Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H3AQkQ9wNn7gdmSWAxHjc7CjpiRmbkL3QjJ9xmiuwDop/1/3230302e3136302e31362e302f32302d3234203d3e203232313438.roa
File:                     3230302e3136302e31362e302f32302d3234203d3e203232313438.roa (raw, json)
Hash identifier:          dfjnzZs+eaXumT61ek7iM/qPRguLPQkqogQErNsIoI0=
Subject key identifier:   23:70:93:F7:B1:18:0A:39:45:E7:42:E0:47:1A:E4:29:73:27:C3:CE
Certificate issuer:       /CN=0A6CE41314DED3332665E69E87FF0E48E950B3A3
Certificate serial:       67B629EEFB5C180C66CDCF837060FFFDD9736218
Authority key identifier: 0A:6C:E4:13:14:DE:D3:33:26:65:E6:9E:87:FF:0E:48:E9:50:B3:A3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0A6CE41314DED3332665E69E87FF0E48E950B3A3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H3AQkQ9wNn7gdmSWAxHjc7CjpiRmbkL3QjJ9xmiuwDop/1/3230302e3136302e31362e302f32302d3234203d3e203232313438.roa
Signing time:             Wed 03 Apr 2024 23:39:02 +0000
ROA not before:           Wed 03 Apr 2024 23:34:02 +0000
ROA not after:            Wed 02 Apr 2025 23:39:02 +0000
asID:                     22148
IP address blocks:        200.160.16.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/H3AQkQ9wNn7gdmSWAxHjc7CjpiRmbkL3QjJ9xmiuwDop/1/0A6CE41314DED3332665E69E87FF0E48E950B3A3.crl
                          rsync://rpki-repo.registro.br/repo/H3AQkQ9wNn7gdmSWAxHjc7CjpiRmbkL3QjJ9xmiuwDop/1/0A6CE41314DED3332665E69E87FF0E48E950B3A3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0A6CE41314DED3332665E69E87FF0E48E950B3A3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 15:30:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:b6:29:ee:fb:5c:18:0c:66:cd:cf:83:70:60:ff:fd:d9:73:62:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0A6CE41314DED3332665E69E87FF0E48E950B3A3
        Validity
            Not Before: Apr  3 23:34:02 2024 GMT
            Not After : Apr  2 23:39:02 2025 GMT
        Subject: CN=237093F7B1180A3945E742E0471AE4297327C3CE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:ae:99:d5:c4:d2:9b:33:07:f3:32:58:be:bd:
                    dd:e4:80:f0:ab:64:53:2d:2b:fe:46:71:9e:92:d3:
                    88:0a:be:84:be:dc:98:4e:50:a5:aa:16:88:03:a4:
                    c5:c2:3d:ae:e3:0e:b7:87:97:8e:ae:95:55:fa:6f:
                    e9:e0:8f:ee:d7:2d:d2:3e:54:fb:e6:ce:fb:ab:34:
                    33:1d:b2:cd:58:a9:ed:ac:da:17:02:8b:91:7d:94:
                    c0:b7:c4:04:32:7a:01:95:03:e8:16:f2:d1:db:58:
                    70:78:a9:b2:2d:9e:0f:92:d4:55:cc:ec:8b:0a:8d:
                    79:d2:67:39:51:92:71:d7:aa:f9:20:40:9b:fd:be:
                    9a:75:76:b9:36:90:4a:f7:78:96:60:fd:2f:54:4f:
                    b3:18:6c:47:e0:36:4c:e3:28:47:90:ff:2f:ee:58:
                    9b:ff:85:52:d4:3e:b9:88:a7:14:03:9f:e6:04:fe:
                    50:23:78:f7:99:6b:ef:58:31:98:bd:e7:1f:25:02:
                    87:eb:94:4d:84:40:7b:49:e6:90:90:fc:d6:11:68:
                    d6:6a:f4:92:cf:a6:a3:3d:30:d0:5d:ae:b6:91:3c:
                    71:b4:f2:c3:8a:07:94:b3:e2:a6:6a:88:e7:56:d5:
                    9f:dc:36:61:fa:e5:f3:b4:4b:76:99:d0:fc:2f:80:
                    c0:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:70:93:F7:B1:18:0A:39:45:E7:42:E0:47:1A:E4:29:73:27:C3:CE
            X509v3 Authority Key Identifier:
                keyid:0A:6C:E4:13:14:DE:D3:33:26:65:E6:9E:87:FF:0E:48:E9:50:B3:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H3AQkQ9wNn7gdmSWAxHjc7CjpiRmbkL3QjJ9xmiuwDop/1/0A6CE41314DED3332665E69E87FF0E48E950B3A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0A6CE41314DED3332665E69E87FF0E48E950B3A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H3AQkQ9wNn7gdmSWAxHjc7CjpiRmbkL3QjJ9xmiuwDop/1/3230302e3136302e31362e302f32302d3234203d3e203232313438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.160.16.0/20

    Signature Algorithm: sha256WithRSAEncryption
         50:3f:c5:64:7c:c3:d0:51:15:c7:9c:ee:f0:17:51:96:a3:4f:
         18:b1:93:d9:8a:bf:02:fa:80:34:ea:2a:06:c9:c8:9b:f1:18:
         e3:cc:04:f4:d9:a6:64:26:0d:25:d4:a5:a9:1f:a8:94:c0:66:
         d8:88:ad:ae:c2:1c:0e:86:64:25:4c:9b:44:4b:e9:f4:e2:c6:
         50:1f:97:e3:ff:ed:1a:f1:fe:cb:47:c1:d3:26:1b:5b:47:70:
         08:0d:2b:28:cb:81:9c:e5:66:20:d6:aa:1b:95:59:08:7f:3a:
         10:db:44:e9:05:87:89:24:a4:3d:d2:6c:1e:cf:d1:44:ac:ba:
         38:80:c3:41:ae:e2:0b:f2:84:c5:60:ef:55:7a:64:99:41:45:
         20:19:fd:36:9d:2f:55:e4:f7:f6:a0:9a:e3:ee:8d:88:e0:1e:
         f2:f9:a4:7e:63:ce:49:73:f7:06:b7:a1:96:aa:48:91:d2:fe:
         c2:eb:17:e7:65:be:6d:9d:a7:d5:31:1b:d2:c6:24:e7:1e:69:
         a0:d6:69:f9:ff:5d:5b:1c:10:c3:38:b2:6e:b4:0e:87:ef:48:
         76:dd:31:8e:fd:ff:f4:d8:c8:2d:23:6d:16:71:d6:02:3d:15:
         64:fb:5f:a8:12:71:1a:ff:e4:da:81:90:81:2b:b3:23:ae:f9:
         ff:24:72:ca
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUZ7Yp7vtcGAxmzc+DcGD//dlzYhgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEE2Q0U0MTMxNERFRDMzMzI2NjVFNjlFODdGRjBFNDhF
OTUwQjNBMzAeFw0yNDA0MDMyMzM0MDJaFw0yNTA0MDIyMzM5MDJaMDMxMTAvBgNV
BAMTKDIzNzA5M0Y3QjExODBBMzk0NUU3NDJFMDQ3MUFFNDI5NzMyN0MzQ0UwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNrpnVxNKbMwfzMli+vd3kgPCr
ZFMtK/5GcZ6S04gKvoS+3JhOUKWqFogDpMXCPa7jDreHl46ulVX6b+ngj+7XLdI+
VPvmzvurNDMdss1Yqe2s2hcCi5F9lMC3xAQyegGVA+gW8tHbWHB4qbItng+S1FXM
7IsKjXnSZzlRknHXqvkgQJv9vpp1drk2kEr3eJZg/S9UT7MYbEfgNkzjKEeQ/y/u
WJv/hVLUPrmIpxQDn+YE/lAjePeZa+9YMZi95x8lAofrlE2EQHtJ5pCQ/NYRaNZq
9JLPpqM9MNBdrraRPHG08sOKB5Sz4qZqiOdW1Z/cNmH65fO0S3aZ0PwvgMBZAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUI3CT97EYCjlF50LgRxrkKXMnw84wHwYDVR0j
BBgwFoAUCmzkExTe0zMmZeaeh/8OSOlQs6MwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSDNBUWtROXdObjdnZG1TV0F4SGpjN0NqcGlSbWJrTDNRako5eG1pdXdE
b3AvMS8wQTZDRTQxMzE0REVEMzMzMjY2NUU2OUU4N0ZGMEU0OEU5NTBCM0EzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzBBNkNFNDEzMTRERUQzMzMy
NjY1RTY5RTg3RkYwRTQ4RTk1MEIzQTMuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0gzQVFrUTl3Tm43Z2RtU1dBeEhqYzdDanBpUm1ia0wzUWpKOXhtaXV3RG9wLzEv
MzIzMDMwMmUzMTM2MzAyZTMxMzYyZTMwMmYzMjMwMmQzMjM0MjAzZDNlMjAzMjMy
MzEzNDM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQEyKAQMA0GCSqGSIb3DQEBCwUAA4IBAQBQP8VkfMPQ
URXHnO7wF1GWo08YsZPZir8C+oA06ioGycib8RjjzAT02aZkJg0l1KWpH6iUwGbY
iK2uwhwOhmQlTJtES+n04sZQH5fj/+0a8f7LR8HTJhtbR3AIDSsoy4Gc5WYg1qob
lVkIfzoQ20TpBYeJJKQ90mwez9FErLo4gMNBruIL8oTFYO9VemSZQUUgGf02nS9V
5Pf2oJrj7o2I4B7y+aR+Y85Jc/cGt6GWqkiR0v7C6xfnZb5tnafVMRvSxiTnHmmg
1mn5/11bHBDDOLJutA6H70h23TGO/f/02MgtI20WcdYCPRVk+1+oEnEa/+TagZCB
K7Mjrvn/JHLK
-----END CERTIFICATE-----
Generated at Mon Nov 25 18:43:31 2024 by rpki-client on console-ams.rpki-client.org