Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5Y9hYbgko8AXFAbo6TR23XtUuACQwG86U4gdSJY3xUgx/0/3136382e3138312e3131362e302f32322d3332203d3e203533323138.roa
File:                     3136382e3138312e3131362e302f32322d3332203d3e203533323138.roa (raw, json)
Hash identifier:          cMhOk1gqvGKJ43ZIN08FcrdbKk+2jpoPyVnj2SYGVQk=
Subject key identifier:   E7:9D:4A:5F:98:A5:B5:42:79:F4:17:C9:0A:A3:E1:83:E3:22:72:CE
Certificate issuer:       /CN=2942F22000F3A7315703CF3B13100D76386FCAD1
Certificate serial:       0723D5CC8E0025E37B11535F8FA5165856487396
Authority key identifier: 29:42:F2:20:00:F3:A7:31:57:03:CF:3B:13:10:0D:76:38:6F:CA:D1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2942F22000F3A7315703CF3B13100D76386FCAD1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5Y9hYbgko8AXFAbo6TR23XtUuACQwG86U4gdSJY3xUgx/0/3136382e3138312e3131362e302f32322d3332203d3e203533323138.roa
Signing time:             Mon 16 Sep 2024 19:22:04 +0000
ROA not before:           Mon 16 Sep 2024 19:17:04 +0000
ROA not after:            Mon 15 Sep 2025 19:22:04 +0000
asID:                     53218
IP address blocks:        168.181.116.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5Y9hYbgko8AXFAbo6TR23XtUuACQwG86U4gdSJY3xUgx/0/2942F22000F3A7315703CF3B13100D76386FCAD1.crl
                          rsync://rpki-repo.registro.br/repo/5Y9hYbgko8AXFAbo6TR23XtUuACQwG86U4gdSJY3xUgx/0/2942F22000F3A7315703CF3B13100D76386FCAD1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2942F22000F3A7315703CF3B13100D76386FCAD1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 17 Feb 2025 06:31:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:23:d5:cc:8e:00:25:e3:7b:11:53:5f:8f:a5:16:58:56:48:73:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2942F22000F3A7315703CF3B13100D76386FCAD1
        Validity
            Not Before: Sep 16 19:17:04 2024 GMT
            Not After : Sep 15 19:22:04 2025 GMT
        Subject: CN=E79D4A5F98A5B54279F417C90AA3E183E32272CE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:de:fe:cb:bf:46:32:f2:65:3f:90:29:b0:9d:
                    75:c1:d2:f7:1e:ea:93:01:27:bd:1b:07:09:bd:b9:
                    79:6e:15:70:2e:f2:dc:b6:85:76:7f:fa:65:e9:d0:
                    2e:c2:15:46:54:77:cf:d7:20:1f:71:cf:fc:46:7c:
                    34:82:de:67:21:24:34:98:9a:12:20:8b:3b:98:10:
                    02:05:55:bb:44:60:68:24:a6:0c:ec:04:0f:bd:3b:
                    4a:02:49:96:8a:f1:f7:fd:fd:e0:61:7a:c1:e5:66:
                    c5:88:bd:d4:5e:22:1f:9a:e0:ac:3e:b1:8f:fe:07:
                    2b:d2:ce:c7:9c:90:a5:9e:ea:f2:5c:06:ae:cb:8e:
                    36:a5:ac:0e:52:64:52:10:c3:85:68:3a:91:39:36:
                    cc:36:e9:f3:d4:b5:87:86:e1:2b:23:fa:00:3a:6d:
                    65:63:b5:d3:92:39:a4:15:6a:85:ec:80:c9:97:97:
                    41:82:0f:8f:77:14:55:e1:b5:d8:4b:81:3e:ac:72:
                    35:9f:17:07:3a:2e:dd:58:15:a4:e7:a2:db:da:b8:
                    32:71:a8:6b:04:ec:a5:7c:f0:d2:3c:23:e0:c6:0e:
                    3e:ee:f0:b2:fd:e0:52:27:a4:8b:a7:70:92:ee:68:
                    42:7d:46:52:0f:40:ae:25:ee:98:db:e2:51:1a:c4:
                    e8:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:9D:4A:5F:98:A5:B5:42:79:F4:17:C9:0A:A3:E1:83:E3:22:72:CE
            X509v3 Authority Key Identifier:
                keyid:29:42:F2:20:00:F3:A7:31:57:03:CF:3B:13:10:0D:76:38:6F:CA:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5Y9hYbgko8AXFAbo6TR23XtUuACQwG86U4gdSJY3xUgx/0/2942F22000F3A7315703CF3B13100D76386FCAD1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2942F22000F3A7315703CF3B13100D76386FCAD1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5Y9hYbgko8AXFAbo6TR23XtUuACQwG86U4gdSJY3xUgx/0/3136382e3138312e3131362e302f32322d3332203d3e203533323138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.181.116.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6d:90:74:b5:2a:26:ed:48:3a:65:6f:1a:d1:d7:6a:87:fe:a0:
         a0:4c:54:ee:95:75:61:86:f0:c1:46:00:4c:9c:16:93:1e:7e:
         8e:b6:da:67:f1:35:ab:d1:4e:50:4a:47:fd:89:eb:61:00:83:
         75:16:2d:76:32:fd:61:47:31:51:f6:27:ee:da:af:6c:c3:32:
         72:6e:57:0f:85:88:64:4f:5c:80:4d:78:7f:92:d8:d6:56:2e:
         7e:ba:c7:09:cd:2c:ad:79:07:f0:1b:78:70:23:a7:cb:13:20:
         52:4c:13:9e:df:14:49:8e:e0:e0:ab:13:d0:52:a5:c9:98:cb:
         d5:5c:58:07:95:8b:0c:e5:10:c4:6b:7d:56:fd:63:81:4f:69:
         e9:a0:0b:fc:7b:5b:1d:8e:e0:33:3b:f3:e9:7d:61:d2:1c:79:
         e0:6d:d3:b8:2c:de:74:4d:ee:16:9d:ed:b3:28:46:ca:52:56:
         2e:40:ca:f0:5e:f0:93:4e:a8:9e:b7:63:e0:f7:cc:c5:78:6f:
         68:48:f3:b1:7d:47:ae:8f:7a:d5:12:79:0e:9c:d6:c2:1b:f6:
         9d:54:63:f2:3a:86:8c:a6:8f:04:d3:86:36:b9:14:73:28:64:
         43:e9:a0:2d:d6:53:51:c3:22:9a:4b:ad:90:e2:dd:fb:e7:dd:
         cc:05:e0:79
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUByPVzI4AJeN7EVNfj6UWWFZIc5YwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjk0MkYyMjAwMEYzQTczMTU3MDNDRjNCMTMxMDBENzYz
ODZGQ0FEMTAeFw0yNDA5MTYxOTE3MDRaFw0yNTA5MTUxOTIyMDRaMDMxMTAvBgNV
BAMTKEU3OUQ0QTVGOThBNUI1NDI3OUY0MTdDOTBBQTNFMTgzRTMyMjcyQ0UwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCs3v7Lv0Yy8mU/kCmwnXXB0vce
6pMBJ70bBwm9uXluFXAu8ty2hXZ/+mXp0C7CFUZUd8/XIB9xz/xGfDSC3mchJDSY
mhIgizuYEAIFVbtEYGgkpgzsBA+9O0oCSZaK8ff9/eBhesHlZsWIvdReIh+a4Kw+
sY/+ByvSzseckKWe6vJcBq7LjjalrA5SZFIQw4VoOpE5Nsw26fPUtYeG4Ssj+gA6
bWVjtdOSOaQVaoXsgMmXl0GCD493FFXhtdhLgT6scjWfFwc6Lt1YFaTnotvauDJx
qGsE7KV88NI8I+DGDj7u8LL94FInpIuncJLuaEJ9RlIPQK4l7pjb4lEaxOh7AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU551KX5iltUJ59BfJCqPhg+Mics4wHwYDVR0j
BBgwFoAUKULyIADzpzFXA887ExANdjhvytEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNVk5aFliZ2tvOEFYRkFibzZUUjIzWHRVdUFDUXdHODZVNGdkU0pZM3hV
Z3gvMC8yOTQyRjIyMDAwRjNBNzMxNTcwM0NGM0IxMzEwMEQ3NjM4NkZDQUQxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzI5NDJGMjIwMDBGM0E3MzE1
NzAzQ0YzQjEzMTAwRDc2Mzg2RkNBRDEuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzVZOWhZYmdrbzhBWEZBYm82VFIyM1h0VXVBQ1F3Rzg2VTRnZFNKWTN4VWd4LzAv
MzEzNjM4MmUzMTM4MzEyZTMxMzEzNjJlMzAyZjMyMzIyZDMzMzIyMDNkM2UyMDM1
MzMzMjMxMzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAKotXQwDQYJKoZIhvcNAQELBQADggEBAG2QdLUq
Ju1IOmVvGtHXaof+oKBMVO6VdWGG8MFGAEycFpMefo622mfxNavRTlBKR/2J62EA
g3UWLXYy/WFHMVH2J+7ar2zDMnJuVw+FiGRPXIBNeH+S2NZWLn66xwnNLK15B/Ab
eHAjp8sTIFJME57fFEmO4OCrE9BSpcmYy9VcWAeViwzlEMRrfVb9Y4FPaemgC/x7
Wx2O4DM78+l9YdIceeBt07gs3nRN7had7bMoRspSVi5AyvBe8JNOqJ63Y+D3zMV4
b2hI87F9R66PetUSeQ6c1sIb9p1UY/I6hoymjwTThja5FHMoZEPpoC3WU1HDIppL
rZDi3fvn3cwF4Hk=
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:17:26 2025 by rpki-client