Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BvnizDybwSScQTGAZYo5gKukuEvZKZtP36XPDDMpmqJ9/1/3136382e302e3134342e302f32322d3234203d3e203532353630.roa
File:                     3136382e302e3134342e302f32322d3234203d3e203532353630.roa (raw, json)
Hash identifier:          oLEpTa1D3wrdTeNHlD9ygX8cozRBqhQP++UUdSyV6qs=
Subject key identifier:   C5:9D:B7:C4:E9:81:33:9C:37:3B:5A:F0:49:D8:50:3E:BE:54:88:E7
Certificate issuer:       /CN=122355C7CE6C4B651C393D8619E964AD6CFEB76A
Certificate serial:       20923E345822D4D5E8AF732D1565B5337271DE28
Authority key identifier: 12:23:55:C7:CE:6C:4B:65:1C:39:3D:86:19:E9:64:AD:6C:FE:B7:6A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/122355C7CE6C4B651C393D8619E964AD6CFEB76A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BvnizDybwSScQTGAZYo5gKukuEvZKZtP36XPDDMpmqJ9/1/3136382e302e3134342e302f32322d3234203d3e203532353630.roa
Signing time:             Thu 04 Apr 2024 03:45:52 +0000
ROA not before:           Thu 04 Apr 2024 03:40:52 +0000
ROA not after:            Thu 03 Apr 2025 03:45:52 +0000
asID:                     52560
IP address blocks:        168.0.144.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BvnizDybwSScQTGAZYo5gKukuEvZKZtP36XPDDMpmqJ9/1/122355C7CE6C4B651C393D8619E964AD6CFEB76A.crl
                          rsync://rpki-repo.registro.br/repo/BvnizDybwSScQTGAZYo5gKukuEvZKZtP36XPDDMpmqJ9/1/122355C7CE6C4B651C393D8619E964AD6CFEB76A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/122355C7CE6C4B651C393D8619E964AD6CFEB76A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 21:23:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:92:3e:34:58:22:d4:d5:e8:af:73:2d:15:65:b5:33:72:71:de:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=122355C7CE6C4B651C393D8619E964AD6CFEB76A
        Validity
            Not Before: Apr  4 03:40:52 2024 GMT
            Not After : Apr  3 03:45:52 2025 GMT
        Subject: CN=C59DB7C4E981339C373B5AF049D8503EBE5488E7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:70:b6:d9:d7:45:22:84:5b:bc:53:23:6e:d6:
                    59:60:a9:b0:c4:54:58:9e:55:60:85:ea:8e:a4:c4:
                    ba:de:f0:10:c6:6d:df:c5:97:5f:bd:9b:59:01:2d:
                    9b:94:a2:30:5b:d0:a3:43:c9:ad:fe:fe:26:5a:ad:
                    a5:93:dd:f2:b6:50:a4:fe:c1:fc:77:c4:3c:bd:ef:
                    91:a2:5a:43:d3:c3:be:de:d2:6d:36:ab:31:38:44:
                    05:f6:3b:54:cc:aa:1c:51:ad:2a:c4:e2:71:ae:32:
                    0a:e3:ac:15:5d:ce:c4:ae:be:24:0d:64:87:02:69:
                    42:f7:b9:01:9f:6c:12:f4:3e:b8:d1:b2:94:0a:3e:
                    9d:53:37:80:15:6c:e3:e0:1b:08:da:a8:63:76:61:
                    d0:f4:e0:e5:65:e9:29:a0:fc:c5:02:b1:af:bc:fd:
                    0c:7d:d8:b6:d2:ad:ce:c0:7a:e2:19:50:f1:e4:4b:
                    1a:83:76:65:0d:d2:13:a1:a1:cd:35:2d:0e:e8:a2:
                    25:d5:20:61:5c:27:7a:9d:39:ca:05:7e:29:4a:b3:
                    59:62:40:40:92:99:76:c0:ae:51:3c:10:78:4c:7b:
                    78:41:4d:63:cf:39:e7:10:c1:d8:06:ed:17:2d:63:
                    a7:b6:0e:b6:ff:c8:fe:d6:71:e7:dc:c5:79:c6:56:
                    db:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:9D:B7:C4:E9:81:33:9C:37:3B:5A:F0:49:D8:50:3E:BE:54:88:E7
            X509v3 Authority Key Identifier:
                keyid:12:23:55:C7:CE:6C:4B:65:1C:39:3D:86:19:E9:64:AD:6C:FE:B7:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BvnizDybwSScQTGAZYo5gKukuEvZKZtP36XPDDMpmqJ9/1/122355C7CE6C4B651C393D8619E964AD6CFEB76A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/122355C7CE6C4B651C393D8619E964AD6CFEB76A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BvnizDybwSScQTGAZYo5gKukuEvZKZtP36XPDDMpmqJ9/1/3136382e302e3134342e302f32322d3234203d3e203532353630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.0.144.0/22

    Signature Algorithm: sha256WithRSAEncryption
         78:3d:ab:e6:28:1d:55:6e:2f:75:99:41:47:a4:50:d0:14:48:
         35:d2:cb:0c:d0:bb:69:1b:bb:cb:d0:fd:c7:ca:3a:39:13:45:
         36:d1:c9:52:62:44:bc:46:c0:ef:9e:22:7c:41:b3:89:48:1b:
         7b:d8:33:9f:65:73:a3:19:bc:88:03:b7:66:3d:49:d4:65:4e:
         64:fa:4a:63:b7:f6:53:08:8f:7a:61:7c:36:a4:3d:af:c0:3a:
         d7:37:c5:6e:fa:e5:53:10:eb:2c:ea:8a:38:35:3c:1a:5f:dc:
         10:a3:f3:44:37:db:c0:35:3f:51:bc:9a:b7:ac:64:fd:49:c0:
         cb:2b:c2:bd:45:08:81:f2:d0:59:02:3f:45:96:cb:35:3f:bc:
         3d:1e:4b:9f:e9:89:c9:58:7e:cd:d5:6c:43:07:2c:bb:6e:fc:
         85:6f:ff:0b:ff:70:d9:af:c0:14:a6:68:f5:12:d4:ec:04:37:
         7b:1c:9c:bf:b2:27:7c:67:d0:9a:af:28:b8:74:dc:6e:86:2a:
         83:5d:1c:80:be:94:be:62:ec:78:79:55:1c:05:32:a3:cd:b0:
         88:bf:61:15:37:07:e1:e6:38:fb:d2:a5:01:d2:f4:b7:0f:95:
         a4:64:38:82:c8:a1:69:e9:e5:4f:af:9d:02:90:20:bb:2f:d9:
         09:f8:3b:98
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUIJI+NFgi1NXor3MtFWW1M3Jx3igwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTIyMzU1QzdDRTZDNEI2NTFDMzkzRDg2MTlFOTY0QUQ2
Q0ZFQjc2QTAeFw0yNDA0MDQwMzQwNTJaFw0yNTA0MDMwMzQ1NTJaMDMxMTAvBgNV
BAMTKEM1OURCN0M0RTk4MTMzOUMzNzNCNUFGMDQ5RDg1MDNFQkU1NDg4RTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDScLbZ10UihFu8UyNu1llgqbDE
VFieVWCF6o6kxLre8BDGbd/Fl1+9m1kBLZuUojBb0KNDya3+/iZaraWT3fK2UKT+
wfx3xDy975GiWkPTw77e0m02qzE4RAX2O1TMqhxRrSrE4nGuMgrjrBVdzsSuviQN
ZIcCaUL3uQGfbBL0PrjRspQKPp1TN4AVbOPgGwjaqGN2YdD04OVl6Smg/MUCsa+8
/Qx92LbSrc7AeuIZUPHkSxqDdmUN0hOhoc01LQ7ooiXVIGFcJ3qdOcoFfilKs1li
QECSmXbArlE8EHhMe3hBTWPPOecQwdgG7RctY6e2Drb/yP7WcefcxXnGVtszAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUxZ23xOmBM5w3O1rwSdhQPr5UiOcwHwYDVR0j
BBgwFoAUEiNVx85sS2UcOT2GGelkrWz+t2owDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQnZuaXpEeWJ3U1NjUVRHQVpZbzVnS3VrdUV2WktadFAzNlhQRERNcG1x
SjkvMS8xMjIzNTVDN0NFNkM0QjY1MUMzOTNEODYxOUU5NjRBRDZDRkVCNzZBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzEyMjM1NUM3Q0U2QzRCNjUx
QzM5M0Q4NjE5RTk2NEFENkNGRUI3NkEuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0J2bml6RHlid1NTY1FUR0FaWW81Z0t1a3VFdlpLWnRQMzZYUERETXBtcUo5LzEv
MzEzNjM4MmUzMDJlMzEzNDM0MmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzUzMjM1
MzYzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEAqgAkDANBgkqhkiG9w0BAQsFAAOCAQEAeD2r5igdVW4v
dZlBR6RQ0BRINdLLDNC7aRu7y9D9x8o6ORNFNtHJUmJEvEbA754ifEGziUgbe9gz
n2Vzoxm8iAO3Zj1J1GVOZPpKY7f2UwiPemF8NqQ9r8A61zfFbvrlUxDrLOqKODU8
Gl/cEKPzRDfbwDU/Ubyat6xk/UnAyyvCvUUIgfLQWQI/RZbLNT+8PR5Ln+mJyVh+
zdVsQwcsu278hW//C/9w2a/AFKZo9RLU7AQ3exycv7InfGfQmq8ouHTcboYqg10c
gL6UvmLseHlVHAUyo82wiL9hFTcH4eY4+9KlAdL0tw+VpGQ4gsihaenlT6+dApAg
uy/ZCfg7mA==
-----END CERTIFICATE-----
Generated at Fri Nov 22 22:21:10 2024 by rpki-client on console-fra.rpki-client.org