Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/75cZdGnxZHm2tetjABVfwtQZ7fNT5hj2wWV48tCmEetS/1/3136382e3232382e3137372e302f32342d3234203d3e20323634393236.roa
File:                     3136382e3232382e3137372e302f32342d3234203d3e20323634393236.roa (raw, json)
Hash identifier:          wYFsTZD9SHkQi+owI3jbpm11n6fC56CrB9zxx+MKqEE=
Subject key identifier:   18:A3:E4:36:34:CF:37:DB:CF:69:0D:A0:AD:9F:3F:85:B8:8D:A4:61
Certificate issuer:       /CN=29693FC359A5A86688559CF55626142C53AF60AF
Certificate serial:       47734296D650A4D8B786455A57C74001AF8CBF14
Authority key identifier: 29:69:3F:C3:59:A5:A8:66:88:55:9C:F5:56:26:14:2C:53:AF:60:AF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/29693FC359A5A86688559CF55626142C53AF60AF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/75cZdGnxZHm2tetjABVfwtQZ7fNT5hj2wWV48tCmEetS/1/3136382e3232382e3137372e302f32342d3234203d3e20323634393236.roa
Signing time:             Fri 05 Apr 2024 00:35:23 +0000
ROA not before:           Fri 05 Apr 2024 00:30:23 +0000
ROA not after:            Fri 04 Apr 2025 00:35:23 +0000
asID:                     264926
IP address blocks:        168.228.177.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/75cZdGnxZHm2tetjABVfwtQZ7fNT5hj2wWV48tCmEetS/1/29693FC359A5A86688559CF55626142C53AF60AF.crl
                          rsync://rpki-repo.registro.br/repo/75cZdGnxZHm2tetjABVfwtQZ7fNT5hj2wWV48tCmEetS/1/29693FC359A5A86688559CF55626142C53AF60AF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/29693FC359A5A86688559CF55626142C53AF60AF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 23:26:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:73:42:96:d6:50:a4:d8:b7:86:45:5a:57:c7:40:01:af:8c:bf:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29693FC359A5A86688559CF55626142C53AF60AF
        Validity
            Not Before: Apr  5 00:30:23 2024 GMT
            Not After : Apr  4 00:35:23 2025 GMT
        Subject: CN=18A3E43634CF37DBCF690DA0AD9F3F85B88DA461
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:49:39:db:ca:69:68:7c:54:f2:54:52:54:ad:
                    ee:9b:5c:85:4c:1d:89:0f:7c:7d:a1:83:5a:2d:57:
                    0f:2a:65:58:5f:38:48:02:fe:f9:1a:bc:da:46:e7:
                    05:be:05:8b:67:43:17:8c:5f:60:79:81:cf:17:3b:
                    75:59:b1:40:82:49:eb:e8:0d:a3:50:30:5f:bb:c1:
                    f7:e9:de:26:fe:28:38:b8:de:70:7a:8c:35:83:82:
                    70:ec:cf:c9:d2:b6:8f:55:c3:24:a8:21:0b:9a:9c:
                    57:96:08:b0:30:1e:5d:98:ae:5f:04:8c:29:20:4f:
                    6f:8d:ee:1e:a7:7c:f6:73:31:5c:a2:53:ab:05:8b:
                    09:ce:08:fc:b0:f3:9d:80:3a:67:82:ba:57:46:58:
                    69:c3:17:7d:c6:11:03:e4:ef:db:bf:40:e5:4b:dc:
                    e7:f5:84:00:ad:52:fd:4f:3c:5d:f7:fb:82:5a:b2:
                    39:93:45:0b:8b:8d:1b:d9:8e:41:e8:4a:1b:99:2c:
                    c1:00:8c:e6:72:8f:22:e9:2a:43:e7:cf:3a:c0:17:
                    e9:b3:3a:6f:f6:e3:56:0d:77:bb:cb:53:76:93:f0:
                    76:a5:78:d3:4c:f9:8d:2c:a0:90:43:aa:22:ba:dc:
                    5c:dc:b4:57:09:86:c4:11:9e:71:9f:a4:58:bb:5c:
                    ae:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:A3:E4:36:34:CF:37:DB:CF:69:0D:A0:AD:9F:3F:85:B8:8D:A4:61
            X509v3 Authority Key Identifier:
                keyid:29:69:3F:C3:59:A5:A8:66:88:55:9C:F5:56:26:14:2C:53:AF:60:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/75cZdGnxZHm2tetjABVfwtQZ7fNT5hj2wWV48tCmEetS/1/29693FC359A5A86688559CF55626142C53AF60AF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/29693FC359A5A86688559CF55626142C53AF60AF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/75cZdGnxZHm2tetjABVfwtQZ7fNT5hj2wWV48tCmEetS/1/3136382e3232382e3137372e302f32342d3234203d3e20323634393236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.228.177.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9a:ea:81:6a:f7:f2:07:72:4c:d3:66:f2:46:c0:62:09:87:66:
         a6:0b:b7:e0:f9:58:06:95:d6:fb:f8:57:c2:fd:ec:db:02:0b:
         b3:a4:4d:30:dd:ac:ed:10:84:64:c6:dc:2e:d5:63:1f:ce:8a:
         db:0e:ed:5c:40:cc:d1:0d:d7:07:18:0f:13:fd:ff:1c:10:ae:
         cd:3a:d6:64:92:7b:72:b7:ed:e0:88:7c:06:85:31:09:2f:63:
         c6:3d:53:cc:4c:e4:08:a5:3b:9c:13:49:ad:2d:0c:0f:9c:26:
         1f:fb:32:0a:7d:64:77:4b:64:3c:2f:34:f5:52:97:66:ab:dd:
         db:d5:6e:41:91:b1:b1:03:44:02:7b:bc:e9:41:99:27:de:42:
         d9:d7:e6:3c:66:47:28:70:20:42:04:50:6f:39:f1:02:f0:8e:
         27:04:40:e9:1c:eb:bc:de:e3:93:1c:7b:4d:9a:4a:d4:c3:b1:
         a1:1b:24:bd:35:8d:29:dd:b5:16:90:f5:09:2f:33:02:bd:ee:
         49:9d:cb:eb:76:1a:09:ba:5c:e3:04:71:5f:61:ba:b0:39:6c:
         89:0f:8c:c8:5d:1c:74:68:2f:8d:a1:35:03:3f:9d:cc:b9:8d:
         47:e1:3d:18:53:8f:bd:65:78:1e:f4:6a:d8:20:63:fb:54:54:
         a3:58:2a:37
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUR3NCltZQpNi3hkVaV8dAAa+MvxQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjk2OTNGQzM1OUE1QTg2Njg4NTU5Q0Y1NTYyNjE0MkM1
M0FGNjBBRjAeFw0yNDA0MDUwMDMwMjNaFw0yNTA0MDQwMDM1MjNaMDMxMTAvBgNV
BAMTKDE4QTNFNDM2MzRDRjM3REJDRjY5MERBMEFEOUYzRjg1Qjg4REE0NjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDtSTnbymlofFTyVFJUre6bXIVM
HYkPfH2hg1otVw8qZVhfOEgC/vkavNpG5wW+BYtnQxeMX2B5gc8XO3VZsUCCSevo
DaNQMF+7wffp3ib+KDi43nB6jDWDgnDsz8nSto9VwySoIQuanFeWCLAwHl2Yrl8E
jCkgT2+N7h6nfPZzMVyiU6sFiwnOCPyw852AOmeCuldGWGnDF33GEQPk79u/QOVL
3Of1hACtUv1PPF33+4JasjmTRQuLjRvZjkHoShuZLMEAjOZyjyLpKkPnzzrAF+mz
Om/241YNd7vLU3aT8HaleNNM+Y0soJBDqiK63FzctFcJhsQRnnGfpFi7XK5hAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUGKPkNjTPN9vPaQ2grZ8/hbiNpGEwHwYDVR0j
BBgwFoAUKWk/w1mlqGaIVZz1ViYULFOvYK8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNzVjWmRHbnhaSG0ydGV0akFCVmZ3dFFaN2ZOVDVoajJ3V1Y0OHRDbUVl
dFMvMS8yOTY5M0ZDMzU5QTVBODY2ODg1NTlDRjU1NjI2MTQyQzUzQUY2MEFGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzI5NjkzRkMzNTlBNUE4NjY4
ODU1OUNGNTU2MjYxNDJDNTNBRjYwQUYuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
Lzc1Y1pkR254WkhtMnRldGpBQlZmd3RRWjdmTlQ1aGoyd1dWNDh0Q21FZXRTLzEv
MzEzNjM4MmUzMjMyMzgyZTMxMzczNzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzYzNDM5MzIzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAKjksTANBgkqhkiG9w0BAQsFAAOCAQEAmuqB
avfyB3JM02byRsBiCYdmpgu34PlYBpXW+/hXwv3s2wILs6RNMN2s7RCEZMbcLtVj
H86K2w7tXEDM0Q3XBxgPE/3/HBCuzTrWZJJ7crft4Ih8BoUxCS9jxj1TzEzkCKU7
nBNJrS0MD5wmH/syCn1kd0tkPC809VKXZqvd29VuQZGxsQNEAnu86UGZJ95C2dfm
PGZHKHAgQgRQbznxAvCOJwRA6RzrvN7jkxx7TZpK1MOxoRskvTWNKd21FpD1CS8z
Ar3uSZ3L63YaCbpc4wRxX2G6sDlsiQ+MyF0cdGgvjaE1Az+dzLmNR+E9GFOPvWV4
HvRq2CBj+1RUo1gqNw==
-----END CERTIFICATE-----
Generated at Fri Jun 28 22:39:35 2024 by rpki-client on console-fra.rpki-client.org