Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4SMvmsq1aev8C13vrn5dU1pLzGp1wGFBnzgmNJj8sW6J/1/3136382e3233322e3138302e302f32342d3234203d3e20323633353633.roa
File:                     3136382e3233322e3138302e302f32342d3234203d3e20323633353633.roa (raw, json)
Hash identifier:          I4ZpbYsz/2Oy70Ff/lDKaKEW0AkuCMcrTmurbhm2K6U=
Subject key identifier:   9F:C3:8D:05:09:D7:3D:AE:78:F1:92:94:D2:4A:97:B4:C4:F1:43:0A
Certificate issuer:       /CN=8EAE8D1AE6A6869CFE54E374201A54F2E0934EC7
Certificate serial:       3B812133C6382B79C2D1479D3D88DD215EF3276B
Authority key identifier: 8E:AE:8D:1A:E6:A6:86:9C:FE:54:E3:74:20:1A:54:F2:E0:93:4E:C7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8EAE8D1AE6A6869CFE54E374201A54F2E0934EC7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4SMvmsq1aev8C13vrn5dU1pLzGp1wGFBnzgmNJj8sW6J/1/3136382e3233322e3138302e302f32342d3234203d3e20323633353633.roa
Signing time:             Thu 06 Mar 2025 14:54:08 +0000
ROA not before:           Thu 06 Mar 2025 14:49:08 +0000
ROA not after:            Thu 05 Mar 2026 14:54:08 +0000
asID:                     263563
IP address blocks:        168.232.180.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4SMvmsq1aev8C13vrn5dU1pLzGp1wGFBnzgmNJj8sW6J/1/8EAE8D1AE6A6869CFE54E374201A54F2E0934EC7.crl
                          rsync://rpki-repo.registro.br/repo/4SMvmsq1aev8C13vrn5dU1pLzGp1wGFBnzgmNJj8sW6J/1/8EAE8D1AE6A6869CFE54E374201A54F2E0934EC7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8EAE8D1AE6A6869CFE54E374201A54F2E0934EC7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Apr 2025 10:39:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:81:21:33:c6:38:2b:79:c2:d1:47:9d:3d:88:dd:21:5e:f3:27:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8EAE8D1AE6A6869CFE54E374201A54F2E0934EC7
        Validity
            Not Before: Mar  6 14:49:08 2025 GMT
            Not After : Mar  5 14:54:08 2026 GMT
        Subject: CN=9FC38D0509D73DAE78F19294D24A97B4C4F1430A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:a1:66:b4:22:d3:2c:36:47:13:fb:1a:52:aa:
                    14:db:3b:f8:0d:1c:32:01:b9:08:a4:4b:f2:70:f2:
                    87:d2:a1:81:3b:05:74:bc:4b:f8:ce:fe:44:d6:c4:
                    38:33:9f:93:7a:3f:bc:6c:df:ae:e3:e7:b2:45:f7:
                    91:83:07:1f:58:a9:84:a7:47:d6:dc:26:c5:8f:bc:
                    25:5d:e0:1b:5d:91:1b:6f:a8:dc:15:d3:1e:1e:58:
                    82:f6:51:cd:88:17:b3:64:3f:65:85:ad:94:60:13:
                    6f:b1:65:24:b0:3e:51:64:14:cf:ac:23:c1:ca:9c:
                    6b:d6:50:86:8b:1f:29:0d:44:51:a1:b4:21:e1:da:
                    34:07:ed:c7:8f:31:00:8b:b7:8f:a7:c4:6d:9f:fd:
                    3f:05:f5:81:30:2d:3a:08:06:ab:e3:d5:b8:5a:1e:
                    a3:28:7c:13:6a:71:40:ad:89:19:f1:5b:ac:03:31:
                    a6:8a:df:5d:10:6b:ff:a8:74:c3:e3:8f:64:ee:0f:
                    28:e1:c1:66:2e:11:47:32:5d:5a:2f:26:7d:33:e3:
                    f8:c5:af:f5:5e:d2:27:2e:34:fa:03:82:d0:3b:25:
                    ad:3b:c3:94:33:0f:74:89:51:bb:d2:a0:cd:64:a5:
                    87:c5:e6:45:ff:4a:f0:30:75:de:88:ba:2b:b1:d8:
                    0f:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:C3:8D:05:09:D7:3D:AE:78:F1:92:94:D2:4A:97:B4:C4:F1:43:0A
            X509v3 Authority Key Identifier:
                keyid:8E:AE:8D:1A:E6:A6:86:9C:FE:54:E3:74:20:1A:54:F2:E0:93:4E:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4SMvmsq1aev8C13vrn5dU1pLzGp1wGFBnzgmNJj8sW6J/1/8EAE8D1AE6A6869CFE54E374201A54F2E0934EC7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8EAE8D1AE6A6869CFE54E374201A54F2E0934EC7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4SMvmsq1aev8C13vrn5dU1pLzGp1wGFBnzgmNJj8sW6J/1/3136382e3233322e3138302e302f32342d3234203d3e20323633353633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.232.180.0/24

    Signature Algorithm: sha256WithRSAEncryption
         76:3d:bd:5a:79:75:48:29:80:e2:6d:6a:3c:40:ed:79:f1:8a:
         10:eb:ae:1e:2a:78:d8:23:4b:61:eb:b3:47:58:46:44:8a:44:
         98:30:2f:fe:20:ec:df:81:5c:b6:df:d6:ba:d3:cf:40:bd:23:
         67:71:c4:9b:cf:a3:4f:e2:57:97:36:35:f0:b9:fb:56:58:f5:
         3f:21:5d:ec:79:9f:79:c9:50:8b:e9:c4:4b:68:f3:72:2b:99:
         7c:93:2f:00:ca:90:6e:42:d4:37:31:ff:a7:14:0b:1a:14:83:
         39:8a:81:22:06:a9:da:0e:eb:42:f6:cc:30:db:92:59:1a:1d:
         80:bd:41:36:ef:4d:0d:50:7b:d8:5d:ee:48:d8:9d:e5:31:fe:
         a6:09:83:30:a9:ec:ac:ea:7c:04:78:b1:54:5f:c0:24:e6:a4:
         9f:0a:dc:25:79:57:15:35:9a:87:19:50:af:cf:05:ab:b9:1d:
         20:cb:75:d8:b6:79:55:49:14:b2:a9:76:b7:13:27:03:30:d0:
         1f:1f:a0:0e:74:67:2b:9e:0d:48:73:df:ab:40:5e:73:2a:60:
         5c:5a:24:0d:26:0b:e1:06:98:9d:90:fa:02:bb:e4:83:68:16:
         f5:bb:34:28:ea:c7:b9:25:da:13:15:aa:8c:bb:93:1c:40:06:
         72:d2:49:9a
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUO4EhM8Y4K3nC0UedPYjdIV7zJ2swDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEVBRThEMUFFNkE2ODY5Q0ZFNTRFMzc0MjAxQTU0RjJF
MDkzNEVDNzAeFw0yNTAzMDYxNDQ5MDhaFw0yNjAzMDUxNDU0MDhaMDMxMTAvBgNV
BAMTKDlGQzM4RDA1MDlENzNEQUU3OEYxOTI5NEQyNEE5N0I0QzRGMTQzMEEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDboWa0ItMsNkcT+xpSqhTbO/gN
HDIBuQikS/Jw8ofSoYE7BXS8S/jO/kTWxDgzn5N6P7xs367j57JF95GDBx9YqYSn
R9bcJsWPvCVd4BtdkRtvqNwV0x4eWIL2Uc2IF7NkP2WFrZRgE2+xZSSwPlFkFM+s
I8HKnGvWUIaLHykNRFGhtCHh2jQH7cePMQCLt4+nxG2f/T8F9YEwLToIBqvj1bha
HqMofBNqcUCtiRnxW6wDMaaK310Qa/+odMPjj2TuDyjhwWYuEUcyXVovJn0z4/jF
r/Ve0icuNPoDgtA7Ja07w5QzD3SJUbvSoM1kpYfF5kX/SvAwdd6Iuiux2A+tAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUn8ONBQnXPa548ZKU0kqXtMTxQwowHwYDVR0j
BBgwFoAUjq6NGuamhpz+VON0IBpU8uCTTscwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNFNNdm1zcTFhZXY4QzEzdnJuNWRVMXBMekdwMXdHRkJuemdtTkpqOHNX
NkovMS84RUFFOEQxQUU2QTY4NjlDRkU1NEUzNzQyMDFBNTRGMkUwOTM0RUM3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzhFQUU4RDFBRTZBNjg2OUNG
RTU0RTM3NDIwMUE1NEYyRTA5MzRFQzcuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRTTXZtc3ExYWV2OEMxM3ZybjVkVTFwTHpHcDF3R0ZCbnpnbU5KajhzVzZKLzEv
MzEzNjM4MmUzMjMzMzIyZTMxMzgzMDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzYzMzM1MzYzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAKjotDANBgkqhkiG9w0BAQsFAAOCAQEAdj29
Wnl1SCmA4m1qPEDtefGKEOuuHip42CNLYeuzR1hGRIpEmDAv/iDs34Fctt/WutPP
QL0jZ3HEm8+jT+JXlzY18Ln7Vlj1PyFd7HmfeclQi+nES2jzciuZfJMvAMqQbkLU
NzH/pxQLGhSDOYqBIgap2g7rQvbMMNuSWRodgL1BNu9NDVB72F3uSNid5TH+pgmD
MKnsrOp8BHixVF/AJOaknwrcJXlXFTWahxlQr88Fq7kdIMt12LZ5VUkUsql2txMn
AzDQHx+gDnRnK54NSHPfq0BecypgXFokDSYL4QaYnZD6Arvkg2gW9bs0KOrHuSXa
ExWqjLuTHEAGctJJmg==
-----END CERTIFICATE-----
Generated at Tue Apr 22 01:04:38 2025 by rpki-client