Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ByCxDjvqHw87NiHDgvmYw3AxF9csyng5thtZNYXhvXJs/1/3136382e302e3139362e302f32322d3234203d3e20323635323635.roa
File:                     3136382e302e3139362e302f32322d3234203d3e20323635323635.roa (raw, json)
Hash identifier:          Js02KTZBIPgKLs6w9aaRy6RxtrvpShkJ1Z8tAbimo8c=
Subject key identifier:   B5:14:90:9B:85:74:AE:51:82:ED:75:D5:5D:C3:66:42:BB:D7:7E:29
Certificate issuer:       /CN=733F4B034A3788745713B6F81B211FD8957CF1EE
Certificate serial:       1EF8634F5B614E9A9338AEE7520F453513913F45
Authority key identifier: 73:3F:4B:03:4A:37:88:74:57:13:B6:F8:1B:21:1F:D8:95:7C:F1:EE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/733F4B034A3788745713B6F81B211FD8957CF1EE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ByCxDjvqHw87NiHDgvmYw3AxF9csyng5thtZNYXhvXJs/1/3136382e302e3139362e302f32322d3234203d3e20323635323635.roa
Signing time:             Thu 04 Apr 2024 23:14:27 +0000
ROA not before:           Thu 04 Apr 2024 23:09:27 +0000
ROA not after:            Thu 03 Apr 2025 23:14:27 +0000
asID:                     265265
IP address blocks:        168.0.196.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ByCxDjvqHw87NiHDgvmYw3AxF9csyng5thtZNYXhvXJs/1/733F4B034A3788745713B6F81B211FD8957CF1EE.crl
                          rsync://rpki-repo.registro.br/repo/ByCxDjvqHw87NiHDgvmYw3AxF9csyng5thtZNYXhvXJs/1/733F4B034A3788745713B6F81B211FD8957CF1EE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/733F4B034A3788745713B6F81B211FD8957CF1EE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:f8:63:4f:5b:61:4e:9a:93:38:ae:e7:52:0f:45:35:13:91:3f:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=733F4B034A3788745713B6F81B211FD8957CF1EE
        Validity
            Not Before: Apr  4 23:09:27 2024 GMT
            Not After : Apr  3 23:14:27 2025 GMT
        Subject: CN=B514909B8574AE5182ED75D55DC36642BBD77E29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:c8:d3:ee:e3:8b:88:e3:60:1a:32:d2:a8:08:
                    95:ad:32:e4:6f:d6:8a:df:6f:83:17:ef:d4:78:da:
                    4e:60:bc:c7:ac:24:22:fd:64:6f:29:e8:0d:1e:7a:
                    56:a8:1d:b6:6e:59:b3:af:25:2d:15:cd:6f:00:94:
                    85:1f:ec:1e:0d:f0:eb:93:f4:59:32:9b:5b:e1:92:
                    a1:2c:a3:21:a7:be:b5:5e:d5:9e:b4:6f:3e:c2:a8:
                    39:db:05:df:9b:ef:c3:6b:24:5f:2d:c8:f1:03:1f:
                    71:80:9b:28:a2:24:a3:d5:63:bc:51:1e:2e:d9:c5:
                    e0:17:b9:ee:5a:d4:c5:89:fd:a0:62:d9:cb:d2:e5:
                    0f:b5:9b:95:31:8e:77:90:33:3e:30:79:92:06:3d:
                    44:ab:04:ca:b8:05:49:23:68:8e:8a:10:a7:6f:08:
                    71:9d:4d:a3:b1:e1:fa:e7:43:61:60:47:68:9d:47:
                    ed:1b:32:04:35:14:2e:92:03:9e:ac:1c:e5:99:29:
                    20:f6:aa:b9:dc:45:62:00:cb:7c:ab:52:de:0a:11:
                    52:d8:85:6c:f9:6c:1a:62:97:b6:9b:5b:82:6f:b5:
                    c7:0e:bb:ba:f4:57:7d:4a:69:58:ec:a9:02:bb:45:
                    f8:0c:e1:fe:b8:16:ee:d7:82:3d:c2:35:c7:53:23:
                    75:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:14:90:9B:85:74:AE:51:82:ED:75:D5:5D:C3:66:42:BB:D7:7E:29
            X509v3 Authority Key Identifier:
                keyid:73:3F:4B:03:4A:37:88:74:57:13:B6:F8:1B:21:1F:D8:95:7C:F1:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ByCxDjvqHw87NiHDgvmYw3AxF9csyng5thtZNYXhvXJs/1/733F4B034A3788745713B6F81B211FD8957CF1EE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/733F4B034A3788745713B6F81B211FD8957CF1EE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ByCxDjvqHw87NiHDgvmYw3AxF9csyng5thtZNYXhvXJs/1/3136382e302e3139362e302f32322d3234203d3e20323635323635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.0.196.0/22

    Signature Algorithm: sha256WithRSAEncryption
         62:67:29:c7:6c:94:f3:b4:7d:d9:f9:b5:8e:6f:a3:48:1b:2e:
         f6:65:3d:40:b5:77:fa:f9:62:9c:46:c1:a9:4b:88:5a:79:37:
         19:91:fb:25:0b:ef:bb:0d:7f:3f:21:c4:83:ff:cf:51:24:54:
         d8:90:e5:cf:97:bd:6e:0d:c8:e6:4a:09:07:82:a1:d0:35:2f:
         66:bc:92:53:9d:0c:97:e4:e9:68:13:48:bc:89:9a:88:cc:10:
         18:4e:17:68:d4:b2:45:db:31:e5:36:3c:9c:a1:44:f4:b7:99:
         cd:ce:0b:4f:a6:17:3e:b0:c5:15:ef:07:fd:6b:98:4d:52:72:
         71:3a:da:b4:16:a7:4e:9e:7a:d2:ac:89:ed:e3:2e:59:a8:cf:
         21:75:ee:8b:b0:05:fe:59:ef:47:02:eb:ee:5b:2f:30:9f:c1:
         ad:9d:8f:ad:e9:1d:0f:43:06:65:50:31:ac:de:8d:c7:ce:15:
         bd:f5:ae:e9:91:c6:35:d0:04:62:4f:33:26:20:86:88:7f:9f:
         7b:95:6e:b1:9b:4d:b7:5e:77:c8:fa:34:b8:ad:47:fb:54:a6:
         7c:53:cb:fa:eb:ed:86:58:f4:1d:8a:39:29:cd:8b:47:6f:00:
         e9:bb:14:93:08:91:94:75:a5:67:18:b9:ad:be:7d:df:69:61:
         84:86:ba:3c
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUHvhjT1thTpqTOK7nUg9FNRORP0UwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzMzRjRCMDM0QTM3ODg3NDU3MTNCNkY4MUIyMTFGRDg5
NTdDRjFFRTAeFw0yNDA0MDQyMzA5MjdaFw0yNTA0MDMyMzE0MjdaMDMxMTAvBgNV
BAMTKEI1MTQ5MDlCODU3NEFFNTE4MkVENzVENTVEQzM2NjQyQkJENzdFMjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyyNPu44uI42AaMtKoCJWtMuRv
1orfb4MX79R42k5gvMesJCL9ZG8p6A0eelaoHbZuWbOvJS0VzW8AlIUf7B4N8OuT
9Fkym1vhkqEsoyGnvrVe1Z60bz7CqDnbBd+b78NrJF8tyPEDH3GAmyiiJKPVY7xR
Hi7ZxeAXue5a1MWJ/aBi2cvS5Q+1m5UxjneQMz4weZIGPUSrBMq4BUkjaI6KEKdv
CHGdTaOx4frnQ2FgR2idR+0bMgQ1FC6SA56sHOWZKSD2qrncRWIAy3yrUt4KEVLY
hWz5bBpil7abW4JvtccOu7r0V31KaVjsqQK7RfgM4f64Fu7Xgj3CNcdTI3WhAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUtRSQm4V0rlGC7XXVXcNmQrvXfikwHwYDVR0j
BBgwFoAUcz9LA0o3iHRXE7b4GyEf2JV88e4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQnlDeERqdnFIdzg3TmlIRGd2bVl3M0F4Rjljc3luZzV0aHRaTllYaHZY
SnMvMS83MzNGNEIwMzRBMzc4ODc0NTcxM0I2RjgxQjIxMUZEODk1N0NGMUVFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzczM0Y0QjAzNEEzNzg4NzQ1
NzEzQjZGODFCMjExRkQ4OTU3Q0YxRUUuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0J5Q3hEanZxSHc4N05pSERndm1ZdzNBeEY5Y3N5bmc1dGh0Wk5ZWGh2WEpzLzEv
MzEzNjM4MmUzMDJlMzEzOTM2MmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNjM1
MzIzNjM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCqADEMA0GCSqGSIb3DQEBCwUAA4IBAQBiZynHbJTz
tH3Z+bWOb6NIGy72ZT1AtXf6+WKcRsGpS4haeTcZkfslC++7DX8/IcSD/89RJFTY
kOXPl71uDcjmSgkHgqHQNS9mvJJTnQyX5OloE0i8iZqIzBAYThdo1LJF2zHlNjyc
oUT0t5nNzgtPphc+sMUV7wf9a5hNUnJxOtq0FqdOnnrSrInt4y5ZqM8hde6LsAX+
We9HAuvuWy8wn8GtnY+t6R0PQwZlUDGs3o3HzhW99a7pkcY10ARiTzMmIIaIf597
lW6xm023XnfI+jS4rUf7VKZ8U8v66+2GWPQdijkpzYtHbwDpuxSTCJGUdaVnGLmt
vn3faWGEhro8
-----END CERTIFICATE-----
Generated at Sat Nov 23 00:05:41 2024 by rpki-client on console-ams.rpki-client.org