Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/1/3136382e3232382e3235322e302f32322d3232203d3e2032373136.roa
File:                     3136382e3232382e3235322e302f32322d3232203d3e2032373136.roa (raw, json)
Hash identifier:          RQ0wQovg2epbGZUB/llvEX9ivnFQUeOBvN4aHcSZQ5E=
Subject key identifier:   C2:F6:65:99:5B:FA:BD:7F:90:F7:BE:33:23:5F:F0:54:54:4C:98:06
Certificate issuer:       /CN=D54C376960A26972A0B767BDA084048DFFE3673E
Certificate serial:       77EB1464BE691F1123DB1163708DCD9830E98E92
Authority key identifier: D5:4C:37:69:60:A2:69:72:A0:B7:67:BD:A0:84:04:8D:FF:E3:67:3E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D54C376960A26972A0B767BDA084048DFFE3673E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/1/3136382e3232382e3235322e302f32322d3232203d3e2032373136.roa
Signing time:             Wed 03 Apr 2024 18:30:30 +0000
ROA not before:           Wed 03 Apr 2024 18:25:30 +0000
ROA not after:            Wed 02 Apr 2025 18:30:30 +0000
asID:                     2716
IP address blocks:        168.228.252.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/1/D54C376960A26972A0B767BDA084048DFFE3673E.crl
                          rsync://rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/1/D54C376960A26972A0B767BDA084048DFFE3673E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D54C376960A26972A0B767BDA084048DFFE3673E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:eb:14:64:be:69:1f:11:23:db:11:63:70:8d:cd:98:30:e9:8e:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D54C376960A26972A0B767BDA084048DFFE3673E
        Validity
            Not Before: Apr  3 18:25:30 2024 GMT
            Not After : Apr  2 18:30:30 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:21:6e:b6:f7:f4:13:ed:b0:7a:f8:57:66:9a:
                    bb:bc:57:31:71:55:7d:24:15:89:d7:29:a2:8a:dd:
                    4f:92:b9:cc:2e:6d:af:56:f5:26:3e:53:75:a6:b6:
                    60:62:f1:e1:de:8c:86:de:43:c7:94:8e:52:1b:b3:
                    3a:46:09:7e:54:10:0b:48:3a:41:83:e1:15:f9:3e:
                    4d:dd:a1:2e:88:8b:e3:96:4a:97:d1:d4:dc:a3:43:
                    ca:c8:57:f1:36:6c:b0:5a:93:01:b1:7b:3f:1b:a1:
                    98:1d:9d:68:ae:94:40:f7:79:02:f5:b8:7d:75:50:
                    b4:a6:10:15:34:86:95:14:28:29:00:7a:fe:8f:de:
                    21:95:a5:98:6e:13:3f:38:0d:79:1e:77:dc:06:46:
                    de:3d:d4:de:12:0e:ce:e2:4a:ef:d1:52:f0:6a:6b:
                    d8:2e:d0:75:3e:c1:ce:19:de:15:41:b9:f6:19:33:
                    67:f0:af:1b:32:40:44:8e:fc:16:f9:e5:d5:2d:49:
                    9a:0c:0c:0e:ed:a7:05:16:fd:b1:6b:ab:fb:e8:50:
                    26:17:63:b2:ee:d2:8b:03:44:4c:3c:5c:60:60:1b:
                    32:67:ce:dc:0e:0c:3f:15:f6:95:d9:e1:2b:a8:16:
                    c1:e2:fc:70:d8:ec:f7:f1:86:c0:31:25:eb:3f:8e:
                    a9:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:F6:65:99:5B:FA:BD:7F:90:F7:BE:33:23:5F:F0:54:54:4C:98:06
            X509v3 Authority Key Identifier:
                keyid:D5:4C:37:69:60:A2:69:72:A0:B7:67:BD:A0:84:04:8D:FF:E3:67:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/1/D54C376960A26972A0B767BDA084048DFFE3673E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D54C376960A26972A0B767BDA084048DFFE3673E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/1/3136382e3232382e3235322e302f32322d3232203d3e2032373136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.228.252.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0b:5f:e5:17:56:49:5a:c8:fb:4d:7c:a1:26:4a:c9:90:6a:3b:
         dc:b9:f5:d8:6b:d0:a8:ec:7a:3d:12:34:16:f0:67:e5:7d:14:
         df:9d:ec:dd:b1:fb:dd:e1:f4:4c:4c:58:4e:24:e4:46:33:4f:
         03:bd:a8:d1:30:87:04:78:4e:a3:01:4b:0e:1b:90:93:b5:33:
         6f:75:1c:fd:f5:7f:45:f4:71:41:4d:46:2a:9f:0c:43:ca:1d:
         fb:01:ef:96:81:95:5e:16:82:74:bd:ce:1f:17:8d:5b:88:69:
         67:8c:71:85:9f:f0:1e:cf:9c:c0:f3:9c:f3:b6:14:26:ff:7d:
         9a:1b:8d:ae:56:00:82:05:e9:79:ac:e2:dc:c3:b9:17:9c:00:
         2f:13:6c:60:cd:41:44:49:c9:75:3a:8c:bd:19:41:66:28:94:
         29:be:84:48:31:88:db:ec:96:b5:ac:02:5c:ac:cd:ee:c5:4f:
         5a:96:f1:bb:11:6e:10:3d:11:e1:14:a0:23:10:85:a1:e3:d2:
         0c:b6:37:c3:7b:e4:bb:16:99:8f:6a:32:a3:1d:fb:ee:0e:fd:
         23:ba:fb:64:d1:bc:cd:dc:2c:51:43:d7:06:a3:92:05:0e:be:
         f0:30:ba:ad:15:7c:39:75:6f:73:b3:ec:2e:de:ca:77:6b:e2:
         47:1d:c8:a9
-----BEGIN CERTIFICATE-----
MIIHQTCCBimgAwIBAgIUd+sUZL5pHxEj2xFjcI3NmDDpjpIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDU0QzM3Njk2MEEyNjk3MkEwQjc2N0JEQTA4NDA0OERG
RkUzNjczRTAeFw0yNDA0MDMxODI1MzBaFw0yNTA0MDIxODMwMzBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQTYyMTZFQjZGN0Y0MTNFREIw
N0FGODU3NjY5QUJCQkM1NzMxNzE1NTdEMjQxNTg5RDcyOUEyOEFERDRGOTJCOUND
MkU2REFGNTZGNTI2M0U1Mzc1QTZCNjYwNjJGMUUxREU4Qzg2REU0M0M3OTQ4RTUy
MUJCMzNBNDYwOTdFNTQxMDBCNDgzQTQxODNFMTE1RjkzRTRERERBMTJFODg4QkUz
OTY0QTk3RDFENERDQTM0M0NBQzg1N0YxMzY2Q0IwNUE5MzAxQjE3QjNGMUJBMTk4
MUQ5RDY4QUU5NDQwRjc3OTAyRjVCODdENzU1MEI0QTYxMDE1MzQ4Njk1MTQyODI5
MDA3QUZFOEZERTIxOTVBNTk4NkUxMzNGMzgwRDc5MUU3N0RDMDY0NkRFM0RENERF
MTIwRUNFRTI0QUVGRDE1MkYwNkE2QkQ4MkVEMDc1M0VDMUNFMTlERTE1NDFCOUY2
MTkzMzY3RjBBRjFCMzI0MDQ0OEVGQzE2RjlFNUQ1MkQ0OTlBMEMwQzBFRURBNzA1
MTZGREIxNkJBQkZCRTg1MDI2MTc2M0IyRUVEMjhCMDM0NDRDM0M1QzYwNjAxQjMy
NjdDRURDMEUwQzNGMTVGNjk1RDlFMTJCQTgxNkMxRTJGQzcwRDhFQ0Y3RjE4NkMw
MzEyNUVCM0Y4RUE5OTMwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEApiFutvf0E+2wevhXZpq7vFcxcVV9JBWJ1ymiit1PkrnMLm2vVvUm
PlN1prZgYvHh3oyG3kPHlI5SG7M6Rgl+VBALSDpBg+EV+T5N3aEuiIvjlkqX0dTc
o0PKyFfxNmywWpMBsXs/G6GYHZ1orpRA93kC9bh9dVC0phAVNIaVFCgpAHr+j94h
laWYbhM/OA15HnfcBkbePdTeEg7O4krv0VLwamvYLtB1PsHOGd4VQbn2GTNn8K8b
MkBEjvwW+eXVLUmaDAwO7acFFv2xa6v76FAmF2Oy7tKLA0RMPFxgYBsyZ87cDgw/
FfaV2eErqBbB4vxw2Oz38YbAMSXrP46pkwIDAQABo4ICTzCCAkswHQYDVR0OBBYE
FML2ZZlb+r1/kPe+MyNf8FRUTJgGMB8GA1UdIwQYMBaAFNVMN2lgomlyoLdnvaCE
BI3/42c+MA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzhFYjRBR2pmTlk5emQ3
dEJtd2hUWExUSnlGRkFGelVGcVBnZUhVQ04xU3dhLzEvRDU0QzM3Njk2MEEyNjk3
MkEwQjc2N0JEQTA4NDA0OERGRkUzNjczRS5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS9ENTRDMzc2OTYwQTI2OTcyQTBCNzY3QkRBMDg0MDQ4REZGRTM2
NzNFLmNlcjCBrAYIKwYBBQUHAQsEgZ8wgZwwgZkGCCsGAQUFBzALhoGMcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby84RWI0QUdqZk5ZOXpkN3RCbXdo
VFhMVEp5RkZBRnpVRnFQZ2VIVUNOMVN3YS8xLzMxMzYzODJlMzIzMjM4MmUzMjM1
MzIyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzMjM3MzEzNi5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAqjk
/DANBgkqhkiG9w0BAQsFAAOCAQEAC1/lF1ZJWsj7TXyhJkrJkGo73Ln12GvQqOx6
PRI0FvBn5X0U353s3bH73eH0TExYTiTkRjNPA72o0TCHBHhOowFLDhuQk7Uzb3Uc
/fV/RfRxQU1GKp8MQ8od+wHvloGVXhaCdL3OHxeNW4hpZ4xxhZ/wHs+cwPOc87YU
Jv99mhuNrlYAggXpeazi3MO5F5wALxNsYM1BREnJdTqMvRlBZiiUKb6ESDGI2+yW
tawCXKzN7sVPWpbxuxFuED0R4RSgIxCFoePSDLY3w3vkuxaZj2oyox377g79I7r7
ZNG8zdwsUUPXBqOSBQ6+8DC6rRV8OXVvc7PsLt7Kd2viRx3IqQ==
-----END CERTIFICATE-----
Generated at Fri Nov 22 23:37:33 2024 by rpki-client on console-fra.rpki-client.org