Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/0/3136382e39302e302e302f32322d3332203d3e203631363738.roa
File:                     3136382e39302e302e302f32322d3332203d3e203631363738.roa (raw, json)
Hash identifier:          V41xaScAGBtx86DO+b01mCts3BvnSF090MGF8ATKJ90=
Subject key identifier:   71:AB:FD:BC:08:97:06:64:62:68:E6:16:12:35:E1:01:C4:6D:AA:D8
Certificate issuer:       /CN=8E52C6A9BEAD79DC950F9DA560C530F28BC6FCDC
Certificate serial:       30B7519897FA40E0F239C03B6E4A1C43A11D5CF3
Authority key identifier: 8E:52:C6:A9:BE:AD:79:DC:95:0F:9D:A5:60:C5:30:F2:8B:C6:FC:DC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E52C6A9BEAD79DC950F9DA560C530F28BC6FCDC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/0/3136382e39302e302e302f32322d3332203d3e203631363738.roa
Signing time:             Sat 10 Aug 2024 23:16:35 +0000
ROA not before:           Sat 10 Aug 2024 23:11:35 +0000
ROA not after:            Sat 09 Aug 2025 23:16:35 +0000
asID:                     61678
IP address blocks:        168.90.0.0/22 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/0/8E52C6A9BEAD79DC950F9DA560C530F28BC6FCDC.crl
                          rsync://rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/0/8E52C6A9BEAD79DC950F9DA560C530F28BC6FCDC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E52C6A9BEAD79DC950F9DA560C530F28BC6FCDC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 16:04:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:b7:51:98:97:fa:40:e0:f2:39:c0:3b:6e:4a:1c:43:a1:1d:5c:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8E52C6A9BEAD79DC950F9DA560C530F28BC6FCDC
        Validity
            Not Before: Aug 10 23:11:35 2024 GMT
            Not After : Aug  9 23:16:35 2025 GMT
        Subject: CN=71ABFDBC089706646268E6161235E101C46DAAD8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:3f:ec:93:dd:84:65:50:40:b7:2f:b4:95:df:
                    8d:f3:1a:97:e6:21:53:0b:f4:f4:48:e7:94:20:81:
                    c3:7e:3e:a3:05:a5:ab:3d:4e:6f:d1:fd:c0:57:1d:
                    ed:31:ba:68:a3:73:6a:8b:23:20:e5:55:86:77:53:
                    d1:04:ad:3a:d6:c2:b2:31:f2:26:cf:e3:e9:a4:c6:
                    a4:ff:7c:8c:de:8b:13:49:ce:b1:4a:04:11:76:b9:
                    ff:b8:d1:13:11:38:b6:5a:db:8a:71:ec:6a:f3:4e:
                    df:e3:cb:a1:b1:02:b8:dc:05:08:a2:09:a1:90:05:
                    14:51:69:2a:e6:b9:14:38:fb:ed:a6:da:a8:30:83:
                    30:bb:2d:dc:63:40:5d:ef:e5:72:91:c0:20:5d:99:
                    b8:e8:01:91:0b:6a:01:fc:30:7d:65:dd:0e:15:92:
                    67:a0:28:35:1f:1c:f7:08:63:67:b3:d0:78:bd:9f:
                    08:e3:24:a9:13:e3:83:4a:16:d0:02:94:e9:54:3f:
                    fb:e0:90:f3:d4:65:14:ec:71:78:c5:04:a9:9d:b4:
                    e4:70:3b:79:9b:43:f3:38:40:cd:67:c2:f7:39:1d:
                    2e:b1:c1:59:17:34:1f:08:9c:ad:36:e4:6d:42:f7:
                    99:36:cd:7f:eb:c7:79:79:16:f9:88:7e:cb:a8:de:
                    d2:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:AB:FD:BC:08:97:06:64:62:68:E6:16:12:35:E1:01:C4:6D:AA:D8
            X509v3 Authority Key Identifier:
                keyid:8E:52:C6:A9:BE:AD:79:DC:95:0F:9D:A5:60:C5:30:F2:8B:C6:FC:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/0/8E52C6A9BEAD79DC950F9DA560C530F28BC6FCDC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E52C6A9BEAD79DC950F9DA560C530F28BC6FCDC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/0/3136382e39302e302e302f32322d3332203d3e203631363738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.90.0.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3f:56:3d:94:5e:a7:00:c5:f1:a7:45:a0:e9:39:30:fa:93:3d:
         a0:48:84:df:40:24:b2:3a:66:35:15:8e:46:5d:e4:55:f5:a9:
         19:4a:9b:06:e2:b5:e1:27:1b:fa:bb:48:eb:fc:bd:d7:ab:69:
         26:50:da:87:7a:40:ea:29:90:1b:e4:fe:e3:11:7a:70:70:f4:
         0d:21:63:f8:c9:30:20:3f:14:81:ff:98:4d:64:2c:09:67:f5:
         cd:9a:b9:8f:6b:21:d5:1b:45:52:38:85:92:96:c4:8b:bd:e3:
         5d:5e:3c:f8:c8:fd:b5:45:49:fd:00:8e:9d:46:78:fd:e8:f5:
         3c:d4:71:45:2b:1d:82:b5:8f:7a:6d:61:b7:ab:eb:d3:e2:63:
         f8:e0:91:3d:fb:56:b7:90:2e:a6:e2:9f:63:60:e2:ea:ac:73:
         5c:08:46:8a:58:43:86:0d:1b:4f:33:ff:f5:00:c8:23:d1:aa:
         81:e9:cb:0b:2b:2e:50:48:bb:6e:2e:9b:f7:b2:d6:14:76:dc:
         77:95:f2:43:de:8a:41:2b:0a:29:1f:48:96:76:5e:cd:f4:84:
         32:7a:6c:a5:2e:18:82:ca:b7:c0:c2:13:2b:31:b1:55:53:c4:
         fd:57:0f:be:35:3c:4c:0b:55:ee:46:12:e3:58:48:6f:55:1d:
         a1:eb:f1:a4
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgIUMLdRmJf6QODyOcA7bkocQ6EdXPMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEU1MkM2QTlCRUFENzlEQzk1MEY5REE1NjBDNTMwRjI4
QkM2RkNEQzAeFw0yNDA4MTAyMzExMzVaFw0yNTA4MDkyMzE2MzVaMDMxMTAvBgNV
BAMTKDcxQUJGREJDMDg5NzA2NjQ2MjY4RTYxNjEyMzVFMTAxQzQ2REFBRDgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCFP+yT3YRlUEC3L7SV343zGpfm
IVML9PRI55QggcN+PqMFpas9Tm/R/cBXHe0xumijc2qLIyDlVYZ3U9EErTrWwrIx
8ibP4+mkxqT/fIzeixNJzrFKBBF2uf+40RMROLZa24px7GrzTt/jy6GxArjcBQii
CaGQBRRRaSrmuRQ4++2m2qgwgzC7LdxjQF3v5XKRwCBdmbjoAZELagH8MH1l3Q4V
kmegKDUfHPcIY2ez0Hi9nwjjJKkT44NKFtAClOlUP/vgkPPUZRTscXjFBKmdtORw
O3mbQ/M4QM1nwvc5HS6xwVkXNB8InK025G1C95k2zX/rx3l5FvmIfsuo3tJNAgMB
AAGjggJLMIICRzAdBgNVHQ4EFgQUcav9vAiXBmRiaOYWEjXhAcRtqtgwHwYDVR0j
BBgwFoAUjlLGqb6tedyVD52lYMUw8ovG/NwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNFRoeGNNVkJuekZRSml3cFdCMW1LZ01EU3p4VlI2aDYxTDkzeW1iS3Yy
azkvMC84RTUyQzZBOUJFQUQ3OURDOTUwRjlEQTU2MEM1MzBGMjhCQzZGQ0RDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzhFNTJDNkE5QkVBRDc5REM5
NTBGOURBNTYwQzUzMEYyOEJDNkZDREMuY2VyMIGoBggrBgEFBQcBCwSBmzCBmDCB
lQYIKwYBBQUHMAuGgYhyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRUaHhjTVZCbnpGUUppd3BXQjFtS2dNRFN6eFZSNmg2MUw5M3ltYkt2Mms5LzAv
MzEzNjM4MmUzOTMwMmUzMDJlMzAyZjMyMzIyZDMzMzIyMDNkM2UyMDM2MzEzNjM3
Mzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAKoWgAwDQYJKoZIhvcNAQELBQADggEBAD9WPZRepwDF8adF
oOk5MPqTPaBIhN9AJLI6ZjUVjkZd5FX1qRlKmwbiteEnG/q7SOv8vderaSZQ2od6
QOopkBvk/uMRenBw9A0hY/jJMCA/FIH/mE1kLAln9c2auY9rIdUbRVI4hZKWxIu9
411ePPjI/bVFSf0Ajp1GeP3o9TzUcUUrHYK1j3ptYber69PiY/jgkT37VreQLqbi
n2Ng4uqsc1wIRopYQ4YNG08z//UAyCPRqoHpywsrLlBIu24um/ey1hR23HeV8kPe
ikErCikfSJZ2Xs30hDJ6bKUuGILKt8DCEysxsVVTxP1XD741PEwLVe5GEuNYSG9V
HaHr8aQ=
-----END CERTIFICATE-----
Generated at Fri Nov 22 16:43:57 2024 by rpki-client on console-ams.rpki-client.org