Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HJjgHD7kHhP1UagfV1CnLYbJjURAiUcipr95QzhnnEyk/0/3136302e3233382e32342e302f32322d3234203d3e20323637323633.roa
File:                     3136302e3233382e32342e302f32322d3234203d3e20323637323633.roa (raw, json)
Hash identifier:          sit3GeoxY4z0tm3JGbdE2CMlWFDnzIYfvNJDEhwRPGo=
Subject key identifier:   30:EC:F8:65:98:44:16:7A:FE:F5:45:09:97:F9:CC:4B:54:8F:10:A9
Certificate issuer:       /CN=6EF2FC69E0EB1744BF74348AB043129CB1F6B435
Certificate serial:       4F1A0F3C76A2FFCE1CC1927E9209B9EB0E7A62A3
Authority key identifier: 6E:F2:FC:69:E0:EB:17:44:BF:74:34:8A:B0:43:12:9C:B1:F6:B4:35
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6EF2FC69E0EB1744BF74348AB043129CB1F6B435.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HJjgHD7kHhP1UagfV1CnLYbJjURAiUcipr95QzhnnEyk/0/3136302e3233382e32342e302f32322d3234203d3e20323637323633.roa
Signing time:             Wed 17 Apr 2024 13:12:43 +0000
ROA not before:           Wed 17 Apr 2024 13:07:43 +0000
ROA not after:            Wed 16 Apr 2025 13:12:43 +0000
asID:                     267263
IP address blocks:        160.238.24.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HJjgHD7kHhP1UagfV1CnLYbJjURAiUcipr95QzhnnEyk/0/6EF2FC69E0EB1744BF74348AB043129CB1F6B435.crl
                          rsync://rpki-repo.registro.br/repo/HJjgHD7kHhP1UagfV1CnLYbJjURAiUcipr95QzhnnEyk/0/6EF2FC69E0EB1744BF74348AB043129CB1F6B435.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6EF2FC69E0EB1744BF74348AB043129CB1F6B435.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 25 Jun 2024 09:10:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:1a:0f:3c:76:a2:ff:ce:1c:c1:92:7e:92:09:b9:eb:0e:7a:62:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6EF2FC69E0EB1744BF74348AB043129CB1F6B435
        Validity
            Not Before: Apr 17 13:07:43 2024 GMT
            Not After : Apr 16 13:12:43 2025 GMT
        Subject: CN=30ECF8659844167AFEF5450997F9CC4B548F10A9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:a2:33:ed:3b:5e:10:b6:24:24:65:80:d1:06:
                    28:73:3c:b4:00:68:0d:3e:b7:dc:74:e1:17:51:92:
                    da:5c:bc:cf:a8:e4:fa:ff:db:b8:de:52:96:a0:ed:
                    c4:dd:00:58:5e:ed:41:28:3c:c9:ae:19:5b:98:3f:
                    38:f4:46:f2:cf:3b:33:64:19:0b:65:b4:1d:c4:97:
                    1f:67:a7:66:16:ce:cf:b6:56:a7:4f:25:22:83:d0:
                    61:f5:f4:1a:92:ba:0e:f5:80:70:53:87:f6:c0:15:
                    4d:31:51:c2:69:c4:af:ae:86:e5:62:0e:78:ab:db:
                    53:9c:b0:59:73:89:2e:9b:6f:5b:bf:6e:59:6a:4d:
                    42:d2:c2:a4:12:bf:20:3e:e4:d2:d2:98:25:84:7d:
                    04:21:7f:a6:25:90:71:ce:92:e5:f7:83:6e:e2:84:
                    8f:68:5a:e0:c8:0d:ec:b4:40:fa:e1:07:9f:e5:1e:
                    3d:82:a3:ed:53:87:84:30:ba:84:e7:e5:e4:df:52:
                    f4:52:22:cb:e3:6e:cc:a4:d0:1a:bf:e5:1a:21:85:
                    d5:15:5f:6d:9c:7c:ca:b4:a7:e1:40:41:aa:2f:06:
                    8f:6d:cf:14:d0:21:c2:95:d4:60:1d:a3:e8:8c:c2:
                    38:6c:03:79:f8:c1:af:d0:60:05:04:3a:a5:cf:c4:
                    42:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:EC:F8:65:98:44:16:7A:FE:F5:45:09:97:F9:CC:4B:54:8F:10:A9
            X509v3 Authority Key Identifier:
                keyid:6E:F2:FC:69:E0:EB:17:44:BF:74:34:8A:B0:43:12:9C:B1:F6:B4:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HJjgHD7kHhP1UagfV1CnLYbJjURAiUcipr95QzhnnEyk/0/6EF2FC69E0EB1744BF74348AB043129CB1F6B435.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6EF2FC69E0EB1744BF74348AB043129CB1F6B435.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HJjgHD7kHhP1UagfV1CnLYbJjURAiUcipr95QzhnnEyk/0/3136302e3233382e32342e302f32322d3234203d3e20323637323633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.238.24.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1b:be:99:cc:5f:8d:e1:4a:6d:4d:b5:4f:34:a2:cf:16:e4:0e:
         26:05:b2:ab:f2:a5:50:09:a4:21:f6:95:65:24:61:73:03:45:
         57:4a:ba:56:82:58:0f:95:12:a1:39:c7:fb:d0:1b:01:ac:92:
         d7:a6:51:05:3b:a8:bb:da:af:3e:f7:6a:3b:67:fa:ff:ee:45:
         ce:aa:fd:88:d8:fb:eb:40:ff:08:50:95:eb:87:17:1d:6f:c0:
         2f:e1:45:35:15:1b:db:9e:26:7b:dd:cc:e0:0b:12:4b:6f:f3:
         3f:4e:95:08:80:3d:8e:c6:cc:ef:01:37:52:e5:4e:92:30:0c:
         12:fa:b9:1f:c5:3e:fc:9b:2e:fb:c7:64:62:e3:5e:33:b8:c2:
         a3:54:2f:8f:41:5d:6b:31:51:62:dd:2e:e5:5b:3d:f6:4a:cc:
         d8:d6:f0:0c:27:3f:68:8a:46:27:db:69:3c:eb:ea:e7:74:e7:
         d6:0c:9e:a7:d8:33:35:ba:1f:a4:22:32:0c:d3:cd:44:92:0f:
         76:0f:7d:68:98:bb:f2:62:4a:b4:9c:14:fd:60:34:8e:70:0d:
         25:58:51:1f:40:2d:d3:23:38:e4:fa:bb:64:0d:90:4d:4c:b0:
         77:f5:09:11:67:67:f8:d8:76:31:8c:36:ed:9c:33:bc:fc:1b:
         8f:b4:ad:c6
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUTxoPPHai/84cwZJ+kgm56w56YqMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkVGMkZDNjlFMEVCMTc0NEJGNzQzNDhBQjA0MzEyOUNC
MUY2QjQzNTAeFw0yNDA0MTcxMzA3NDNaFw0yNTA0MTYxMzEyNDNaMDMxMTAvBgNV
BAMTKDMwRUNGODY1OTg0NDE2N0FGRUY1NDUwOTk3RjlDQzRCNTQ4RjEwQTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7ojPtO14QtiQkZYDRBihzPLQA
aA0+t9x04RdRktpcvM+o5Pr/27jeUpag7cTdAFhe7UEoPMmuGVuYPzj0RvLPOzNk
GQtltB3Elx9np2YWzs+2VqdPJSKD0GH19BqSug71gHBTh/bAFU0xUcJpxK+uhuVi
Dnir21OcsFlziS6bb1u/bllqTULSwqQSvyA+5NLSmCWEfQQhf6YlkHHOkuX3g27i
hI9oWuDIDey0QPrhB5/lHj2Co+1Th4QwuoTn5eTfUvRSIsvjbsyk0Bq/5RohhdUV
X22cfMq0p+FAQaovBo9tzxTQIcKV1GAdo+iMwjhsA3n4wa/QYAUEOqXPxEIfAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUMOz4ZZhEFnr+9UUJl/nMS1SPEKkwHwYDVR0j
BBgwFoAUbvL8aeDrF0S/dDSKsEMSnLH2tDUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSEpqZ0hEN2tIaFAxVWFnZlYxQ25MWWJKalVSQWlVY2lwcjk1UXpobm5F
eWsvMC82RUYyRkM2OUUwRUIxNzQ0QkY3NDM0OEFCMDQzMTI5Q0IxRjZCNDM1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzZFRjJGQzY5RTBFQjE3NDRC
Rjc0MzQ4QUIwNDMxMjlDQjFGNkI0MzUuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hKamdIRDdrSGhQMVVhZ2ZWMUNuTFliSmpVUkFpVWNpcHI5NVF6aG5uRXlrLzAv
MzEzNjMwMmUzMjMzMzgyZTMyMzQyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM2
MzczMjM2MzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAKg7hgwDQYJKoZIhvcNAQELBQADggEBABu+mcxf
jeFKbU21TzSizxbkDiYFsqvypVAJpCH2lWUkYXMDRVdKulaCWA+VEqE5x/vQGwGs
ktemUQU7qLvarz73ajtn+v/uRc6q/YjY++tA/whQleuHFx1vwC/hRTUVG9ueJnvd
zOALEktv8z9OlQiAPY7GzO8BN1LlTpIwDBL6uR/FPvybLvvHZGLjXjO4wqNUL49B
XWsxUWLdLuVbPfZKzNjW8AwnP2iKRifbaTzr6ud059YMnqfYMzW6H6QiMgzTzUSS
D3YPfWiYu/JiSrScFP1gNI5wDSVYUR9ALdMjOOT6u2QNkE1MsHf1CRFnZ/jYdjGM
Nu2cM7z8G4+0rcY=
-----END CERTIFICATE-----
Generated at Mon Jun 24 13:47:07 2024 by rpki-client on console-fra.rpki-client.org