Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3b7beZwLbTjTB3GPRtBhzMRzWxEnYMBYGVMAtsEzwP6j/1/3136342e3136332e32302e302f32322d3232203d3e20323635393335.roa
File:                     3136342e3136332e32302e302f32322d3232203d3e20323635393335.roa (raw, json)
Hash identifier:          F7krBI/6rt2QRmPyeRTdDZ2AUBhKjOsW+zXvh96Z0qc=
Subject key identifier:   0E:3B:D8:C3:4B:F1:AA:9A:95:8C:B0:90:81:22:22:C3:04:9C:15:90
Certificate issuer:       /CN=38F3BEAC575D6B67BF2F286328C680C4467F5BD3
Certificate serial:       4DCC88FDCB88D86A6104A494B1190101E77418C7
Authority key identifier: 38:F3:BE:AC:57:5D:6B:67:BF:2F:28:63:28:C6:80:C4:46:7F:5B:D3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38F3BEAC575D6B67BF2F286328C680C4467F5BD3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3b7beZwLbTjTB3GPRtBhzMRzWxEnYMBYGVMAtsEzwP6j/1/3136342e3136332e32302e302f32322d3232203d3e20323635393335.roa
Signing time:             Thu 04 Apr 2024 07:21:07 +0000
ROA not before:           Thu 04 Apr 2024 07:16:07 +0000
ROA not after:            Thu 03 Apr 2025 07:21:07 +0000
asID:                     265935
IP address blocks:        164.163.20.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3b7beZwLbTjTB3GPRtBhzMRzWxEnYMBYGVMAtsEzwP6j/1/38F3BEAC575D6B67BF2F286328C680C4467F5BD3.crl
                          rsync://rpki-repo.registro.br/repo/3b7beZwLbTjTB3GPRtBhzMRzWxEnYMBYGVMAtsEzwP6j/1/38F3BEAC575D6B67BF2F286328C680C4467F5BD3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38F3BEAC575D6B67BF2F286328C680C4467F5BD3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 10:38:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:cc:88:fd:cb:88:d8:6a:61:04:a4:94:b1:19:01:01:e7:74:18:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38F3BEAC575D6B67BF2F286328C680C4467F5BD3
        Validity
            Not Before: Apr  4 07:16:07 2024 GMT
            Not After : Apr  3 07:21:07 2025 GMT
        Subject: CN=0E3BD8C34BF1AA9A958CB090812222C3049C1590
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:4e:3f:23:4d:ba:ed:ef:3f:73:7e:e6:10:42:
                    45:de:03:43:8b:4d:68:7d:ad:4b:51:9a:e2:45:2f:
                    a7:ff:f3:be:2b:f7:07:10:b0:05:fe:82:ec:0f:57:
                    ac:74:6e:e5:2e:20:65:67:3d:7a:7e:92:fb:e2:99:
                    46:b2:73:e8:d8:bd:33:4e:cd:fe:29:af:e5:31:3e:
                    bf:7a:49:d6:88:25:84:d8:cb:ca:23:23:d5:ff:36:
                    82:fd:3a:a5:aa:2d:6a:28:07:91:07:ac:5e:b9:1b:
                    18:6d:1a:0c:3f:05:3d:51:f3:99:da:92:d0:68:1e:
                    23:69:91:79:00:b8:84:70:13:04:28:e4:70:71:f4:
                    07:cf:88:a9:be:98:98:38:a2:ab:18:b8:db:74:f9:
                    04:ab:96:29:35:e3:ef:c6:0e:bc:c7:f4:28:70:47:
                    86:24:da:0c:c7:23:f6:c8:09:23:26:db:5b:49:40:
                    0c:29:8a:8c:e1:a9:c1:07:9a:76:2f:64:76:66:11:
                    1b:c7:9d:fd:c2:65:d1:bf:0f:8d:7e:e8:7e:01:a3:
                    11:29:c3:53:47:cb:b3:35:58:e5:03:31:9d:d0:63:
                    74:5e:ee:65:fe:48:a5:80:75:ef:9e:45:3d:b6:76:
                    42:8e:45:bd:44:cd:42:e4:f3:21:4b:35:91:fa:53:
                    25:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:3B:D8:C3:4B:F1:AA:9A:95:8C:B0:90:81:22:22:C3:04:9C:15:90
            X509v3 Authority Key Identifier:
                keyid:38:F3:BE:AC:57:5D:6B:67:BF:2F:28:63:28:C6:80:C4:46:7F:5B:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3b7beZwLbTjTB3GPRtBhzMRzWxEnYMBYGVMAtsEzwP6j/1/38F3BEAC575D6B67BF2F286328C680C4467F5BD3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38F3BEAC575D6B67BF2F286328C680C4467F5BD3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3b7beZwLbTjTB3GPRtBhzMRzWxEnYMBYGVMAtsEzwP6j/1/3136342e3136332e32302e302f32322d3232203d3e20323635393335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.163.20.0/22

    Signature Algorithm: sha256WithRSAEncryption
         82:eb:85:f7:0e:d3:40:ed:c3:14:19:f4:a0:2a:a0:fb:ff:f3:
         d8:0e:f0:5f:a1:56:4b:bf:f7:5b:fd:56:b2:fd:6e:07:a5:65:
         6f:4b:b4:83:a6:9a:d9:f8:c5:0b:62:a0:68:2f:a3:18:f0:30:
         d3:fb:97:ec:2c:c9:36:f6:28:99:96:cd:aa:bf:df:aa:0b:d7:
         9f:22:77:c2:71:4c:68:c3:5e:aa:0b:0a:3a:18:43:70:f8:a0:
         3c:c0:f1:bd:08:95:b3:9f:47:99:80:79:f0:0b:56:32:ca:f4:
         c8:ee:04:69:05:17:2c:84:61:e4:26:95:59:f0:6e:61:e5:f3:
         f9:48:a4:47:65:8f:e4:cb:34:d3:e6:7a:fe:ab:71:a5:6d:aa:
         8e:5c:05:e6:e0:66:38:1d:3b:6e:34:4e:4c:b2:c1:a5:76:df:
         9d:60:5f:e1:e8:ef:c1:65:30:8b:35:f1:d0:7b:17:17:17:39:
         cb:ca:f2:f9:5f:00:c9:44:98:f9:0a:45:73:74:93:0a:56:0b:
         3d:81:3f:e1:54:8f:4b:38:1a:ff:d9:da:63:1e:f2:41:62:6c:
         dc:be:96:d9:2f:f2:f9:9f:55:52:b0:42:21:b6:33:64:ea:ce:
         62:87:48:0a:8a:e0:15:5d:90:b7:0e:a8:40:ab:e2:40:d1:3d:
         bb:57:e1:76
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUTcyI/cuI2GphBKSUsRkBAed0GMcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzhGM0JFQUM1NzVENkI2N0JGMkYyODYzMjhDNjgwQzQ0
NjdGNUJEMzAeFw0yNDA0MDQwNzE2MDdaFw0yNTA0MDMwNzIxMDdaMDMxMTAvBgNV
BAMTKDBFM0JEOEMzNEJGMUFBOUE5NThDQjA5MDgxMjIyMkMzMDQ5QzE1OTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDlTj8jTbrt7z9zfuYQQkXeA0OL
TWh9rUtRmuJFL6f/874r9wcQsAX+guwPV6x0buUuIGVnPXp+kvvimUayc+jYvTNO
zf4pr+UxPr96SdaIJYTYy8ojI9X/NoL9OqWqLWooB5EHrF65GxhtGgw/BT1R85na
ktBoHiNpkXkAuIRwEwQo5HBx9AfPiKm+mJg4oqsYuNt0+QSrlik14+/GDrzH9Chw
R4Yk2gzHI/bICSMm21tJQAwpiozhqcEHmnYvZHZmERvHnf3CZdG/D41+6H4BoxEp
w1NHy7M1WOUDMZ3QY3Re7mX+SKWAde+eRT22dkKORb1EzULk8yFLNZH6UyU3AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUDjvYw0vxqpqVjLCQgSIiwwScFZAwHwYDVR0j
BBgwFoAUOPO+rFdda2e/LyhjKMaAxEZ/W9MwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM2I3YmVad0xiVGpUQjNHUFJ0Qmh6TVJ6V3hFbllNQllHVk1BdHNFendQ
NmovMS8zOEYzQkVBQzU3NUQ2QjY3QkYyRjI4NjMyOEM2ODBDNDQ2N0Y1QkQzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzM4RjNCRUFDNTc1RDZCNjdC
RjJGMjg2MzI4QzY4MEM0NDY3RjVCRDMuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNiN2JlWndMYlRqVEIzR1BSdEJoek1Seld4RW5ZTUJZR1ZNQXRzRXp3UDZqLzEv
MzEzNjM0MmUzMTM2MzMyZTMyMzAyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzMjM2
MzUzOTMzMzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAKkoxQwDQYJKoZIhvcNAQELBQADggEBAILrhfcO
00DtwxQZ9KAqoPv/89gO8F+hVku/91v9VrL9bgelZW9LtIOmmtn4xQtioGgvoxjw
MNP7l+wsyTb2KJmWzaq/36oL158id8JxTGjDXqoLCjoYQ3D4oDzA8b0IlbOfR5mA
efALVjLK9MjuBGkFFyyEYeQmlVnwbmHl8/lIpEdlj+TLNNPmev6rcaVtqo5cBebg
ZjgdO240TkyywaV2351gX+Ho78FlMIs18dB7FxcXOcvK8vlfAMlEmPkKRXN0kwpW
Cz2BP+FUj0s4Gv/Z2mMe8kFibNy+ltkv8vmfVVKwQiG2M2TqzmKHSAqK4BVdkLcO
qECr4kDRPbtX4XY=
-----END CERTIFICATE-----
Generated at Fri Nov 22 09:30:06 2024 by rpki-client on console-fra.rpki-client.org