Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/54WxTfovDirxgxcH8Rnz5BmeyymnPPSzg4FmhRyH2JCq/0/3136382e39302e38332e302f32342d3234203d3e20323632393838.roa
File:                     3136382e39302e38332e302f32342d3234203d3e20323632393838.roa (raw, json)
Hash identifier:          7dWWKttEnyTujft+CgiHOkVFN708aSAzD/rSqcrFX9Y=
Subject key identifier:   A1:8F:2B:47:5C:B1:C0:EB:0B:90:16:21:18:3A:A0:04:9F:EE:35:F0
Certificate issuer:       /CN=252DB7997AB9FC1EBB8F7F30B7558302DB376E02
Certificate serial:       3D96C1266D3B14498DBC828135B0B7A25BA61C86
Authority key identifier: 25:2D:B7:99:7A:B9:FC:1E:BB:8F:7F:30:B7:55:83:02:DB:37:6E:02
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/252DB7997AB9FC1EBB8F7F30B7558302DB376E02.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/54WxTfovDirxgxcH8Rnz5BmeyymnPPSzg4FmhRyH2JCq/0/3136382e39302e38332e302f32342d3234203d3e20323632393838.roa
Signing time:             Mon 13 Jan 2025 14:17:29 +0000
ROA not before:           Mon 13 Jan 2025 14:12:29 +0000
ROA not after:            Mon 12 Jan 2026 14:17:29 +0000
asID:                     262988
IP address blocks:        168.90.83.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/54WxTfovDirxgxcH8Rnz5BmeyymnPPSzg4FmhRyH2JCq/0/252DB7997AB9FC1EBB8F7F30B7558302DB376E02.crl
                          rsync://rpki-repo.registro.br/repo/54WxTfovDirxgxcH8Rnz5BmeyymnPPSzg4FmhRyH2JCq/0/252DB7997AB9FC1EBB8F7F30B7558302DB376E02.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/252DB7997AB9FC1EBB8F7F30B7558302DB376E02.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 17 Feb 2025 15:27:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:96:c1:26:6d:3b:14:49:8d:bc:82:81:35:b0:b7:a2:5b:a6:1c:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=252DB7997AB9FC1EBB8F7F30B7558302DB376E02
        Validity
            Not Before: Jan 13 14:12:29 2025 GMT
            Not After : Jan 12 14:17:29 2026 GMT
        Subject: CN=A18F2B475CB1C0EB0B901621183AA0049FEE35F0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:77:a5:fe:ae:08:2a:68:ed:c1:3d:50:84:c2:
                    35:08:3f:c6:74:94:c2:e4:6f:dd:44:72:f9:28:c7:
                    c4:92:c9:2d:fe:9f:1a:35:22:7b:d4:7e:0c:c9:2e:
                    b3:cb:1f:fc:bc:70:25:a2:e3:8d:1f:c8:e5:bb:aa:
                    1c:bf:40:59:36:52:5c:90:a8:71:27:4a:2f:11:38:
                    e2:9c:a5:18:23:20:05:5e:d9:af:a3:18:8e:72:83:
                    2d:ac:93:80:6d:ce:ed:80:0b:c1:12:aa:3d:36:39:
                    80:f0:85:dd:a1:2a:a8:38:3a:35:bf:04:33:32:e1:
                    81:64:63:f9:f6:4b:09:73:ae:7d:dc:77:45:12:20:
                    9c:f0:b3:bc:52:78:b2:ff:02:58:60:4b:21:d2:66:
                    66:05:5c:22:ef:cf:6f:88:20:2b:fd:19:6b:c4:88:
                    f9:62:2e:9f:80:fa:a8:b3:7e:82:c5:96:a5:0e:2f:
                    9d:50:c4:b2:7a:6c:5c:24:05:af:9e:94:34:91:96:
                    61:ef:d7:1c:60:4e:13:12:c1:48:e1:c4:e3:ea:f9:
                    90:ca:55:88:da:ac:44:c6:3c:57:76:ff:c0:df:6f:
                    d0:3f:92:31:e4:5b:1b:4b:48:30:b2:51:07:bb:38:
                    4f:15:42:4f:2f:ec:72:df:59:60:b4:34:eb:05:bf:
                    6b:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:8F:2B:47:5C:B1:C0:EB:0B:90:16:21:18:3A:A0:04:9F:EE:35:F0
            X509v3 Authority Key Identifier:
                keyid:25:2D:B7:99:7A:B9:FC:1E:BB:8F:7F:30:B7:55:83:02:DB:37:6E:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/54WxTfovDirxgxcH8Rnz5BmeyymnPPSzg4FmhRyH2JCq/0/252DB7997AB9FC1EBB8F7F30B7558302DB376E02.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/252DB7997AB9FC1EBB8F7F30B7558302DB376E02.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/54WxTfovDirxgxcH8Rnz5BmeyymnPPSzg4FmhRyH2JCq/0/3136382e39302e38332e302f32342d3234203d3e20323632393838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.90.83.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5f:41:b6:51:b0:35:84:33:36:cb:4e:8f:1b:3e:98:44:23:74:
         0f:c8:8a:72:12:86:23:a3:87:d5:31:68:52:c3:45:a6:d0:f9:
         f2:79:1a:18:20:2a:68:b4:b2:2e:7a:eb:8a:2e:fa:f1:07:19:
         d6:20:29:1f:a8:80:44:f6:26:b5:8d:d0:04:c7:ef:1e:63:c3:
         d3:0b:13:27:3c:dc:4a:48:6a:b5:98:d4:3f:92:12:36:2f:3a:
         8a:ea:ad:2c:b3:75:ed:b7:b8:bb:44:74:a5:68:8f:56:83:20:
         6f:7b:a6:66:69:d7:b1:2e:4d:07:57:9e:95:53:c4:c6:90:b1:
         19:e3:77:70:15:4a:f1:8c:5d:69:4c:bf:3b:30:b5:0a:31:0b:
         2e:ac:f2:59:2d:47:b6:45:de:72:01:e2:62:b7:f5:06:e4:c7:
         fc:6e:fd:f8:a2:81:dc:c5:0f:59:c0:99:4d:cb:2a:64:a7:1e:
         30:dc:dc:16:bf:47:8c:bb:a7:51:29:a5:65:df:14:76:5d:18:
         b7:44:62:34:f3:6f:be:92:bc:a7:66:58:83:88:a6:9e:0e:b9:
         1e:14:42:6d:ba:7e:f7:82:d9:9a:40:84:92:0e:e0:90:54:5b:
         80:a5:19:bc:76:7a:7c:2b:68:28:51:ee:20:94:b2:2f:49:70:
         9a:f0:e4:ef
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUPZbBJm07FEmNvIKBNbC3olumHIYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjUyREI3OTk3QUI5RkMxRUJCOEY3RjMwQjc1NTgzMDJE
QjM3NkUwMjAeFw0yNTAxMTMxNDEyMjlaFw0yNjAxMTIxNDE3MjlaMDMxMTAvBgNV
BAMTKEExOEYyQjQ3NUNCMUMwRUIwQjkwMTYyMTE4M0FBMDA0OUZFRTM1RjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxd6X+rggqaO3BPVCEwjUIP8Z0
lMLkb91Ecvkox8SSyS3+nxo1InvUfgzJLrPLH/y8cCWi440fyOW7qhy/QFk2UlyQ
qHEnSi8ROOKcpRgjIAVe2a+jGI5ygy2sk4Btzu2AC8ESqj02OYDwhd2hKqg4OjW/
BDMy4YFkY/n2Swlzrn3cd0USIJzws7xSeLL/AlhgSyHSZmYFXCLvz2+IICv9GWvE
iPliLp+A+qizfoLFlqUOL51QxLJ6bFwkBa+elDSRlmHv1xxgThMSwUjhxOPq+ZDK
VYjarETGPFd2/8Dfb9A/kjHkWxtLSDCyUQe7OE8VQk8v7HLfWWC0NOsFv2tpAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUoY8rR1yxwOsLkBYhGDqgBJ/uNfAwHwYDVR0j
BBgwFoAUJS23mXq5/B67j38wt1WDAts3bgIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNTRXeFRmb3ZEaXJ4Z3hjSDhSbno1Qm1leXltblBQU3pnNEZtaFJ5SDJK
Q3EvMC8yNTJEQjc5OTdBQjlGQzFFQkI4RjdGMzBCNzU1ODMwMkRCMzc2RTAyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzI1MkRCNzk5N0FCOUZDMUVC
QjhGN0YzMEI3NTU4MzAyREIzNzZFMDIuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzU0V3hUZm92RGlyeGd4Y0g4Um56NUJtZXl5bW5QUFN6ZzRGbWhSeUgySkNxLzAv
MzEzNjM4MmUzOTMwMmUzODMzMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjMy
MzkzODM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAqFpTMA0GCSqGSIb3DQEBCwUAA4IBAQBfQbZRsDWE
MzbLTo8bPphEI3QPyIpyEoYjo4fVMWhSw0Wm0PnyeRoYICpotLIueuuKLvrxBxnW
ICkfqIBE9ia1jdAEx+8eY8PTCxMnPNxKSGq1mNQ/khI2LzqK6q0ss3Xtt7i7RHSl
aI9WgyBve6ZmadexLk0HV56VU8TGkLEZ43dwFUrxjF1pTL87MLUKMQsurPJZLUe2
Rd5yAeJit/UG5Mf8bv34ooHcxQ9ZwJlNyypkpx4w3NwWv0eMu6dRKaVl3xR2XRi3
RGI082++krynZliDiKaeDrkeFEJtun73gtmaQISSDuCQVFuApRm8dnp8K2goUe4g
lLIvSXCa8OTv
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:24:18 2025 by rpki-client