Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3ESTVpdiAp7TS8GnGVHyxzHsxadzJC9tXRAPwSz2x8Gr/0/3136302e3233382e3233302e302f32332d3233203d3e20323636353536.roa
File:                     3136302e3233382e3233302e302f32332d3233203d3e20323636353536.roa (raw, json)
Hash identifier:          bPgiP0/sdFNnY87JFmdKbO2HOpk6HTTwaZpOCNt5buo=
Subject key identifier:   AE:CC:2F:19:38:B9:1B:B3:09:9A:D9:7E:A9:F4:10:6F:15:DD:2F:54
Certificate issuer:       /CN=038EA35AF01B781289F24933082A9857B17EAE3A
Certificate serial:       71FB84F6CA9B54FD79351B08CFE858A300E6A0AF
Authority key identifier: 03:8E:A3:5A:F0:1B:78:12:89:F2:49:33:08:2A:98:57:B1:7E:AE:3A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/038EA35AF01B781289F24933082A9857B17EAE3A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3ESTVpdiAp7TS8GnGVHyxzHsxadzJC9tXRAPwSz2x8Gr/0/3136302e3233382e3233302e302f32332d3233203d3e20323636353536.roa
Signing time:             Thu 17 Oct 2024 13:02:34 +0000
ROA not before:           Thu 17 Oct 2024 12:57:34 +0000
ROA not after:            Thu 16 Oct 2025 13:02:34 +0000
asID:                     266556
IP address blocks:        160.238.230.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3ESTVpdiAp7TS8GnGVHyxzHsxadzJC9tXRAPwSz2x8Gr/0/038EA35AF01B781289F24933082A9857B17EAE3A.crl
                          rsync://rpki-repo.registro.br/repo/3ESTVpdiAp7TS8GnGVHyxzHsxadzJC9tXRAPwSz2x8Gr/0/038EA35AF01B781289F24933082A9857B17EAE3A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/038EA35AF01B781289F24933082A9857B17EAE3A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 07:27:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:fb:84:f6:ca:9b:54:fd:79:35:1b:08:cf:e8:58:a3:00:e6:a0:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=038EA35AF01B781289F24933082A9857B17EAE3A
        Validity
            Not Before: Oct 17 12:57:34 2024 GMT
            Not After : Oct 16 13:02:34 2025 GMT
        Subject: CN=AECC2F1938B91BB3099AD97EA9F4106F15DD2F54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:c1:64:f0:6b:2e:b3:ab:13:af:c5:fa:22:8a:
                    1f:0a:39:4a:a0:c7:a0:e0:bd:e4:e3:26:be:0c:87:
                    67:6d:20:62:af:9f:2e:82:a5:da:a0:d4:47:f7:1b:
                    10:98:31:e6:e4:14:80:cb:22:99:df:10:36:54:c3:
                    ee:47:06:b9:5f:f3:94:90:af:97:89:7e:44:90:1f:
                    45:7b:f3:97:cc:8b:39:a3:17:d7:e4:94:bc:cb:2b:
                    b3:41:97:f9:ff:c8:8f:3c:3e:a6:c5:3c:43:f7:80:
                    e9:2a:e7:9a:19:cd:61:d5:1c:c0:0e:ba:df:58:4a:
                    34:31:e7:43:4c:d8:8d:7f:63:5a:55:e3:bd:5e:48:
                    25:bf:3a:8f:4c:07:7f:22:c3:85:7a:9d:07:bb:a5:
                    cb:a4:00:f8:04:4e:41:12:ee:ed:95:7e:31:fd:5c:
                    46:44:17:0b:4f:e4:16:34:b7:78:98:91:3b:a3:48:
                    43:60:50:e5:db:18:e5:49:07:76:14:da:8c:8a:99:
                    aa:e2:bb:5c:75:7d:13:59:27:b3:0a:89:21:25:58:
                    ea:5f:7f:e2:6c:78:ba:b8:c9:d3:3c:dc:22:54:f8:
                    89:e1:17:d5:ac:e4:27:cb:f3:e3:a5:fe:8a:ad:50:
                    cc:57:b8:cf:ae:aa:7c:ca:dc:1b:a1:5e:c9:25:b5:
                    89:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:CC:2F:19:38:B9:1B:B3:09:9A:D9:7E:A9:F4:10:6F:15:DD:2F:54
            X509v3 Authority Key Identifier:
                keyid:03:8E:A3:5A:F0:1B:78:12:89:F2:49:33:08:2A:98:57:B1:7E:AE:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3ESTVpdiAp7TS8GnGVHyxzHsxadzJC9tXRAPwSz2x8Gr/0/038EA35AF01B781289F24933082A9857B17EAE3A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/038EA35AF01B781289F24933082A9857B17EAE3A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3ESTVpdiAp7TS8GnGVHyxzHsxadzJC9tXRAPwSz2x8Gr/0/3136302e3233382e3233302e302f32332d3233203d3e20323636353536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.238.230.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1e:08:b1:b5:50:c2:a9:21:d1:28:c0:3d:ad:f7:4d:d9:73:81:
         79:e7:10:c5:54:c6:1b:9b:52:74:99:74:66:68:16:19:01:5d:
         72:00:ae:2d:0f:e4:a9:1b:de:3d:37:d8:da:75:83:f1:68:af:
         b8:56:95:22:ba:d9:0e:c1:96:6b:09:bc:80:99:6b:7f:14:ea:
         4e:16:25:92:eb:7d:0c:83:4c:fc:72:2b:62:8b:d4:1b:1e:78:
         bf:a7:8d:2d:78:48:15:ac:e4:05:37:17:13:f5:22:64:0b:c1:
         23:be:ff:59:01:67:6f:1f:1c:b9:d2:af:32:e6:10:91:c6:cb:
         0d:23:6f:01:30:1a:70:ca:7f:18:6b:70:e7:d9:52:6a:ae:71:
         d0:33:5e:20:1d:2f:1e:4c:93:f3:66:01:21:a9:52:91:c9:35:
         08:fc:e2:6c:3d:b4:69:77:fb:ff:33:ef:39:19:cb:e0:d1:6d:
         4c:f3:7e:b2:51:a9:aa:23:78:a7:8b:15:17:5a:10:b3:68:d8:
         ab:65:1a:af:0d:0d:57:e7:cf:a7:f7:cf:17:5a:a7:67:d2:10:
         4a:64:0f:2d:d4:21:32:44:ce:29:68:c6:fc:00:f5:fc:32:07:
         08:36:84:10:7a:e5:c7:79:32:88:59:84:74:75:7b:10:2a:93:
         b2:0f:2a:e2
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUcfuE9sqbVP15NRsIz+hYowDmoK8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDM4RUEzNUFGMDFCNzgxMjg5RjI0OTMzMDgyQTk4NTdC
MTdFQUUzQTAeFw0yNDEwMTcxMjU3MzRaFw0yNTEwMTYxMzAyMzRaMDMxMTAvBgNV
BAMTKEFFQ0MyRjE5MzhCOTFCQjMwOTlBRDk3RUE5RjQxMDZGMTVERDJGNTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUwWTway6zqxOvxfoiih8KOUqg
x6DgveTjJr4Mh2dtIGKvny6Cpdqg1Ef3GxCYMebkFIDLIpnfEDZUw+5HBrlf85SQ
r5eJfkSQH0V785fMizmjF9fklLzLK7NBl/n/yI88PqbFPEP3gOkq55oZzWHVHMAO
ut9YSjQx50NM2I1/Y1pV471eSCW/Oo9MB38iw4V6nQe7pcukAPgETkES7u2VfjH9
XEZEFwtP5BY0t3iYkTujSENgUOXbGOVJB3YU2oyKmariu1x1fRNZJ7MKiSElWOpf
f+JseLq4ydM83CJU+InhF9Ws5CfL8+Ol/oqtUMxXuM+uqnzK3BuhXskltYltAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUrswvGTi5G7MJmtl+qfQQbxXdL1QwHwYDVR0j
BBgwFoAUA46jWvAbeBKJ8kkzCCqYV7F+rjowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM0VTVFZwZGlBcDdUUzhHbkdWSHl4ekhzeGFkekpDOXRYUkFQd1N6Mng4
R3IvMC8wMzhFQTM1QUYwMUI3ODEyODlGMjQ5MzMwODJBOTg1N0IxN0VBRTNBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzAzOEVBMzVBRjAxQjc4MTI4
OUYyNDkzMzA4MkE5ODU3QjE3RUFFM0EuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNFU1RWcGRpQXA3VFM4R25HVkh5eHpIc3hhZHpKQzl0WFJBUHdTejJ4OEdyLzAv
MzEzNjMwMmUzMjMzMzgyZTMyMzMzMDJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDMy
MzYzNjM1MzUzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAaDu5jANBgkqhkiG9w0BAQsFAAOCAQEAHgix
tVDCqSHRKMA9rfdN2XOBeecQxVTGG5tSdJl0ZmgWGQFdcgCuLQ/kqRvePTfY2nWD
8WivuFaVIrrZDsGWawm8gJlrfxTqThYlkut9DINM/HIrYovUGx54v6eNLXhIFazk
BTcXE/UiZAvBI77/WQFnbx8cudKvMuYQkcbLDSNvATAacMp/GGtw59lSaq5x0DNe
IB0vHkyT82YBIalSkck1CPzibD20aXf7/zPvORnL4NFtTPN+slGpqiN4p4sVF1oQ
s2jYq2Uarw0NV+fPp/fPF1qnZ9IQSmQPLdQhMkTOKWjG/AD1/DIHCDaEEHrlx3ky
iFmEdHV7ECqTsg8q4g==
-----END CERTIFICATE-----
Generated at Tue Nov 26 07:01:31 2024 by rpki-client on console-ams.rpki-client.org