Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BSY2zYZv6B5pHrp7U9wvqFgfxPqK6u5mgzG3Xxdgh15J/1/3136382e3139372e31362e302f32322d3234203d3e203532393437.roa
File:                     3136382e3139372e31362e302f32322d3234203d3e203532393437.roa (raw, json)
Hash identifier:          QU2Rdnbm3vUwaeZHB29iv2ehQEY66tn+0LLLau4g6ig=
Subject key identifier:   7A:F7:DE:27:D8:51:EB:BB:48:D7:44:37:4B:83:E1:E4:BB:19:59:67
Certificate issuer:       /CN=524E9D1652F660663CB5548E20AE99DA463B2CFA
Certificate serial:       120C986895A7EB1FAC8C76E7FEE699266986ECBD
Authority key identifier: 52:4E:9D:16:52:F6:60:66:3C:B5:54:8E:20:AE:99:DA:46:3B:2C:FA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/524E9D1652F660663CB5548E20AE99DA463B2CFA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BSY2zYZv6B5pHrp7U9wvqFgfxPqK6u5mgzG3Xxdgh15J/1/3136382e3139372e31362e302f32322d3234203d3e203532393437.roa
Signing time:             Thu 04 Apr 2024 19:12:33 +0000
ROA not before:           Thu 04 Apr 2024 19:07:33 +0000
ROA not after:            Thu 03 Apr 2025 19:12:33 +0000
asID:                     52947
IP address blocks:        168.197.16.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BSY2zYZv6B5pHrp7U9wvqFgfxPqK6u5mgzG3Xxdgh15J/1/524E9D1652F660663CB5548E20AE99DA463B2CFA.crl
                          rsync://rpki-repo.registro.br/repo/BSY2zYZv6B5pHrp7U9wvqFgfxPqK6u5mgzG3Xxdgh15J/1/524E9D1652F660663CB5548E20AE99DA463B2CFA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/524E9D1652F660663CB5548E20AE99DA463B2CFA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 06:14:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:0c:98:68:95:a7:eb:1f:ac:8c:76:e7:fe:e6:99:26:69:86:ec:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=524E9D1652F660663CB5548E20AE99DA463B2CFA
        Validity
            Not Before: Apr  4 19:07:33 2024 GMT
            Not After : Apr  3 19:12:33 2025 GMT
        Subject: CN=7AF7DE27D851EBBB48D744374B83E1E4BB195967
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:37:52:00:d9:1b:07:49:bb:96:46:5c:94:06:
                    c8:c9:f3:77:26:b5:01:c6:f4:d5:b9:88:16:99:96:
                    f0:74:34:11:15:92:f8:e5:f2:a1:da:b2:06:1a:6b:
                    e2:4b:26:0a:15:8a:0c:1d:2e:82:27:b1:fe:d5:b4:
                    5d:64:81:8b:53:bb:9a:98:09:a6:df:ed:86:82:0c:
                    9c:7a:29:6c:0a:c6:97:1f:4a:87:e0:e8:4f:34:dc:
                    85:bd:0b:27:83:0b:e4:db:c5:c4:a4:aa:e0:ca:e1:
                    c9:76:90:6d:38:64:b2:51:35:b8:c6:ec:82:d5:29:
                    d1:4a:18:87:51:b5:33:c6:10:a3:8d:c7:fc:5e:f7:
                    1e:b6:42:26:ea:d2:7e:22:c0:da:89:fe:a2:e7:b2:
                    c4:ee:1c:d9:01:00:68:3d:39:2f:66:10:70:31:26:
                    7b:18:eb:8e:6b:1f:33:8a:9d:02:ca:62:80:9f:27:
                    d1:fc:87:0e:02:47:a4:64:ca:8b:4c:72:66:26:f4:
                    bb:73:d4:2d:fd:fe:85:f2:02:0c:95:60:00:e0:5b:
                    91:b6:62:d5:5a:f7:50:da:17:98:7c:8e:ba:e5:30:
                    f5:4a:67:6d:fd:ff:40:44:47:28:a1:09:0c:a8:4d:
                    c4:c6:a4:2f:be:04:9b:b7:ff:e0:9d:26:4e:69:73:
                    18:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:F7:DE:27:D8:51:EB:BB:48:D7:44:37:4B:83:E1:E4:BB:19:59:67
            X509v3 Authority Key Identifier:
                keyid:52:4E:9D:16:52:F6:60:66:3C:B5:54:8E:20:AE:99:DA:46:3B:2C:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BSY2zYZv6B5pHrp7U9wvqFgfxPqK6u5mgzG3Xxdgh15J/1/524E9D1652F660663CB5548E20AE99DA463B2CFA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/524E9D1652F660663CB5548E20AE99DA463B2CFA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BSY2zYZv6B5pHrp7U9wvqFgfxPqK6u5mgzG3Xxdgh15J/1/3136382e3139372e31362e302f32322d3234203d3e203532393437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.197.16.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7a:5d:d7:77:af:dd:38:1b:df:52:01:e2:d4:dd:4e:2f:da:bb:
         9b:0f:f1:b7:4f:c0:98:29:61:fa:6f:39:4e:d4:78:ce:51:a3:
         7c:aa:23:fd:a1:d0:84:4d:83:74:05:f9:b8:ab:81:fd:38:e0:
         d4:ef:2a:7e:1c:35:c2:06:eb:80:59:4f:15:60:64:92:5a:1c:
         0b:73:9b:dd:2f:2c:96:5d:83:e7:32:43:18:e5:be:45:f0:f8:
         be:a9:f3:62:bb:eb:de:46:cc:22:93:32:f6:00:2d:d7:f3:b8:
         99:1d:71:8a:11:ac:33:65:b1:5a:80:e9:f9:fd:3c:bb:c1:51:
         38:86:a7:4d:30:35:5f:95:56:76:b2:3e:d5:9f:6a:f5:32:84:
         c0:ef:79:d7:19:a1:db:4c:12:f9:d4:50:81:f9:5e:71:c7:0f:
         23:13:9f:08:bf:a7:fa:ec:2c:3b:ab:79:fe:98:e3:39:3d:2f:
         04:35:05:58:0c:ab:7b:e5:ba:93:75:09:f4:5a:7c:ce:e2:08:
         d3:fc:b6:6c:d9:72:34:db:ee:31:04:a7:2c:6a:95:65:b6:86:
         35:9d:ee:94:0f:09:d7:f9:45:8b:30:0b:d4:da:68:9b:4d:03:
         0f:4d:b2:f8:64:9b:ed:03:68:b3:8d:63:df:70:5c:28:14:ec:
         a3:89:0c:8b
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUEgyYaJWn6x+sjHbn/uaZJmmG7L0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTI0RTlEMTY1MkY2NjA2NjNDQjU1NDhFMjBBRTk5REE0
NjNCMkNGQTAeFw0yNDA0MDQxOTA3MzNaFw0yNTA0MDMxOTEyMzNaMDMxMTAvBgNV
BAMTKDdBRjdERTI3RDg1MUVCQkI0OEQ3NDQzNzRCODNFMUU0QkIxOTU5NjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqN1IA2RsHSbuWRlyUBsjJ83cm
tQHG9NW5iBaZlvB0NBEVkvjl8qHasgYaa+JLJgoVigwdLoInsf7VtF1kgYtTu5qY
Cabf7YaCDJx6KWwKxpcfSofg6E803IW9CyeDC+TbxcSkquDK4cl2kG04ZLJRNbjG
7ILVKdFKGIdRtTPGEKONx/xe9x62Qibq0n4iwNqJ/qLnssTuHNkBAGg9OS9mEHAx
JnsY645rHzOKnQLKYoCfJ9H8hw4CR6RkyotMcmYm9Ltz1C39/oXyAgyVYADgW5G2
YtVa91DaF5h8jrrlMPVKZ239/0BERyihCQyoTcTGpC++BJu3/+CdJk5pcxjtAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUevfeJ9hR67tI10Q3S4Ph5LsZWWcwHwYDVR0j
BBgwFoAUUk6dFlL2YGY8tVSOIK6Z2kY7LPowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQlNZMnpZWnY2QjVwSHJwN1U5d3ZxRmdmeFBxSzZ1NW1nekczWHhkZ2gx
NUovMS81MjRFOUQxNjUyRjY2MDY2M0NCNTU0OEUyMEFFOTlEQTQ2M0IyQ0ZBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzUyNEU5RDE2NTJGNjYwNjYz
Q0I1NTQ4RTIwQUU5OURBNDYzQjJDRkEuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0JTWTJ6WVp2NkI1cEhycDdVOXd2cUZnZnhQcUs2dTVtZ3pHM1h4ZGdoMTVKLzEv
MzEzNjM4MmUzMTM5MzcyZTMxMzYyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzNTMy
MzkzNDM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCqMUQMA0GCSqGSIb3DQEBCwUAA4IBAQB6Xdd3r904
G99SAeLU3U4v2rubD/G3T8CYKWH6bzlO1HjOUaN8qiP9odCETYN0Bfm4q4H9OODU
7yp+HDXCBuuAWU8VYGSSWhwLc5vdLyyWXYPnMkMY5b5F8Pi+qfNiu+veRswikzL2
AC3X87iZHXGKEawzZbFagOn5/Ty7wVE4hqdNMDVflVZ2sj7Vn2r1MoTA73nXGaHb
TBL51FCB+V5xxw8jE58Iv6f67Cw7q3n+mOM5PS8ENQVYDKt75bqTdQn0WnzO4gjT
/LZs2XI02+4xBKcsapVltoY1ne6UDwnX+UWLMAvU2mibTQMPTbL4ZJvtA2izjWPf
cFwoFOyjiQyL
-----END CERTIFICATE-----
Generated at Fri Nov 22 08:00:17 2024 by rpki-client on console-ams.rpki-client.org