Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8tZ5pzhDMYqgsvsXb8fJc5ZRfkT28fN8LS2YXremdMK5/0/3136382e39302e3135302e302f32342d3234203d3e20323635323835.roa
File:                     3136382e39302e3135302e302f32342d3234203d3e20323635323835.roa (raw, json)
Hash identifier:          KVaY3lfvktI09InrgMN7vUwJ9y3CrWnpqBLABAXUmqk=
Subject key identifier:   E7:97:D2:57:43:9B:16:C5:8D:81:69:A9:3D:9D:26:45:8A:D5:BC:65
Certificate issuer:       /CN=3F318214B1BD2E89818793B6E4B9967278CA87A1
Certificate serial:       3AF3462378FE66F78BE76ECB70BB4110EC23F46B
Authority key identifier: 3F:31:82:14:B1:BD:2E:89:81:87:93:B6:E4:B9:96:72:78:CA:87:A1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3F318214B1BD2E89818793B6E4B9967278CA87A1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8tZ5pzhDMYqgsvsXb8fJc5ZRfkT28fN8LS2YXremdMK5/0/3136382e39302e3135302e302f32342d3234203d3e20323635323835.roa
Signing time:             Thu 04 Jul 2024 13:20:31 +0000
ROA not before:           Thu 04 Jul 2024 13:15:31 +0000
ROA not after:            Thu 03 Jul 2025 13:20:31 +0000
asID:                     265285
IP address blocks:        168.90.150.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8tZ5pzhDMYqgsvsXb8fJc5ZRfkT28fN8LS2YXremdMK5/0/3F318214B1BD2E89818793B6E4B9967278CA87A1.crl
                          rsync://rpki-repo.registro.br/repo/8tZ5pzhDMYqgsvsXb8fJc5ZRfkT28fN8LS2YXremdMK5/0/3F318214B1BD2E89818793B6E4B9967278CA87A1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3F318214B1BD2E89818793B6E4B9967278CA87A1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 18:55:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:f3:46:23:78:fe:66:f7:8b:e7:6e:cb:70:bb:41:10:ec:23:f4:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3F318214B1BD2E89818793B6E4B9967278CA87A1
        Validity
            Not Before: Jul  4 13:15:31 2024 GMT
            Not After : Jul  3 13:20:31 2025 GMT
        Subject: CN=E797D257439B16C58D8169A93D9D26458AD5BC65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:3c:d9:5d:40:27:1f:0c:66:c0:ad:67:c5:c6:
                    18:d2:d0:15:13:66:bf:01:cd:c5:3b:19:84:17:78:
                    70:e2:f7:25:33:73:4e:d9:c9:d4:3e:bf:ae:22:70:
                    54:f2:d9:d7:1b:3c:54:34:f1:69:e8:65:8b:d4:04:
                    8b:89:20:2c:64:4e:18:3e:31:16:ef:84:10:8c:76:
                    76:fc:d1:67:89:d0:db:b1:88:00:00:0d:b9:83:07:
                    17:f4:19:0f:09:ec:be:0a:6d:b7:6e:0c:a4:74:f8:
                    e1:f7:a9:03:19:64:b5:4c:81:37:2c:52:df:41:10:
                    08:a5:90:52:aa:9a:6b:90:7d:ac:dd:79:5f:99:f9:
                    4b:66:bf:fb:66:9a:a8:76:4c:7f:80:96:de:fd:73:
                    24:c2:13:b6:38:4e:1c:63:2a:96:dd:1d:88:9d:5c:
                    be:a9:c3:3b:05:69:87:8d:9e:11:b7:88:59:fd:26:
                    50:55:ef:08:c6:de:8f:ca:6b:0e:b0:85:08:74:6f:
                    b4:d3:0e:e2:55:64:4d:ec:f8:51:59:ea:e8:3f:1f:
                    85:5f:71:2c:4b:45:7b:60:dc:04:d0:e4:2c:47:d1:
                    94:c4:e5:a7:bf:4c:12:00:33:aa:df:72:d1:db:d3:
                    bc:e2:f2:c1:b8:5d:47:26:67:2e:fe:57:50:e4:0b:
                    be:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:97:D2:57:43:9B:16:C5:8D:81:69:A9:3D:9D:26:45:8A:D5:BC:65
            X509v3 Authority Key Identifier:
                keyid:3F:31:82:14:B1:BD:2E:89:81:87:93:B6:E4:B9:96:72:78:CA:87:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8tZ5pzhDMYqgsvsXb8fJc5ZRfkT28fN8LS2YXremdMK5/0/3F318214B1BD2E89818793B6E4B9967278CA87A1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3F318214B1BD2E89818793B6E4B9967278CA87A1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8tZ5pzhDMYqgsvsXb8fJc5ZRfkT28fN8LS2YXremdMK5/0/3136382e39302e3135302e302f32342d3234203d3e20323635323835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.90.150.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9a:e2:fd:ff:35:64:72:e4:1e:23:dd:78:82:a5:2f:6d:a0:b6:
         2b:21:aa:ca:99:43:5e:7c:33:9b:dc:81:e6:41:fc:1f:89:e4:
         a2:bf:11:4c:b9:5c:cb:bf:78:cb:f9:68:07:d9:43:de:1d:25:
         ae:ef:71:92:24:eb:6d:25:2f:42:a1:8e:d1:11:5a:1d:8f:04:
         da:ef:72:e7:9c:e7:05:04:21:5b:6b:5c:27:79:8e:8a:71:a4:
         5b:dc:a0:84:e5:10:9d:86:1c:ce:b0:54:5d:86:28:c2:fd:42:
         aa:62:05:55:1c:b0:b0:85:92:a7:18:b6:da:aa:53:d6:41:2e:
         19:10:3e:fb:d7:d6:d9:34:d9:72:ac:50:38:ac:b5:94:6e:cc:
         bb:27:33:47:8a:b1:d5:84:8d:d1:b9:db:f2:05:c6:4d:05:dc:
         e4:99:48:f5:74:6f:ab:f1:5c:af:05:5d:01:f3:74:a0:36:a3:
         28:f5:b2:8c:35:af:fe:00:bc:0d:8a:ac:d9:d1:f4:27:72:47:
         ff:39:28:96:af:e6:cc:b6:88:87:71:ee:9e:69:61:4c:95:d6:
         54:78:a9:ee:37:ac:78:1b:11:0a:62:8d:23:75:d8:01:f5:39:
         46:48:5b:dc:ad:bb:b5:97:a2:78:17:38:fa:b2:bf:ba:36:18:
         fd:4e:16:81
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUOvNGI3j+ZveL527LcLtBEOwj9GswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0YzMTgyMTRCMUJEMkU4OTgxODc5M0I2RTRCOTk2NzI3
OENBODdBMTAeFw0yNDA3MDQxMzE1MzFaFw0yNTA3MDMxMzIwMzFaMDMxMTAvBgNV
BAMTKEU3OTdEMjU3NDM5QjE2QzU4RDgxNjlBOTNEOUQyNjQ1OEFENUJDNjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDPNldQCcfDGbArWfFxhjS0BUT
Zr8BzcU7GYQXeHDi9yUzc07ZydQ+v64icFTy2dcbPFQ08WnoZYvUBIuJICxkThg+
MRbvhBCMdnb80WeJ0NuxiAAADbmDBxf0GQ8J7L4KbbduDKR0+OH3qQMZZLVMgTcs
Ut9BEAilkFKqmmuQfazdeV+Z+Utmv/tmmqh2TH+Alt79cyTCE7Y4ThxjKpbdHYid
XL6pwzsFaYeNnhG3iFn9JlBV7wjG3o/Kaw6whQh0b7TTDuJVZE3s+FFZ6ug/H4Vf
cSxLRXtg3ATQ5CxH0ZTE5ae/TBIAM6rfctHb07zi8sG4XUcmZy7+V1DkC75DAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU55fSV0ObFsWNgWmpPZ0mRYrVvGUwHwYDVR0j
BBgwFoAUPzGCFLG9LomBh5O25LmWcnjKh6EwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOHRaNXB6aERNWXFnc3ZzWGI4ZkpjNVpSZmtUMjhmTjhMUzJZWHJlbWRN
SzUvMC8zRjMxODIxNEIxQkQyRTg5ODE4NzkzQjZFNEI5OTY3Mjc4Q0E4N0ExLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzNGMzE4MjE0QjFCRDJFODk4
MTg3OTNCNkU0Qjk5NjcyNzhDQTg3QTEuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
Lzh0WjVwemhETVlxZ3N2c1hiOGZKYzVaUmZrVDI4Zk44TFMyWVhyZW1kTUs1LzAv
MzEzNjM4MmUzOTMwMmUzMTM1MzAyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzUzMjM4MzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBACoWpYwDQYJKoZIhvcNAQELBQADggEBAJri/f81
ZHLkHiPdeIKlL22gtishqsqZQ158M5vcgeZB/B+J5KK/EUy5XMu/eMv5aAfZQ94d
Ja7vcZIk620lL0KhjtERWh2PBNrvcuec5wUEIVtrXCd5jopxpFvcoITlEJ2GHM6w
VF2GKML9QqpiBVUcsLCFkqcYttqqU9ZBLhkQPvvX1tk02XKsUDistZRuzLsnM0eK
sdWEjdG52/IFxk0F3OSZSPV0b6vxXK8FXQHzdKA2oyj1sow1r/4AvA2KrNnR9Cdy
R/85KJav5sy2iIdx7p5pYUyV1lR4qe43rHgbEQpijSN12AH1OUZIW9ytu7WXongX
OPqyv7o2GP1OFoE=
-----END CERTIFICATE-----
Generated at Sat Sep 28 19:42:05 2024 by rpki-client on console-fra.rpki-client.org