Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J5e8a8jFdmR8yv9qo6asT7BJbEek4jwo3wbbTEACthmW/1/3136382e3232382e39302e302f32332d3233203d3e20323634393133.roa
File:                     3136382e3232382e39302e302f32332d3233203d3e20323634393133.roa (raw, json)
Hash identifier:          gxGcatR8sTEhXWArTMis2KNHv51Z3ZnqE5tVdOfXQ+E=
Subject key identifier:   4A:0A:57:22:1B:40:DB:1D:B2:D1:4F:BF:E6:6C:9C:C8:39:09:D6:2C
Certificate issuer:       /CN=6FD7780130A5D3BF04E958422A80B35362959A11
Certificate serial:       30691FC2E173EE3ED36A8F5D893287239F1D7AC7
Authority key identifier: 6F:D7:78:01:30:A5:D3:BF:04:E9:58:42:2A:80:B3:53:62:95:9A:11
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6FD7780130A5D3BF04E958422A80B35362959A11.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J5e8a8jFdmR8yv9qo6asT7BJbEek4jwo3wbbTEACthmW/1/3136382e3232382e39302e302f32332d3233203d3e20323634393133.roa
Signing time:             Thu 04 Apr 2024 04:14:00 +0000
ROA not before:           Thu 04 Apr 2024 04:09:00 +0000
ROA not after:            Thu 03 Apr 2025 04:14:00 +0000
asID:                     264913
IP address blocks:        168.228.90.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/J5e8a8jFdmR8yv9qo6asT7BJbEek4jwo3wbbTEACthmW/1/6FD7780130A5D3BF04E958422A80B35362959A11.crl
                          rsync://rpki-repo.registro.br/repo/J5e8a8jFdmR8yv9qo6asT7BJbEek4jwo3wbbTEACthmW/1/6FD7780130A5D3BF04E958422A80B35362959A11.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6FD7780130A5D3BF04E958422A80B35362959A11.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 19:20:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:69:1f:c2:e1:73:ee:3e:d3:6a:8f:5d:89:32:87:23:9f:1d:7a:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6FD7780130A5D3BF04E958422A80B35362959A11
        Validity
            Not Before: Apr  4 04:09:00 2024 GMT
            Not After : Apr  3 04:14:00 2025 GMT
        Subject: CN=4A0A57221B40DB1DB2D14FBFE66C9CC83909D62C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:16:8e:4f:e5:c1:92:08:2f:ad:8a:1d:92:f8:
                    df:7d:76:9f:aa:1d:20:c5:eb:92:b8:6b:b8:92:5d:
                    06:29:52:61:73:cd:21:70:bc:2e:02:d3:cc:1a:9b:
                    1a:17:b5:d0:36:f3:51:99:9e:7b:14:9e:cc:15:c7:
                    03:73:ed:52:86:0a:4a:52:58:b1:91:b0:40:2c:f0:
                    46:2c:5b:5d:0b:19:79:8c:65:cf:ff:eb:0f:ef:77:
                    e0:15:e5:a5:8c:3a:d3:f4:23:27:6a:f0:2f:30:60:
                    a9:fb:10:3f:7d:7f:a3:a4:4c:bd:49:7b:e9:a8:8d:
                    ee:6f:7f:99:50:06:e0:a5:c4:de:a1:87:cd:02:f9:
                    f3:6c:04:38:0f:4b:cc:74:54:ea:49:2a:a9:e0:ad:
                    cb:28:a8:85:b1:54:ba:93:a0:89:d2:6d:2b:44:c7:
                    0c:af:0a:7d:5b:7d:e4:f5:1d:12:b4:95:be:58:7e:
                    15:f6:26:a0:d9:2d:70:84:67:75:d8:f7:ae:26:f8:
                    11:4d:b3:54:09:d7:4a:be:c2:68:c1:65:2a:c5:af:
                    66:65:6b:61:06:12:e3:3a:22:a7:97:98:fb:e9:f8:
                    64:b3:e3:97:b0:63:c8:e8:eb:48:43:4c:37:64:64:
                    a2:fa:fb:53:ab:a6:fe:76:94:35:e6:24:e5:50:61:
                    98:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:0A:57:22:1B:40:DB:1D:B2:D1:4F:BF:E6:6C:9C:C8:39:09:D6:2C
            X509v3 Authority Key Identifier:
                keyid:6F:D7:78:01:30:A5:D3:BF:04:E9:58:42:2A:80:B3:53:62:95:9A:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J5e8a8jFdmR8yv9qo6asT7BJbEek4jwo3wbbTEACthmW/1/6FD7780130A5D3BF04E958422A80B35362959A11.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6FD7780130A5D3BF04E958422A80B35362959A11.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J5e8a8jFdmR8yv9qo6asT7BJbEek4jwo3wbbTEACthmW/1/3136382e3232382e39302e302f32332d3233203d3e20323634393133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.228.90.0/23

    Signature Algorithm: sha256WithRSAEncryption
         90:b3:5f:a2:40:53:3a:a2:fc:09:2a:c9:da:2c:59:61:54:63:
         25:0d:ae:eb:86:26:23:1a:ad:b9:3c:67:a3:38:46:87:6b:15:
         bd:cb:b7:82:37:3b:72:49:ec:c0:f8:f3:75:01:07:58:0c:e6:
         49:5c:99:e1:74:7f:67:9d:60:46:5c:fb:06:f7:8a:65:e7:3a:
         6e:4f:8c:6e:56:cb:27:45:98:2c:b1:39:6b:bb:53:81:c1:fc:
         c7:a3:30:d6:e1:21:3b:69:17:67:84:5c:bf:3f:36:d8:91:79:
         bc:70:6b:7b:22:07:d7:3d:02:c3:86:47:8d:65:21:45:94:61:
         74:86:68:4d:33:b7:b2:57:88:55:88:3e:c7:b9:c5:1e:b3:7d:
         65:81:0c:31:aa:45:08:b1:30:cc:a6:a5:4d:09:37:48:02:21:
         f0:6b:0c:a0:f0:35:04:fe:91:c9:1c:27:82:b6:e5:c8:78:8c:
         30:e9:cc:d9:71:1d:64:1f:ff:dd:9f:8f:af:12:34:70:e5:6d:
         f3:16:74:59:d2:c8:39:bc:26:e0:0b:1e:d0:dd:88:ad:43:3e:
         c0:e2:ff:12:3a:55:61:b4:04:0e:73:e1:fd:9f:87:fd:b0:9e:
         63:b3:94:27:fb:51:aa:39:1b:18:54:50:4d:d5:f3:f2:cc:5c:
         9a:97:e1:e2
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUMGkfwuFz7j7Tao9diTKHI58descwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkZENzc4MDEzMEE1RDNCRjA0RTk1ODQyMkE4MEIzNTM2
Mjk1OUExMTAeFw0yNDA0MDQwNDA5MDBaFw0yNTA0MDMwNDE0MDBaMDMxMTAvBgNV
BAMTKDRBMEE1NzIyMUI0MERCMURCMkQxNEZCRkU2NkM5Q0M4MzkwOUQ2MkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDxFo5P5cGSCC+tih2S+N99dp+q
HSDF65K4a7iSXQYpUmFzzSFwvC4C08wamxoXtdA281GZnnsUnswVxwNz7VKGCkpS
WLGRsEAs8EYsW10LGXmMZc//6w/vd+AV5aWMOtP0Iydq8C8wYKn7ED99f6OkTL1J
e+moje5vf5lQBuClxN6hh80C+fNsBDgPS8x0VOpJKqngrcsoqIWxVLqToInSbStE
xwyvCn1bfeT1HRK0lb5YfhX2JqDZLXCEZ3XY964m+BFNs1QJ10q+wmjBZSrFr2Zl
a2EGEuM6IqeXmPvp+GSz45ewY8jo60hDTDdkZKL6+1Orpv52lDXmJOVQYZi3AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUSgpXIhtA2x2y0U+/5mycyDkJ1iwwHwYDVR0j
BBgwFoAUb9d4ATCl078E6VhCKoCzU2KVmhEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSjVlOGE4akZkbVI4eXY5cW82YXNUN0JKYkVlazRqd28zd2JiVEVBQ3Ro
bVcvMS82RkQ3NzgwMTMwQTVEM0JGMDRFOTU4NDIyQTgwQjM1MzYyOTU5QTExLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzZGRDc3ODAxMzBBNUQzQkYw
NEU5NTg0MjJBODBCMzUzNjI5NTlBMTEuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0o1ZThhOGpGZG1SOHl2OXFvNmFzVDdCSmJFZWs0andvM3diYlRFQUN0aG1XLzEv
MzEzNjM4MmUzMjMyMzgyZTM5MzAyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjM2
MzQzOTMxMzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAGo5FowDQYJKoZIhvcNAQELBQADggEBAJCzX6JA
Uzqi/AkqydosWWFUYyUNruuGJiMarbk8Z6M4RodrFb3Lt4I3O3JJ7MD483UBB1gM
5klcmeF0f2edYEZc+wb3imXnOm5PjG5WyydFmCyxOWu7U4HB/MejMNbhITtpF2eE
XL8/NtiRebxwa3siB9c9AsOGR41lIUWUYXSGaE0zt7JXiFWIPse5xR6zfWWBDDGq
RQixMMympU0JN0gCIfBrDKDwNQT+kckcJ4K25ch4jDDpzNlxHWQf/92fj68SNHDl
bfMWdFnSyDm8JuALHtDdiK1DPsDi/xI6VWG0BA5z4f2fh/2wnmOzlCf7Uao5GxhU
UE3V8/LMXJqX4eI=
-----END CERTIFICATE-----
Generated at Fri Jun 28 19:18:12 2024 by rpki-client on console-fra.rpki-client.org