Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ac1wUWCNqu5pE9Mk5SaYYPDN191jzvpGQ3s792X1MTEV/1/3136382e3232382e3230382e302f32322d3234203d3e20323634393138.roa
File:                     3136382e3232382e3230382e302f32322d3234203d3e20323634393138.roa (raw, json)
Hash identifier:          5TmttIpFCp5/VvfzpeWWxPc9kOWOfa17Udr1XVelIbo=
Subject key identifier:   FD:6A:D9:2B:D7:31:B2:1F:6E:BF:76:C8:DC:F0:F1:07:AA:AD:71:C5
Certificate issuer:       /CN=1A8EFFA52E4DB393A77ECA17BCB4C8A51C413E62
Certificate serial:       0BE87418602477D55A28CBA564C73D25FA027553
Authority key identifier: 1A:8E:FF:A5:2E:4D:B3:93:A7:7E:CA:17:BC:B4:C8:A5:1C:41:3E:62
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A8EFFA52E4DB393A77ECA17BCB4C8A51C413E62.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ac1wUWCNqu5pE9Mk5SaYYPDN191jzvpGQ3s792X1MTEV/1/3136382e3232382e3230382e302f32322d3234203d3e20323634393138.roa
Signing time:             Thu 04 Apr 2024 02:50:23 +0000
ROA not before:           Thu 04 Apr 2024 02:45:23 +0000
ROA not after:            Thu 03 Apr 2025 02:50:23 +0000
asID:                     264918
IP address blocks:        168.228.208.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ac1wUWCNqu5pE9Mk5SaYYPDN191jzvpGQ3s792X1MTEV/1/1A8EFFA52E4DB393A77ECA17BCB4C8A51C413E62.crl
                          rsync://rpki-repo.registro.br/repo/Ac1wUWCNqu5pE9Mk5SaYYPDN191jzvpGQ3s792X1MTEV/1/1A8EFFA52E4DB393A77ECA17BCB4C8A51C413E62.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A8EFFA52E4DB393A77ECA17BCB4C8A51C413E62.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 22:36:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:e8:74:18:60:24:77:d5:5a:28:cb:a5:64:c7:3d:25:fa:02:75:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1A8EFFA52E4DB393A77ECA17BCB4C8A51C413E62
        Validity
            Not Before: Apr  4 02:45:23 2024 GMT
            Not After : Apr  3 02:50:23 2025 GMT
        Subject: CN=FD6AD92BD731B21F6EBF76C8DCF0F107AAAD71C5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:d9:6b:66:cf:75:c4:7d:d7:d1:58:7e:1a:ca:
                    7f:0c:f5:ba:a9:e5:de:7f:3d:ea:a6:b5:c9:03:5b:
                    b9:12:43:f8:b3:a3:eb:07:b7:ae:1b:e0:50:35:22:
                    95:d7:93:d2:b9:8d:17:db:34:d4:f7:8e:74:0a:98:
                    08:9d:fe:f5:6f:f8:97:39:cd:eb:50:3a:b1:f2:e6:
                    4c:af:5d:a1:3d:ba:04:6e:5f:75:ca:10:a0:13:12:
                    d8:0b:72:9a:aa:e0:1e:a0:cd:c6:2b:af:69:5c:5d:
                    91:9e:c6:43:60:7e:27:32:af:dc:a4:3e:e7:a7:82:
                    1f:3f:e8:df:1f:5b:5f:70:34:ff:5a:11:fc:d9:dc:
                    49:2f:fb:ed:6f:8d:a8:89:ba:08:13:49:00:b9:24:
                    b4:b0:f6:df:01:c2:fe:d7:d9:06:29:ee:41:70:42:
                    c3:52:8d:ad:b4:5b:14:7f:ba:65:4a:c6:55:5a:21:
                    86:2a:50:e3:d8:89:ff:05:9b:49:c4:71:27:89:cc:
                    35:98:94:48:60:f3:bb:b2:f2:4a:37:ad:0c:6f:80:
                    2f:d8:f9:b3:d3:a1:e1:27:33:6f:1b:90:51:cc:47:
                    f6:8b:f9:00:d2:7b:f0:53:45:f0:0a:ab:bb:2c:a0:
                    14:6c:3b:11:a8:f3:ff:f5:d6:a1:f8:ec:fc:c4:24:
                    8f:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:6A:D9:2B:D7:31:B2:1F:6E:BF:76:C8:DC:F0:F1:07:AA:AD:71:C5
            X509v3 Authority Key Identifier:
                keyid:1A:8E:FF:A5:2E:4D:B3:93:A7:7E:CA:17:BC:B4:C8:A5:1C:41:3E:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ac1wUWCNqu5pE9Mk5SaYYPDN191jzvpGQ3s792X1MTEV/1/1A8EFFA52E4DB393A77ECA17BCB4C8A51C413E62.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A8EFFA52E4DB393A77ECA17BCB4C8A51C413E62.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ac1wUWCNqu5pE9Mk5SaYYPDN191jzvpGQ3s792X1MTEV/1/3136382e3232382e3230382e302f32322d3234203d3e20323634393138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.228.208.0/22

    Signature Algorithm: sha256WithRSAEncryption
         35:b4:fc:36:1e:f1:21:27:ed:3b:40:b5:43:ed:28:a3:44:89:
         a7:b3:ed:81:1e:ec:57:eb:05:7a:8e:69:6a:9f:fd:4c:78:7e:
         4c:c5:3d:be:cd:db:54:87:d5:8d:97:73:c3:51:a7:db:60:a9:
         37:f0:b9:45:8f:a1:d6:d5:bf:2e:cd:74:b6:90:fb:1b:74:e0:
         f4:1c:be:ac:e6:08:21:e9:e4:2f:29:bd:9e:b8:55:1c:01:2a:
         3a:1a:1b:df:fd:60:c6:aa:4f:a9:fe:d5:92:27:90:b0:c7:f0:
         ed:a8:5c:ce:ce:34:4d:84:a8:5a:5b:37:85:10:24:e9:39:89:
         b4:9b:74:3e:2b:52:aa:13:b3:d4:fe:e6:f2:25:ba:81:52:34:
         ca:81:1e:bb:03:ef:f8:d8:a0:21:b2:50:ef:ee:44:2d:b3:83:
         77:b7:8b:92:13:0b:9a:5b:f2:fd:1c:cf:f1:29:ab:b8:eb:e3:
         51:2f:bc:05:96:e5:f6:3d:88:d6:48:ab:6f:52:d8:bd:cb:80:
         8a:90:d2:cf:62:f7:3b:51:ba:49:82:d0:11:a0:b7:7d:a2:a5:
         e7:ab:a1:82:26:9e:34:d0:ba:9c:35:d6:9b:b1:53:51:fb:a2:
         b5:56:35:8b:e5:15:d2:45:78:3b:39:e7:40:11:09:96:e3:e1:
         c2:43:bc:02
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUC+h0GGAkd9VaKMulZMc9JfoCdVMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUE4RUZGQTUyRTREQjM5M0E3N0VDQTE3QkNCNEM4QTUx
QzQxM0U2MjAeFw0yNDA0MDQwMjQ1MjNaFw0yNTA0MDMwMjUwMjNaMDMxMTAvBgNV
BAMTKEZENkFEOTJCRDczMUIyMUY2RUJGNzZDOERDRjBGMTA3QUFBRDcxQzUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDC2Wtmz3XEfdfRWH4ayn8M9bqp
5d5/PeqmtckDW7kSQ/izo+sHt64b4FA1IpXXk9K5jRfbNNT3jnQKmAid/vVv+Jc5
zetQOrHy5kyvXaE9ugRuX3XKEKATEtgLcpqq4B6gzcYrr2lcXZGexkNgficyr9yk
Puengh8/6N8fW19wNP9aEfzZ3Ekv++1vjaiJuggTSQC5JLSw9t8Bwv7X2QYp7kFw
QsNSja20WxR/umVKxlVaIYYqUOPYif8Fm0nEcSeJzDWYlEhg87uy8ko3rQxvgC/Y
+bPToeEnM28bkFHMR/aL+QDSe/BTRfAKq7ssoBRsOxGo8//11qH47PzEJI83AgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQU/WrZK9cxsh9uv3bI3PDxB6qtccUwHwYDVR0j
BBgwFoAUGo7/pS5Ns5OnfsoXvLTIpRxBPmIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQWMxd1VXQ05xdTVwRTlNazVTYVlZUEROMTkxanp2cEdRM3M3OTJYMU1U
RVYvMS8xQThFRkZBNTJFNERCMzkzQTc3RUNBMTdCQ0I0QzhBNTFDNDEzRTYyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzFBOEVGRkE1MkU0REIzOTNB
NzdFQ0ExN0JDQjRDOEE1MUM0MTNFNjIuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0FjMXdVV0NOcXU1cEU5TWs1U2FZWVBETjE5MWp6dnBHUTNzNzkyWDFNVEVWLzEv
MzEzNjM4MmUzMjMyMzgyZTMyMzAzODJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMy
MzYzNDM5MzEzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAqjk0DANBgkqhkiG9w0BAQsFAAOCAQEANbT8
Nh7xISftO0C1Q+0oo0SJp7PtgR7sV+sFeo5pap/9THh+TMU9vs3bVIfVjZdzw1Gn
22CpN/C5RY+h1tW/Ls10tpD7G3Tg9By+rOYIIenkLym9nrhVHAEqOhob3/1gxqpP
qf7VkieQsMfw7ahczs40TYSoWls3hRAk6TmJtJt0PitSqhOz1P7m8iW6gVI0yoEe
uwPv+NigIbJQ7+5ELbODd7eLkhMLmlvy/RzP8SmruOvjUS+8BZbl9j2I1kirb1LY
vcuAipDSz2L3O1G6SYLQEaC3faKl56uhgiaeNNC6nDXWm7FTUfuitVY1i+UV0kV4
OznnQBEJluPhwkO8Ag==
-----END CERTIFICATE-----
Generated at Mon Nov 25 21:31:41 2024 by rpki-client on console-ams.rpki-client.org