Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5kh7U1maB7CEk94NychBpWi1YzXFG9EV5xRaanL9wV3v/0/3136382e302e3135382e302f32332d3233203d3e20323635323536.roa
File:                     3136382e302e3135382e302f32332d3233203d3e20323635323536.roa (raw, json)
Hash identifier:          il9tW6Q37dLV1m4Z3E8VZXOFC+xqJmk3JRaAMWaNEi8=
Subject key identifier:   34:52:B2:19:61:9F:45:B4:A8:78:2D:02:AD:B6:07:0C:F3:07:CF:5A
Certificate issuer:       /CN=95CE674952A93BE73C10B416EB0EE35010832094
Certificate serial:       5850AD93BC56DD6355CD988C8E61781AD4BA7083
Authority key identifier: 95:CE:67:49:52:A9:3B:E7:3C:10:B4:16:EB:0E:E3:50:10:83:20:94
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/95CE674952A93BE73C10B416EB0EE35010832094.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5kh7U1maB7CEk94NychBpWi1YzXFG9EV5xRaanL9wV3v/0/3136382e302e3135382e302f32332d3233203d3e20323635323536.roa
Signing time:             Sun 22 Sep 2024 21:40:08 +0000
ROA not before:           Sun 22 Sep 2024 21:35:08 +0000
ROA not after:            Sun 21 Sep 2025 21:40:08 +0000
asID:                     265256
IP address blocks:        168.0.158.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5kh7U1maB7CEk94NychBpWi1YzXFG9EV5xRaanL9wV3v/0/95CE674952A93BE73C10B416EB0EE35010832094.crl
                          rsync://rpki-repo.registro.br/repo/5kh7U1maB7CEk94NychBpWi1YzXFG9EV5xRaanL9wV3v/0/95CE674952A93BE73C10B416EB0EE35010832094.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/95CE674952A93BE73C10B416EB0EE35010832094.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 30 Nov 2024 20:19:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:50:ad:93:bc:56:dd:63:55:cd:98:8c:8e:61:78:1a:d4:ba:70:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95CE674952A93BE73C10B416EB0EE35010832094
        Validity
            Not Before: Sep 22 21:35:08 2024 GMT
            Not After : Sep 21 21:40:08 2025 GMT
        Subject: CN=3452B219619F45B4A8782D02ADB6070CF307CF5A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:aa:bf:22:8d:64:49:2e:32:24:8c:59:7c:93:
                    93:28:96:29:99:65:e7:f2:72:04:46:f2:51:ed:83:
                    ab:47:b6:2d:a5:93:a3:ed:10:a0:f8:fd:f3:8b:54:
                    c6:2c:87:cc:b0:df:0c:c1:e5:56:5f:01:56:b7:fe:
                    ab:f7:79:96:2a:72:e1:5d:3f:d2:f5:1d:3b:61:5a:
                    f8:6e:33:eb:97:42:ba:fa:7e:1a:ac:49:7b:26:98:
                    28:19:f1:53:cf:fb:d2:35:47:ab:5e:08:c4:cb:f2:
                    69:ab:aa:e0:0c:fe:40:03:ec:42:ed:9b:63:b9:36:
                    59:de:1c:51:cc:88:5f:3f:b7:c0:df:20:0d:85:e4:
                    73:86:6a:0c:c6:7e:cf:e9:fd:59:22:90:7f:ec:a0:
                    26:ff:f6:13:90:16:8f:bc:de:b2:7f:f2:8a:0a:ec:
                    94:f4:ad:cf:df:c3:5d:53:c5:ed:51:5b:35:16:29:
                    34:82:2a:6b:8b:61:3d:75:69:2d:23:4a:fa:cc:6d:
                    c7:cc:97:f1:30:52:ec:67:8d:a8:67:48:ad:d9:aa:
                    04:3a:76:90:64:0d:05:cf:a0:d4:51:5c:08:37:57:
                    95:36:93:2d:80:60:72:b3:21:55:97:70:b5:a1:98:
                    03:ca:cb:8c:0e:cd:61:1a:f2:47:26:ba:a9:fd:f7:
                    8d:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:52:B2:19:61:9F:45:B4:A8:78:2D:02:AD:B6:07:0C:F3:07:CF:5A
            X509v3 Authority Key Identifier:
                keyid:95:CE:67:49:52:A9:3B:E7:3C:10:B4:16:EB:0E:E3:50:10:83:20:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5kh7U1maB7CEk94NychBpWi1YzXFG9EV5xRaanL9wV3v/0/95CE674952A93BE73C10B416EB0EE35010832094.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/95CE674952A93BE73C10B416EB0EE35010832094.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5kh7U1maB7CEk94NychBpWi1YzXFG9EV5xRaanL9wV3v/0/3136382e302e3135382e302f32332d3233203d3e20323635323536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.0.158.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1c:29:8d:72:a5:28:5d:8b:f7:54:7a:38:c4:15:e0:8f:3e:73:
         fb:71:53:78:3b:31:bf:a0:30:02:87:6e:5a:0b:62:9b:89:98:
         3f:cd:cd:1d:bf:e5:0f:00:ca:06:6b:7b:e4:29:37:64:84:fa:
         ce:06:a1:ac:e7:61:e3:8e:d9:e8:7b:ba:7a:15:a8:1b:97:a2:
         3f:dd:75:60:4f:b2:2a:4d:0f:52:43:14:ea:ab:3a:e3:a3:10:
         4c:54:f0:3f:fd:7e:56:60:5f:0f:f1:a1:63:3e:26:c8:d6:63:
         2b:41:df:bf:0b:44:2f:a8:38:72:33:e3:16:1b:18:47:e4:df:
         19:df:61:b5:8e:98:81:8f:84:9a:c5:0c:f4:8d:c8:f0:26:19:
         da:c7:7a:f8:04:94:11:ea:08:db:1c:8a:e3:78:81:69:61:a9:
         a9:91:5c:49:56:39:75:3f:2a:a7:56:3f:e3:e0:9c:07:eb:bf:
         10:4a:1c:44:ce:9c:f6:e9:2e:83:c2:01:68:c9:fc:bd:2a:9f:
         a9:7f:2b:79:1d:c4:2f:98:27:27:ef:7e:d1:27:9d:2e:e5:b1:
         c5:7f:0b:eb:85:38:69:64:0f:88:21:77:d6:9d:b1:35:4b:c9:
         64:5f:e8:46:84:76:5f:2f:7e:ca:2d:3f:06:2d:f7:37:aa:ee:
         3e:8e:07:fa
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUWFCtk7xW3WNVzZiMjmF4GtS6cIMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTVDRTY3NDk1MkE5M0JFNzNDMTBCNDE2RUIwRUUzNTAx
MDgzMjA5NDAeFw0yNDA5MjIyMTM1MDhaFw0yNTA5MjEyMTQwMDhaMDMxMTAvBgNV
BAMTKDM0NTJCMjE5NjE5RjQ1QjRBODc4MkQwMkFEQjYwNzBDRjMwN0NGNUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCPqr8ijWRJLjIkjFl8k5MolimZ
ZefycgRG8lHtg6tHti2lk6PtEKD4/fOLVMYsh8yw3wzB5VZfAVa3/qv3eZYqcuFd
P9L1HTthWvhuM+uXQrr6fhqsSXsmmCgZ8VPP+9I1R6teCMTL8mmrquAM/kAD7ELt
m2O5NlneHFHMiF8/t8DfIA2F5HOGagzGfs/p/VkikH/soCb/9hOQFo+83rJ/8ooK
7JT0rc/fw11Txe1RWzUWKTSCKmuLYT11aS0jSvrMbcfMl/EwUuxnjahnSK3ZqgQ6
dpBkDQXPoNRRXAg3V5U2ky2AYHKzIVWXcLWhmAPKy4wOzWEa8kcmuqn9940FAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUNFKyGWGfRbSoeC0CrbYHDPMHz1owHwYDVR0j
BBgwFoAUlc5nSVKpO+c8ELQW6w7jUBCDIJQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNWtoN1UxbWFCN0NFazk0TnljaEJwV2kxWXpYRkc5RVY1eFJhYW5MOXdW
M3YvMC85NUNFNjc0OTUyQTkzQkU3M0MxMEI0MTZFQjBFRTM1MDEwODMyMDk0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzk1Q0U2NzQ5NTJBOTNCRTcz
QzEwQjQxNkVCMEVFMzUwMTA4MzIwOTQuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzVraDdVMW1hQjdDRWs5NE55Y2hCcFdpMVl6WEZHOUVWNXhSYWFuTDl3VjN2LzAv
MzEzNjM4MmUzMDJlMzEzNTM4MmUzMDJmMzIzMzJkMzIzMzIwM2QzZTIwMzIzNjM1
MzIzNTM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQBqACeMA0GCSqGSIb3DQEBCwUAA4IBAQAcKY1ypShd
i/dUejjEFeCPPnP7cVN4OzG/oDACh25aC2KbiZg/zc0dv+UPAMoGa3vkKTdkhPrO
BqGs52Hjjtnoe7p6Fagbl6I/3XVgT7IqTQ9SQxTqqzrjoxBMVPA//X5WYF8P8aFj
PibI1mMrQd+/C0QvqDhyM+MWGxhH5N8Z32G1jpiBj4SaxQz0jcjwJhnax3r4BJQR
6gjbHIrjeIFpYampkVxJVjl1PyqnVj/j4JwH678QShxEzpz26S6DwgFoyfy9Kp+p
fyt5HcQvmCcn737RJ50u5bHFfwvrhThpZA+IIXfWnbE1S8lkX+hGhHZfL37KLT8G
Lfc3qu4+jgf6
-----END CERTIFICATE-----
Generated at Fri Nov 29 18:58:04 2024 by rpki-client on console-fra.rpki-client.org