Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FBnQaHyNR5kUSvvjw6BKmUn4pU8Jsk5mGyNVbaRXhkvC/1/3136382e3230352e38362e302f32342d3234203d3e203532373830.roa
File:                     3136382e3230352e38362e302f32342d3234203d3e203532373830.roa (raw, json)
Hash identifier:          bwDl8lch0abXGyX48OUG0h2nJD1fYwWjaHhmWGIzXW8=
Subject key identifier:   60:92:A0:AC:2A:BB:BB:71:E4:D3:09:B8:5A:19:E8:08:78:B3:76:C4
Certificate issuer:       /CN=75CE80B0487A970663EA1E04C2CDBEFF72B104EA
Certificate serial:       5A63ABB4D0EDD54FEA2DEE68B9EFDA446D8A19CE
Authority key identifier: 75:CE:80:B0:48:7A:97:06:63:EA:1E:04:C2:CD:BE:FF:72:B1:04:EA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/75CE80B0487A970663EA1E04C2CDBEFF72B104EA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FBnQaHyNR5kUSvvjw6BKmUn4pU8Jsk5mGyNVbaRXhkvC/1/3136382e3230352e38362e302f32342d3234203d3e203532373830.roa
Signing time:             Thu 04 Apr 2024 14:56:23 +0000
ROA not before:           Thu 04 Apr 2024 14:51:23 +0000
ROA not after:            Thu 03 Apr 2025 14:56:23 +0000
asID:                     52780
IP address blocks:        168.205.86.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FBnQaHyNR5kUSvvjw6BKmUn4pU8Jsk5mGyNVbaRXhkvC/1/75CE80B0487A970663EA1E04C2CDBEFF72B104EA.crl
                          rsync://rpki-repo.registro.br/repo/FBnQaHyNR5kUSvvjw6BKmUn4pU8Jsk5mGyNVbaRXhkvC/1/75CE80B0487A970663EA1E04C2CDBEFF72B104EA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/75CE80B0487A970663EA1E04C2CDBEFF72B104EA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 16:33:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:63:ab:b4:d0:ed:d5:4f:ea:2d:ee:68:b9:ef:da:44:6d:8a:19:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75CE80B0487A970663EA1E04C2CDBEFF72B104EA
        Validity
            Not Before: Apr  4 14:51:23 2024 GMT
            Not After : Apr  3 14:56:23 2025 GMT
        Subject: CN=6092A0AC2ABBBB71E4D309B85A19E80878B376C4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:56:ba:8d:45:34:2a:9e:b6:9b:b8:14:16:f2:
                    e1:cf:58:15:d6:66:21:a5:ca:c6:3c:2f:21:1b:9f:
                    1f:31:d8:51:ea:42:ea:60:31:a6:6e:ef:33:c8:9c:
                    11:ba:8d:81:88:17:83:d3:43:d8:68:8e:0a:dd:80:
                    21:37:0c:67:b1:ef:bd:e2:66:c1:47:2e:24:17:b8:
                    8a:d7:83:b4:d1:db:e5:07:b1:d9:d4:7c:55:ee:b2:
                    78:11:16:ec:9d:af:13:c8:72:60:3d:93:b0:02:19:
                    3f:31:5a:41:62:d3:4b:fc:dd:df:22:55:23:d2:de:
                    31:07:98:d7:94:46:77:eb:e5:cb:8b:ae:a1:51:86:
                    68:fd:e7:68:22:2c:98:f5:aa:3d:d1:dd:b9:51:3c:
                    a0:f0:1b:df:69:c9:10:53:0a:b8:d8:4c:9c:54:32:
                    f4:ee:0a:91:6c:13:8f:6d:dc:8a:e5:25:a7:c9:4e:
                    11:56:8b:b7:ab:53:c6:a7:17:f5:3f:79:73:ce:a7:
                    d1:fa:bf:b3:8c:c4:c5:53:c3:a4:60:a7:1b:4a:24:
                    6e:ea:96:34:05:64:3d:35:4c:41:ef:ae:d0:fc:90:
                    3e:de:62:ae:8b:0f:98:74:78:a9:8c:51:f4:1f:15:
                    93:48:c7:ab:6e:dc:3f:9b:d9:e1:16:f9:69:10:23:
                    29:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:92:A0:AC:2A:BB:BB:71:E4:D3:09:B8:5A:19:E8:08:78:B3:76:C4
            X509v3 Authority Key Identifier:
                keyid:75:CE:80:B0:48:7A:97:06:63:EA:1E:04:C2:CD:BE:FF:72:B1:04:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FBnQaHyNR5kUSvvjw6BKmUn4pU8Jsk5mGyNVbaRXhkvC/1/75CE80B0487A970663EA1E04C2CDBEFF72B104EA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/75CE80B0487A970663EA1E04C2CDBEFF72B104EA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FBnQaHyNR5kUSvvjw6BKmUn4pU8Jsk5mGyNVbaRXhkvC/1/3136382e3230352e38362e302f32342d3234203d3e203532373830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.205.86.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a6:ae:7c:d2:b0:54:f4:27:87:ed:ca:e9:c9:b9:33:4f:39:b2:
         21:02:d2:4b:2e:7f:43:b8:00:4a:38:39:10:9e:93:01:e7:d2:
         f0:b0:7f:7c:87:81:ff:af:ce:45:7f:4d:f4:b8:76:d7:fd:d5:
         60:fb:6f:85:3f:f4:1b:19:f3:05:a2:52:c6:5c:c2:19:7c:1f:
         18:06:e0:a3:d3:23:86:0d:2c:14:a8:4a:d9:7a:e5:6d:76:ab:
         38:33:7a:9c:00:19:3b:9c:ad:7c:8c:96:bc:96:e2:81:8b:0f:
         2d:75:f1:db:c6:8b:c4:fc:f5:95:f9:e6:2d:81:91:15:5a:d9:
         e1:b5:b8:31:bb:a0:94:33:2c:8a:ac:7c:d8:8d:7b:ae:95:21:
         a9:1e:d7:16:6f:a4:d0:12:38:9b:d4:36:6b:ab:95:fe:73:89:
         7f:37:a3:be:fa:ca:89:46:fc:1f:e9:2d:20:cf:6a:f3:60:e6:
         e7:e7:2e:e3:30:f6:78:73:ce:71:57:d9:f1:ff:e7:5b:34:aa:
         d2:b2:c2:8c:07:19:ae:09:22:c1:71:81:a5:c9:f1:83:e5:ac:
         97:86:8c:18:3b:25:f9:8e:d9:9f:00:8b:6a:7e:4d:eb:90:b0:
         34:39:5a:2e:82:01:df:87:a3:f8:16:3b:b7:f5:8d:64:80:13:
         33:1c:5e:65
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUWmOrtNDt1U/qLe5oue/aRG2KGc4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzVDRTgwQjA0ODdBOTcwNjYzRUExRTA0QzJDREJFRkY3
MkIxMDRFQTAeFw0yNDA0MDQxNDUxMjNaFw0yNTA0MDMxNDU2MjNaMDMxMTAvBgNV
BAMTKDYwOTJBMEFDMkFCQkJCNzFFNEQzMDlCODVBMTlFODA4NzhCMzc2QzQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqVrqNRTQqnrabuBQW8uHPWBXW
ZiGlysY8LyEbnx8x2FHqQupgMaZu7zPInBG6jYGIF4PTQ9hojgrdgCE3DGex773i
ZsFHLiQXuIrXg7TR2+UHsdnUfFXusngRFuydrxPIcmA9k7ACGT8xWkFi00v83d8i
VSPS3jEHmNeURnfr5cuLrqFRhmj952giLJj1qj3R3blRPKDwG99pyRBTCrjYTJxU
MvTuCpFsE49t3IrlJafJThFWi7erU8anF/U/eXPOp9H6v7OMxMVTw6RgpxtKJG7q
ljQFZD01TEHvrtD8kD7eYq6LD5h0eKmMUfQfFZNIx6tu3D+b2eEW+WkQIymXAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUYJKgrCq7u3Hk0wm4WhnoCHizdsQwHwYDVR0j
BBgwFoAUdc6AsEh6lwZj6h4Ews2+/3KxBOowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRkJuUWFIeU5SNWtVU3Z2anc2QkttVW40cFU4SnNrNW1HeU5WYmFSWGhr
dkMvMS83NUNFODBCMDQ4N0E5NzA2NjNFQTFFMDRDMkNEQkVGRjcyQjEwNEVBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzc1Q0U4MEIwNDg3QTk3MDY2
M0VBMUUwNEMyQ0RCRUZGNzJCMTA0RUEuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0ZCblFhSHlOUjVrVVN2dmp3NkJLbVVuNHBVOEpzazVtR3lOVmJhUlhoa3ZDLzEv
MzEzNjM4MmUzMjMwMzUyZTM4MzYyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNTMy
MzczODMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAqM1WMA0GCSqGSIb3DQEBCwUAA4IBAQCmrnzSsFT0
J4ftyunJuTNPObIhAtJLLn9DuABKODkQnpMB59LwsH98h4H/r85Ff030uHbX/dVg
+2+FP/QbGfMFolLGXMIZfB8YBuCj0yOGDSwUqErZeuVtdqs4M3qcABk7nK18jJa8
luKBiw8tdfHbxovE/PWV+eYtgZEVWtnhtbgxu6CUMyyKrHzYjXuulSGpHtcWb6TQ
Ejib1DZrq5X+c4l/N6O++sqJRvwf6S0gz2rzYObn5y7jMPZ4c85xV9nx/+dbNKrS
ssKMBxmuCSLBcYGlyfGD5ayXhowYOyX5jtmfAItqfk3rkLA0OVouggHfh6P4Fju3
9Y1kgBMzHF5l
-----END CERTIFICATE-----
Generated at Fri Nov 22 14:19:51 2024 by rpki-client on console-ams.rpki-client.org