIFICATE-----
Generated at Sat Nov 23 00:05:41 2024 by rpki-client on console-ams.rpki-client.org