Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7WasHZ9MmMGw4dYcqHGhNWFHam8UWQe5BufnG4LJDp2j/0/3136302e3233382e3232342e302f32322d3232203d3e20323636353531.roa
File:                     3136302e3233382e3232342e302f32322d3232203d3e20323636353531.roa (raw, json)
Hash identifier:          FkgHqu+Xq3M95k0W4xE6SNUumb0a8fgHV6DKj0pageg=
Subject key identifier:   15:2A:63:AC:11:F4:0E:64:8C:4E:B9:85:F9:37:57:C7:13:F9:77:99
Certificate issuer:       /CN=F526D2FD9A3EC26ED6E3EAD611E594E6BE0A2E99
Certificate serial:       0B5409142E4C0C503B9D9CB63DDCBAEAFDB4B0BC
Authority key identifier: F5:26:D2:FD:9A:3E:C2:6E:D6:E3:EA:D6:11:E5:94:E6:BE:0A:2E:99
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F526D2FD9A3EC26ED6E3EAD611E594E6BE0A2E99.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7WasHZ9MmMGw4dYcqHGhNWFHam8UWQe5BufnG4LJDp2j/0/3136302e3233382e3232342e302f32322d3232203d3e20323636353531.roa
Signing time:             Thu 15 Aug 2024 17:11:57 +0000
ROA not before:           Thu 15 Aug 2024 17:06:57 +0000
ROA not after:            Thu 14 Aug 2025 17:11:57 +0000
asID:                     266551
IP address blocks:        160.238.224.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7WasHZ9MmMGw4dYcqHGhNWFHam8UWQe5BufnG4LJDp2j/0/F526D2FD9A3EC26ED6E3EAD611E594E6BE0A2E99.crl
                          rsync://rpki-repo.registro.br/repo/7WasHZ9MmMGw4dYcqHGhNWFHam8UWQe5BufnG4LJDp2j/0/F526D2FD9A3EC26ED6E3EAD611E594E6BE0A2E99.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F526D2FD9A3EC26ED6E3EAD611E594E6BE0A2E99.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 04:25:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:54:09:14:2e:4c:0c:50:3b:9d:9c:b6:3d:dc:ba:ea:fd:b4:b0:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F526D2FD9A3EC26ED6E3EAD611E594E6BE0A2E99
        Validity
            Not Before: Aug 15 17:06:57 2024 GMT
            Not After : Aug 14 17:11:57 2025 GMT
        Subject: CN=152A63AC11F40E648C4EB985F93757C713F97799
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:73:f0:98:5b:32:d0:9b:fc:6c:db:1c:bb:8f:
                    d8:74:f0:e1:af:26:b7:d9:06:25:61:f5:57:99:63:
                    d6:cd:ad:5d:d8:b3:4a:ad:75:7b:f8:1b:48:9a:96:
                    b1:3e:cf:a6:08:d1:0e:87:6a:5b:ee:91:c3:41:b2:
                    25:6b:2f:62:18:79:e4:a5:f0:9e:18:fd:18:f7:3e:
                    58:14:ea:be:80:e0:ec:89:bb:5d:dd:f7:52:01:f5:
                    af:0d:98:e6:ca:ec:8c:18:b6:6d:3a:53:bd:da:76:
                    52:4d:5f:7d:b5:13:28:10:80:76:2d:c4:b5:c6:d7:
                    d2:8f:97:7c:dc:78:1c:dd:76:b1:3b:36:fa:82:18:
                    1a:0c:77:1d:60:43:a6:5d:1a:e0:26:f1:95:a3:01:
                    c6:a0:51:15:f9:da:b6:da:cf:4c:6d:52:4f:16:53:
                    a0:2d:05:e7:9b:0f:50:3f:4f:b9:56:82:fb:1c:a4:
                    b8:d3:13:9a:83:79:06:3b:92:9f:50:d8:fc:bf:92:
                    9d:cb:a9:33:be:27:7d:ea:37:bf:bd:f9:73:92:78:
                    1b:c1:bb:ae:61:bd:46:e4:19:fc:70:13:8b:72:bc:
                    f4:6c:35:a5:2d:c6:ea:40:0f:bd:c5:47:39:cc:34:
                    2b:2f:b4:3c:d2:97:30:36:4b:82:bc:0f:97:14:81:
                    81:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:2A:63:AC:11:F4:0E:64:8C:4E:B9:85:F9:37:57:C7:13:F9:77:99
            X509v3 Authority Key Identifier:
                keyid:F5:26:D2:FD:9A:3E:C2:6E:D6:E3:EA:D6:11:E5:94:E6:BE:0A:2E:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7WasHZ9MmMGw4dYcqHGhNWFHam8UWQe5BufnG4LJDp2j/0/F526D2FD9A3EC26ED6E3EAD611E594E6BE0A2E99.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F526D2FD9A3EC26ED6E3EAD611E594E6BE0A2E99.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7WasHZ9MmMGw4dYcqHGhNWFHam8UWQe5BufnG4LJDp2j/0/3136302e3233382e3232342e302f32322d3232203d3e20323636353531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.238.224.0/22

    Signature Algorithm: sha256WithRSAEncryption
         95:51:e7:19:7a:79:e9:e8:6a:67:3f:ef:7c:9d:ca:e0:6f:2f:
         07:0b:26:86:15:f1:90:32:ad:56:72:e4:c3:44:07:00:27:3d:
         22:8d:66:e4:f1:9d:57:11:21:31:ae:0d:13:9f:2c:8d:31:0f:
         95:d2:d0:0c:20:20:76:be:07:f6:3b:b6:db:bc:cd:96:50:0d:
         8e:02:a5:c4:36:b3:26:2f:94:6a:1b:a7:07:2e:22:27:5b:84:
         1d:7d:8e:08:2d:fa:5d:ac:a6:86:82:82:59:0a:ef:78:28:8a:
         bc:de:a8:ca:33:3c:ac:ea:68:5d:1d:be:0c:9a:26:91:c2:fd:
         9b:77:e0:ec:d5:fc:ca:b3:d2:49:8a:e2:74:21:2b:37:70:70:
         9d:5a:b2:71:8e:88:9e:21:59:98:97:25:89:6c:76:33:87:85:
         cd:8b:78:94:24:63:24:44:7a:64:b4:9b:7e:29:85:76:a5:3d:
         66:a5:da:f8:b4:e5:b9:16:8b:84:19:b7:73:60:2c:80:56:5f:
         80:1f:c5:7d:da:3a:d6:43:11:70:74:b4:87:03:17:d8:c2:71:
         f8:d5:68:71:04:45:63:2c:01:18:7e:02:95:f9:0d:8e:76:e8:
         9a:72:6a:8e:10:02:35:6b:4c:9d:89:81:2f:08:c7:d4:d1:54:
         ba:63:d7:8b
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUC1QJFC5MDFA7nZy2Pdy66v20sLwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjUyNkQyRkQ5QTNFQzI2RUQ2RTNFQUQ2MTFFNTk0RTZC
RTBBMkU5OTAeFw0yNDA4MTUxNzA2NTdaFw0yNTA4MTQxNzExNTdaMDMxMTAvBgNV
BAMTKDE1MkE2M0FDMTFGNDBFNjQ4QzRFQjk4NUY5Mzc1N0M3MTNGOTc3OTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0c/CYWzLQm/xs2xy7j9h08OGv
JrfZBiVh9VeZY9bNrV3Ys0qtdXv4G0ialrE+z6YI0Q6HalvukcNBsiVrL2IYeeSl
8J4Y/Rj3PlgU6r6A4OyJu13d91IB9a8NmObK7IwYtm06U73adlJNX321EygQgHYt
xLXG19KPl3zceBzddrE7NvqCGBoMdx1gQ6ZdGuAm8ZWjAcagURX52rbaz0xtUk8W
U6AtBeebD1A/T7lWgvscpLjTE5qDeQY7kp9Q2Py/kp3LqTO+J33qN7+9+XOSeBvB
u65hvUbkGfxwE4tyvPRsNaUtxupAD73FRznMNCsvtDzSlzA2S4K8D5cUgYFtAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUFSpjrBH0DmSMTrmF+TdXxxP5d5kwHwYDVR0j
BBgwFoAU9SbS/Zo+wm7W4+rWEeWU5r4KLpkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN1dhc0haOU1tTUd3NGRZY3FIR2hOV0ZIYW04VVdRZTVCdWZuRzRMSkRw
MmovMC9GNTI2RDJGRDlBM0VDMjZFRDZFM0VBRDYxMUU1OTRFNkJFMEEyRTk5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Y1MjZEMkZEOUEzRUMyNkVE
NkUzRUFENjExRTU5NEU2QkUwQTJFOTkuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzdXYXNIWjlNbU1HdzRkWWNxSEdoTldGSGFtOFVXUWU1QnVmbkc0TEpEcDJqLzAv
MzEzNjMwMmUzMjMzMzgyZTMyMzIzNDJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDMy
MzYzNjM1MzUzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAqDu4DANBgkqhkiG9w0BAQsFAAOCAQEAlVHn
GXp56ehqZz/vfJ3K4G8vBwsmhhXxkDKtVnLkw0QHACc9Io1m5PGdVxEhMa4NE58s
jTEPldLQDCAgdr4H9ju227zNllANjgKlxDazJi+UahunBy4iJ1uEHX2OCC36Xaym
hoKCWQrveCiKvN6oyjM8rOpoXR2+DJomkcL9m3fg7NX8yrPSSYridCErN3BwnVqy
cY6IniFZmJcliWx2M4eFzYt4lCRjJER6ZLSbfimFdqU9ZqXa+LTluRaLhBm3c2As
gFZfgB/Ffdo61kMRcHS0hwMX2MJx+NVocQRFYywBGH4ClfkNjnbomnJqjhACNWtM
nYmBLwjH1NFUumPXiw==
-----END CERTIFICATE-----
Generated at Tue Nov 26 02:15:49 2024 by rpki-client on console-fra.rpki-client.org