Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/He7bPZqear8UkEq3odf9SEZSYvbQ9uP444qhs5qZbJGQ/1/3136382e3139342e31342e302f32332d3233203d3e20323635333737.roa
File:                     3136382e3139342e31342e302f32332d3233203d3e20323635333737.roa (raw, json)
Hash identifier:          a7sAwmpLq5Mv7ym7f9YdFVagFM7hrr+/M8XqPsiH3PQ=
Subject key identifier:   C6:E0:3D:D1:63:D0:78:86:83:A5:5B:76:3B:2C:D9:F5:2E:5F:29:75
Certificate issuer:       /CN=A4C9B133126401D92DA5457C573EA0078BF42BA8
Certificate serial:       689DB8BC34C06E226134336F4370CCA53FF3D136
Authority key identifier: A4:C9:B1:33:12:64:01:D9:2D:A5:45:7C:57:3E:A0:07:8B:F4:2B:A8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A4C9B133126401D92DA5457C573EA0078BF42BA8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/He7bPZqear8UkEq3odf9SEZSYvbQ9uP444qhs5qZbJGQ/1/3136382e3139342e31342e302f32332d3233203d3e20323635333737.roa
Signing time:             Thu 04 Apr 2024 22:03:20 +0000
ROA not before:           Thu 04 Apr 2024 21:58:20 +0000
ROA not after:            Thu 03 Apr 2025 22:03:20 +0000
asID:                     265377
IP address blocks:        168.194.14.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/He7bPZqear8UkEq3odf9SEZSYvbQ9uP444qhs5qZbJGQ/1/A4C9B133126401D92DA5457C573EA0078BF42BA8.crl
                          rsync://rpki-repo.registro.br/repo/He7bPZqear8UkEq3odf9SEZSYvbQ9uP444qhs5qZbJGQ/1/A4C9B133126401D92DA5457C573EA0078BF42BA8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A4C9B133126401D92DA5457C573EA0078BF42BA8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 19:40:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:9d:b8:bc:34:c0:6e:22:61:34:33:6f:43:70:cc:a5:3f:f3:d1:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A4C9B133126401D92DA5457C573EA0078BF42BA8
        Validity
            Not Before: Apr  4 21:58:20 2024 GMT
            Not After : Apr  3 22:03:20 2025 GMT
        Subject: CN=C6E03DD163D0788683A55B763B2CD9F52E5F2975
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:15:7a:39:5e:74:a1:30:05:82:d4:29:df:3a:
                    4e:b0:84:d5:58:01:4a:f8:f8:34:0f:c8:cb:9b:bd:
                    83:ae:b3:c7:6d:c6:6e:77:16:1c:6b:cd:e6:40:12:
                    bd:cd:0a:71:f1:2f:7e:4f:78:07:5b:2e:a6:f4:62:
                    6b:08:0d:53:17:b4:48:25:1e:2a:a6:fe:5f:67:aa:
                    86:61:11:8a:3e:8b:d8:fc:d9:29:4e:d8:54:5b:5c:
                    e0:11:d3:81:b5:04:cb:f2:7f:a3:74:32:87:24:3b:
                    6d:53:92:43:38:38:05:a4:d1:a5:15:b2:e3:41:69:
                    fe:7f:9d:7e:35:33:e1:47:96:18:d0:c1:47:57:4b:
                    b7:f5:31:6f:dc:c2:b6:bd:b0:27:db:29:32:d2:bd:
                    62:ed:5f:f3:a2:4d:46:14:f0:99:f6:25:b2:1a:6c:
                    f1:f9:61:0e:3a:d1:2a:9b:c9:4c:7a:6e:e2:66:ad:
                    a4:33:32:62:72:4e:b4:00:ec:82:a9:86:4c:22:ee:
                    23:4a:06:17:af:21:1b:10:33:79:ed:3a:28:97:b9:
                    0a:89:1f:f7:4e:1e:33:ba:19:13:85:be:93:02:eb:
                    ea:19:8e:28:46:1c:df:af:54:e7:e4:c3:8c:2a:2a:
                    d8:bd:a6:85:4d:d9:26:d7:fe:b6:b9:77:66:3f:bd:
                    6b:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:E0:3D:D1:63:D0:78:86:83:A5:5B:76:3B:2C:D9:F5:2E:5F:29:75
            X509v3 Authority Key Identifier:
                keyid:A4:C9:B1:33:12:64:01:D9:2D:A5:45:7C:57:3E:A0:07:8B:F4:2B:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/He7bPZqear8UkEq3odf9SEZSYvbQ9uP444qhs5qZbJGQ/1/A4C9B133126401D92DA5457C573EA0078BF42BA8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A4C9B133126401D92DA5457C573EA0078BF42BA8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/He7bPZqear8UkEq3odf9SEZSYvbQ9uP444qhs5qZbJGQ/1/3136382e3139342e31342e302f32332d3233203d3e20323635333737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.194.14.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b6:e7:51:f7:31:1f:60:98:39:35:be:e9:26:25:e6:2c:14:f7:
         5e:2a:a3:bb:cf:f0:7f:03:74:5c:ed:41:5f:09:19:06:07:06:
         5f:f2:5d:d7:d4:90:80:cc:7a:6f:48:93:f5:8b:62:56:2f:ec:
         c9:21:b7:ba:be:d0:61:f8:2a:fa:f7:09:26:8f:fe:48:b6:a8:
         ad:15:39:6b:51:a9:8c:b8:be:a6:4e:b1:c7:49:11:b0:6a:0a:
         93:c2:fe:65:ba:37:b6:55:bc:61:74:93:5f:94:28:2c:77:b5:
         a4:51:e0:60:ad:e6:1c:aa:5f:33:83:94:82:24:f4:bf:76:d6:
         3d:54:7c:ac:12:ba:a2:c2:17:6a:c1:76:04:fd:0f:e7:c4:9b:
         2a:1b:ea:40:e6:92:a6:11:d9:87:be:0a:a5:d1:8b:28:4d:27:
         52:8c:77:10:ab:c7:0e:b1:bd:01:a7:c7:e7:a8:80:6b:b3:f3:
         ca:d9:2c:ab:b8:cd:9f:7b:c1:6d:bd:00:8d:72:ab:4c:9a:14:
         41:64:53:82:d1:6c:67:66:be:f8:1b:47:90:f9:ce:86:83:f1:
         d5:90:c0:49:a3:77:20:7a:76:d0:f8:6c:8f:c8:c3:53:e9:3e:
         bc:3e:96:95:e4:73:cf:04:49:66:d7:29:cb:2a:76:18:91:66:
         f3:2b:32:63
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUaJ24vDTAbiJhNDNvQ3DMpT/z0TYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTRDOUIxMzMxMjY0MDFEOTJEQTU0NTdDNTczRUEwMDc4
QkY0MkJBODAeFw0yNDA0MDQyMTU4MjBaFw0yNTA0MDMyMjAzMjBaMDMxMTAvBgNV
BAMTKEM2RTAzREQxNjNEMDc4ODY4M0E1NUI3NjNCMkNEOUY1MkU1RjI5NzUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMFXo5XnShMAWC1CnfOk6whNVY
AUr4+DQPyMubvYOus8dtxm53FhxrzeZAEr3NCnHxL35PeAdbLqb0YmsIDVMXtEgl
Hiqm/l9nqoZhEYo+i9j82SlO2FRbXOAR04G1BMvyf6N0MockO21TkkM4OAWk0aUV
suNBaf5/nX41M+FHlhjQwUdXS7f1MW/cwra9sCfbKTLSvWLtX/OiTUYU8Jn2JbIa
bPH5YQ460SqbyUx6buJmraQzMmJyTrQA7IKphkwi7iNKBhevIRsQM3ntOiiXuQqJ
H/dOHjO6GROFvpMC6+oZjihGHN+vVOfkw4wqKti9poVN2SbX/ra5d2Y/vWu9AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUxuA90WPQeIaDpVt2OyzZ9S5fKXUwHwYDVR0j
BBgwFoAUpMmxMxJkAdktpUV8Vz6gB4v0K6gwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSGU3YlBacWVhcjhVa0VxM29kZjlTRVpTWXZiUTl1UDQ0NHFoczVxWmJK
R1EvMS9BNEM5QjEzMzEyNjQwMUQ5MkRBNTQ1N0M1NzNFQTAwNzhCRjQyQkE4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0E0QzlCMTMzMTI2NDAxRDky
REE1NDU3QzU3M0VBMDA3OEJGNDJCQTguY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hlN2JQWnFlYXI4VWtFcTNvZGY5U0VaU1l2YlE5dVA0NDRxaHM1cVpiSkdRLzEv
MzEzNjM4MmUzMTM5MzQyZTMxMzQyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjM2
MzUzMzM3Mzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAGowg4wDQYJKoZIhvcNAQELBQADggEBALbnUfcx
H2CYOTW+6SYl5iwU914qo7vP8H8DdFztQV8JGQYHBl/yXdfUkIDMem9Ik/WLYlYv
7Mkht7q+0GH4Kvr3CSaP/ki2qK0VOWtRqYy4vqZOscdJEbBqCpPC/mW6N7ZVvGF0
k1+UKCx3taRR4GCt5hyqXzODlIIk9L921j1UfKwSuqLCF2rBdgT9D+fEmyob6kDm
kqYR2Ye+CqXRiyhNJ1KMdxCrxw6xvQGnx+eogGuz88rZLKu4zZ97wW29AI1yq0ya
FEFkU4LRbGdmvvgbR5D5zoaD8dWQwEmjdyB6dtD4bI/Iw1PpPrw+lpXkc88ESWbX
KcsqdhiRZvMrMmM=
-----END CERTIFICATE-----
Generated at Fri Nov 22 19:42:24 2024 by rpki-client on console-fra.rpki-client.org