Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D4xNXu9cZbJ9AWyftXUzXTdsmD4GsnC252k9ZAMdeAUp/0/3136382e302e3136342e302f32342d3234203d3e20323633343833.roa
File:                     3136382e302e3136342e302f32342d3234203d3e20323633343833.roa (raw, json)
Hash identifier:          PJDtOHJjWqHWR4P2s8gsxumOlJ7NIML6PNm02Vp5gzU=
Subject key identifier:   D0:B8:69:18:9D:25:91:04:6E:93:FE:86:68:98:91:8B:BA:F5:D0:CD
Certificate issuer:       /CN=F21939D0333A56C027223307D042B0947155D77F
Certificate serial:       3AAD6DA2CC626B41A4C2890AF6D3F8D703F858DB
Authority key identifier: F2:19:39:D0:33:3A:56:C0:27:22:33:07:D0:42:B0:94:71:55:D7:7F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F21939D0333A56C027223307D042B0947155D77F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D4xNXu9cZbJ9AWyftXUzXTdsmD4GsnC252k9ZAMdeAUp/0/3136382e302e3136342e302f32342d3234203d3e20323633343833.roa
Signing time:             Thu 25 Apr 2024 17:07:04 +0000
ROA not before:           Thu 25 Apr 2024 17:02:04 +0000
ROA not after:            Thu 24 Apr 2025 17:07:04 +0000
asID:                     263483
IP address blocks:        168.0.164.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/D4xNXu9cZbJ9AWyftXUzXTdsmD4GsnC252k9ZAMdeAUp/0/F21939D0333A56C027223307D042B0947155D77F.crl
                          rsync://rpki-repo.registro.br/repo/D4xNXu9cZbJ9AWyftXUzXTdsmD4GsnC252k9ZAMdeAUp/0/F21939D0333A56C027223307D042B0947155D77F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F21939D0333A56C027223307D042B0947155D77F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 02 Jun 2024 19:06:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:ad:6d:a2:cc:62:6b:41:a4:c2:89:0a:f6:d3:f8:d7:03:f8:58:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F21939D0333A56C027223307D042B0947155D77F
        Validity
            Not Before: Apr 25 17:02:04 2024 GMT
            Not After : Apr 24 17:07:04 2025 GMT
        Subject: CN=D0B869189D2591046E93FE866898918BBAF5D0CD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:52:15:3f:ed:e5:56:02:1f:8c:36:ae:9a:b7:
                    88:2c:ff:16:d1:1f:8e:ec:7e:c1:0b:90:3f:5c:26:
                    50:2c:c6:1a:70:11:d5:74:43:20:36:2a:7f:25:af:
                    b4:95:2f:f0:e1:59:75:67:9c:c7:ae:15:2f:e5:e3:
                    11:e0:77:04:f8:a3:08:3e:0e:ea:86:92:85:59:5a:
                    8f:39:2b:6c:66:7f:ec:44:a9:39:52:33:c9:38:fc:
                    df:eb:31:b2:45:eb:87:7e:50:c3:c0:07:02:e8:2a:
                    94:6a:fb:22:5d:07:c3:15:d2:22:38:9c:9d:3f:52:
                    05:49:cc:e3:02:50:a3:ce:3a:e3:b3:aa:e5:9c:54:
                    d7:87:a9:b8:fd:ed:8b:a8:35:b0:55:15:1c:f6:4e:
                    c0:ec:71:4e:89:f8:da:20:da:ab:29:06:f3:32:02:
                    6f:f1:f4:f3:b9:01:1b:5d:ba:76:b3:f9:de:6f:aa:
                    32:2c:23:44:6a:cc:08:99:1a:a7:30:3e:dd:07:9a:
                    1c:b0:03:a3:5a:2f:11:ed:23:bd:09:0f:75:ff:e8:
                    16:67:0b:05:3e:cb:99:ec:d2:59:13:4c:3b:db:03:
                    90:b1:63:81:9c:da:0c:1c:95:2e:6f:bc:bf:88:24:
                    5e:11:55:c7:66:38:0a:94:65:50:4a:32:cf:71:36:
                    1b:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:B8:69:18:9D:25:91:04:6E:93:FE:86:68:98:91:8B:BA:F5:D0:CD
            X509v3 Authority Key Identifier:
                keyid:F2:19:39:D0:33:3A:56:C0:27:22:33:07:D0:42:B0:94:71:55:D7:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D4xNXu9cZbJ9AWyftXUzXTdsmD4GsnC252k9ZAMdeAUp/0/F21939D0333A56C027223307D042B0947155D77F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F21939D0333A56C027223307D042B0947155D77F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D4xNXu9cZbJ9AWyftXUzXTdsmD4GsnC252k9ZAMdeAUp/0/3136382e302e3136342e302f32342d3234203d3e20323633343833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.0.164.0/24

    Signature Algorithm: sha256WithRSAEncryption
         21:c0:bd:77:e7:ac:be:af:d3:f8:8e:99:44:cd:2f:a7:4f:af:
         cc:5a:ec:fd:25:08:22:84:3e:3b:69:24:4b:c5:0d:8d:03:36:
         1a:9a:d5:d3:b5:f3:f0:37:52:e5:92:bb:01:f3:15:b6:0d:3e:
         c9:1c:0d:d1:4c:4a:e3:27:f3:cb:17:07:32:47:4c:15:ca:83:
         4c:23:46:02:15:41:99:be:38:b4:ff:8e:1e:b7:35:87:85:c6:
         65:7c:0b:be:4f:03:51:b0:0f:86:56:d1:a8:18:be:e8:07:ad:
         c6:91:d7:3e:7a:6c:e9:f8:4b:62:93:de:cf:e7:52:c9:b5:b2:
         75:5b:54:19:44:fc:56:a6:c9:fb:52:5e:c0:09:e2:e7:9c:30:
         52:fc:4c:18:93:db:d3:0d:7a:fe:a8:d6:cb:65:12:7d:d4:d3:
         93:c5:cc:9e:5f:f8:1a:14:33:68:e0:5b:95:c4:c7:fc:76:ec:
         d7:9b:13:d8:ee:e8:73:0e:5d:ee:ee:9b:2b:b5:6b:44:9f:a9:
         43:b0:6c:98:0f:89:ec:b5:8c:02:2b:bd:54:d3:3f:60:4c:c2:
         38:ec:cb:69:bf:48:98:be:ec:21:43:bb:a6:7c:cc:1d:f5:42:
         8c:09:14:06:02:59:e2:38:7e:82:d7:dd:e8:ba:82:60:32:5f:
         0d:47:37:67
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUOq1tosxia0GkwokK9tP41wP4WNswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjIxOTM5RDAzMzNBNTZDMDI3MjIzMzA3RDA0MkIwOTQ3
MTU1RDc3RjAeFw0yNDA0MjUxNzAyMDRaFw0yNTA0MjQxNzA3MDRaMDMxMTAvBgNV
BAMTKEQwQjg2OTE4OUQyNTkxMDQ2RTkzRkU4NjY4OTg5MThCQkFGNUQwQ0QwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1UhU/7eVWAh+MNq6at4gs/xbR
H47sfsELkD9cJlAsxhpwEdV0QyA2Kn8lr7SVL/DhWXVnnMeuFS/l4xHgdwT4owg+
DuqGkoVZWo85K2xmf+xEqTlSM8k4/N/rMbJF64d+UMPABwLoKpRq+yJdB8MV0iI4
nJ0/UgVJzOMCUKPOOuOzquWcVNeHqbj97YuoNbBVFRz2TsDscU6J+Nog2qspBvMy
Am/x9PO5ARtdunaz+d5vqjIsI0RqzAiZGqcwPt0HmhywA6NaLxHtI70JD3X/6BZn
CwU+y5ns0lkTTDvbA5CxY4Gc2gwclS5vvL+IJF4RVcdmOAqUZVBKMs9xNhsbAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQU0LhpGJ0lkQRuk/6GaJiRi7r10M0wHwYDVR0j
BBgwFoAU8hk50DM6VsAnIjMH0EKwlHFV138wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRDR4Tlh1OWNaYko5QVd5ZnRYVXpYVGRzbUQ0R3NuQzI1Mms5WkFNZGVB
VXAvMC9GMjE5MzlEMDMzM0E1NkMwMjcyMjMzMDdEMDQyQjA5NDcxNTVENzdGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0YyMTkzOUQwMzMzQTU2QzAy
NzIyMzMwN0QwNDJCMDk0NzE1NUQ3N0YuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0Q0eE5YdTljWmJKOUFXeWZ0WFV6WFRkc21ENEdzbkMyNTJrOVpBTWRlQVVwLzAv
MzEzNjM4MmUzMDJlMzEzNjM0MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjMz
MzQzODMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAqACkMA0GCSqGSIb3DQEBCwUAA4IBAQAhwL1356y+
r9P4jplEzS+nT6/MWuz9JQgihD47aSRLxQ2NAzYamtXTtfPwN1LlkrsB8xW2DT7J
HA3RTErjJ/PLFwcyR0wVyoNMI0YCFUGZvji0/44etzWHhcZlfAu+TwNRsA+GVtGo
GL7oB63Gkdc+emzp+Etik97P51LJtbJ1W1QZRPxWpsn7Ul7ACeLnnDBS/EwYk9vT
DXr+qNbLZRJ91NOTxcyeX/gaFDNo4FuVxMf8duzXmxPY7uhzDl3u7psrtWtEn6lD
sGyYD4nstYwCK71U0z9gTMI47Mtpv0iYvuwhQ7umfMwd9UKMCRQGAlniOH6C193o
uoJgMl8NRzdn
-----END CERTIFICATE-----
Generated at Sat Jun 1 19:50:38 2024 by rpki-client on console-ams.rpki-client.org