Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D4xNXu9cZbJ9AWyftXUzXTdsmD4GsnC252k9ZAMdeAUp/0/3136382e302e3136352e302f32342d3234203d3e20323633343833.roa
File:                     3136382e302e3136352e302f32342d3234203d3e20323633343833.roa (raw, json)
Hash identifier:          yw0TYNLqGMuhCzkGjaac89n5ppgG5gie8NmfK+clxxQ=
Subject key identifier:   FA:AE:42:12:6A:C6:29:28:42:17:74:82:9A:82:14:07:43:6F:6E:CF
Certificate issuer:       /CN=F21939D0333A56C027223307D042B0947155D77F
Certificate serial:       5165A427905FDF95351B9002D6105BA4471DE098
Authority key identifier: F2:19:39:D0:33:3A:56:C0:27:22:33:07:D0:42:B0:94:71:55:D7:7F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F21939D0333A56C027223307D042B0947155D77F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D4xNXu9cZbJ9AWyftXUzXTdsmD4GsnC252k9ZAMdeAUp/0/3136382e302e3136352e302f32342d3234203d3e20323633343833.roa
Signing time:             Thu 25 Apr 2024 17:07:13 +0000
ROA not before:           Thu 25 Apr 2024 17:02:13 +0000
ROA not after:            Thu 24 Apr 2025 17:07:13 +0000
asID:                     263483
IP address blocks:        168.0.165.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/D4xNXu9cZbJ9AWyftXUzXTdsmD4GsnC252k9ZAMdeAUp/0/F21939D0333A56C027223307D042B0947155D77F.crl
                          rsync://rpki-repo.registro.br/repo/D4xNXu9cZbJ9AWyftXUzXTdsmD4GsnC252k9ZAMdeAUp/0/F21939D0333A56C027223307D042B0947155D77F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F21939D0333A56C027223307D042B0947155D77F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 03 Jun 2024 13:56:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:65:a4:27:90:5f:df:95:35:1b:90:02:d6:10:5b:a4:47:1d:e0:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F21939D0333A56C027223307D042B0947155D77F
        Validity
            Not Before: Apr 25 17:02:13 2024 GMT
            Not After : Apr 24 17:07:13 2025 GMT
        Subject: CN=FAAE42126AC62928421774829A821407436F6ECF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:2a:a7:43:2f:1c:75:c0:5c:d0:e2:7a:ea:b7:
                    92:dc:6b:57:7d:77:b5:56:48:5e:14:82:ff:f0:12:
                    9a:14:ed:68:08:cd:4e:f0:86:d5:39:37:bf:58:71:
                    20:14:35:d4:f7:07:ba:32:7e:c1:fd:a5:8f:c0:15:
                    f4:d2:09:87:39:e2:3d:1c:02:13:20:01:90:1c:53:
                    87:04:df:73:48:64:fc:a0:2b:3d:45:1e:02:c6:31:
                    04:d2:5d:5e:19:ef:aa:e4:5b:8f:f5:38:76:6c:ef:
                    01:42:49:ac:e8:38:95:2e:5b:11:ca:f4:c3:71:ef:
                    fd:94:0a:fc:49:65:40:91:bf:7f:25:e2:30:fd:88:
                    c1:10:94:21:c8:04:e3:0c:4e:5d:db:db:ea:13:4d:
                    c6:73:78:2b:72:b3:75:e7:c2:b8:de:19:a2:99:c0:
                    59:19:d6:68:68:11:2b:c0:75:a8:22:95:f4:ed:c6:
                    4d:b5:5a:43:f7:c2:7f:39:ab:8b:b5:59:7e:fc:d4:
                    40:08:b4:d3:7b:b4:5b:11:e4:6f:28:80:d9:0a:7f:
                    b8:bc:e8:3c:98:fb:0b:36:c7:34:e2:cf:ec:77:4a:
                    2d:5b:4f:da:25:cc:e9:4b:60:1a:e9:e7:c6:e8:37:
                    26:6f:3d:d6:3c:a2:84:5f:2c:6a:2e:90:ac:f3:a6:
                    af:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:AE:42:12:6A:C6:29:28:42:17:74:82:9A:82:14:07:43:6F:6E:CF
            X509v3 Authority Key Identifier:
                keyid:F2:19:39:D0:33:3A:56:C0:27:22:33:07:D0:42:B0:94:71:55:D7:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D4xNXu9cZbJ9AWyftXUzXTdsmD4GsnC252k9ZAMdeAUp/0/F21939D0333A56C027223307D042B0947155D77F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F21939D0333A56C027223307D042B0947155D77F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D4xNXu9cZbJ9AWyftXUzXTdsmD4GsnC252k9ZAMdeAUp/0/3136382e302e3136352e302f32342d3234203d3e20323633343833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.0.165.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9d:3d:b0:81:d0:eb:53:dd:56:de:b7:1e:f4:80:66:9b:d7:fe:
         9c:dd:4b:3e:0d:0b:cd:66:66:14:5c:d7:ed:aa:68:4c:36:08:
         11:f2:ce:43:e7:cd:0d:a9:4e:76:f8:69:72:17:45:a5:b4:ba:
         b4:c1:81:64:e5:70:7f:0d:e9:d7:e9:9a:3f:a0:89:58:5b:82:
         0e:ea:63:94:3c:4c:7c:de:10:61:ef:94:23:ff:7b:3d:4b:f3:
         ca:d7:98:a0:cf:8a:e4:d8:54:ba:83:32:c7:60:ab:8d:c1:00:
         24:87:62:30:df:78:e4:55:f0:f1:32:9c:b3:67:e6:05:90:27:
         ec:1d:35:8d:0a:ec:13:ea:69:c0:fb:f9:1c:b5:ab:d7:37:aa:
         82:53:85:ec:f7:0f:58:d6:42:87:dd:23:d9:57:f0:b5:99:45:
         4b:30:b6:c3:4c:9a:39:b2:9b:b1:12:5e:29:20:17:6b:86:36:
         6c:2a:0c:4e:44:dc:bc:7e:d2:f1:7f:6e:e2:76:21:5f:cd:db:
         5d:81:13:7e:8e:3d:2e:f0:a7:79:7f:0e:45:58:70:3d:6f:47:
         3e:d8:88:cf:a3:32:67:3a:bf:b9:a5:73:81:e3:7b:36:63:8b:
         ae:90:24:95:f2:b9:c1:1d:bf:5b:14:05:ed:85:68:0b:86:08:
         13:58:76:d4
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUUWWkJ5Bf35U1G5AC1hBbpEcd4JgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjIxOTM5RDAzMzNBNTZDMDI3MjIzMzA3RDA0MkIwOTQ3
MTU1RDc3RjAeFw0yNDA0MjUxNzAyMTNaFw0yNTA0MjQxNzA3MTNaMDMxMTAvBgNV
BAMTKEZBQUU0MjEyNkFDNjI5Mjg0MjE3NzQ4MjlBODIxNDA3NDM2RjZFQ0YwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCWKqdDLxx1wFzQ4nrqt5Lca1d9
d7VWSF4Ugv/wEpoU7WgIzU7whtU5N79YcSAUNdT3B7oyfsH9pY/AFfTSCYc54j0c
AhMgAZAcU4cE33NIZPygKz1FHgLGMQTSXV4Z76rkW4/1OHZs7wFCSazoOJUuWxHK
9MNx7/2UCvxJZUCRv38l4jD9iMEQlCHIBOMMTl3b2+oTTcZzeCtys3XnwrjeGaKZ
wFkZ1mhoESvAdagilfTtxk21WkP3wn85q4u1WX781EAItNN7tFsR5G8ogNkKf7i8
6DyY+ws2xzTiz+x3Si1bT9olzOlLYBrp58boNyZvPdY8ooRfLGoukKzzpq/PAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQU+q5CEmrGKShCF3SCmoIUB0Nvbs8wHwYDVR0j
BBgwFoAU8hk50DM6VsAnIjMH0EKwlHFV138wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRDR4Tlh1OWNaYko5QVd5ZnRYVXpYVGRzbUQ0R3NuQzI1Mms5WkFNZGVB
VXAvMC9GMjE5MzlEMDMzM0E1NkMwMjcyMjMzMDdEMDQyQjA5NDcxNTVENzdGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0YyMTkzOUQwMzMzQTU2QzAy
NzIyMzMwN0QwNDJCMDk0NzE1NUQ3N0YuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0Q0eE5YdTljWmJKOUFXeWZ0WFV6WFRkc21ENEdzbkMyNTJrOVpBTWRlQVVwLzAv
MzEzNjM4MmUzMDJlMzEzNjM1MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjMz
MzQzODMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAqAClMA0GCSqGSIb3DQEBCwUAA4IBAQCdPbCB0OtT
3Vbetx70gGab1/6c3Us+DQvNZmYUXNftqmhMNggR8s5D580NqU52+GlyF0WltLq0
wYFk5XB/DenX6Zo/oIlYW4IO6mOUPEx83hBh75Qj/3s9S/PK15igz4rk2FS6gzLH
YKuNwQAkh2Iw33jkVfDxMpyzZ+YFkCfsHTWNCuwT6mnA+/kctavXN6qCU4Xs9w9Y
1kKH3SPZV/C1mUVLMLbDTJo5spuxEl4pIBdrhjZsKgxORNy8ftLxf27idiFfzdtd
gRN+jj0u8Kd5fw5FWHA9b0c+2IjPozJnOr+5pXOB43s2Y4uukCSV8rnBHb9bFAXt
hWgLhggTWHbU
-----END CERTIFICATE-----
Generated at Sun Jun 2 14:07:15 2024 by rpki-client on console-fra.rpki-client.org