Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7rAziowefNmFrwbW51SyPKaD3H1wNUj1JwUPwgujmacU/2/3136382e3139352e3131322e302f32322d3332203d3e20323032.roa
File:                     3136382e3139352e3131322e302f32322d3332203d3e20323032.roa (raw, json)
Hash identifier:          5ogR+nfRfW18OnR2iRCxmoxYMyXDkhv3fwZ5aYTyO48=
Subject key identifier:   49:84:FF:F1:1C:BB:5C:93:E8:8E:8B:EB:E1:4B:9C:2B:5C:DA:30:C5
Certificate issuer:       /CN=4C331098B84DC9296BBDAEE9D2C05BE2AC3CC5A2
Certificate serial:       2B5C9E57FA3391CFCFB0D02F26A89BFE4D0A2A03
Authority key identifier: 4C:33:10:98:B8:4D:C9:29:6B:BD:AE:E9:D2:C0:5B:E2:AC:3C:C5:A2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4C331098B84DC9296BBDAEE9D2C05BE2AC3CC5A2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7rAziowefNmFrwbW51SyPKaD3H1wNUj1JwUPwgujmacU/2/3136382e3139352e3131322e302f32322d3332203d3e20323032.roa
Signing time:             Thu 04 Apr 2024 00:30:18 +0000
ROA not before:           Thu 04 Apr 2024 00:25:18 +0000
ROA not after:            Thu 03 Apr 2025 00:30:18 +0000
asID:                     202
IP address blocks:        168.195.112.0/22 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7rAziowefNmFrwbW51SyPKaD3H1wNUj1JwUPwgujmacU/2/4C331098B84DC9296BBDAEE9D2C05BE2AC3CC5A2.crl
                          rsync://rpki-repo.registro.br/repo/7rAziowefNmFrwbW51SyPKaD3H1wNUj1JwUPwgujmacU/2/4C331098B84DC9296BBDAEE9D2C05BE2AC3CC5A2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4C331098B84DC9296BBDAEE9D2C05BE2AC3CC5A2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 25 Nov 2024 22:48:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:5c:9e:57:fa:33:91:cf:cf:b0:d0:2f:26:a8:9b:fe:4d:0a:2a:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4C331098B84DC9296BBDAEE9D2C05BE2AC3CC5A2
        Validity
            Not Before: Apr  4 00:25:18 2024 GMT
            Not After : Apr  3 00:30:18 2025 GMT
        Subject: CN=4984FFF11CBB5C93E88E8BEBE14B9C2B5CDA30C5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:c7:7f:2d:46:1d:b5:73:b8:47:45:31:aa:e5:
                    bc:d6:68:d6:b7:61:52:a6:54:11:1c:87:00:70:70:
                    e4:87:41:5f:f7:41:5e:2d:dd:34:e5:72:de:60:1c:
                    86:41:8f:50:7e:f6:f0:a4:bf:50:a9:0a:38:c8:28:
                    02:c8:fb:82:f4:73:17:2c:d6:99:db:e9:d3:4a:45:
                    b0:d3:c3:80:e3:d8:e0:fe:9e:b2:50:30:a7:cc:af:
                    f3:b2:43:98:ff:71:36:ac:92:ef:66:61:44:c3:bd:
                    be:b7:59:5b:38:f0:77:f8:05:eb:40:09:23:30:a7:
                    fc:bf:00:75:54:2f:e9:a7:de:5a:c0:c2:b1:67:51:
                    8d:03:e4:90:eb:f9:1e:07:c6:c7:93:0b:96:a2:ec:
                    bc:c9:a9:ae:8e:7a:e5:bc:7d:99:07:3e:ca:ad:de:
                    65:f5:bc:80:29:9a:12:91:11:7f:96:6e:eb:d2:2a:
                    b5:61:c5:1a:39:99:2d:3e:a6:13:32:58:d3:f3:e5:
                    40:8d:f9:05:44:68:3b:c1:31:4b:ea:4b:87:0d:f1:
                    36:ce:e1:ce:ab:21:98:87:08:86:94:87:e3:6f:4e:
                    a0:d1:b4:5e:96:c3:fa:62:1e:d1:3b:36:3d:12:96:
                    95:6f:4c:75:93:3d:6c:21:c6:9e:29:60:a4:09:23:
                    e6:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:84:FF:F1:1C:BB:5C:93:E8:8E:8B:EB:E1:4B:9C:2B:5C:DA:30:C5
            X509v3 Authority Key Identifier:
                keyid:4C:33:10:98:B8:4D:C9:29:6B:BD:AE:E9:D2:C0:5B:E2:AC:3C:C5:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7rAziowefNmFrwbW51SyPKaD3H1wNUj1JwUPwgujmacU/2/4C331098B84DC9296BBDAEE9D2C05BE2AC3CC5A2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4C331098B84DC9296BBDAEE9D2C05BE2AC3CC5A2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7rAziowefNmFrwbW51SyPKaD3H1wNUj1JwUPwgujmacU/2/3136382e3139352e3131322e302f32322d3332203d3e20323032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.195.112.0/22

    Signature Algorithm: sha256WithRSAEncryption
         c3:24:9e:37:72:ab:41:c8:84:2e:52:64:07:6d:66:ed:03:10:
         f3:f1:93:c3:83:fb:a1:df:fc:c5:34:90:2a:6f:28:e7:ea:d3:
         fb:61:d1:cd:dc:3f:bc:85:a0:cd:a0:a9:02:4b:72:b5:f9:7e:
         d3:b9:7f:77:26:44:bf:b7:9f:09:4a:48:5c:57:cd:1c:f2:24:
         20:2a:61:2b:b6:a6:db:dd:1e:da:ca:9f:fd:e4:71:e3:f9:38:
         df:34:02:ec:2f:69:8a:23:90:ae:2d:a7:82:1a:bb:90:cb:13:
         01:1f:97:4e:60:37:15:7e:da:aa:e1:99:1e:1e:dc:79:f1:77:
         80:65:d1:08:09:63:be:fa:b3:04:d9:46:3d:2b:ad:f5:bb:7f:
         9f:0a:f9:6e:cb:28:ee:35:de:55:d3:45:6a:c8:94:a9:a2:42:
         6b:59:40:54:7a:33:2b:02:36:2e:93:b7:22:a9:e6:a9:bb:2c:
         2e:c7:a5:46:1b:99:39:bc:52:16:c1:3e:b6:3f:e9:53:7a:8a:
         9a:48:9e:72:bb:1d:36:af:0e:b6:02:15:f6:4b:46:cd:66:84:
         54:22:77:98:56:b1:06:a6:67:3e:48:6a:d7:bb:71:dc:c9:9e:
         11:d3:37:4e:d9:e3:44:c4:b0:57:30:ac:71:9b:fe:e1:e1:b3:
         dc:66:1f:43
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUK1yeV/ozkc/PsNAvJqib/k0KKgMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEMzMzEwOThCODREQzkyOTZCQkRBRUU5RDJDMDVCRTJB
QzNDQzVBMjAeFw0yNDA0MDQwMDI1MThaFw0yNTA0MDMwMDMwMThaMDMxMTAvBgNV
BAMTKDQ5ODRGRkYxMUNCQjVDOTNFODhFOEJFQkUxNEI5QzJCNUNEQTMwQzUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUx38tRh21c7hHRTGq5bzWaNa3
YVKmVBEchwBwcOSHQV/3QV4t3TTlct5gHIZBj1B+9vCkv1CpCjjIKALI+4L0cxcs
1pnb6dNKRbDTw4Dj2OD+nrJQMKfMr/OyQ5j/cTasku9mYUTDvb63WVs48Hf4BetA
CSMwp/y/AHVUL+mn3lrAwrFnUY0D5JDr+R4HxseTC5ai7LzJqa6OeuW8fZkHPsqt
3mX1vIApmhKREX+WbuvSKrVhxRo5mS0+phMyWNPz5UCN+QVEaDvBMUvqS4cN8TbO
4c6rIZiHCIaUh+NvTqDRtF6Ww/piHtE7Nj0SlpVvTHWTPWwhxp4pYKQJI+bVAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUSYT/8Ry7XJPojovr4UucK1zaMMUwHwYDVR0j
BBgwFoAUTDMQmLhNySlrva7p0sBb4qw8xaIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN3JBemlvd2VmTm1GcndiVzUxU3lQS2FEM0gxd05VajFKd1VQd2d1am1h
Y1UvMi80QzMzMTA5OEI4NERDOTI5NkJCREFFRTlEMkMwNUJFMkFDM0NDNUEyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzRDMzMxMDk4Qjg0REM5Mjk2
QkJEQUVFOUQyQzA1QkUyQUMzQ0M1QTIuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzdyQXppb3dlZk5tRnJ3Ylc1MVN5UEthRDNIMXdOVWoxSndVUHdndWptYWNVLzIv
MzEzNjM4MmUzMTM5MzUyZTMxMzEzMjJlMzAyZjMyMzIyZDMzMzIyMDNkM2UyMDMy
MzAzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEAqjDcDANBgkqhkiG9w0BAQsFAAOCAQEAwySeN3KrQciE
LlJkB21m7QMQ8/GTw4P7od/8xTSQKm8o5+rT+2HRzdw/vIWgzaCpAktytfl+07l/
dyZEv7efCUpIXFfNHPIkICphK7am290e2sqf/eRx4/k43zQC7C9piiOQri2nghq7
kMsTAR+XTmA3FX7aquGZHh7cefF3gGXRCAljvvqzBNlGPSut9bt/nwr5bsso7jXe
VdNFasiUqaJCa1lAVHozKwI2LpO3IqnmqbssLselRhuZObxSFsE+tj/pU3qKmkie
crsdNq8OtgIV9ktGzWaEVCJ3mFaxBqZnPkhq17tx3MmeEdM3TtnjRMSwVzCscZv+
4eGz3GYfQw==
-----END CERTIFICATE-----
Generated at Sun Nov 24 23:06:16 2024 by rpki-client on console-ams.rpki-client.org