Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CJhG6X9jdPGAtdPRz66yts2chEbhZAhbgpTYFCeMBuYj/1/3138392e38342e3137362e302f32302d3234203d3e203238313731.roa
File:                     3138392e38342e3137362e302f32302d3234203d3e203238313731.roa (raw, json)
Hash identifier:          zwR6jkHzW/3WLjDsfO1j9Ixey0swRaP5C87IS4vZrAQ=
Subject key identifier:   14:C2:C7:66:40:0E:76:10:DC:A9:B0:21:88:FA:AD:16:87:EB:C9:12
Certificate issuer:       /CN=8BA699C4701669ECE8E7D3F4A860C4F6D5C764D0
Certificate serial:       73448A86BB749B2220A3794D9E82A6ABE5099BD4
Authority key identifier: 8B:A6:99:C4:70:16:69:EC:E8:E7:D3:F4:A8:60:C4:F6:D5:C7:64:D0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8BA699C4701669ECE8E7D3F4A860C4F6D5C764D0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CJhG6X9jdPGAtdPRz66yts2chEbhZAhbgpTYFCeMBuYj/1/3138392e38342e3137362e302f32302d3234203d3e203238313731.roa
Signing time:             Wed 03 Apr 2024 19:00:00 +0000
ROA not before:           Wed 03 Apr 2024 18:55:00 +0000
ROA not after:            Thu 03 Apr 2025 19:00:00 +0000
asID:                     28171
IP address blocks:        189.84.176.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CJhG6X9jdPGAtdPRz66yts2chEbhZAhbgpTYFCeMBuYj/1/8BA699C4701669ECE8E7D3F4A860C4F6D5C764D0.crl
                          rsync://rpki-repo.registro.br/repo/CJhG6X9jdPGAtdPRz66yts2chEbhZAhbgpTYFCeMBuYj/1/8BA699C4701669ECE8E7D3F4A860C4F6D5C764D0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8BA699C4701669ECE8E7D3F4A860C4F6D5C764D0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 27 Jun 2024 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:44:8a:86:bb:74:9b:22:20:a3:79:4d:9e:82:a6:ab:e5:09:9b:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8BA699C4701669ECE8E7D3F4A860C4F6D5C764D0
        Validity
            Not Before: Apr  3 18:55:00 2024 GMT
            Not After : Apr  3 19:00:00 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:5b:47:80:e7:63:dd:7d:fd:0f:0b:60:6f:f0:
                    30:a9:85:14:43:7c:b6:2e:1f:25:9d:e6:88:9b:c0:
                    43:93:84:fa:1d:c9:3b:62:14:61:74:72:34:6b:b9:
                    99:91:e8:f8:6e:13:ae:b2:60:9e:d4:51:af:b7:cd:
                    88:d1:76:17:60:2b:5e:67:3c:5a:26:fd:b3:aa:40:
                    e0:6e:3a:dd:43:55:ee:5c:0e:fe:96:26:09:7f:88:
                    d0:9a:4f:f7:0b:26:d7:6e:ef:89:fa:52:1b:b1:7e:
                    35:1b:a1:2b:38:68:2a:0a:03:29:7b:a6:5c:9c:83:
                    a4:5a:ff:11:f8:62:f4:95:2f:c7:cd:46:19:c1:fe:
                    7a:ae:1a:9e:97:b1:62:93:ca:37:7f:b4:c1:82:7d:
                    ad:49:23:b7:26:ae:f7:72:d1:63:2d:68:62:9f:be:
                    78:d6:d4:88:86:03:2e:13:cd:88:44:af:25:2b:c4:
                    12:59:5b:92:a2:66:b6:95:6e:97:85:1d:02:e6:48:
                    20:70:4e:66:e2:30:e7:82:fd:4b:37:f4:ce:e3:c5:
                    7b:c4:27:d4:9b:6d:f8:4f:f3:f4:d5:33:d5:37:9e:
                    5e:d2:94:dc:71:33:97:34:f9:f7:f8:d2:a3:f5:10:
                    c6:a3:a6:cc:51:6b:5a:f2:9d:6c:38:49:7a:74:e3:
                    08:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:C2:C7:66:40:0E:76:10:DC:A9:B0:21:88:FA:AD:16:87:EB:C9:12
            X509v3 Authority Key Identifier:
                keyid:8B:A6:99:C4:70:16:69:EC:E8:E7:D3:F4:A8:60:C4:F6:D5:C7:64:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CJhG6X9jdPGAtdPRz66yts2chEbhZAhbgpTYFCeMBuYj/1/8BA699C4701669ECE8E7D3F4A860C4F6D5C764D0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8BA699C4701669ECE8E7D3F4A860C4F6D5C764D0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CJhG6X9jdPGAtdPRz66yts2chEbhZAhbgpTYFCeMBuYj/1/3138392e38342e3137362e302f32302d3234203d3e203238313731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.84.176.0/20

    Signature Algorithm: sha256WithRSAEncryption
         cb:12:cc:2b:36:d1:aa:6a:e6:e6:68:9d:e2:a0:89:9d:b3:20:
         04:da:ea:86:1b:f4:b5:24:f1:d2:07:3e:7d:6d:6e:58:57:10:
         ac:bb:7d:2f:9e:9b:68:34:55:5c:de:6f:30:4d:de:56:43:67:
         25:9d:9a:c3:83:0a:6b:89:fd:ec:28:11:fa:2d:e6:13:eb:ee:
         ea:a2:e6:be:42:2e:af:ec:a8:ac:f2:4f:52:39:12:54:a2:fe:
         ba:03:1a:37:d3:0e:bd:1d:e9:41:03:81:53:09:2a:73:dc:02:
         41:f6:23:f9:19:74:bc:68:84:1e:2d:41:e0:4b:05:b6:19:e2:
         aa:24:88:98:3e:e9:07:25:29:b3:7f:52:ec:84:dc:6b:a1:1d:
         f9:a8:d2:7f:21:c3:df:13:02:29:71:db:6b:4b:82:fd:21:bb:
         f7:f6:2b:14:41:3c:5f:da:29:41:9b:40:65:a3:69:9e:c0:01:
         0e:15:4b:59:13:5b:8b:e7:a4:3f:d9:0c:84:17:86:31:75:5c:
         99:8e:15:23:f7:ac:80:8e:05:f7:62:44:49:39:5e:b9:6d:c0:
         85:5b:dc:38:27:91:05:1a:86:31:d9:68:b5:a6:cc:2f:a1:38:
         1f:58:1f:f2:37:bc:ea:aa:e3:00:7e:34:80:b1:51:26:8c:7a:
         62:45:ca:fd
-----BEGIN CERTIFICATE-----
MIIHQTCCBimgAwIBAgIUc0SKhrt0myIgo3lNnoKmq+UJm9QwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEJBNjk5QzQ3MDE2NjlFQ0U4RTdEM0Y0QTg2MEM0RjZE
NUM3NjREMDAeFw0yNDA0MDMxODU1MDBaFw0yNTA0MDMxOTAwMDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQUQ1QjQ3ODBFNzYzREQ3REZE
MEYwQjYwNkZGMDMwQTk4NTE0NDM3Q0I2MkUxRjI1OURFNjg4OUJDMDQzOTM4NEZB
MURDOTNCNjIxNDYxNzQ3MjM0NkJCOTk5OTFFOEY4NkUxM0FFQjI2MDlFRDQ1MUFG
QjdDRDg4RDE3NjE3NjAyQjVFNjczQzVBMjZGREIzQUE0MEUwNkUzQURENDM1NUVF
NUMwRUZFOTYyNjA5N0Y4OEQwOUE0RkY3MEIyNkQ3NkVFRjg5RkE1MjFCQjE3RTM1
MUJBMTJCMzg2ODJBMEEwMzI5N0JBNjVDOUM4M0E0NUFGRjExRjg2MkY0OTUyRkM3
Q0Q0NjE5QzFGRTdBQUUxQTlFOTdCMTYyOTNDQTM3N0ZCNEMxODI3REFENDkyM0I3
MjZBRUY3NzJEMTYzMkQ2ODYyOUZCRTc4RDZENDg4ODYwMzJFMTNDRDg4NDRBRjI1
MkJDNDEyNTk1QjkyQTI2NkI2OTU2RTk3ODUxRDAyRTY0ODIwNzA0RTY2RTIzMEU3
ODJGRDRCMzdGNENFRTNDNTdCQzQyN0Q0OUI2REY4NEZGM0Y0RDUzM0Q1Mzc5RTVF
RDI5NERDNzEzMzk3MzRGOUY3RjhEMkEzRjUxMEM2QTNBNkNDNTE2QjVBRjI5RDZD
Mzg0OTdBNzRFMzA4MjEwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEArVtHgOdj3X39Dwtgb/AwqYUUQ3y2Lh8lneaIm8BDk4T6Hck7YhRh
dHI0a7mZkej4bhOusmCe1FGvt82I0XYXYCteZzxaJv2zqkDgbjrdQ1XuXA7+liYJ
f4jQmk/3CybXbu+J+lIbsX41G6ErOGgqCgMpe6ZcnIOkWv8R+GL0lS/HzUYZwf56
rhqel7Fik8o3f7TBgn2tSSO3Jq73ctFjLWhin7541tSIhgMuE82IRK8lK8QSWVuS
oma2lW6XhR0C5kggcE5m4jDngv1LN/TO48V7xCfUm234T/P01TPVN55e0pTccTOX
NPn3+NKj9RDGo6bMUWta8p1sOEl6dOMIIQIDAQABo4ICTzCCAkswHQYDVR0OBBYE
FBTCx2ZADnYQ3KmwIYj6rRaH68kSMB8GA1UdIwQYMBaAFIummcRwFmns6OfT9Khg
xPbVx2TQMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0NKaEc2WDlqZFBHQXRk
UFJ6NjZ5dHMyY2hFYmhaQWhiZ3BUWUZDZU1CdVlqLzEvOEJBNjk5QzQ3MDE2NjlF
Q0U4RTdEM0Y0QTg2MEM0RjZENUM3NjREMC5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS84QkE2OTlDNDcwMTY2OUVDRThFN0QzRjRBODYwQzRGNkQ1Qzc2
NEQwLmNlcjCBrAYIKwYBBQUHAQsEgZ8wgZwwgZkGCCsGAQUFBzALhoGMcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9DSmhHNlg5amRQR0F0ZFBSejY2
eXRzMmNoRWJoWkFoYmdwVFlGQ2VNQnVZai8xLzMxMzgzOTJlMzgzNDJlMzEzNzM2
MmUzMDJmMzIzMDJkMzIzNDIwM2QzZTIwMzIzODMxMzczMS5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBL1U
sDANBgkqhkiG9w0BAQsFAAOCAQEAyxLMKzbRqmrm5mid4qCJnbMgBNrqhhv0tSTx
0gc+fW1uWFcQrLt9L56baDRVXN5vME3eVkNnJZ2aw4MKa4n97CgR+i3mE+vu6qLm
vkIur+yorPJPUjkSVKL+ugMaN9MOvR3pQQOBUwkqc9wCQfYj+Rl0vGiEHi1B4EsF
thniqiSImD7pByUps39S7ITca6Ed+ajSfyHD3xMCKXHba0uC/SG79/YrFEE8X9op
QZtAZaNpnsABDhVLWRNbi+ekP9kMhBeGMXVcmY4VI/esgI4F92JESTleuW3AhVvc
OCeRBRqGMdlotabML6E4H1gf8je86qrjAH40gLFRJox6YkXK/Q==
-----END CERTIFICATE-----
Generated at Wed Jun 26 04:28:27 2024 by rpki-client on console-ams.rpki-client.org