Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4xcLWXC7hdQTkJrcabpTqP5wA1hRpHZvfQGUnXKdAG3W/1/3136382e302e3233362e302f32322d3234203d3e203532383732.roa
File:                     3136382e302e3233362e302f32322d3234203d3e203532383732.roa (raw, json)
Hash identifier:          cNrCUtBdPYHmNmbz2AIBjmKBcDGC88fUNmQoNjJhEAM=
Subject key identifier:   4A:79:C3:89:4F:D6:60:55:33:72:54:7D:93:19:0F:8E:C8:61:12:EC
Certificate issuer:       /CN=9D94162FCA29B10C2A202C439F0AD2F480E45627
Certificate serial:       5C5A5A617522EF2CA5C25D5F54FA6291EE6DB335
Authority key identifier: 9D:94:16:2F:CA:29:B1:0C:2A:20:2C:43:9F:0A:D2:F4:80:E4:56:27
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9D94162FCA29B10C2A202C439F0AD2F480E45627.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4xcLWXC7hdQTkJrcabpTqP5wA1hRpHZvfQGUnXKdAG3W/1/3136382e302e3233362e302f32322d3234203d3e203532383732.roa
Signing time:             Thu 04 Apr 2024 11:23:22 +0000
ROA not before:           Thu 04 Apr 2024 11:18:22 +0000
ROA not after:            Thu 03 Apr 2025 11:23:22 +0000
asID:                     52872
IP address blocks:        168.0.236.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4xcLWXC7hdQTkJrcabpTqP5wA1hRpHZvfQGUnXKdAG3W/1/9D94162FCA29B10C2A202C439F0AD2F480E45627.crl
                          rsync://rpki-repo.registro.br/repo/4xcLWXC7hdQTkJrcabpTqP5wA1hRpHZvfQGUnXKdAG3W/1/9D94162FCA29B10C2A202C439F0AD2F480E45627.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9D94162FCA29B10C2A202C439F0AD2F480E45627.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 13:53:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:5a:5a:61:75:22:ef:2c:a5:c2:5d:5f:54:fa:62:91:ee:6d:b3:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9D94162FCA29B10C2A202C439F0AD2F480E45627
        Validity
            Not Before: Apr  4 11:18:22 2024 GMT
            Not After : Apr  3 11:23:22 2025 GMT
        Subject: CN=4A79C3894FD660553372547D93190F8EC86112EC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:51:bd:f3:6d:5a:21:42:93:38:51:81:cb:0d:
                    3c:e9:ac:09:c0:7a:69:82:d2:58:40:89:6b:d3:33:
                    9b:b5:84:dc:27:84:cb:fb:61:bc:80:46:c2:a5:2e:
                    9c:a4:82:ce:c5:8d:95:42:7e:1b:c3:ea:58:f4:d5:
                    8e:3c:21:7c:70:e5:6f:aa:9f:fe:3d:1c:78:09:ac:
                    72:71:05:cd:5b:13:43:0e:2d:dd:90:bb:60:8e:dc:
                    7b:05:0f:df:8d:49:07:8b:0d:47:12:fa:dd:f6:91:
                    d3:de:a0:b3:a1:79:ac:fb:4d:cb:15:47:e5:53:04:
                    e5:33:4e:88:21:d4:cc:2b:73:f6:84:84:82:80:32:
                    d2:be:26:19:5c:b3:08:14:1e:35:8a:7c:df:d9:f4:
                    95:74:4c:f1:a0:49:dd:b8:82:02:c9:82:95:b5:3e:
                    91:09:13:a9:de:c6:40:43:c5:16:38:92:19:01:52:
                    74:75:52:c9:20:65:37:44:b6:13:f8:85:a5:7d:ba:
                    97:ba:f9:c5:e5:b0:8b:b4:d8:f1:18:e6:16:72:2f:
                    e5:5b:1f:7b:a6:3c:5f:c3:fd:9e:94:71:e4:df:e1:
                    07:c7:5a:fa:c5:3e:e3:f1:ce:51:82:87:b5:43:59:
                    2b:64:b8:5c:50:58:66:c3:bc:0f:c0:8f:07:95:3d:
                    e0:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:79:C3:89:4F:D6:60:55:33:72:54:7D:93:19:0F:8E:C8:61:12:EC
            X509v3 Authority Key Identifier:
                keyid:9D:94:16:2F:CA:29:B1:0C:2A:20:2C:43:9F:0A:D2:F4:80:E4:56:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4xcLWXC7hdQTkJrcabpTqP5wA1hRpHZvfQGUnXKdAG3W/1/9D94162FCA29B10C2A202C439F0AD2F480E45627.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9D94162FCA29B10C2A202C439F0AD2F480E45627.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4xcLWXC7hdQTkJrcabpTqP5wA1hRpHZvfQGUnXKdAG3W/1/3136382e302e3233362e302f32322d3234203d3e203532383732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.0.236.0/22

    Signature Algorithm: sha256WithRSAEncryption
         01:0b:d9:b2:3d:43:57:84:47:64:43:c1:4a:d8:3f:55:68:ea:
         3e:0e:d9:83:75:5b:8a:db:d5:ea:5f:f2:3b:53:aa:81:06:c3:
         90:39:75:65:db:0d:d6:25:37:49:29:c8:4b:f3:0c:c9:22:36:
         14:a2:b4:2f:80:6e:40:0b:fe:f1:43:9b:be:fe:99:73:15:6e:
         c3:63:0a:4f:54:48:81:07:92:fd:d4:c5:23:7c:af:13:48:53:
         38:ab:11:b9:64:e3:4d:7b:2e:d7:67:14:a0:ed:68:35:3a:75:
         ef:a8:69:5c:86:ea:67:b7:42:00:b9:43:1d:4b:88:c8:bd:fa:
         95:6b:b9:0f:ed:05:a3:3f:c3:68:d4:ab:62:4f:86:60:07:98:
         5d:2f:aa:05:b0:c8:85:e5:32:7d:17:e0:59:34:34:07:0e:f5:
         3a:05:9b:6a:ae:10:ed:16:f4:22:a4:2b:00:3e:95:b8:4d:98:
         5d:1f:be:ba:fb:67:4d:8d:88:08:64:9d:83:66:2a:af:f9:38:
         f6:69:ff:0d:b3:c4:81:87:ce:d2:5c:88:c3:df:58:06:20:15:
         41:52:55:2a:ff:b1:38:e6:0b:84:df:8d:17:3d:fd:47:1c:b2:
         05:b1:c2:7c:aa:06:a0:ee:e2:46:6e:ac:f2:8b:71:9c:2b:b4:
         81:7c:1a:ce
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUXFpaYXUi7yylwl1fVPpike5tszUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUQ5NDE2MkZDQTI5QjEwQzJBMjAyQzQzOUYwQUQyRjQ4
MEU0NTYyNzAeFw0yNDA0MDQxMTE4MjJaFw0yNTA0MDMxMTIzMjJaMDMxMTAvBgNV
BAMTKDRBNzlDMzg5NEZENjYwNTUzMzcyNTQ3RDkzMTkwRjhFQzg2MTEyRUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCUUb3zbVohQpM4UYHLDTzprAnA
emmC0lhAiWvTM5u1hNwnhMv7YbyARsKlLpykgs7FjZVCfhvD6lj01Y48IXxw5W+q
n/49HHgJrHJxBc1bE0MOLd2Qu2CO3HsFD9+NSQeLDUcS+t32kdPeoLOheaz7TcsV
R+VTBOUzTogh1Mwrc/aEhIKAMtK+JhlcswgUHjWKfN/Z9JV0TPGgSd24ggLJgpW1
PpEJE6nexkBDxRY4khkBUnR1UskgZTdEthP4haV9upe6+cXlsIu02PEY5hZyL+Vb
H3umPF/D/Z6UceTf4QfHWvrFPuPxzlGCh7VDWStkuFxQWGbDvA/AjweVPeAZAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUSnnDiU/WYFUzclR9kxkPjshhEuwwHwYDVR0j
BBgwFoAUnZQWL8opsQwqICxDnwrS9IDkVicwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNHhjTFdYQzdoZFFUa0pyY2FicFRxUDV3QTFoUnBIWnZmUUdVblhLZEFH
M1cvMS85RDk0MTYyRkNBMjlCMTBDMkEyMDJDNDM5RjBBRDJGNDgwRTQ1NjI3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzlEOTQxNjJGQ0EyOUIxMEMy
QTIwMkM0MzlGMEFEMkY0ODBFNDU2MjcuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzR4Y0xXWEM3aGRRVGtKcmNhYnBUcVA1d0ExaFJwSFp2ZlFHVW5YS2RBRzNXLzEv
MzEzNjM4MmUzMDJlMzIzMzM2MmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzUzMjM4
MzczMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEAqgA7DANBgkqhkiG9w0BAQsFAAOCAQEAAQvZsj1DV4RH
ZEPBStg/VWjqPg7Zg3VbitvV6l/yO1OqgQbDkDl1ZdsN1iU3SSnIS/MMySI2FKK0
L4BuQAv+8UObvv6ZcxVuw2MKT1RIgQeS/dTFI3yvE0hTOKsRuWTjTXsu12cUoO1o
NTp176hpXIbqZ7dCALlDHUuIyL36lWu5D+0Foz/DaNSrYk+GYAeYXS+qBbDIheUy
fRfgWTQ0Bw71OgWbaq4Q7Rb0IqQrAD6VuE2YXR++uvtnTY2ICGSdg2Yqr/k49mn/
DbPEgYfO0lyIw99YBiAVQVJVKv+xOOYLhN+NFz39RxyyBbHCfKoGoO7iRm6s8otx
nCu0gXwazg==
-----END CERTIFICATE-----
Generated at Fri Jun 28 15:42:18 2024 by rpki-client on console-fra.rpki-client.org