Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AzvGYe8tUSg5gGeWnRgeCx1DtJtbiu8QoA9Fn8FRstFg/1/3136382e3139362e3134382e302f32322d3234203d3e20323632353330.roa
File:                     3136382e3139362e3134382e302f32322d3234203d3e20323632353330.roa (raw, json)
Hash identifier:          AU1s2u8EItkZbelGCbeA3e+GU0m0ZSDtwiexV+x5zec=
Subject key identifier:   AF:DB:AE:AC:7C:A4:F9:C6:AE:CB:09:70:04:09:AC:1F:A8:7B:41:6B
Certificate issuer:       /CN=33EC4B2F4CD1775DDA4E4AA63183A6875ED6C6F7
Certificate serial:       01929D41CD9D63A1764616ED360C15BCF70DD643
Authority key identifier: 33:EC:4B:2F:4C:D1:77:5D:DA:4E:4A:A6:31:83:A6:87:5E:D6:C6:F7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/33EC4B2F4CD1775DDA4E4AA63183A6875ED6C6F7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AzvGYe8tUSg5gGeWnRgeCx1DtJtbiu8QoA9Fn8FRstFg/1/3136382e3139362e3134382e302f32322d3234203d3e20323632353330.roa
Signing time:             Thu 04 Apr 2024 11:45:22 +0000
ROA not before:           Thu 04 Apr 2024 11:40:22 +0000
ROA not after:            Thu 03 Apr 2025 11:45:22 +0000
asID:                     262530
IP address blocks:        168.196.148.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AzvGYe8tUSg5gGeWnRgeCx1DtJtbiu8QoA9Fn8FRstFg/1/33EC4B2F4CD1775DDA4E4AA63183A6875ED6C6F7.crl
                          rsync://rpki-repo.registro.br/repo/AzvGYe8tUSg5gGeWnRgeCx1DtJtbiu8QoA9Fn8FRstFg/1/33EC4B2F4CD1775DDA4E4AA63183A6875ED6C6F7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/33EC4B2F4CD1775DDA4E4AA63183A6875ED6C6F7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 16:19:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:9d:41:cd:9d:63:a1:76:46:16:ed:36:0c:15:bc:f7:0d:d6:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33EC4B2F4CD1775DDA4E4AA63183A6875ED6C6F7
        Validity
            Not Before: Apr  4 11:40:22 2024 GMT
            Not After : Apr  3 11:45:22 2025 GMT
        Subject: CN=AFDBAEAC7CA4F9C6AECB09700409AC1FA87B416B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:9a:e4:ca:0d:4e:6c:57:5a:79:d5:34:da:77:
                    b3:12:bd:c6:7a:96:82:ae:ad:7f:f4:94:e3:e6:c9:
                    f9:37:58:fa:5b:ba:13:52:88:8e:42:c0:95:43:60:
                    e6:f4:5e:13:3d:7f:64:44:a7:a7:c2:9f:67:8f:7c:
                    a1:a4:fa:4d:0b:43:af:ea:f5:d8:71:48:9b:d1:27:
                    0e:36:c9:8c:ef:5a:ee:18:a9:3d:27:6f:4d:79:ba:
                    19:c4:fb:cb:49:99:19:d8:77:0b:e1:60:e4:32:3c:
                    16:93:11:bb:5a:a7:02:3a:e9:b8:db:2a:6a:84:b3:
                    c6:b6:0f:78:d3:5d:59:71:bd:09:ef:93:05:88:e3:
                    23:1a:23:42:d9:96:fb:fa:ae:21:18:78:62:2c:3e:
                    86:cd:28:e6:9e:33:25:76:1c:4c:65:01:2a:de:91:
                    5c:08:33:0c:28:a8:d5:e4:53:bc:46:8b:2f:4b:df:
                    aa:f7:e8:46:f1:32:b5:3a:96:fb:8e:74:84:d5:8a:
                    c2:c2:8a:36:9a:4c:b0:8b:b2:23:d7:5f:2a:c8:01:
                    29:5c:aa:79:ef:f0:44:ea:e7:2f:5b:ba:ce:21:84:
                    50:89:2a:56:c1:a8:4c:8c:67:f2:3d:c5:b6:5d:fb:
                    8f:f2:a6:83:83:50:6d:5b:22:94:96:e7:ff:87:92:
                    15:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:DB:AE:AC:7C:A4:F9:C6:AE:CB:09:70:04:09:AC:1F:A8:7B:41:6B
            X509v3 Authority Key Identifier:
                keyid:33:EC:4B:2F:4C:D1:77:5D:DA:4E:4A:A6:31:83:A6:87:5E:D6:C6:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AzvGYe8tUSg5gGeWnRgeCx1DtJtbiu8QoA9Fn8FRstFg/1/33EC4B2F4CD1775DDA4E4AA63183A6875ED6C6F7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/33EC4B2F4CD1775DDA4E4AA63183A6875ED6C6F7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AzvGYe8tUSg5gGeWnRgeCx1DtJtbiu8QoA9Fn8FRstFg/1/3136382e3139362e3134382e302f32322d3234203d3e20323632353330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.196.148.0/22

    Signature Algorithm: sha256WithRSAEncryption
         10:b9:1a:ac:1f:8a:c0:76:cc:0c:0a:5f:5a:98:42:3a:90:bd:
         a1:b7:27:be:49:81:3b:93:bd:0c:64:32:6b:13:45:e8:1c:f3:
         0a:aa:4f:a3:bc:07:cb:9c:6d:71:f5:ad:be:fa:70:89:49:93:
         2b:6b:10:1e:e8:ce:29:74:cf:b6:d9:0a:c4:aa:36:f3:e4:8c:
         1f:a5:8f:79:d9:98:37:ae:fa:fe:85:d2:3b:bf:0a:01:e8:9b:
         50:b2:31:d8:10:b9:c8:93:95:c9:f3:47:66:36:d2:73:18:97:
         75:97:e4:7d:0c:3e:72:50:d9:96:bd:ba:0c:c2:d1:73:6e:d0:
         f3:4f:fe:ba:bb:a2:de:82:af:f0:9c:97:f4:52:f6:48:f0:5c:
         9f:90:a4:75:07:8c:9e:63:48:39:a4:bb:f1:08:a9:64:3e:b9:
         57:20:ac:d2:19:b8:a5:71:50:7b:b7:ac:50:ee:39:77:b9:88:
         2c:ac:dd:b3:14:49:41:f4:50:b7:9c:d1:ff:c3:fc:a2:64:9b:
         40:b8:e7:a9:9d:2e:e0:ae:d3:d7:e8:eb:5c:3d:3b:ea:45:9a:
         fe:5f:95:1b:92:e6:3d:50:6e:ce:7c:12:a2:db:87:ee:5d:86:
         87:d8:6d:e2:25:bc:91:62:94:94:8a:6d:90:34:13:6d:05:17:
         21:0a:73:92
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUAZKdQc2dY6F2RhbtNgwVvPcN1kMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzNFQzRCMkY0Q0QxNzc1RERBNEU0QUE2MzE4M0E2ODc1
RUQ2QzZGNzAeFw0yNDA0MDQxMTQwMjJaFw0yNTA0MDMxMTQ1MjJaMDMxMTAvBgNV
BAMTKEFGREJBRUFDN0NBNEY5QzZBRUNCMDk3MDA0MDlBQzFGQTg3QjQxNkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7muTKDU5sV1p51TTad7MSvcZ6
loKurX/0lOPmyfk3WPpbuhNSiI5CwJVDYOb0XhM9f2REp6fCn2ePfKGk+k0LQ6/q
9dhxSJvRJw42yYzvWu4YqT0nb015uhnE+8tJmRnYdwvhYOQyPBaTEbtapwI66bjb
KmqEs8a2D3jTXVlxvQnvkwWI4yMaI0LZlvv6riEYeGIsPobNKOaeMyV2HExlASre
kVwIMwwoqNXkU7xGiy9L36r36EbxMrU6lvuOdITVisLCijaaTLCLsiPXXyrIASlc
qnnv8ETq5y9bus4hhFCJKlbBqEyMZ/I9xbZd+4/ypoODUG1bIpSW5/+HkhW7AgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUr9uurHyk+cauywlwBAmsH6h7QWswHwYDVR0j
BBgwFoAUM+xLL0zRd13aTkqmMYOmh17WxvcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQXp2R1llOHRVU2c1Z0dlV25SZ2VDeDFEdEp0Yml1OFFvQTlGbjhGUnN0
RmcvMS8zM0VDNEIyRjRDRDE3NzVEREE0RTRBQTYzMTgzQTY4NzVFRDZDNkY3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzMzRUM0QjJGNENEMTc3NURE
QTRFNEFBNjMxODNBNjg3NUVENkM2RjcuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0F6dkdZZTh0VVNnNWdHZVduUmdlQ3gxRHRKdGJpdThRb0E5Rm44RlJzdEZnLzEv
MzEzNjM4MmUzMTM5MzYyZTMxMzQzODJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMy
MzYzMjM1MzMzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAqjElDANBgkqhkiG9w0BAQsFAAOCAQEAELka
rB+KwHbMDApfWphCOpC9obcnvkmBO5O9DGQyaxNF6BzzCqpPo7wHy5xtcfWtvvpw
iUmTK2sQHujOKXTPttkKxKo28+SMH6WPedmYN676/oXSO78KAeibULIx2BC5yJOV
yfNHZjbScxiXdZfkfQw+clDZlr26DMLRc27Q80/+urui3oKv8JyX9FL2SPBcn5Ck
dQeMnmNIOaS78QipZD65VyCs0hm4pXFQe7esUO45d7mILKzdsxRJQfRQt5zR/8P8
omSbQLjnqZ0u4K7T1+jrXD076kWa/l+VG5LmPVBuznwSotuH7l2Gh9ht4iW8kWKU
lIptkDQTbQUXIQpzkg==
-----END CERTIFICATE-----
Generated at Sat Nov 23 15:35:23 2024 by rpki-client on console-fra.rpki-client.org