Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5DGhgMYjSJiFCC3VDfTwCAdSkKepuy5Lw6tUBdsPRzGd/1/3136342e3136332e34372e302f32342d3234203d3e20323635393338.roa
File:                     3136342e3136332e34372e302f32342d3234203d3e20323635393338.roa (raw, json)
Hash identifier:          aMq9KjRhjKRc9m+0OsOR2rJel3OgKhvf88FfNDJDTFs=
Subject key identifier:   FC:C1:4A:1B:F8:63:21:61:B4:BF:28:27:70:4F:BC:1B:11:93:BB:3C
Certificate issuer:       /CN=57135F33D3B8CACE38714DFB9D70A58AA9C1E7B3
Certificate serial:       091E5DD8117FF42247D4D7B7FDB923C036606BF0
Authority key identifier: 57:13:5F:33:D3:B8:CA:CE:38:71:4D:FB:9D:70:A5:8A:A9:C1:E7:B3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/57135F33D3B8CACE38714DFB9D70A58AA9C1E7B3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5DGhgMYjSJiFCC3VDfTwCAdSkKepuy5Lw6tUBdsPRzGd/1/3136342e3136332e34372e302f32342d3234203d3e20323635393338.roa
Signing time:             Wed 03 Apr 2024 18:32:07 +0000
ROA not before:           Wed 03 Apr 2024 18:27:07 +0000
ROA not after:            Wed 02 Apr 2025 18:32:07 +0000
asID:                     265938
IP address blocks:        164.163.47.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5DGhgMYjSJiFCC3VDfTwCAdSkKepuy5Lw6tUBdsPRzGd/1/57135F33D3B8CACE38714DFB9D70A58AA9C1E7B3.crl
                          rsync://rpki-repo.registro.br/repo/5DGhgMYjSJiFCC3VDfTwCAdSkKepuy5Lw6tUBdsPRzGd/1/57135F33D3B8CACE38714DFB9D70A58AA9C1E7B3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/57135F33D3B8CACE38714DFB9D70A58AA9C1E7B3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:14:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:1e:5d:d8:11:7f:f4:22:47:d4:d7:b7:fd:b9:23:c0:36:60:6b:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57135F33D3B8CACE38714DFB9D70A58AA9C1E7B3
        Validity
            Not Before: Apr  3 18:27:07 2024 GMT
            Not After : Apr  2 18:32:07 2025 GMT
        Subject: CN=FCC14A1BF8632161B4BF2827704FBC1B1193BB3C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:64:e2:3c:84:12:89:bf:b3:fb:8e:e4:d8:ac:
                    67:58:2f:00:34:35:96:97:b7:ce:36:f1:60:94:1c:
                    f8:9d:d6:b3:53:5f:82:f4:4c:d4:fe:c7:bf:f1:17:
                    f4:1c:94:16:66:26:e7:e4:63:eb:ee:0d:bb:b9:b5:
                    42:05:7c:61:cb:e4:16:70:9d:1a:19:83:ee:20:8b:
                    f9:7d:bd:00:8e:05:21:e8:98:97:63:89:c1:59:b2:
                    f1:72:a7:c2:80:85:ee:52:65:1c:2f:f7:8c:ff:10:
                    33:64:43:46:87:0a:ba:9e:5c:ff:ec:98:6f:fc:48:
                    48:c9:af:84:cd:9c:a8:3d:47:48:a7:61:43:11:65:
                    f1:3c:80:7c:74:9c:56:92:47:34:3d:1b:74:43:db:
                    fa:5a:c2:7f:4b:6b:01:3d:7f:dc:b2:db:9e:f4:9c:
                    82:f0:56:39:0d:ed:34:54:4e:b0:bf:16:00:74:26:
                    b0:89:82:17:6b:85:52:bf:79:5a:50:dc:7a:13:6a:
                    b2:04:25:ef:6a:9b:0e:f6:76:56:ef:90:8e:0d:bd:
                    12:a3:6f:50:aa:8a:3e:7c:65:b8:e5:3e:5c:fa:b1:
                    50:b3:49:c5:62:2f:a1:42:87:d7:7b:25:1e:21:fb:
                    a2:ff:0e:00:fb:f5:3a:ce:e3:df:95:ff:09:df:68:
                    9e:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:C1:4A:1B:F8:63:21:61:B4:BF:28:27:70:4F:BC:1B:11:93:BB:3C
            X509v3 Authority Key Identifier:
                keyid:57:13:5F:33:D3:B8:CA:CE:38:71:4D:FB:9D:70:A5:8A:A9:C1:E7:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5DGhgMYjSJiFCC3VDfTwCAdSkKepuy5Lw6tUBdsPRzGd/1/57135F33D3B8CACE38714DFB9D70A58AA9C1E7B3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/57135F33D3B8CACE38714DFB9D70A58AA9C1E7B3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5DGhgMYjSJiFCC3VDfTwCAdSkKepuy5Lw6tUBdsPRzGd/1/3136342e3136332e34372e302f32342d3234203d3e20323635393338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.163.47.0/24

    Signature Algorithm: sha256WithRSAEncryption
         82:d3:3e:53:9d:04:ba:aa:54:98:43:86:1d:49:94:c2:b5:74:
         81:c1:a0:fb:26:b2:24:e9:48:21:24:c5:4e:d4:11:7f:d3:ee:
         26:d4:1f:4a:dc:8b:91:9b:aa:55:69:00:2a:b4:b4:df:ca:0e:
         ce:6f:83:ee:62:74:46:5f:ca:44:7e:5b:18:bf:0d:d3:f1:80:
         6e:77:22:2c:fd:4c:b2:3e:a5:1a:52:b2:bf:9e:a6:e2:90:67:
         72:4c:ad:6f:6b:25:2a:71:86:4e:fb:94:42:68:a2:8e:63:c3:
         3a:00:bb:ef:61:71:4f:f8:b4:74:16:10:93:69:c8:53:63:9f:
         9f:5b:3d:bc:16:d9:3d:a7:58:eb:f7:4b:17:95:9e:24:b5:ef:
         b3:0d:9d:69:95:a0:de:b5:ad:33:b6:f1:bc:31:0b:b4:de:3e:
         18:50:f9:d0:b8:7a:5c:5d:fd:83:a1:74:71:ea:c8:2d:2d:e8:
         bb:c3:fd:ca:36:c8:73:f4:4c:9e:c3:a1:f0:65:fb:cd:ac:91:
         7e:22:02:10:fc:0b:92:98:7b:3a:7b:8a:1f:3e:3b:c5:28:a5:
         40:1c:ef:05:65:e2:5a:23:af:ce:9b:aa:d7:85:7b:eb:bf:26:
         0a:a5:60:c8:0d:c9:4d:13:60:a2:95:1b:42:a0:c7:56:3e:33:
         5a:8c:ac:35
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUCR5d2BF/9CJH1Ne3/bkjwDZga/AwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTcxMzVGMzNEM0I4Q0FDRTM4NzE0REZCOUQ3MEE1OEFB
OUMxRTdCMzAeFw0yNDA0MDMxODI3MDdaFw0yNTA0MDIxODMyMDdaMDMxMTAvBgNV
BAMTKEZDQzE0QTFCRjg2MzIxNjFCNEJGMjgyNzcwNEZCQzFCMTE5M0JCM0MwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRZOI8hBKJv7P7juTYrGdYLwA0
NZaXt8428WCUHPid1rNTX4L0TNT+x7/xF/QclBZmJufkY+vuDbu5tUIFfGHL5BZw
nRoZg+4gi/l9vQCOBSHomJdjicFZsvFyp8KAhe5SZRwv94z/EDNkQ0aHCrqeXP/s
mG/8SEjJr4TNnKg9R0inYUMRZfE8gHx0nFaSRzQ9G3RD2/pawn9LawE9f9yy2570
nILwVjkN7TRUTrC/FgB0JrCJghdrhVK/eVpQ3HoTarIEJe9qmw72dlbvkI4NvRKj
b1Cqij58ZbjlPlz6sVCzScViL6FCh9d7JR4h+6L/DgD79TrO49+V/wnfaJ4DAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU/MFKG/hjIWG0vygncE+8GxGTuzwwHwYDVR0j
BBgwFoAUVxNfM9O4ys44cU37nXCliqnB57MwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNURHaGdNWWpTSmlGQ0MzVkRmVHdDQWRTa0tlcHV5NUx3NnRVQmRzUFJ6
R2QvMS81NzEzNUYzM0QzQjhDQUNFMzg3MTRERkI5RDcwQTU4QUE5QzFFN0IzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzU3MTM1RjMzRDNCOENBQ0Uz
ODcxNERGQjlENzBBNThBQTlDMUU3QjMuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzVER2hnTVlqU0ppRkNDM1ZEZlR3Q0FkU2tLZXB1eTVMdzZ0VUJkc1BSekdkLzEv
MzEzNjM0MmUzMTM2MzMyZTM0MzcyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzUzOTMzMzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBACkoy8wDQYJKoZIhvcNAQELBQADggEBAILTPlOd
BLqqVJhDhh1JlMK1dIHBoPsmsiTpSCEkxU7UEX/T7ibUH0rci5GbqlVpACq0tN/K
Ds5vg+5idEZfykR+Wxi/DdPxgG53Iiz9TLI+pRpSsr+epuKQZ3JMrW9rJSpxhk77
lEJooo5jwzoAu+9hcU/4tHQWEJNpyFNjn59bPbwW2T2nWOv3SxeVniS177MNnWmV
oN61rTO28bwxC7TePhhQ+dC4elxd/YOhdHHqyC0t6LvD/co2yHP0TJ7DofBl+82s
kX4iAhD8C5KYezp7ih8+O8UopUAc7wVl4lojr86bqteFe+u/JgqlYMgNyU0TYKKV
G0Kgx1Y+M1qMrDU=
-----END CERTIFICATE-----
Generated at Sat Nov 23 00:48:15 2024 by rpki-client on console-fra.rpki-client.org