Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9huE2jD6Jv4vnASBGbuM9pfgFBTZ7siKkBX8bap7YnJb/1/3136382e3230352e38382e302f32322d3232203d3e20323635333634.roa
File:                     3136382e3230352e38382e302f32322d3232203d3e20323635333634.roa (raw, json)
Hash identifier:          TkzwCq34rBMC6v8xVJ2GUbxFiQwbf8JdPk/HLgqXF+M=
Subject key identifier:   21:2F:03:79:E5:F5:13:C6:1F:3F:02:F8:7E:60:8F:96:AA:F7:7B:42
Certificate issuer:       /CN=53B8EF890E159C97C854A2FD8A6A51B3E34E626C
Certificate serial:       3C31C08722B4BEAABBD360338C46A932A9414D7B
Authority key identifier: 53:B8:EF:89:0E:15:9C:97:C8:54:A2:FD:8A:6A:51:B3:E3:4E:62:6C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/53B8EF890E159C97C854A2FD8A6A51B3E34E626C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9huE2jD6Jv4vnASBGbuM9pfgFBTZ7siKkBX8bap7YnJb/1/3136382e3230352e38382e302f32322d3232203d3e20323635333634.roa
Signing time:             Thu 04 Apr 2024 23:59:33 +0000
ROA not before:           Thu 04 Apr 2024 23:54:33 +0000
ROA not after:            Thu 03 Apr 2025 23:59:33 +0000
asID:                     265364
IP address blocks:        168.205.88.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9huE2jD6Jv4vnASBGbuM9pfgFBTZ7siKkBX8bap7YnJb/1/53B8EF890E159C97C854A2FD8A6A51B3E34E626C.crl
                          rsync://rpki-repo.registro.br/repo/9huE2jD6Jv4vnASBGbuM9pfgFBTZ7siKkBX8bap7YnJb/1/53B8EF890E159C97C854A2FD8A6A51B3E34E626C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/53B8EF890E159C97C854A2FD8A6A51B3E34E626C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 13:44:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:31:c0:87:22:b4:be:aa:bb:d3:60:33:8c:46:a9:32:a9:41:4d:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53B8EF890E159C97C854A2FD8A6A51B3E34E626C
        Validity
            Not Before: Apr  4 23:54:33 2024 GMT
            Not After : Apr  3 23:59:33 2025 GMT
        Subject: CN=212F0379E5F513C61F3F02F87E608F96AAF77B42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:df:7c:19:a2:93:59:03:8a:b0:a2:15:b3:94:
                    0a:d2:d1:46:09:41:ac:a1:ad:e5:0c:06:07:0e:ae:
                    8f:03:ce:0a:f0:f9:99:12:d0:e1:fc:ad:45:82:4b:
                    26:c6:80:05:85:47:36:59:2c:bf:e5:4e:c4:9e:9f:
                    a1:0e:81:21:0e:12:c7:9a:3c:b4:35:37:fd:22:a1:
                    25:26:57:74:c4:c8:63:c6:6c:e1:d8:ab:88:c0:34:
                    a3:cd:7e:54:79:cb:a9:bf:5b:7b:0f:4e:66:0e:34:
                    80:43:3c:5f:e3:31:dd:f9:57:bd:26:1e:9b:ca:60:
                    e7:4e:c4:42:80:e6:6c:76:dc:d1:bd:4c:73:c3:72:
                    42:ac:29:c0:13:1c:4e:3b:9d:15:80:3f:3a:00:56:
                    38:b7:bf:59:64:7f:3e:9c:52:e9:3a:c5:82:4e:d1:
                    2c:61:50:35:57:2a:d0:f9:68:1e:eb:49:61:6e:29:
                    6f:43:42:b3:db:ce:fd:b0:07:2c:55:97:ad:d9:79:
                    30:9d:21:15:65:8f:cd:05:57:01:e3:f7:d6:00:72:
                    5d:ef:b2:c4:be:a8:49:be:c5:a5:c1:23:ea:9a:51:
                    2d:c7:9d:80:9b:68:11:8c:41:4d:90:ba:b7:7f:9b:
                    41:7d:86:e5:8e:10:cf:e8:3d:cf:6a:18:98:38:14:
                    31:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:2F:03:79:E5:F5:13:C6:1F:3F:02:F8:7E:60:8F:96:AA:F7:7B:42
            X509v3 Authority Key Identifier:
                keyid:53:B8:EF:89:0E:15:9C:97:C8:54:A2:FD:8A:6A:51:B3:E3:4E:62:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9huE2jD6Jv4vnASBGbuM9pfgFBTZ7siKkBX8bap7YnJb/1/53B8EF890E159C97C854A2FD8A6A51B3E34E626C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/53B8EF890E159C97C854A2FD8A6A51B3E34E626C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9huE2jD6Jv4vnASBGbuM9pfgFBTZ7siKkBX8bap7YnJb/1/3136382e3230352e38382e302f32322d3232203d3e20323635333634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.205.88.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ac:f4:c2:72:ad:8a:9d:b9:90:67:1c:27:7b:b5:e0:8d:98:a2:
         80:37:1a:5f:09:05:a1:d5:00:9c:0e:e8:e8:62:f2:98:ce:bc:
         14:49:7e:a8:ca:89:42:4d:26:eb:17:b2:35:a6:c2:a1:39:3c:
         ff:62:19:e2:af:d4:46:bd:bd:3b:8c:96:53:45:53:61:79:2f:
         a4:78:9f:6c:bc:ba:39:f5:83:44:1c:0d:1d:f5:b9:81:ec:af:
         92:11:0f:33:c5:3b:ef:d9:d8:ec:db:d3:94:a3:14:0b:5e:18:
         26:f8:43:85:36:6d:f5:fe:f3:b8:d8:92:a9:9d:c1:47:44:ee:
         06:28:3a:8c:f2:e5:ce:ee:b8:21:08:3c:56:c4:8d:a8:97:07:
         0a:2d:f2:ef:c5:60:fa:1d:f9:c2:7c:8f:a7:24:8c:cd:15:e5:
         d0:f0:31:ab:f1:2f:dd:d2:7b:18:b9:44:bd:f1:50:86:29:55:
         34:1e:69:3b:b3:f3:a0:be:bc:f9:02:9c:3c:0d:18:cd:51:59:
         2f:3a:ff:c5:70:84:ec:6a:2e:b6:59:0c:ab:ea:a6:84:30:fb:
         7b:bd:a2:f2:6f:70:02:53:96:30:90:e4:6f:6c:16:68:59:ff:
         a3:15:2d:76:d2:40:59:02:7c:a2:02:af:68:23:95:8d:82:ad:
         78:a6:a4:b3
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUPDHAhyK0vqq702AzjEapMqlBTXswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTNCOEVGODkwRTE1OUM5N0M4NTRBMkZEOEE2QTUxQjNF
MzRFNjI2QzAeFw0yNDA0MDQyMzU0MzNaFw0yNTA0MDMyMzU5MzNaMDMxMTAvBgNV
BAMTKDIxMkYwMzc5RTVGNTEzQzYxRjNGMDJGODdFNjA4Rjk2QUFGNzdCNDIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCu33wZopNZA4qwohWzlArS0UYJ
QayhreUMBgcOro8Dzgrw+ZkS0OH8rUWCSybGgAWFRzZZLL/lTsSen6EOgSEOEsea
PLQ1N/0ioSUmV3TEyGPGbOHYq4jANKPNflR5y6m/W3sPTmYONIBDPF/jMd35V70m
HpvKYOdOxEKA5mx23NG9THPDckKsKcATHE47nRWAPzoAVji3v1lkfz6cUuk6xYJO
0SxhUDVXKtD5aB7rSWFuKW9DQrPbzv2wByxVl63ZeTCdIRVlj80FVwHj99YAcl3v
ssS+qEm+xaXBI+qaUS3HnYCbaBGMQU2Qurd/m0F9huWOEM/oPc9qGJg4FDH3AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUIS8DeeX1E8YfPwL4fmCPlqr3e0IwHwYDVR0j
BBgwFoAUU7jviQ4VnJfIVKL9impRs+NOYmwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOWh1RTJqRDZKdjR2bkFTQkdidU05cGZnRkJUWjdzaUtrQlg4YmFwN1lu
SmIvMS81M0I4RUY4OTBFMTU5Qzk3Qzg1NEEyRkQ4QTZBNTFCM0UzNEU2MjZDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzUzQjhFRjg5MEUxNTlDOTdD
ODU0QTJGRDhBNkE1MUIzRTM0RTYyNkMuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzlodUUyakQ2SnY0dm5BU0JHYnVNOXBmZ0ZCVFo3c2lLa0JYOGJhcDdZbkpiLzEv
MzEzNjM4MmUzMjMwMzUyZTM4MzgyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzMjM2
MzUzMzM2MzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAKozVgwDQYJKoZIhvcNAQELBQADggEBAKz0wnKt
ip25kGccJ3u14I2YooA3Gl8JBaHVAJwO6Ohi8pjOvBRJfqjKiUJNJusXsjWmwqE5
PP9iGeKv1Ea9vTuMllNFU2F5L6R4n2y8ujn1g0QcDR31uYHsr5IRDzPFO+/Z2Ozb
05SjFAteGCb4Q4U2bfX+87jYkqmdwUdE7gYoOozy5c7uuCEIPFbEjaiXBwot8u/F
YPod+cJ8j6ckjM0V5dDwMavxL93Sexi5RL3xUIYpVTQeaTuz86C+vPkCnDwNGM1R
WS86/8VwhOxqLrZZDKvqpoQw+3u9ovJvcAJTljCQ5G9sFmhZ/6MVLXbSQFkCfKIC
r2gjlY2CrXimpLM=
-----END CERTIFICATE-----
Generated at Fri Nov 22 13:31:55 2024 by rpki-client on console-fra.rpki-client.org