Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/3136372e3234392e3130362e302f32342d3234203d3e203532343638.roa
File:                     3136372e3234392e3130362e302f32342d3234203d3e203532343638.roa (raw, json)
Hash identifier:          3eOlM2QpcxFRN7EzpYNN8wEoFTmhuSyR601XcHqsEL8=
Subject key identifier:   CA:A9:5F:AC:60:F3:28:D5:3F:64:C9:24:DA:3C:E3:6C:45:96:9E:48
Certificate issuer:       /CN=AE248C80EA5C4C5779C1297121D0BD8D2DC379F0
Certificate serial:       4700DF82FAA3D5D08EFA70354F7F8E6F724371DD
Authority key identifier: AE:24:8C:80:EA:5C:4C:57:79:C1:29:71:21:D0:BD:8D:2D:C3:79:F0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/3136372e3234392e3130362e302f32342d3234203d3e203532343638.roa
Signing time:             Thu 06 Jun 2024 19:53:05 +0000
ROA not before:           Thu 06 Jun 2024 19:48:05 +0000
ROA not after:            Thu 05 Jun 2025 19:53:05 +0000
asID:                     52468
IP address blocks:        167.249.106.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.crl
                          rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 02 Jul 2024 12:10:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:00:df:82:fa:a3:d5:d0:8e:fa:70:35:4f:7f:8e:6f:72:43:71:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AE248C80EA5C4C5779C1297121D0BD8D2DC379F0
        Validity
            Not Before: Jun  6 19:48:05 2024 GMT
            Not After : Jun  5 19:53:05 2025 GMT
        Subject: CN=3082010A0282010100E4BBBBA173DD7622810E706A7D7ADD531C67A4680A6D2489453FBD11987450D13D03EEFE44898455F5A47C0CC93DD34F7DD430C2247F26356F135AA77E24BA15246D61A2F46733A50E3E77214DC602481BC98443D2C6DB6B6A49D46F279873381469A0D2AC7E96F1ABB61716B4034E1FD4E7AF68E835D5D39D5E72817ED25E77E94A572E11482B8717D799060A55202A19977B05C816CC82837B9A21402BD86BB20D8F8BF22AC34B0C6B76B516CF95A113F288586A8140C055D8396B76F6EE6781652CC9A3A4B117E91993A4CFD0B40E7027021F8198CA85F5A1C6E452185CAED909EE7ACC25A36AEA6D9D2777506EB11D5103FD618417B4ADE3469C87340C650203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:bb:bb:a1:73:dd:76:22:81:0e:70:6a:7d:7a:
                    dd:53:1c:67:a4:68:0a:6d:24:89:45:3f:bd:11:98:
                    74:50:d1:3d:03:ee:fe:44:89:84:55:f5:a4:7c:0c:
                    c9:3d:d3:4f:7d:d4:30:c2:24:7f:26:35:6f:13:5a:
                    a7:7e:24:ba:15:24:6d:61:a2:f4:67:33:a5:0e:3e:
                    77:21:4d:c6:02:48:1b:c9:84:43:d2:c6:db:6b:6a:
                    49:d4:6f:27:98:73:38:14:69:a0:d2:ac:7e:96:f1:
                    ab:b6:17:16:b4:03:4e:1f:d4:e7:af:68:e8:35:d5:
                    d3:9d:5e:72:81:7e:d2:5e:77:e9:4a:57:2e:11:48:
                    2b:87:17:d7:99:06:0a:55:20:2a:19:97:7b:05:c8:
                    16:cc:82:83:7b:9a:21:40:2b:d8:6b:b2:0d:8f:8b:
                    f2:2a:c3:4b:0c:6b:76:b5:16:cf:95:a1:13:f2:88:
                    58:6a:81:40:c0:55:d8:39:6b:76:f6:ee:67:81:65:
                    2c:c9:a3:a4:b1:17:e9:19:93:a4:cf:d0:b4:0e:70:
                    27:02:1f:81:98:ca:85:f5:a1:c6:e4:52:18:5c:ae:
                    d9:09:ee:7a:cc:25:a3:6a:ea:6d:9d:27:77:50:6e:
                    b1:1d:51:03:fd:61:84:17:b4:ad:e3:46:9c:87:34:
                    0c:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:A9:5F:AC:60:F3:28:D5:3F:64:C9:24:DA:3C:E3:6C:45:96:9E:48
            X509v3 Authority Key Identifier:
                keyid:AE:24:8C:80:EA:5C:4C:57:79:C1:29:71:21:D0:BD:8D:2D:C3:79:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/3136372e3234392e3130362e302f32342d3234203d3e203532343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.249.106.0/24

    Signature Algorithm: sha256WithRSAEncryption
         03:ae:b3:c2:d6:91:70:32:17:10:b2:e8:79:15:06:71:29:42:
         ea:e7:e4:42:25:10:22:d0:0a:ef:9b:69:66:68:f2:fa:90:6f:
         5e:6d:41:6f:42:f6:3d:66:61:c0:93:c0:9c:23:60:3e:3c:28:
         f2:e8:81:e2:43:f2:54:1a:1a:cc:54:46:40:2f:74:ea:4b:94:
         dc:3e:4a:4d:9b:9b:3b:16:72:df:6e:43:8a:b2:1a:ca:73:34:
         86:94:ad:c0:b3:90:55:55:f4:0f:17:08:90:7a:d7:f2:2f:55:
         4a:5b:6e:04:94:a9:db:50:9c:c6:a0:ff:79:ca:39:d1:9f:ae:
         c7:a3:36:b4:89:28:66:1c:81:d4:bd:c4:94:90:57:33:94:47:
         47:2a:72:8d:db:d4:61:f4:df:86:83:53:00:0c:11:90:ba:46:
         8a:2f:2a:54:dd:20:fb:4d:18:e4:b3:9e:63:7a:b0:b4:0a:a1:
         cf:27:7c:66:b5:d5:48:4c:29:71:2b:2c:0c:03:24:e7:0b:ab:
         c0:e9:e1:e7:e5:e4:23:e6:6c:60:db:12:0a:a1:17:90:2e:0a:
         c1:43:8d:20:d8:21:59:9b:63:d1:b5:1f:38:47:22:d7:a2:5e:
         ab:06:1f:e8:3d:af:52:2f:33:2e:f0:2d:a1:1c:6a:61:a1:c6:
         d0:91:34:b3
-----BEGIN CERTIFICATE-----
MIIHQzCCBiugAwIBAgIURwDfgvqj1dCO+nA1T3+Ob3JDcd0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUUyNDhDODBFQTVDNEM1Nzc5QzEyOTcxMjFEMEJEOEQy
REMzNzlGMDAeFw0yNDA2MDYxOTQ4MDVaFw0yNTA2MDUxOTUzMDVaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwRTRCQkJCQTE3M0RENzYyMjgx
MEU3MDZBN0Q3QURENTMxQzY3QTQ2ODBBNkQyNDg5NDUzRkJEMTE5ODc0NTBEMTNE
MDNFRUZFNDQ4OTg0NTVGNUE0N0MwQ0M5M0REMzRGN0RENDMwQzIyNDdGMjYzNTZG
MTM1QUE3N0UyNEJBMTUyNDZENjFBMkY0NjczM0E1MEUzRTc3MjE0REM2MDI0ODFC
Qzk4NDQzRDJDNkRCNkI2QTQ5RDQ2RjI3OTg3MzM4MTQ2OUEwRDJBQzdFOTZGMUFC
QjYxNzE2QjQwMzRFMUZENEU3QUY2OEU4MzVENUQzOUQ1RTcyODE3RUQyNUU3N0U5
NEE1NzJFMTE0ODJCODcxN0Q3OTkwNjBBNTUyMDJBMTk5NzdCMDVDODE2Q0M4Mjgz
N0I5QTIxNDAyQkQ4NkJCMjBEOEY4QkYyMkFDMzRCMEM2Qjc2QjUxNkNGOTVBMTEz
RjI4ODU4NkE4MTQwQzA1NUQ4Mzk2Qjc2RjZFRTY3ODE2NTJDQzlBM0E0QjExN0U5
MTk5M0E0Q0ZEMEI0MEU3MDI3MDIxRjgxOThDQTg1RjVBMUM2RTQ1MjE4NUNBRUQ5
MDlFRTdBQ0MyNUEzNkFFQTZEOUQyNzc3NTA2RUIxMUQ1MTAzRkQ2MTg0MTdCNEFE
RTM0NjlDODczNDBDNjUwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA5Lu7oXPddiKBDnBqfXrdUxxnpGgKbSSJRT+9EZh0UNE9A+7+RImE
VfWkfAzJPdNPfdQwwiR/JjVvE1qnfiS6FSRtYaL0ZzOlDj53IU3GAkgbyYRD0sbb
a2pJ1G8nmHM4FGmg0qx+lvGrthcWtANOH9Tnr2joNdXTnV5ygX7SXnfpSlcuEUgr
hxfXmQYKVSAqGZd7BcgWzIKDe5ohQCvYa7INj4vyKsNLDGt2tRbPlaET8ohYaoFA
wFXYOWt29u5ngWUsyaOksRfpGZOkz9C0DnAnAh+BmMqF9aHG5FIYXK7ZCe56zCWj
auptnSd3UG6xHVED/WGEF7St40achzQMZQIDAQABo4ICUTCCAk0wHQYDVR0OBBYE
FMqpX6xg8yjVP2TJJNo842xFlp5IMB8GA1UdIwQYMBaAFK4kjIDqXExXecEpcSHQ
vY0tw3nwMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0Z5eTl0N2JBYVkxU1J0
TWpqa1h3VU1uRWN4WXVlcTY1ZFo5TGFWMU5EMnlBLzEvQUUyNDhDODBFQTVDNEM1
Nzc5QzEyOTcxMjFEMEJEOEQyREMzNzlGMC5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS9BRTI0OEM4MEVBNUM0QzU3NzlDMTI5NzEyMUQwQkQ4RDJEQzM3
OUYwLmNlcjCBrgYIKwYBBQUHAQsEgaEwgZ4wgZsGCCsGAQUFBzALhoGOcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9GeXk5dDdiQWFZMVNSdE1qamtY
d1VNbkVjeFl1ZXE2NWRaOUxhVjFORDJ5QS8xLzMxMzYzNzJlMzIzNDM5MmUzMTMw
MzYyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNTMyMzQzNjM4LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA
p/lqMA0GCSqGSIb3DQEBCwUAA4IBAQADrrPC1pFwMhcQsuh5FQZxKULq5+RCJRAi
0Arvm2lmaPL6kG9ebUFvQvY9ZmHAk8CcI2A+PCjy6IHiQ/JUGhrMVEZAL3TqS5Tc
PkpNm5s7FnLfbkOKshrKczSGlK3As5BVVfQPFwiQetfyL1VKW24ElKnbUJzGoP95
yjnRn67Hoza0iShmHIHUvcSUkFczlEdHKnKN29Rh9N+Gg1MADBGQukaKLypU3SD7
TRjks55jerC0CqHPJ3xmtdVITClxKywMAyTnC6vA6eHn5eQj5mxg2xIKoReQLgrB
Q40g2CFZm2PRtR84RyLXol6rBh/oPa9SLzMu8C2hHGphocbQkTSz
-----END CERTIFICATE-----
Generated at Mon Jul 1 13:47:59 2024 by rpki-client on console-ams.rpki-client.org