Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/64TWQ84Swgi5q85Jt7XdESE16VPzvbpNtujHV6yzzKwA/1/3136382e3139372e3231322e302f32332d3233203d3e20323632383638.roa
File:                     3136382e3139372e3231322e302f32332d3233203d3e20323632383638.roa (raw, json)
Hash identifier:          O9OA1ujPyWZGNh5/cq6gkOPZmQI+uv1PCtjGtFYAdBU=
Subject key identifier:   A5:03:06:47:23:3B:2C:45:2C:54:0A:45:63:99:4C:76:13:06:42:20
Certificate issuer:       /CN=BAE2D54D6C1793B7DCD774699216D316E8C75351
Certificate serial:       43C975C131EF5D5A3024E565BE096616280A33C4
Authority key identifier: BA:E2:D5:4D:6C:17:93:B7:DC:D7:74:69:92:16:D3:16:E8:C7:53:51
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BAE2D54D6C1793B7DCD774699216D316E8C75351.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/64TWQ84Swgi5q85Jt7XdESE16VPzvbpNtujHV6yzzKwA/1/3136382e3139372e3231322e302f32332d3233203d3e20323632383638.roa
Signing time:             Thu 04 Apr 2024 11:06:57 +0000
ROA not before:           Thu 04 Apr 2024 11:01:57 +0000
ROA not after:            Thu 03 Apr 2025 11:06:57 +0000
asID:                     262868
IP address blocks:        168.197.212.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/64TWQ84Swgi5q85Jt7XdESE16VPzvbpNtujHV6yzzKwA/1/BAE2D54D6C1793B7DCD774699216D316E8C75351.crl
                          rsync://rpki-repo.registro.br/repo/64TWQ84Swgi5q85Jt7XdESE16VPzvbpNtujHV6yzzKwA/1/BAE2D54D6C1793B7DCD774699216D316E8C75351.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BAE2D54D6C1793B7DCD774699216D316E8C75351.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:c9:75:c1:31:ef:5d:5a:30:24:e5:65:be:09:66:16:28:0a:33:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BAE2D54D6C1793B7DCD774699216D316E8C75351
        Validity
            Not Before: Apr  4 11:01:57 2024 GMT
            Not After : Apr  3 11:06:57 2025 GMT
        Subject: CN=A5030647233B2C452C540A4563994C7613064220
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:c9:cc:7b:0d:c4:84:2e:d3:d7:b7:bd:60:b4:
                    fd:6a:28:b7:43:a8:80:5b:3e:e8:b1:5a:cc:c4:07:
                    da:43:0f:a4:6b:54:fa:1c:e4:51:e0:9e:68:8c:0a:
                    ed:db:19:4b:a0:7a:42:b6:95:73:9e:a4:7f:07:7a:
                    dd:a1:f9:2f:07:31:14:3c:2b:08:9b:78:0a:81:9a:
                    ff:4d:73:9b:c0:c0:e4:73:fb:c9:d6:86:80:37:91:
                    ab:c3:3d:36:9c:a0:76:dc:18:52:68:69:b8:1d:7c:
                    29:42:e9:de:c4:4c:87:9e:b1:0f:0a:d7:de:67:e0:
                    7b:d0:a8:55:23:6f:4f:86:1d:c9:80:8b:f5:c2:c9:
                    39:b6:aa:e4:8c:4a:56:0a:78:f3:14:19:32:ef:ff:
                    6e:12:99:58:93:4f:ea:61:24:29:b7:ca:56:f4:cd:
                    e1:b8:5f:55:e4:31:a4:c8:2e:69:60:08:ce:c6:a1:
                    a3:b9:f5:b7:17:fb:37:23:93:5e:a6:70:68:e5:7c:
                    42:6a:7e:6a:f8:ba:b5:c2:8d:0c:77:c4:57:b6:12:
                    b5:ac:49:46:04:7a:09:aa:57:1a:ed:25:ed:cb:95:
                    44:d9:2b:06:b9:40:5f:94:e3:e6:70:dc:4f:05:88:
                    3b:60:bc:c1:e6:02:55:64:4b:48:28:52:84:5f:1a:
                    6d:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:03:06:47:23:3B:2C:45:2C:54:0A:45:63:99:4C:76:13:06:42:20
            X509v3 Authority Key Identifier:
                keyid:BA:E2:D5:4D:6C:17:93:B7:DC:D7:74:69:92:16:D3:16:E8:C7:53:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/64TWQ84Swgi5q85Jt7XdESE16VPzvbpNtujHV6yzzKwA/1/BAE2D54D6C1793B7DCD774699216D316E8C75351.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BAE2D54D6C1793B7DCD774699216D316E8C75351.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/64TWQ84Swgi5q85Jt7XdESE16VPzvbpNtujHV6yzzKwA/1/3136382e3139372e3231322e302f32332d3233203d3e20323632383638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.197.212.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6c:9a:38:3d:ba:33:30:6a:e9:56:80:84:e7:28:47:af:79:ca:
         18:0b:36:8b:6e:c0:66:06:cc:ca:54:5a:9b:b1:01:cb:6a:f6:
         a6:b3:4d:bd:2a:33:48:52:de:cd:72:4a:d3:2f:65:38:76:8c:
         3d:b6:df:6c:8f:48:fa:ed:11:9b:92:c3:08:61:2d:f6:87:04:
         c4:6d:e2:7d:8e:d6:1a:3a:d0:b4:be:4b:21:c6:4d:69:13:31:
         56:89:5a:74:33:a2:95:c5:0a:88:d7:19:32:dd:01:38:cb:19:
         42:e3:fc:dd:82:7e:df:c6:bf:d0:32:97:57:4d:2f:f0:dc:f4:
         0f:8c:7f:7f:fb:88:7f:97:b3:1a:d9:b6:9b:da:b3:21:0b:52:
         82:be:8a:9b:47:5f:3a:86:26:d8:c6:2a:28:67:ad:29:4d:7a:
         be:99:e7:a6:ab:c3:29:69:df:10:a6:73:e3:cf:41:98:7c:4a:
         4a:db:5c:06:92:e4:e6:59:d9:02:12:86:ec:b0:ff:97:b8:1b:
         d1:00:7c:42:4d:f3:63:ab:3c:6c:2e:bf:bc:6c:94:f1:67:ae:
         d0:11:9c:2b:bd:06:11:4e:4c:e9:ab:af:6a:56:19:a6:64:47:
         57:46:29:d0:07:44:ee:69:7c:db:45:67:d1:ed:5e:36:ab:b9:
         2e:cb:ed:8d
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUQ8l1wTHvXVowJOVlvglmFigKM8QwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkFFMkQ1NEQ2QzE3OTNCN0RDRDc3NDY5OTIxNkQzMTZF
OEM3NTM1MTAeFw0yNDA0MDQxMTAxNTdaFw0yNTA0MDMxMTA2NTdaMDMxMTAvBgNV
BAMTKEE1MDMwNjQ3MjMzQjJDNDUyQzU0MEE0NTYzOTk0Qzc2MTMwNjQyMjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUycx7DcSELtPXt71gtP1qKLdD
qIBbPuixWszEB9pDD6RrVPoc5FHgnmiMCu3bGUugekK2lXOepH8Het2h+S8HMRQ8
KwibeAqBmv9Nc5vAwORz+8nWhoA3kavDPTacoHbcGFJoabgdfClC6d7ETIeesQ8K
195n4HvQqFUjb0+GHcmAi/XCyTm2quSMSlYKePMUGTLv/24SmViTT+phJCm3ylb0
zeG4X1XkMaTILmlgCM7GoaO59bcX+zcjk16mcGjlfEJqfmr4urXCjQx3xFe2ErWs
SUYEegmqVxrtJe3LlUTZKwa5QF+U4+Zw3E8FiDtgvMHmAlVkS0goUoRfGm2NAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUpQMGRyM7LEUsVApFY5lMdhMGQiAwHwYDVR0j
BBgwFoAUuuLVTWwXk7fc13RpkhbTFujHU1EwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNjRUV1E4NFN3Z2k1cTg1SnQ3WGRFU0UxNlZQenZicE50dWpIVjZ5enpL
d0EvMS9CQUUyRDU0RDZDMTc5M0I3RENENzc0Njk5MjE2RDMxNkU4Qzc1MzUxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0JBRTJENTRENkMxNzkzQjdE
Q0Q3NzQ2OTkyMTZEMzE2RThDNzUzNTEuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzY0VFdRODRTd2dpNXE4NUp0N1hkRVNFMTZWUHp2YnBOdHVqSFY2eXp6S3dBLzEv
MzEzNjM4MmUzMTM5MzcyZTMyMzEzMjJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDMy
MzYzMjM4MzYzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAajF1DANBgkqhkiG9w0BAQsFAAOCAQEAbJo4
PbozMGrpVoCE5yhHr3nKGAs2i27AZgbMylRam7EBy2r2prNNvSozSFLezXJK0y9l
OHaMPbbfbI9I+u0Rm5LDCGEt9ocExG3ifY7WGjrQtL5LIcZNaRMxVoladDOilcUK
iNcZMt0BOMsZQuP83YJ+38a/0DKXV00v8Nz0D4x/f/uIf5ezGtm2m9qzIQtSgr6K
m0dfOoYm2MYqKGetKU16vpnnpqvDKWnfEKZz489BmHxKSttcBpLk5lnZAhKG7LD/
l7gb0QB8Qk3zY6s8bC6/vGyU8Weu0BGcK70GEU5M6auvalYZpmRHV0Yp0AdE7ml8
20Vn0e1eNqu5LsvtjQ==
-----END CERTIFICATE-----
Generated at Sat Nov 23 14:22:34 2024 by rpki-client on console-fra.rpki-client.org