Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2SapynWKhumGNgHfEGDY7J6CEonuNxXzyHHaCvEvCcuY/1/3136382e3139372e3130362e302f32342d3234203d3e20323635343737.roa
File:                     3136382e3139372e3130362e302f32342d3234203d3e20323635343737.roa (raw, json)
Hash identifier:          4RpGkUvIjTBBP87w5ztkyR7hg5XW8mnSWQjKi+548po=
Subject key identifier:   86:E7:F6:F3:4F:24:6C:E2:28:8D:CA:19:06:86:16:5C:5B:F5:3D:D5
Certificate issuer:       /CN=AB9EE7D565C02709758537AFEB7BB83EC6AD2ED3
Certificate serial:       1C3DE60E17086116D57747CA85EDE9B8F949F86B
Authority key identifier: AB:9E:E7:D5:65:C0:27:09:75:85:37:AF:EB:7B:B8:3E:C6:AD:2E:D3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AB9EE7D565C02709758537AFEB7BB83EC6AD2ED3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2SapynWKhumGNgHfEGDY7J6CEonuNxXzyHHaCvEvCcuY/1/3136382e3139372e3130362e302f32342d3234203d3e20323635343737.roa
Signing time:             Wed 03 Apr 2024 18:32:39 +0000
ROA not before:           Wed 03 Apr 2024 18:27:39 +0000
ROA not after:            Wed 02 Apr 2025 18:32:39 +0000
asID:                     265477
IP address blocks:        168.197.106.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2SapynWKhumGNgHfEGDY7J6CEonuNxXzyHHaCvEvCcuY/1/AB9EE7D565C02709758537AFEB7BB83EC6AD2ED3.crl
                          rsync://rpki-repo.registro.br/repo/2SapynWKhumGNgHfEGDY7J6CEonuNxXzyHHaCvEvCcuY/1/AB9EE7D565C02709758537AFEB7BB83EC6AD2ED3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AB9EE7D565C02709758537AFEB7BB83EC6AD2ED3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 12:12:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:3d:e6:0e:17:08:61:16:d5:77:47:ca:85:ed:e9:b8:f9:49:f8:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AB9EE7D565C02709758537AFEB7BB83EC6AD2ED3
        Validity
            Not Before: Apr  3 18:27:39 2024 GMT
            Not After : Apr  2 18:32:39 2025 GMT
        Subject: CN=86E7F6F34F246CE2288DCA190686165C5BF53DD5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:48:3b:6f:67:91:9a:81:df:51:00:48:62:81:
                    e7:63:a9:f9:02:5f:09:0f:40:26:71:da:94:e4:2e:
                    ee:fb:7b:b2:ec:a8:26:65:8f:68:7f:7c:b1:41:40:
                    22:1d:11:21:39:01:51:f6:e5:79:41:2d:00:79:65:
                    94:26:bd:78:c3:b5:e3:c8:0a:de:7d:c7:f9:76:8f:
                    2a:31:70:bd:fd:a1:10:d4:c9:fd:bf:3a:b8:6b:c4:
                    8b:a0:7c:6d:8e:f6:e4:e9:91:7e:06:73:d2:0c:3d:
                    c1:61:54:d8:7b:c5:da:3f:0f:79:2e:e4:ed:5a:db:
                    f3:28:50:ee:44:42:80:e2:bf:eb:5d:2b:c7:48:df:
                    01:66:9f:1a:a6:51:01:b8:9f:04:44:fd:e3:9e:bc:
                    f7:f5:92:00:c3:35:05:4b:f8:85:84:47:51:69:42:
                    02:82:e4:64:b8:91:9b:87:ef:c9:3f:cd:ad:b7:6a:
                    df:69:67:b1:cb:b8:bf:3b:12:19:f2:1a:0b:92:6d:
                    60:a3:ae:b1:56:3f:59:d0:61:37:4a:43:f5:3b:ad:
                    93:44:2c:8a:f3:2d:97:16:83:2c:2a:e6:2c:61:8f:
                    47:fc:9d:c6:5b:25:9e:34:e8:38:45:d4:1b:70:f3:
                    0d:03:e1:0d:b5:53:35:15:a1:96:7e:ea:de:af:20:
                    a5:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:E7:F6:F3:4F:24:6C:E2:28:8D:CA:19:06:86:16:5C:5B:F5:3D:D5
            X509v3 Authority Key Identifier:
                keyid:AB:9E:E7:D5:65:C0:27:09:75:85:37:AF:EB:7B:B8:3E:C6:AD:2E:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2SapynWKhumGNgHfEGDY7J6CEonuNxXzyHHaCvEvCcuY/1/AB9EE7D565C02709758537AFEB7BB83EC6AD2ED3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AB9EE7D565C02709758537AFEB7BB83EC6AD2ED3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2SapynWKhumGNgHfEGDY7J6CEonuNxXzyHHaCvEvCcuY/1/3136382e3139372e3130362e302f32342d3234203d3e20323635343737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.197.106.0/24

    Signature Algorithm: sha256WithRSAEncryption
         53:85:3b:a9:88:6f:5c:a9:92:a7:3e:fb:72:07:35:3b:49:34:
         30:6d:72:9c:58:44:99:78:9e:15:d3:a7:8e:dc:ed:43:11:99:
         01:3e:ef:7a:0a:5a:30:13:83:32:69:10:31:13:c4:60:e1:46:
         f3:df:af:e6:30:1c:e1:9a:74:91:e6:1f:e7:8e:3f:ac:00:c4:
         26:6a:c3:f4:9d:d0:aa:12:ed:c0:34:c8:78:98:d3:56:0e:e2:
         f5:34:a4:45:77:e9:87:5c:39:7d:10:1b:a1:7e:e8:f0:90:13:
         63:33:b8:b5:8d:16:6c:84:09:d8:e0:59:9e:12:10:42:c5:32:
         3a:0b:29:43:0a:dc:c0:81:32:36:e5:e4:e5:ca:93:27:30:86:
         ce:53:90:60:bf:20:f6:00:d4:66:8a:71:75:e4:fb:5f:48:b7:
         0d:e6:cf:82:98:f0:1b:f2:82:39:5f:77:6e:ee:8b:aa:99:96:
         04:2c:59:fe:89:08:0a:ab:91:3e:7e:0d:bc:ca:36:18:23:74:
         1b:b0:ae:94:33:84:d1:71:99:5b:28:da:8d:1d:cc:2b:62:90:
         85:69:e4:5d:78:59:fb:d0:23:96:d9:fc:fe:87:1b:6d:dc:00:
         24:46:ea:19:fb:a8:3e:ee:c3:4e:12:80:14:1b:4d:b2:20:a2:
         71:7c:c2:1f
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUHD3mDhcIYRbVd0fKhe3puPlJ+GswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUI5RUU3RDU2NUMwMjcwOTc1ODUzN0FGRUI3QkI4M0VD
NkFEMkVEMzAeFw0yNDA0MDMxODI3MzlaFw0yNTA0MDIxODMyMzlaMDMxMTAvBgNV
BAMTKDg2RTdGNkYzNEYyNDZDRTIyODhEQ0ExOTA2ODYxNjVDNUJGNTNERDUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCSDtvZ5Gagd9RAEhigedjqfkC
XwkPQCZx2pTkLu77e7LsqCZlj2h/fLFBQCIdESE5AVH25XlBLQB5ZZQmvXjDtePI
Ct59x/l2jyoxcL39oRDUyf2/OrhrxIugfG2O9uTpkX4Gc9IMPcFhVNh7xdo/D3ku
5O1a2/MoUO5EQoDiv+tdK8dI3wFmnxqmUQG4nwRE/eOevPf1kgDDNQVL+IWER1Fp
QgKC5GS4kZuH78k/za23at9pZ7HLuL87EhnyGguSbWCjrrFWP1nQYTdKQ/U7rZNE
LIrzLZcWgywq5ixhj0f8ncZbJZ406DhF1Btw8w0D4Q21UzUVoZZ+6t6vIKUlAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUhuf2808kbOIojcoZBoYWXFv1PdUwHwYDVR0j
BBgwFoAUq57n1WXAJwl1hTev63u4PsatLtMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMlNhcHluV0todW1HTmdIZkVHRFk3SjZDRW9udU54WHp5SEhhQ3ZFdkNj
dVkvMS9BQjlFRTdENTY1QzAyNzA5NzU4NTM3QUZFQjdCQjgzRUM2QUQyRUQzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0FCOUVFN0Q1NjVDMDI3MDk3
NTg1MzdBRkVCN0JCODNFQzZBRDJFRDMuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJTYXB5bldLaHVtR05nSGZFR0RZN0o2Q0VvbnVOeFh6eUhIYUN2RXZDY3VZLzEv
MzEzNjM4MmUzMTM5MzcyZTMxMzAzNjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzYzNTM0MzczNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAKjFajANBgkqhkiG9w0BAQsFAAOCAQEAU4U7
qYhvXKmSpz77cgc1O0k0MG1ynFhEmXieFdOnjtztQxGZAT7vegpaMBODMmkQMRPE
YOFG89+v5jAc4Zp0keYf544/rADEJmrD9J3QqhLtwDTIeJjTVg7i9TSkRXfph1w5
fRAboX7o8JATYzO4tY0WbIQJ2OBZnhIQQsUyOgspQwrcwIEyNuXk5cqTJzCGzlOQ
YL8g9gDUZopxdeT7X0i3DebPgpjwG/KCOV93bu6LqpmWBCxZ/okICquRPn4NvMo2
GCN0G7CulDOE0XGZWyjajR3MK2KQhWnkXXhZ+9Ajltn8/ocbbdwAJEbqGfuoPu7D
ThKAFBtNsiCicXzCHw==
-----END CERTIFICATE-----
Generated at Fri Nov 22 11:14:38 2024 by rpki-client on console-fra.rpki-client.org