Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AtoCc5VgpzwkJP3f8swB5TcceXLBMHPjuXZwH4TsZLPo/1/3133312e3136312e35302e302f32332d3233203d3e20323634333638.roa
File:                     3133312e3136312e35302e302f32332d3233203d3e20323634333638.roa (raw, json)
Hash identifier:          mHSLp++crg3ijXksw8OIJBL6ajSWAvm+wcSjWyC6048=
Subject key identifier:   35:98:27:24:BA:2D:A2:FE:A1:6A:BB:AE:6D:99:91:0E:02:AC:B2:5A
Certificate issuer:       /CN=00099678E157EF4EBF18B52B07C133567D365A04
Certificate serial:       5C41ACC00169BE6A83CF0AEB7C18C357C238AF1F
Authority key identifier: 00:09:96:78:E1:57:EF:4E:BF:18:B5:2B:07:C1:33:56:7D:36:5A:04
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/00099678E157EF4EBF18B52B07C133567D365A04.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AtoCc5VgpzwkJP3f8swB5TcceXLBMHPjuXZwH4TsZLPo/1/3133312e3136312e35302e302f32332d3233203d3e20323634333638.roa
Signing time:             Wed 03 Apr 2024 20:48:41 +0000
ROA not before:           Wed 03 Apr 2024 20:43:41 +0000
ROA not after:            Wed 02 Apr 2025 20:48:41 +0000
asID:                     264368
IP address blocks:        131.161.50.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AtoCc5VgpzwkJP3f8swB5TcceXLBMHPjuXZwH4TsZLPo/1/00099678E157EF4EBF18B52B07C133567D365A04.crl
                          rsync://rpki-repo.registro.br/repo/AtoCc5VgpzwkJP3f8swB5TcceXLBMHPjuXZwH4TsZLPo/1/00099678E157EF4EBF18B52B07C133567D365A04.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/00099678E157EF4EBF18B52B07C133567D365A04.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:41:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:41:ac:c0:01:69:be:6a:83:cf:0a:eb:7c:18:c3:57:c2:38:af:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00099678E157EF4EBF18B52B07C133567D365A04
        Validity
            Not Before: Apr  3 20:43:41 2024 GMT
            Not After : Apr  2 20:48:41 2025 GMT
        Subject: CN=35982724BA2DA2FEA16ABBAE6D99910E02ACB25A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:59:35:d9:d4:d2:71:0a:0a:3a:3c:c7:14:f8:
                    05:af:ca:ca:66:81:68:a8:b9:3f:84:e4:d0:24:b8:
                    af:e5:f7:a7:77:62:7c:ec:d5:41:8d:c7:9d:bd:e6:
                    dd:7b:f6:e9:2b:a7:36:dd:ca:aa:f6:4b:f5:b8:33:
                    77:95:eb:8d:3a:c9:2b:ed:6e:eb:1a:59:a9:09:0c:
                    98:52:41:a8:a0:5e:d0:c2:8a:86:a3:49:46:5e:01:
                    b4:af:0a:dc:5c:cd:7e:6c:13:c1:07:d4:2a:5c:03:
                    85:3f:be:3d:75:96:7d:a2:7b:cd:d0:89:b2:73:a1:
                    96:d4:ba:75:fb:bb:0d:d8:34:20:d2:d0:b2:05:fd:
                    95:2e:12:75:95:f1:43:a2:20:bd:43:7b:90:54:95:
                    e8:ca:34:f4:53:c6:57:d7:0f:2f:11:c9:ff:6a:d9:
                    36:87:ec:a6:33:43:55:8c:a7:f7:93:d3:f4:a6:05:
                    84:d5:55:3b:79:db:09:91:d4:c3:69:ff:70:20:ac:
                    fb:95:ac:16:4c:20:70:44:fd:3c:c1:a3:71:c8:ab:
                    b4:3d:45:ed:f3:27:46:30:15:80:0d:70:1b:ab:cb:
                    cd:bd:a5:81:b8:1e:8a:c6:b2:80:b2:48:51:e6:f1:
                    f2:13:45:9b:09:78:bc:7f:65:1b:5c:79:f2:02:4a:
                    b8:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:98:27:24:BA:2D:A2:FE:A1:6A:BB:AE:6D:99:91:0E:02:AC:B2:5A
            X509v3 Authority Key Identifier:
                keyid:00:09:96:78:E1:57:EF:4E:BF:18:B5:2B:07:C1:33:56:7D:36:5A:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AtoCc5VgpzwkJP3f8swB5TcceXLBMHPjuXZwH4TsZLPo/1/00099678E157EF4EBF18B52B07C133567D365A04.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/00099678E157EF4EBF18B52B07C133567D365A04.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AtoCc5VgpzwkJP3f8swB5TcceXLBMHPjuXZwH4TsZLPo/1/3133312e3136312e35302e302f32332d3233203d3e20323634333638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.161.50.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3c:7f:9c:6f:39:dc:64:8c:23:ce:9f:86:f8:82:b7:f2:f6:3b:
         c7:c4:93:bf:9e:e1:ff:f0:ca:7c:20:c2:cb:f2:34:58:bc:c2:
         4f:1e:30:76:60:e7:45:32:bb:76:d7:e4:75:26:64:11:52:b1:
         bf:47:f1:5f:f0:32:77:af:3b:71:af:bb:e8:d7:a7:a0:84:b6:
         33:b3:07:1c:0a:73:99:b6:e9:8f:65:87:19:2a:ea:cb:c9:52:
         44:9c:91:ee:77:f8:db:98:cf:13:27:77:c7:e7:64:f2:f5:f4:
         65:80:cd:bc:da:ff:5b:35:90:dc:b5:3f:08:ae:60:9a:15:2d:
         10:bd:2a:5b:1f:ba:35:96:a0:76:4c:f2:6a:54:0e:58:8c:a4:
         ce:1e:27:a7:eb:fc:36:06:f2:a2:0c:d3:bf:f8:c4:66:f0:29:
         3e:f6:19:74:cb:2e:7a:81:b3:f7:ef:74:64:7e:71:8c:5e:32:
         44:23:e8:bd:50:f1:07:7c:62:3b:11:c8:13:dd:3b:53:c2:2e:
         b4:e1:3c:eb:7c:20:55:f6:a6:7c:66:08:b1:cb:f8:50:0c:5f:
         38:ae:7a:62:ca:60:04:1f:34:40:75:4f:ff:65:8d:50:dd:8c:
         9a:de:c1:9a:67:cd:75:b6:90:c6:f8:8a:ff:6c:3f:7c:4a:3e:
         1c:14:8f:b2
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUXEGswAFpvmqDzwrrfBjDV8I4rx8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDAwOTk2NzhFMTU3RUY0RUJGMThCNTJCMDdDMTMzNTY3
RDM2NUEwNDAeFw0yNDA0MDMyMDQzNDFaFw0yNTA0MDIyMDQ4NDFaMDMxMTAvBgNV
BAMTKDM1OTgyNzI0QkEyREEyRkVBMTZBQkJBRTZEOTk5MTBFMDJBQ0IyNUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLWTXZ1NJxCgo6PMcU+AWvyspm
gWiouT+E5NAkuK/l96d3Ynzs1UGNx5295t179ukrpzbdyqr2S/W4M3eV6406ySvt
busaWakJDJhSQaigXtDCioajSUZeAbSvCtxczX5sE8EH1CpcA4U/vj11ln2ie83Q
ibJzoZbUunX7uw3YNCDS0LIF/ZUuEnWV8UOiIL1De5BUlejKNPRTxlfXDy8Ryf9q
2TaH7KYzQ1WMp/eT0/SmBYTVVTt52wmR1MNp/3AgrPuVrBZMIHBE/TzBo3HIq7Q9
Re3zJ0YwFYANcBury829pYG4HorGsoCySFHm8fITRZsJeLx/ZRtcefICSrhTAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUNZgnJLotov6haruubZmRDgKsslowHwYDVR0j
BBgwFoAUAAmWeOFX706/GLUrB8EzVn02WgQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQXRvQ2M1VmdwendrSlAzZjhzd0I1VGNjZVhMQk1IUGp1WFp3SDRUc1pM
UG8vMS8wMDA5OTY3OEUxNTdFRjRFQkYxOEI1MkIwN0MxMzM1NjdEMzY1QTA0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzAwMDk5Njc4RTE1N0VGNEVC
RjE4QjUyQjA3QzEzMzU2N0QzNjVBMDQuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0F0b0NjNVZncHp3a0pQM2Y4c3dCNVRjY2VYTEJNSFBqdVhad0g0VHNaTFBvLzEv
MzEzMzMxMmUzMTM2MzEyZTM1MzAyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjM2
MzQzMzM2Mzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAGDoTIwDQYJKoZIhvcNAQELBQADggEBADx/nG85
3GSMI86fhviCt/L2O8fEk7+e4f/wynwgwsvyNFi8wk8eMHZg50Uyu3bX5HUmZBFS
sb9H8V/wMnevO3Gvu+jXp6CEtjOzBxwKc5m26Y9lhxkq6svJUkScke53+NuYzxMn
d8fnZPL19GWAzbza/1s1kNy1PwiuYJoVLRC9KlsfujWWoHZM8mpUDliMpM4eJ6fr
/DYG8qIM07/4xGbwKT72GXTLLnqBs/fvdGR+cYxeMkQj6L1Q8Qd8YjsRyBPdO1PC
LrThPOt8IFX2pnxmCLHL+FAMXziuemLKYAQfNEB1T/9ljVDdjJrewZpnzXW2kMb4
iv9sP3xKPhwUj7I=
-----END CERTIFICATE-----
Generated at Sat Nov 23 00:05:40 2024 by rpki-client on console-ams.rpki-client.org