Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/62eHZ4fSK6vNQGdNwNXibZMRXKaUmZVfEmt1ErTuTWEz/1/3136382e3138312e3132342e302f32322d3233203d3e20323635333536.roa
File:                     3136382e3138312e3132342e302f32322d3233203d3e20323635333536.roa (raw, json)
Hash identifier:          /VUL35qAYYbVv0dP25XHuAyHg52fM3US7hSv+m2+g2w=
Subject key identifier:   3E:75:F4:04:70:A2:E3:53:D6:5C:8C:B8:E1:29:A3:AA:E4:B6:68:19
Certificate issuer:       /CN=E3FD3AAEB422FCD9BB429CEA04FB06B5778EC8BC
Certificate serial:       4489F850F80CA40B197DD1EB540517E5337270E8
Authority key identifier: E3:FD:3A:AE:B4:22:FC:D9:BB:42:9C:EA:04:FB:06:B5:77:8E:C8:BC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E3FD3AAEB422FCD9BB429CEA04FB06B5778EC8BC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/62eHZ4fSK6vNQGdNwNXibZMRXKaUmZVfEmt1ErTuTWEz/1/3136382e3138312e3132342e302f32322d3233203d3e20323635333536.roa
Signing time:             Thu 04 Apr 2024 06:40:43 +0000
ROA not before:           Thu 04 Apr 2024 06:35:43 +0000
ROA not after:            Thu 03 Apr 2025 06:40:43 +0000
asID:                     265356
IP address blocks:        168.181.124.0/22 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/62eHZ4fSK6vNQGdNwNXibZMRXKaUmZVfEmt1ErTuTWEz/1/E3FD3AAEB422FCD9BB429CEA04FB06B5778EC8BC.crl
                          rsync://rpki-repo.registro.br/repo/62eHZ4fSK6vNQGdNwNXibZMRXKaUmZVfEmt1ErTuTWEz/1/E3FD3AAEB422FCD9BB429CEA04FB06B5778EC8BC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E3FD3AAEB422FCD9BB429CEA04FB06B5778EC8BC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 18:29:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:89:f8:50:f8:0c:a4:0b:19:7d:d1:eb:54:05:17:e5:33:72:70:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E3FD3AAEB422FCD9BB429CEA04FB06B5778EC8BC
        Validity
            Not Before: Apr  4 06:35:43 2024 GMT
            Not After : Apr  3 06:40:43 2025 GMT
        Subject: CN=3E75F40470A2E353D65C8CB8E129A3AAE4B66819
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:be:b8:e9:a7:ce:36:bc:b4:d0:e7:39:1f:47:
                    75:9c:fe:7e:28:88:a2:26:60:32:d2:ed:51:3d:59:
                    06:e4:08:f1:fa:5d:2f:55:7c:d8:59:60:f3:2a:04:
                    3e:dc:cb:05:9a:86:fd:00:91:23:0e:f4:f5:3b:f4:
                    ce:b2:5d:4b:de:48:1c:b4:6d:8c:28:ec:15:e8:00:
                    64:f7:64:42:0a:43:7c:85:5c:f4:9d:ce:91:cd:99:
                    96:61:66:89:d9:39:33:80:2d:5c:2a:10:4a:0d:f1:
                    6b:fa:91:be:7a:b7:4a:e5:9f:08:f1:d7:f3:0d:ff:
                    6a:ad:ed:24:5d:53:4c:4e:e3:f6:44:6d:b3:59:98:
                    64:37:06:f8:c4:06:9e:79:8b:0b:04:8e:f9:79:cf:
                    8e:7d:85:30:a4:af:c8:cb:01:fb:ea:a1:fa:bf:62:
                    3b:a1:e4:99:1d:e1:67:ab:09:53:9e:15:cb:b0:8d:
                    93:0b:0d:ea:24:66:c0:86:dc:81:37:6b:36:05:8b:
                    e0:dd:8b:ca:86:e2:60:18:16:c0:8e:75:25:c1:ff:
                    b8:d1:9b:5a:95:35:7f:bf:d5:ea:66:1a:77:99:03:
                    62:4e:31:90:56:3c:d5:ab:18:4d:52:1b:60:f9:47:
                    b6:a4:39:a9:be:e9:96:90:e3:0a:82:4f:41:ba:80:
                    76:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:75:F4:04:70:A2:E3:53:D6:5C:8C:B8:E1:29:A3:AA:E4:B6:68:19
            X509v3 Authority Key Identifier:
                keyid:E3:FD:3A:AE:B4:22:FC:D9:BB:42:9C:EA:04:FB:06:B5:77:8E:C8:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/62eHZ4fSK6vNQGdNwNXibZMRXKaUmZVfEmt1ErTuTWEz/1/E3FD3AAEB422FCD9BB429CEA04FB06B5778EC8BC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E3FD3AAEB422FCD9BB429CEA04FB06B5778EC8BC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/62eHZ4fSK6vNQGdNwNXibZMRXKaUmZVfEmt1ErTuTWEz/1/3136382e3138312e3132342e302f32322d3233203d3e20323635333536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.181.124.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7e:d2:f6:26:31:77:e8:81:66:08:0f:c7:25:30:93:90:9d:b4:
         79:e2:c9:f4:a9:06:ec:aa:e7:91:20:79:91:46:a5:f2:a8:10:
         e3:fc:a5:8f:eb:64:c7:7b:2f:63:87:67:de:95:ef:75:c7:35:
         22:f6:cd:30:9b:2a:be:73:3c:90:53:7f:a4:b4:a8:2c:c1:dc:
         a8:b5:4d:44:28:1b:ba:57:a9:f5:b8:95:37:1e:c5:48:39:39:
         48:4c:7e:78:98:41:ec:b7:f3:25:58:9b:a2:8e:b9:e1:e6:96:
         cf:95:59:9b:ca:8a:94:9b:0c:9c:6a:9a:a0:59:c8:8e:ad:bf:
         87:ae:20:ea:15:4f:2b:03:ae:c2:5e:89:19:c1:4f:52:da:72:
         3c:2f:58:a5:0e:1e:af:5a:34:3b:a9:37:de:36:c6:f4:6f:37:
         d3:88:24:1d:69:3c:9d:b4:55:bd:5f:c3:08:73:24:b1:65:40:
         0f:c4:a9:44:bf:64:b0:2b:07:62:86:41:e3:d1:b2:09:b3:dd:
         a4:a4:33:4c:c2:56:10:e4:2b:e4:7a:6f:b6:2a:e0:95:93:9c:
         da:33:11:45:36:c1:01:e1:d7:a5:54:25:8d:cf:6c:01:11:73:
         98:99:c5:a8:c6:02:0d:82:8f:b2:81:c9:f6:f1:4d:5f:38:72:
         43:44:ff:75
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIURIn4UPgMpAsZfdHrVAUX5TNycOgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTNGRDNBQUVCNDIyRkNEOUJCNDI5Q0VBMDRGQjA2QjU3
NzhFQzhCQzAeFw0yNDA0MDQwNjM1NDNaFw0yNTA0MDMwNjQwNDNaMDMxMTAvBgNV
BAMTKDNFNzVGNDA0NzBBMkUzNTNENjVDOENCOEUxMjlBM0FBRTRCNjY4MTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZvrjpp842vLTQ5zkfR3Wc/n4o
iKImYDLS7VE9WQbkCPH6XS9VfNhZYPMqBD7cywWahv0AkSMO9PU79M6yXUveSBy0
bYwo7BXoAGT3ZEIKQ3yFXPSdzpHNmZZhZonZOTOALVwqEEoN8Wv6kb56t0rlnwjx
1/MN/2qt7SRdU0xO4/ZEbbNZmGQ3BvjEBp55iwsEjvl5z459hTCkr8jLAfvqofq/
Yjuh5Jkd4WerCVOeFcuwjZMLDeokZsCG3IE3azYFi+Ddi8qG4mAYFsCOdSXB/7jR
m1qVNX+/1epmGneZA2JOMZBWPNWrGE1SG2D5R7akOam+6ZaQ4wqCT0G6gHbtAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUPnX0BHCi41PWXIy44SmjquS2aBkwHwYDVR0j
BBgwFoAU4/06rrQi/Nm7QpzqBPsGtXeOyLwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNjJlSFo0ZlNLNnZOUUdkTndOWGliWk1SWEthVW1aVmZFbXQxRXJUdVRX
RXovMS9FM0ZEM0FBRUI0MjJGQ0Q5QkI0MjlDRUEwNEZCMDZCNTc3OEVDOEJDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0UzRkQzQUFFQjQyMkZDRDlC
QjQyOUNFQTA0RkIwNkI1Nzc4RUM4QkMuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzYyZUhaNGZTSzZ2TlFHZE53TlhpYlpNUlhLYVVtWlZmRW10MUVyVHVUV0V6LzEv
MzEzNjM4MmUzMTM4MzEyZTMxMzIzNDJlMzAyZjMyMzIyZDMyMzMyMDNkM2UyMDMy
MzYzNTMzMzUzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAqi1fDANBgkqhkiG9w0BAQsFAAOCAQEAftL2
JjF36IFmCA/HJTCTkJ20eeLJ9KkG7KrnkSB5kUal8qgQ4/ylj+tkx3svY4dn3pXv
dcc1IvbNMJsqvnM8kFN/pLSoLMHcqLVNRCgbulep9biVNx7FSDk5SEx+eJhB7Lfz
JViboo654eaWz5VZm8qKlJsMnGqaoFnIjq2/h64g6hVPKwOuwl6JGcFPUtpyPC9Y
pQ4er1o0O6k33jbG9G8304gkHWk8nbRVvV/DCHMksWVAD8SpRL9ksCsHYoZB49Gy
CbPdpKQzTMJWEOQr5HpvtirglZOc2jMRRTbBAeHXpVQljc9sARFzmJnFqMYCDYKP
soHJ9vFNXzhyQ0T/dQ==
-----END CERTIFICATE-----
Generated at Fri Nov 22 19:42:16 2024 by rpki-client on console-fra.rpki-client.org