Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EhgD1ThHCNMUz2kADkMWJteSfpnTNpwQhxE8he2PXWEz/0/3136302e3233382e3139372e302f32342d3234203d3e20323636353436.roa
File:                     3136302e3233382e3139372e302f32342d3234203d3e20323636353436.roa (raw, json)
Hash identifier:          0dcpwRMIWbZ57gwVFo/OmT77jSfy9csuesI9NfnE11U=
Subject key identifier:   90:6D:EB:AA:E3:9A:14:CF:2E:28:D4:7E:95:D8:F9:3A:48:4D:7E:A8
Certificate issuer:       /CN=B850A87858FE7B4C31702DB93D7CE6CC2DF7944C
Certificate serial:       410F61A589AC30FBD253F57F8247D02F962C0DCC
Authority key identifier: B8:50:A8:78:58:FE:7B:4C:31:70:2D:B9:3D:7C:E6:CC:2D:F7:94:4C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B850A87858FE7B4C31702DB93D7CE6CC2DF7944C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EhgD1ThHCNMUz2kADkMWJteSfpnTNpwQhxE8he2PXWEz/0/3136302e3233382e3139372e302f32342d3234203d3e20323636353436.roa
Signing time:             Thu 01 Aug 2024 03:17:40 +0000
ROA not before:           Thu 01 Aug 2024 03:12:40 +0000
ROA not after:            Thu 31 Jul 2025 03:17:40 +0000
asID:                     266546
IP address blocks:        160.238.197.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EhgD1ThHCNMUz2kADkMWJteSfpnTNpwQhxE8he2PXWEz/0/B850A87858FE7B4C31702DB93D7CE6CC2DF7944C.crl
                          rsync://rpki-repo.registro.br/repo/EhgD1ThHCNMUz2kADkMWJteSfpnTNpwQhxE8he2PXWEz/0/B850A87858FE7B4C31702DB93D7CE6CC2DF7944C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B850A87858FE7B4C31702DB93D7CE6CC2DF7944C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:0f:61:a5:89:ac:30:fb:d2:53:f5:7f:82:47:d0:2f:96:2c:0d:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B850A87858FE7B4C31702DB93D7CE6CC2DF7944C
        Validity
            Not Before: Aug  1 03:12:40 2024 GMT
            Not After : Jul 31 03:17:40 2025 GMT
        Subject: CN=906DEBAAE39A14CF2E28D47E95D8F93A484D7EA8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:6b:93:16:d1:2e:ea:df:41:9a:c5:9f:97:22:
                    da:bc:fc:94:12:82:8f:fe:7b:d6:f0:65:ad:db:65:
                    79:5e:c4:1c:c1:66:ff:c1:e3:51:70:98:fc:68:b7:
                    1f:af:82:5c:08:1b:0d:1d:c5:9f:9b:75:5f:93:20:
                    73:1b:08:75:74:20:2e:9a:0a:dc:1c:89:67:c6:58:
                    22:15:b9:a1:7c:68:66:54:f5:62:8b:e6:ca:37:8a:
                    3c:99:89:64:69:37:29:07:72:d1:d0:41:5d:ec:c3:
                    9e:11:5c:5d:85:3b:c6:90:89:00:95:28:02:96:a6:
                    92:b4:a6:85:de:8b:22:89:2b:75:27:ee:39:f1:c2:
                    71:31:43:b5:b8:d0:38:f3:05:06:00:1c:bc:4e:e3:
                    8a:35:d1:aa:19:b7:40:29:73:81:d5:1c:ab:8c:c8:
                    8d:01:16:5d:4f:52:c5:ec:8a:21:6b:07:70:86:72:
                    a5:51:18:29:3d:e1:3f:6c:38:eb:ab:eb:a1:6c:d8:
                    34:b0:d9:2b:14:7a:ac:e9:82:8e:66:2a:86:0e:94:
                    69:50:1d:8e:dd:89:e1:c5:da:62:0f:51:09:ad:ac:
                    7c:1b:4a:c4:88:3c:93:b0:f8:03:63:1f:a7:15:1d:
                    8d:ec:c6:9c:cb:e1:97:ab:ba:aa:9f:23:db:9b:a0:
                    f1:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:6D:EB:AA:E3:9A:14:CF:2E:28:D4:7E:95:D8:F9:3A:48:4D:7E:A8
            X509v3 Authority Key Identifier:
                keyid:B8:50:A8:78:58:FE:7B:4C:31:70:2D:B9:3D:7C:E6:CC:2D:F7:94:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EhgD1ThHCNMUz2kADkMWJteSfpnTNpwQhxE8he2PXWEz/0/B850A87858FE7B4C31702DB93D7CE6CC2DF7944C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B850A87858FE7B4C31702DB93D7CE6CC2DF7944C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EhgD1ThHCNMUz2kADkMWJteSfpnTNpwQhxE8he2PXWEz/0/3136302e3233382e3139372e302f32342d3234203d3e20323636353436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.238.197.0/24

    Signature Algorithm: sha256WithRSAEncryption
         14:b9:ea:05:8b:b6:f5:72:fe:72:52:e9:cb:f2:18:80:df:00:
         e1:cd:cb:6e:23:a1:3c:2d:a6:67:d7:0f:28:7f:f8:ae:5c:17:
         93:ee:55:96:bf:e9:b3:2d:f7:ea:26:01:7f:7c:f0:82:45:22:
         46:9a:c8:ad:df:e0:72:50:0a:c0:76:36:95:93:3a:1e:d4:a2:
         fc:37:85:93:9b:55:05:1b:4e:8c:10:17:ae:02:6c:73:76:de:
         9a:78:2e:5e:7c:16:17:95:03:f1:46:9e:7f:db:85:7f:d3:7c:
         0b:69:32:a8:8c:56:a8:82:62:3f:e2:a8:78:5b:60:13:ec:2b:
         e4:4d:30:ba:07:b0:50:71:67:1a:cf:f2:8b:3b:7c:07:ac:3f:
         03:cf:59:25:14:82:67:23:ed:e1:71:45:ef:3d:7e:46:c1:e7:
         46:2c:ea:3a:a4:46:ff:0a:35:07:00:3c:6e:bb:f4:e3:f8:c7:
         5d:25:e0:32:2b:99:b4:c4:35:e1:1c:9a:de:41:b8:8c:0c:d6:
         ee:b6:27:0e:6c:da:65:a3:e5:e7:eb:93:4b:b6:14:01:aa:f0:
         75:85:cd:fd:4c:86:b5:3c:97:b8:84:a6:3b:99:0c:38:8d:22:
         c0:d1:ab:68:60:d7:f3:de:93:ec:45:99:31:03:ef:fe:bd:1f:
         ba:b4:11:a3
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUQQ9hpYmsMPvSU/V/gkfQL5YsDcwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjg1MEE4Nzg1OEZFN0I0QzMxNzAyREI5M0Q3Q0U2Q0My
REY3OTQ0QzAeFw0yNDA4MDEwMzEyNDBaFw0yNTA3MzEwMzE3NDBaMDMxMTAvBgNV
BAMTKDkwNkRFQkFBRTM5QTE0Q0YyRTI4RDQ3RTk1RDhGOTNBNDg0RDdFQTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8a5MW0S7q30GaxZ+XItq8/JQS
go/+e9bwZa3bZXlexBzBZv/B41FwmPxotx+vglwIGw0dxZ+bdV+TIHMbCHV0IC6a
CtwciWfGWCIVuaF8aGZU9WKL5so3ijyZiWRpNykHctHQQV3sw54RXF2FO8aQiQCV
KAKWppK0poXeiyKJK3Un7jnxwnExQ7W40DjzBQYAHLxO44o10aoZt0Apc4HVHKuM
yI0BFl1PUsXsiiFrB3CGcqVRGCk94T9sOOur66Fs2DSw2SsUeqzpgo5mKoYOlGlQ
HY7dieHF2mIPUQmtrHwbSsSIPJOw+ANjH6cVHY3sxpzL4ZeruqqfI9uboPF1AgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUkG3rquOaFM8uKNR+ldj5OkhNfqgwHwYDVR0j
BBgwFoAUuFCoeFj+e0wxcC25PXzmzC33lEwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRWhnRDFUaEhDTk1VejJrQURrTVdKdGVTZnBuVE5wd1FoeEU4aGUyUFhX
RXovMC9CODUwQTg3ODU4RkU3QjRDMzE3MDJEQjkzRDdDRTZDQzJERjc5NDRDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0I4NTBBODc4NThGRTdCNEMz
MTcwMkRCOTNEN0NFNkNDMkRGNzk0NEMuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0VoZ0QxVGhIQ05NVXoya0FEa01XSnRlU2ZwblROcHdRaHhFOGhlMlBYV0V6LzAv
MzEzNjMwMmUzMjMzMzgyZTMxMzkzNzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzYzNjM1MzQzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAKDuxTANBgkqhkiG9w0BAQsFAAOCAQEAFLnq
BYu29XL+clLpy/IYgN8A4c3LbiOhPC2mZ9cPKH/4rlwXk+5Vlr/psy336iYBf3zw
gkUiRprIrd/gclAKwHY2lZM6HtSi/DeFk5tVBRtOjBAXrgJsc3bemnguXnwWF5UD
8Uaef9uFf9N8C2kyqIxWqIJiP+KoeFtgE+wr5E0wugewUHFnGs/yizt8B6w/A89Z
JRSCZyPt4XFF7z1+RsHnRizqOqRG/wo1BwA8brv04/jHXSXgMiuZtMQ14Rya3kG4
jAzW7rYnDmzaZaPl5+uTS7YUAarwdYXN/UyGtTyXuISmO5kMOI0iwNGraGDX896T
7EWZMQPv/r0furQRow==
-----END CERTIFICATE-----
Generated at Sat Nov 23 09:50:07 2024 by rpki-client on console-fra.rpki-client.org