Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2ycF6iWBitTLNykTzxCszNKmP6TnsuEqRuMuba42PQ3U/1/3136382e3139362e3132392e302f32342d3234203d3e20323633323839.roa
File:                     3136382e3139362e3132392e302f32342d3234203d3e20323633323839.roa (raw, json)
Hash identifier:          Er7Bd+qHBqIW+PwyYg/r1uZM373CUyrvwqorH1gHI8g=
Subject key identifier:   2C:2E:B4:CC:C3:06:D9:64:07:50:AB:22:28:03:44:E4:98:86:A1:21
Certificate issuer:       /CN=15513D1A379C5EDDB8158CEA26166691DE1B169A
Certificate serial:       4D64EA2D0599CE0F5B848A294050CB4C8DB8E4B8
Authority key identifier: 15:51:3D:1A:37:9C:5E:DD:B8:15:8C:EA:26:16:66:91:DE:1B:16:9A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/15513D1A379C5EDDB8158CEA26166691DE1B169A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2ycF6iWBitTLNykTzxCszNKmP6TnsuEqRuMuba42PQ3U/1/3136382e3139362e3132392e302f32342d3234203d3e20323633323839.roa
Signing time:             Thu 04 Apr 2024 10:06:19 +0000
ROA not before:           Thu 04 Apr 2024 10:01:19 +0000
ROA not after:            Thu 03 Apr 2025 10:06:19 +0000
asID:                     263289
IP address blocks:        168.196.129.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2ycF6iWBitTLNykTzxCszNKmP6TnsuEqRuMuba42PQ3U/1/15513D1A379C5EDDB8158CEA26166691DE1B169A.crl
                          rsync://rpki-repo.registro.br/repo/2ycF6iWBitTLNykTzxCszNKmP6TnsuEqRuMuba42PQ3U/1/15513D1A379C5EDDB8158CEA26166691DE1B169A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/15513D1A379C5EDDB8158CEA26166691DE1B169A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 19:40:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:64:ea:2d:05:99:ce:0f:5b:84:8a:29:40:50:cb:4c:8d:b8:e4:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15513D1A379C5EDDB8158CEA26166691DE1B169A
        Validity
            Not Before: Apr  4 10:01:19 2024 GMT
            Not After : Apr  3 10:06:19 2025 GMT
        Subject: CN=2C2EB4CCC306D9640750AB22280344E49886A121
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:8d:09:07:dd:74:50:c3:49:29:ea:33:31:6b:
                    ef:be:3d:6c:e7:03:71:ef:fd:87:74:f0:d6:7e:02:
                    67:a2:79:73:7b:dc:11:46:52:20:a7:71:fe:08:2f:
                    7e:83:a1:d8:bf:de:a5:f0:bc:2f:cc:bc:61:1f:4c:
                    43:6c:b3:8f:86:52:3a:39:37:65:fe:4d:c6:da:2d:
                    c0:67:65:1b:af:f4:61:2d:96:04:77:f8:46:49:d9:
                    2e:06:3d:c3:46:3e:00:13:1c:29:3a:13:d3:27:77:
                    38:77:15:7a:97:e8:0c:9b:88:07:80:00:07:7f:24:
                    13:a2:5a:eb:8a:24:2f:88:ab:51:2b:2f:56:29:19:
                    b7:56:be:f3:23:da:ff:84:0d:69:b0:7b:97:94:08:
                    86:98:04:6a:22:94:6a:c6:0a:9c:8e:a9:ed:5a:31:
                    29:6f:2f:cc:60:dc:9b:99:e2:16:80:2f:11:2f:b3:
                    29:63:d8:85:af:fd:0d:71:7a:1f:a6:ab:a4:b9:79:
                    a9:27:e1:63:b2:bd:40:cb:7f:ea:76:b5:9a:f0:3c:
                    05:e4:ee:a3:87:88:a1:36:0a:74:86:02:9c:b0:06:
                    14:60:a3:18:a7:26:80:81:b6:c7:1c:ed:36:32:82:
                    fc:ad:cd:33:43:dc:7d:7e:88:b6:83:32:6b:f0:74:
                    6f:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:2E:B4:CC:C3:06:D9:64:07:50:AB:22:28:03:44:E4:98:86:A1:21
            X509v3 Authority Key Identifier:
                keyid:15:51:3D:1A:37:9C:5E:DD:B8:15:8C:EA:26:16:66:91:DE:1B:16:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2ycF6iWBitTLNykTzxCszNKmP6TnsuEqRuMuba42PQ3U/1/15513D1A379C5EDDB8158CEA26166691DE1B169A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/15513D1A379C5EDDB8158CEA26166691DE1B169A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2ycF6iWBitTLNykTzxCszNKmP6TnsuEqRuMuba42PQ3U/1/3136382e3139362e3132392e302f32342d3234203d3e20323633323839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.196.129.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3f:8e:62:79:7c:e4:43:20:9d:30:f8:ba:70:43:6b:7e:7f:fb:
         4e:8d:f4:15:58:83:0f:7f:5b:47:af:47:c9:7c:c8:ee:07:2a:
         1c:94:5e:94:a8:85:29:b1:94:62:24:a2:8c:7b:cc:82:2a:bd:
         40:38:25:ca:74:90:a1:5e:8d:7f:98:3b:2c:ca:32:04:fa:19:
         20:ce:8f:b2:7c:12:46:3b:54:1e:26:65:f4:fb:b2:82:04:13:
         08:42:39:36:3c:81:af:29:c5:68:b9:60:4a:90:c0:b0:66:8a:
         66:85:6e:98:06:5e:1c:77:0c:83:8a:a9:03:87:26:3b:f3:81:
         23:14:96:4c:da:83:92:0e:a0:56:e6:0d:18:c8:92:75:8c:cc:
         19:52:ba:b8:82:00:7f:94:7b:80:7f:ad:fb:83:96:f8:98:c9:
         33:c5:58:ad:13:7d:0f:da:d5:cc:9a:11:29:cf:41:e6:03:54:
         13:43:4f:19:4e:b5:87:3e:cd:a5:78:29:46:01:13:38:50:58:
         d1:80:ad:0f:f4:06:34:9f:2c:4f:ea:31:00:e3:25:5f:63:1f:
         fb:e4:84:a0:5b:93:5d:87:67:03:6f:29:55:c0:05:31:bc:de:
         9e:54:b1:88:fd:ef:9f:0b:32:c5:9a:47:e9:c3:d2:4b:fa:bd:
         cc:73:d7:38
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUTWTqLQWZzg9bhIopQFDLTI245LgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTU1MTNEMUEzNzlDNUVEREI4MTU4Q0VBMjYxNjY2OTFE
RTFCMTY5QTAeFw0yNDA0MDQxMDAxMTlaFw0yNTA0MDMxMDA2MTlaMDMxMTAvBgNV
BAMTKDJDMkVCNENDQzMwNkQ5NjQwNzUwQUIyMjI4MDM0NEU0OTg4NkExMjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOjQkH3XRQw0kp6jMxa+++PWzn
A3Hv/Yd08NZ+AmeieXN73BFGUiCncf4IL36Dodi/3qXwvC/MvGEfTENss4+GUjo5
N2X+TcbaLcBnZRuv9GEtlgR3+EZJ2S4GPcNGPgATHCk6E9Mndzh3FXqX6AybiAeA
AAd/JBOiWuuKJC+Iq1ErL1YpGbdWvvMj2v+EDWmwe5eUCIaYBGoilGrGCpyOqe1a
MSlvL8xg3JuZ4haALxEvsylj2IWv/Q1xeh+mq6S5eakn4WOyvUDLf+p2tZrwPAXk
7qOHiKE2CnSGApywBhRgoxinJoCBtscc7TYygvytzTND3H1+iLaDMmvwdG+nAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQULC60zMMG2WQHUKsiKANE5JiGoSEwHwYDVR0j
BBgwFoAUFVE9GjecXt24FYzqJhZmkd4bFpowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMnljRjZpV0JpdFRMTnlrVHp4Q3N6TkttUDZUbnN1RXFSdU11YmE0MlBR
M1UvMS8xNTUxM0QxQTM3OUM1RUREQjgxNThDRUEyNjE2NjY5MURFMUIxNjlBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzE1NTEzRDFBMzc5QzVFRERC
ODE1OENFQTI2MTY2NjkxREUxQjE2OUEuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJ5Y0Y2aVdCaXRUTE55a1R6eENzek5LbVA2VG5zdUVxUnVNdWJhNDJQUTNVLzEv
MzEzNjM4MmUzMTM5MzYyZTMxMzIzOTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzYzMzMyMzgzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAKjEgTANBgkqhkiG9w0BAQsFAAOCAQEAP45i
eXzkQyCdMPi6cENrfn/7To30FViDD39bR69HyXzI7gcqHJRelKiFKbGUYiSijHvM
giq9QDglynSQoV6Nf5g7LMoyBPoZIM6PsnwSRjtUHiZl9PuyggQTCEI5NjyBrynF
aLlgSpDAsGaKZoVumAZeHHcMg4qpA4cmO/OBIxSWTNqDkg6gVuYNGMiSdYzMGVK6
uIIAf5R7gH+t+4OW+JjJM8VYrRN9D9rVzJoRKc9B5gNUE0NPGU61hz7NpXgpRgET
OFBY0YCtD/QGNJ8sT+oxAOMlX2Mf++SEoFuTXYdnA28pVcAFMbzenlSxiP3vnwsy
xZpH6cPSS/q9zHPXOA==
-----END CERTIFICATE-----
Generated at Fri Nov 22 19:44:13 2024 by rpki-client on console-ams.rpki-client.org