Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/48yMyWWV9meVo6ruiCGPTasAsn1ZxvKDihcRmhk73tfu/0/3136382e3230352e3136382e302f32332d3234203d3e20323634383634.roa
File:                     3136382e3230352e3136382e302f32332d3234203d3e20323634383634.roa (raw, json)
Hash identifier:          auoxpcS6M5TwNBjyIduyK0Ao2Gv7vWkvZFfgqMN12zk=
Subject key identifier:   E8:20:24:61:87:30:0A:24:79:0E:8E:E1:DB:FA:8C:E1:75:AC:19:6F
Certificate issuer:       /CN=3071090FBC805FB9D55E39C8A4C6C934680AAC8C
Certificate serial:       41B7EEAAFE2C751FD80682159754761851D9C210
Authority key identifier: 30:71:09:0F:BC:80:5F:B9:D5:5E:39:C8:A4:C6:C9:34:68:0A:AC:8C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3071090FBC805FB9D55E39C8A4C6C934680AAC8C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/48yMyWWV9meVo6ruiCGPTasAsn1ZxvKDihcRmhk73tfu/0/3136382e3230352e3136382e302f32332d3234203d3e20323634383634.roa
Signing time:             Wed 27 Nov 2024 21:56:33 +0000
ROA not before:           Wed 27 Nov 2024 21:51:33 +0000
ROA not after:            Wed 26 Nov 2025 21:56:33 +0000
asID:                     264864
IP address blocks:        168.205.168.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/48yMyWWV9meVo6ruiCGPTasAsn1ZxvKDihcRmhk73tfu/0/3071090FBC805FB9D55E39C8A4C6C934680AAC8C.crl
                          rsync://rpki-repo.registro.br/repo/48yMyWWV9meVo6ruiCGPTasAsn1ZxvKDihcRmhk73tfu/0/3071090FBC805FB9D55E39C8A4C6C934680AAC8C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3071090FBC805FB9D55E39C8A4C6C934680AAC8C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 30 Nov 2024 09:32:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:b7:ee:aa:fe:2c:75:1f:d8:06:82:15:97:54:76:18:51:d9:c2:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3071090FBC805FB9D55E39C8A4C6C934680AAC8C
        Validity
            Not Before: Nov 27 21:51:33 2024 GMT
            Not After : Nov 26 21:56:33 2025 GMT
        Subject: CN=E820246187300A24790E8EE1DBFA8CE175AC196F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:52:f6:4a:f6:4b:1b:6a:51:da:d6:95:52:c8:
                    05:c0:66:e4:a2:23:0f:2d:07:ec:6f:9f:2e:ba:a1:
                    48:e8:70:64:87:bf:57:d7:06:f6:e0:c1:d1:95:32:
                    f4:ba:a8:a9:7a:cf:05:e9:07:4c:40:92:ef:ef:c0:
                    5b:b7:3b:f2:a0:12:bb:ee:93:7d:15:2c:8f:28:62:
                    5e:d9:ce:09:59:df:3d:9c:d4:59:dd:83:1d:32:5e:
                    40:9d:68:42:c1:89:2a:03:31:1f:e1:ce:74:92:76:
                    79:ef:70:ad:22:f1:c8:59:ff:44:fa:e7:84:85:92:
                    81:5f:c5:15:5f:f7:52:c8:c2:33:39:e0:40:3d:ea:
                    30:0f:3e:36:ef:70:60:90:8b:66:ed:d8:be:44:be:
                    30:1f:27:7b:29:e8:c8:a3:14:5b:55:f7:1c:c8:6c:
                    4d:09:b5:a6:aa:6f:4f:46:88:9d:8e:1f:a0:8e:ab:
                    b7:26:ba:06:73:c8:ab:8d:3e:3b:80:7f:9e:99:cc:
                    96:e8:b5:46:98:27:d8:f5:7b:87:be:97:9c:82:91:
                    af:e9:32:37:a5:89:57:d2:39:e1:98:5b:95:25:87:
                    78:5d:5a:62:5c:fd:55:60:fd:1c:5f:92:2f:97:0a:
                    3d:be:00:e6:19:e5:a1:59:db:72:cb:fd:6b:82:5f:
                    1b:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:20:24:61:87:30:0A:24:79:0E:8E:E1:DB:FA:8C:E1:75:AC:19:6F
            X509v3 Authority Key Identifier:
                keyid:30:71:09:0F:BC:80:5F:B9:D5:5E:39:C8:A4:C6:C9:34:68:0A:AC:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/48yMyWWV9meVo6ruiCGPTasAsn1ZxvKDihcRmhk73tfu/0/3071090FBC805FB9D55E39C8A4C6C934680AAC8C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3071090FBC805FB9D55E39C8A4C6C934680AAC8C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/48yMyWWV9meVo6ruiCGPTasAsn1ZxvKDihcRmhk73tfu/0/3136382e3230352e3136382e302f32332d3234203d3e20323634383634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.205.168.0/23

    Signature Algorithm: sha256WithRSAEncryption
         01:01:35:1e:12:8c:f1:e7:f5:09:f9:b8:42:14:7e:6b:cd:a8:
         6f:ea:84:81:5f:f4:f5:6a:33:3d:d8:7d:02:c8:e9:10:6f:04:
         ac:75:4f:35:bf:8f:3c:3c:f4:c2:8c:92:f2:1c:27:7b:3d:53:
         0c:05:5f:14:03:f8:ad:84:ad:a3:f3:35:4a:ed:04:eb:43:1c:
         87:32:d4:27:0b:87:78:9d:bb:93:40:23:ff:23:1d:fb:40:a8:
         7b:81:39:91:4d:c0:4e:96:f4:15:ba:19:ba:61:bd:14:19:d9:
         9c:e9:67:f8:6c:9f:80:d3:c2:05:12:1a:b7:02:1b:d9:73:af:
         07:9a:08:06:b1:76:6f:b9:b9:b8:8f:b3:28:13:c4:1d:45:6c:
         fe:1e:3c:a3:43:3b:c5:8a:61:71:d0:cf:fa:42:16:1f:03:81:
         01:6f:a3:51:33:8c:4b:9c:4c:dd:de:bc:66:05:c3:05:3d:54:
         ed:b3:f9:d1:c7:81:4b:d5:e6:bc:ff:3e:f2:aa:b8:fb:08:90:
         f4:d5:da:07:27:20:68:98:e6:e0:34:c0:b5:77:0b:9a:22:56:
         15:61:c1:77:90:84:d1:51:61:ac:ff:9a:44:58:7a:ef:e6:39:
         d9:e8:1a:23:1a:50:83:4e:2e:86:2e:a2:cf:70:6b:a3:22:61:
         ef:05:2a:22
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUQbfuqv4sdR/YBoIVl1R2GFHZwhAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzA3MTA5MEZCQzgwNUZCOUQ1NUUzOUM4QTRDNkM5MzQ2
ODBBQUM4QzAeFw0yNDExMjcyMTUxMzNaFw0yNTExMjYyMTU2MzNaMDMxMTAvBgNV
BAMTKEU4MjAyNDYxODczMDBBMjQ3OTBFOEVFMURCRkE4Q0UxNzVBQzE5NkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTUvZK9ksbalHa1pVSyAXAZuSi
Iw8tB+xvny66oUjocGSHv1fXBvbgwdGVMvS6qKl6zwXpB0xAku/vwFu3O/KgErvu
k30VLI8oYl7ZzglZ3z2c1Fndgx0yXkCdaELBiSoDMR/hznSSdnnvcK0i8chZ/0T6
54SFkoFfxRVf91LIwjM54EA96jAPPjbvcGCQi2bt2L5EvjAfJ3sp6MijFFtV9xzI
bE0Jtaaqb09GiJ2OH6COq7cmugZzyKuNPjuAf56ZzJbotUaYJ9j1e4e+l5yCka/p
MjeliVfSOeGYW5Ulh3hdWmJc/VVg/Rxfki+XCj2+AOYZ5aFZ23LL/WuCXxurAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQU6CAkYYcwCiR5Do7h2/qM4XWsGW8wHwYDVR0j
BBgwFoAUMHEJD7yAX7nVXjnIpMbJNGgKrIwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNDh5TXlXV1Y5bWVWbzZydWlDR1BUYXNBc24xWnh2S0RpaGNSbWhrNzN0
ZnUvMC8zMDcxMDkwRkJDODA1RkI5RDU1RTM5QzhBNEM2QzkzNDY4MEFBQzhDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzMwNzEwOTBGQkM4MDVGQjlE
NTVFMzlDOEE0QzZDOTM0NjgwQUFDOEMuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzQ4eU15V1dWOW1lVm82cnVpQ0dQVGFzQXNuMVp4dktEaWhjUm1oazczdGZ1LzAv
MzEzNjM4MmUzMjMwMzUyZTMxMzYzODJlMzAyZjMyMzMyZDMyMzQyMDNkM2UyMDMy
MzYzNDM4MzYzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAajNqDANBgkqhkiG9w0BAQsFAAOCAQEAAQE1
HhKM8ef1Cfm4QhR+a82ob+qEgV/09WozPdh9AsjpEG8ErHVPNb+PPDz0woyS8hwn
ez1TDAVfFAP4rYSto/M1Su0E60MchzLUJwuHeJ27k0Aj/yMd+0Coe4E5kU3ATpb0
FboZumG9FBnZnOln+GyfgNPCBRIatwIb2XOvB5oIBrF2b7m5uI+zKBPEHUVs/h48
o0M7xYphcdDP+kIWHwOBAW+jUTOMS5xM3d68ZgXDBT1U7bP50ceBS9XmvP8+8qq4
+wiQ9NXaBycgaJjm4DTAtXcLmiJWFWHBd5CE0VFhrP+aRFh67+Y52egaIxpQg04u
hi6iz3BroyJh7wUqIg==
-----END CERTIFICATE-----
Generated at Fri Nov 29 10:53:30 2024 by rpki-client on console-ams.rpki-client.org