Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J4B76xgG4Yme91gGrMLsrYMpPjZgFRbWQQJnqUgcXjRL/1/3230312e3138322e3231362e302f32322d3232203d3e20323637353430.roa
File:                     3230312e3138322e3231362e302f32322d3232203d3e20323637353430.roa (raw, json)
Hash identifier:          yyYhClG40N35Zhjk0puObLJpZMH407MvDMaRpVnEr5Y=
Subject key identifier:   C3:0F:BB:DA:A8:6C:D2:A6:D5:16:87:44:0E:AA:4B:F4:F9:E8:5B:CF
Certificate issuer:       /CN=0BA72FE6026E6A9D29C970C9BA50C497455A4CD1
Certificate serial:       061C594F7EA9746C88E82CDB3FEC9E1E9DF44D89
Authority key identifier: 0B:A7:2F:E6:02:6E:6A:9D:29:C9:70:C9:BA:50:C4:97:45:5A:4C:D1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0BA72FE6026E6A9D29C970C9BA50C497455A4CD1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J4B76xgG4Yme91gGrMLsrYMpPjZgFRbWQQJnqUgcXjRL/1/3230312e3138322e3231362e302f32322d3232203d3e20323637353430.roa
Signing time:             Thu 04 Apr 2024 16:33:52 +0000
ROA not before:           Thu 04 Apr 2024 16:28:52 +0000
ROA not after:            Thu 03 Apr 2025 16:33:52 +0000
asID:                     267540
IP address blocks:        201.182.216.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/J4B76xgG4Yme91gGrMLsrYMpPjZgFRbWQQJnqUgcXjRL/1/0BA72FE6026E6A9D29C970C9BA50C497455A4CD1.crl
                          rsync://rpki-repo.registro.br/repo/J4B76xgG4Yme91gGrMLsrYMpPjZgFRbWQQJnqUgcXjRL/1/0BA72FE6026E6A9D29C970C9BA50C497455A4CD1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0BA72FE6026E6A9D29C970C9BA50C497455A4CD1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 14:56:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:1c:59:4f:7e:a9:74:6c:88:e8:2c:db:3f:ec:9e:1e:9d:f4:4d:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0BA72FE6026E6A9D29C970C9BA50C497455A4CD1
        Validity
            Not Before: Apr  4 16:28:52 2024 GMT
            Not After : Apr  3 16:33:52 2025 GMT
        Subject: CN=C30FBBDAA86CD2A6D51687440EAA4BF4F9E85BCF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:05:f9:d0:77:0d:7b:f1:9c:e6:8e:76:02:45:
                    26:ff:fa:a8:56:b6:e9:48:4d:41:e2:51:d0:f4:e3:
                    7b:0c:cb:7e:bd:b1:81:d4:2e:b8:b2:e9:1b:90:67:
                    f5:3a:51:5b:ea:ed:9a:76:46:fa:81:00:7a:b1:f4:
                    d0:7f:3b:23:a2:da:8a:a0:c1:7d:59:e8:2a:a7:0b:
                    12:3b:a4:b8:db:46:8c:73:00:7b:fe:09:28:fa:d9:
                    71:3d:f3:8b:d3:55:6e:31:59:8b:fa:a1:0b:70:c1:
                    89:7e:97:07:8b:69:dc:e8:d6:43:9d:85:dc:0e:27:
                    7d:06:92:e5:24:db:b5:d0:69:01:68:c3:74:6b:48:
                    68:4b:ba:88:b5:13:ee:c2:d7:16:71:a0:2a:48:01:
                    29:cf:3b:eb:c3:84:59:f2:82:84:c2:e9:3e:6f:06:
                    be:98:e8:07:f3:03:80:65:e2:64:ed:a1:2e:d8:8b:
                    1f:92:12:12:ff:32:b0:ed:17:e8:45:c2:7b:d0:5f:
                    39:f4:f5:f4:a0:e8:23:a8:65:11:3a:77:f9:ed:9b:
                    2a:e2:23:0b:b9:80:93:ec:49:6c:20:55:4d:54:bc:
                    ea:bc:9b:d1:07:89:f7:a7:06:82:07:73:6a:b8:e8:
                    0f:8d:0e:de:06:9b:36:a6:5f:95:2a:91:a3:c0:42:
                    28:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:0F:BB:DA:A8:6C:D2:A6:D5:16:87:44:0E:AA:4B:F4:F9:E8:5B:CF
            X509v3 Authority Key Identifier:
                keyid:0B:A7:2F:E6:02:6E:6A:9D:29:C9:70:C9:BA:50:C4:97:45:5A:4C:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J4B76xgG4Yme91gGrMLsrYMpPjZgFRbWQQJnqUgcXjRL/1/0BA72FE6026E6A9D29C970C9BA50C497455A4CD1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0BA72FE6026E6A9D29C970C9BA50C497455A4CD1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J4B76xgG4Yme91gGrMLsrYMpPjZgFRbWQQJnqUgcXjRL/1/3230312e3138322e3231362e302f32322d3232203d3e20323637353430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.182.216.0/22

    Signature Algorithm: sha256WithRSAEncryption
         48:24:e7:8d:68:4e:8e:92:8d:2d:87:63:fa:df:aa:80:d6:2c:
         79:5e:55:bf:13:fa:d9:a7:15:e7:92:80:bd:5f:69:37:e1:c8:
         35:cb:ce:42:ce:f7:45:de:b6:ab:73:11:50:cb:65:76:25:73:
         e0:8b:84:b8:1a:0d:76:5a:ba:97:ed:1f:36:39:7c:1a:43:10:
         21:08:b2:e8:28:3b:64:6c:69:4a:66:54:eb:95:bc:66:cc:cf:
         9e:f0:5e:01:f6:11:f3:1a:f8:c1:b2:b6:f0:31:72:36:94:1f:
         4c:c8:12:3a:05:03:1f:19:6e:1b:21:d2:a6:63:bc:f7:77:62:
         f3:a9:00:37:52:85:f6:ea:43:11:26:c8:23:37:da:76:2c:fa:
         10:b0:57:51:8e:1b:11:38:6e:c9:64:4a:42:2b:0e:32:1b:f5:
         32:2f:3f:6a:8a:2f:75:42:ad:7e:24:30:bb:9f:59:4f:db:34:
         4e:d7:f2:c0:2d:09:fc:57:fb:4c:8e:68:3e:4a:e2:19:fb:86:
         4b:2d:60:42:b8:03:45:04:9c:c7:5d:29:1a:9d:5c:2f:30:08:
         d6:95:35:85:0d:d8:00:90:65:ba:73:2a:d2:fe:61:ca:30:5f:
         49:7d:e6:f7:de:88:b9:e4:09:01:4c:60:b9:79:b2:c3:29:29:
         f9:50:ba:c0
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUBhxZT36pdGyI6CzbP+yeHp30TYkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEJBNzJGRTYwMjZFNkE5RDI5Qzk3MEM5QkE1MEM0OTc0
NTVBNENEMTAeFw0yNDA0MDQxNjI4NTJaFw0yNTA0MDMxNjMzNTJaMDMxMTAvBgNV
BAMTKEMzMEZCQkRBQTg2Q0QyQTZENTE2ODc0NDBFQUE0QkY0RjlFODVCQ0YwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMBfnQdw178ZzmjnYCRSb/+qhW
tulITUHiUdD043sMy369sYHULriy6RuQZ/U6UVvq7Zp2RvqBAHqx9NB/OyOi2oqg
wX1Z6CqnCxI7pLjbRoxzAHv+CSj62XE984vTVW4xWYv6oQtwwYl+lweLadzo1kOd
hdwOJ30GkuUk27XQaQFow3RrSGhLuoi1E+7C1xZxoCpIASnPO+vDhFnygoTC6T5v
Br6Y6AfzA4Bl4mTtoS7Yix+SEhL/MrDtF+hFwnvQXzn09fSg6COoZRE6d/ntmyri
Iwu5gJPsSWwgVU1UvOq8m9EHifenBoIHc2q46A+NDt4GmzamX5UqkaPAQig3AgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUww+72qhs0qbVFodEDqpL9PnoW88wHwYDVR0j
BBgwFoAUC6cv5gJuap0pyXDJulDEl0VaTNEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSjRCNzZ4Z0c0WW1lOTFnR3JNTHNyWU1wUGpaZ0ZSYldRUUpucVVnY1hq
UkwvMS8wQkE3MkZFNjAyNkU2QTlEMjlDOTcwQzlCQTUwQzQ5NzQ1NUE0Q0QxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzBCQTcyRkU2MDI2RTZBOUQy
OUM5NzBDOUJBNTBDNDk3NDU1QTRDRDEuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0o0Qjc2eGdHNFltZTkxZ0dyTUxzcllNcFBqWmdGUmJXUVFKbnFVZ2NYalJMLzEv
MzIzMDMxMmUzMTM4MzIyZTMyMzEzNjJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDMy
MzYzNzM1MzQzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAsm22DANBgkqhkiG9w0BAQsFAAOCAQEASCTn
jWhOjpKNLYdj+t+qgNYseV5VvxP62acV55KAvV9pN+HINcvOQs73Rd62q3MRUMtl
diVz4IuEuBoNdlq6l+0fNjl8GkMQIQiy6Cg7ZGxpSmZU65W8ZszPnvBeAfYR8xr4
wbK28DFyNpQfTMgSOgUDHxluGyHSpmO893di86kAN1KF9upDESbIIzfadiz6ELBX
UY4bEThuyWRKQisOMhv1Mi8/aoovdUKtfiQwu59ZT9s0TtfywC0J/Ff7TI5oPkri
GfuGSy1gQrgDRQScx10pGp1cLzAI1pU1hQ3YAJBlunMq0v5hyjBfSX3m996IueQJ
AUxguXmywykp+VC6wA==
-----END CERTIFICATE-----
Generated at Fri Jun 28 15:42:27 2024 by rpki-client on console-fra.rpki-client.org