Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ELYX2RgQuosNBPqmwTxvHZtfYfuRFa5iffCTbHcJEUpE/0/3136382e3230352e3137322e302f32322d3332203d3e20323633393832.roa
File:                     3136382e3230352e3137322e302f32322d3332203d3e20323633393832.roa (raw, json)
Hash identifier:          bZT5V4pAezO6CLrrXH3fOYfsUBOGq0DkQCmjBfgPkzQ=
Subject key identifier:   9B:BF:EF:1C:71:B3:6F:43:46:81:DB:CA:DD:BC:BF:6F:EB:B2:77:3C
Certificate issuer:       /CN=931EED7EF470658CBBAAC332D748978DEF54B593
Certificate serial:       1A71E5A7F70BD9C29053C2F7FE2AFE4D343F1E4E
Authority key identifier: 93:1E:ED:7E:F4:70:65:8C:BB:AA:C3:32:D7:48:97:8D:EF:54:B5:93
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/931EED7EF470658CBBAAC332D748978DEF54B593.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ELYX2RgQuosNBPqmwTxvHZtfYfuRFa5iffCTbHcJEUpE/0/3136382e3230352e3137322e302f32322d3332203d3e20323633393832.roa
Signing time:             Fri 28 Jun 2024 14:01:08 +0000
ROA not before:           Fri 28 Jun 2024 13:56:08 +0000
ROA not after:            Fri 27 Jun 2025 14:01:08 +0000
asID:                     263982
IP address blocks:        168.205.172.0/22 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ELYX2RgQuosNBPqmwTxvHZtfYfuRFa5iffCTbHcJEUpE/0/931EED7EF470658CBBAAC332D748978DEF54B593.crl
                          rsync://rpki-repo.registro.br/repo/ELYX2RgQuosNBPqmwTxvHZtfYfuRFa5iffCTbHcJEUpE/0/931EED7EF470658CBBAAC332D748978DEF54B593.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/931EED7EF470658CBBAAC332D748978DEF54B593.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 07:28:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:71:e5:a7:f7:0b:d9:c2:90:53:c2:f7:fe:2a:fe:4d:34:3f:1e:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=931EED7EF470658CBBAAC332D748978DEF54B593
        Validity
            Not Before: Jun 28 13:56:08 2024 GMT
            Not After : Jun 27 14:01:08 2025 GMT
        Subject: CN=9BBFEF1C71B36F434681DBCADDBCBF6FEBB2773C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:f0:26:e2:86:11:c9:5d:48:bb:1f:c4:bf:7d:
                    45:34:50:0c:82:85:3a:9f:0f:11:e8:f4:52:70:07:
                    da:d4:58:00:89:e5:69:10:9c:a6:38:64:84:9e:37:
                    5a:3c:ac:29:98:91:99:59:b7:8c:02:fd:54:bd:41:
                    b4:02:4d:29:fd:a9:a5:87:41:f7:11:3d:3d:5f:58:
                    96:48:c6:22:8e:37:1b:25:7e:86:5e:63:58:e9:30:
                    0f:bf:71:29:3d:28:c6:0c:c1:e5:ee:51:fd:b2:e8:
                    e0:ba:a4:db:6c:81:b7:d6:90:83:8c:bd:54:7f:58:
                    2a:5e:3b:a6:69:e5:08:90:c9:df:1a:7a:f6:77:35:
                    13:00:6a:6b:86:da:f0:32:c4:fb:ea:87:0d:39:50:
                    05:5e:31:44:8d:8c:6e:1f:bf:f4:c0:d2:5a:89:cd:
                    a5:38:81:a8:2a:05:6b:93:41:76:3a:29:02:9d:66:
                    f2:a5:10:2a:ba:3e:ba:aa:fb:5a:63:3f:09:3e:c4:
                    c4:f9:e2:2f:01:57:e7:de:ed:dc:c5:6a:72:40:5d:
                    65:94:a8:63:cf:ef:88:97:f7:05:05:0b:0b:fa:cc:
                    4d:27:c0:77:02:ff:09:80:8f:33:ac:c4:43:9c:60:
                    d4:be:89:d7:83:f2:bb:9e:4f:58:e5:3a:72:25:c6:
                    79:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:BF:EF:1C:71:B3:6F:43:46:81:DB:CA:DD:BC:BF:6F:EB:B2:77:3C
            X509v3 Authority Key Identifier:
                keyid:93:1E:ED:7E:F4:70:65:8C:BB:AA:C3:32:D7:48:97:8D:EF:54:B5:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ELYX2RgQuosNBPqmwTxvHZtfYfuRFa5iffCTbHcJEUpE/0/931EED7EF470658CBBAAC332D748978DEF54B593.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/931EED7EF470658CBBAAC332D748978DEF54B593.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ELYX2RgQuosNBPqmwTxvHZtfYfuRFa5iffCTbHcJEUpE/0/3136382e3230352e3137322e302f32322d3332203d3e20323633393832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.205.172.0/22

    Signature Algorithm: sha256WithRSAEncryption
         16:48:76:a6:a3:5e:4d:13:16:ac:38:8f:7b:20:ed:13:b3:46:
         6d:f8:54:34:da:7a:57:dc:5f:ab:c8:5b:07:52:ea:58:1b:3e:
         e3:fd:d6:db:b6:92:f5:8c:b3:83:8f:da:ff:79:84:76:8a:25:
         79:be:05:ab:18:1e:98:44:16:8d:db:1f:c5:47:98:4b:e0:3e:
         82:86:72:2b:40:8a:79:48:c1:f9:c6:8e:25:4f:07:6f:e3:a8:
         0f:f1:71:c4:c7:90:91:b3:97:2e:a1:45:05:38:24:30:0b:fa:
         ed:54:d8:23:fd:7a:21:3c:14:59:b7:30:16:28:be:75:6b:63:
         4c:af:ba:0a:2a:ad:c1:d2:21:1e:06:4e:40:be:7e:45:82:e9:
         a3:09:3c:fe:e8:fa:24:b2:0b:0d:7f:c8:2e:79:41:d0:3e:aa:
         f9:d6:7c:b7:9b:fd:48:21:10:80:ac:85:a0:94:3d:2b:b9:a9:
         6b:58:3a:dd:5a:93:4d:00:b6:6e:6c:0d:cc:47:66:be:81:3f:
         05:a8:e8:85:04:e7:ab:d6:e6:af:84:33:a7:e3:00:c6:9f:49:
         ae:24:48:a0:f3:30:b6:d1:f7:94:fc:1d:04:85:1e:18:fa:e8:
         2d:2d:a5:c6:72:03:96:47:f9:b5:43:5f:f4:85:b7:d3:06:7f:
         76:e1:ef:b0
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUGnHlp/cL2cKQU8L3/ir+TTQ/Hk4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTMxRUVEN0VGNDcwNjU4Q0JCQUFDMzMyRDc0ODk3OERF
RjU0QjU5MzAeFw0yNDA2MjgxMzU2MDhaFw0yNTA2MjcxNDAxMDhaMDMxMTAvBgNV
BAMTKDlCQkZFRjFDNzFCMzZGNDM0NjgxREJDQUREQkNCRjZGRUJCMjc3M0MwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDO8CbihhHJXUi7H8S/fUU0UAyC
hTqfDxHo9FJwB9rUWACJ5WkQnKY4ZISeN1o8rCmYkZlZt4wC/VS9QbQCTSn9qaWH
QfcRPT1fWJZIxiKONxslfoZeY1jpMA+/cSk9KMYMweXuUf2y6OC6pNtsgbfWkIOM
vVR/WCpeO6Zp5QiQyd8aevZ3NRMAamuG2vAyxPvqhw05UAVeMUSNjG4fv/TA0lqJ
zaU4gagqBWuTQXY6KQKdZvKlECq6Prqq+1pjPwk+xMT54i8BV+fe7dzFanJAXWWU
qGPP74iX9wUFCwv6zE0nwHcC/wmAjzOsxEOcYNS+ideD8rueT1jlOnIlxnlnAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUm7/vHHGzb0NGgdvK3by/b+uydzwwHwYDVR0j
BBgwFoAUkx7tfvRwZYy7qsMy10iXje9UtZMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRUxZWDJSZ1F1b3NOQlBxbXdUeHZIWnRmWWZ1UkZhNWlmZkNUYkhjSkVV
cEUvMC85MzFFRUQ3RUY0NzA2NThDQkJBQUMzMzJENzQ4OTc4REVGNTRCNTkzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzkzMUVFRDdFRjQ3MDY1OENC
QkFBQzMzMkQ3NDg5NzhERUY1NEI1OTMuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0VMWVgyUmdRdW9zTkJQcW13VHh2SFp0ZllmdVJGYTVpZmZDVGJIY0pFVXBFLzAv
MzEzNjM4MmUzMjMwMzUyZTMxMzczMjJlMzAyZjMyMzIyZDMzMzIyMDNkM2UyMDMy
MzYzMzM5MzgzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAqjNrDANBgkqhkiG9w0BAQsFAAOCAQEAFkh2
pqNeTRMWrDiPeyDtE7NGbfhUNNp6V9xfq8hbB1LqWBs+4/3W27aS9Yyzg4/a/3mE
dooleb4FqxgemEQWjdsfxUeYS+A+goZyK0CKeUjB+caOJU8Hb+OoD/FxxMeQkbOX
LqFFBTgkMAv67VTYI/16ITwUWbcwFii+dWtjTK+6CiqtwdIhHgZOQL5+RYLpowk8
/uj6JLILDX/ILnlB0D6q+dZ8t5v9SCEQgKyFoJQ9K7mpa1g63VqTTQC2bmwNzEdm
voE/BajohQTnq9bmr4Qzp+MAxp9JriRIoPMwttH3lPwdBIUeGProLS2lxnIDlkf5
tUNf9IW30wZ/duHvsA==
-----END CERTIFICATE-----
Generated at Fri Nov 22 06:34:10 2024 by rpki-client on console-ams.rpki-client.org