Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DC2HkqRBtZQPFqnGrMFkDZLB52U1wyDk8hDzeAenLzjb/1/3136382e3139372e38302e302f32322d3234203d3e20323634333836.roa
File:                     3136382e3139372e38302e302f32322d3234203d3e20323634333836.roa (raw, json)
Hash identifier:          nsuU7rkBZsCroNrIsZj3CODVVHgzbTd+0Kbjyg3+0xA=
Subject key identifier:   BC:5A:DB:1D:37:71:04:9C:F2:0C:07:3E:BD:02:6C:85:A9:CB:2E:43
Certificate issuer:       /CN=CC038C42F33B3D558931769A27D97E3412751117
Certificate serial:       5C890F8C2606A56FC66F79DFC1E4007A1203B009
Authority key identifier: CC:03:8C:42:F3:3B:3D:55:89:31:76:9A:27:D9:7E:34:12:75:11:17
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CC038C42F33B3D558931769A27D97E3412751117.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DC2HkqRBtZQPFqnGrMFkDZLB52U1wyDk8hDzeAenLzjb/1/3136382e3139372e38302e302f32322d3234203d3e20323634333836.roa
Signing time:             Thu 18 Apr 2024 18:01:33 +0000
ROA not before:           Thu 18 Apr 2024 17:56:33 +0000
ROA not after:            Thu 17 Apr 2025 18:01:33 +0000
asID:                     264386
IP address blocks:        168.197.80.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DC2HkqRBtZQPFqnGrMFkDZLB52U1wyDk8hDzeAenLzjb/1/CC038C42F33B3D558931769A27D97E3412751117.crl
                          rsync://rpki-repo.registro.br/repo/DC2HkqRBtZQPFqnGrMFkDZLB52U1wyDk8hDzeAenLzjb/1/CC038C42F33B3D558931769A27D97E3412751117.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CC038C42F33B3D558931769A27D97E3412751117.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:89:0f:8c:26:06:a5:6f:c6:6f:79:df:c1:e4:00:7a:12:03:b0:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CC038C42F33B3D558931769A27D97E3412751117
        Validity
            Not Before: Apr 18 17:56:33 2024 GMT
            Not After : Apr 17 18:01:33 2025 GMT
        Subject: CN=BC5ADB1D3771049CF20C073EBD026C85A9CB2E43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:23:6b:94:10:58:81:45:56:35:34:0f:d4:fa:
                    f8:97:56:94:78:11:a4:4e:4d:b4:85:0b:bd:9e:1d:
                    a3:93:15:08:20:50:dd:ed:09:b6:29:d6:6c:7d:76:
                    bb:12:09:0a:41:44:78:b6:ef:83:b2:27:e9:d8:91:
                    d0:1a:d9:7f:94:b9:85:94:39:01:0b:75:67:32:d0:
                    0b:8e:f6:40:84:ed:f7:ff:b3:7e:d6:79:96:8d:0e:
                    23:c0:bb:96:cf:3f:58:32:e0:61:4f:b6:c3:a3:5d:
                    12:74:40:26:05:5a:48:61:0f:11:f9:86:2f:06:aa:
                    d7:b9:5f:f5:41:48:5f:5b:81:f1:e2:5b:a2:f9:dd:
                    2a:d4:ee:f4:33:07:2a:78:6c:31:a3:15:68:fc:a0:
                    3e:bc:40:c7:80:dd:3f:2e:f2:9a:16:e9:f0:98:65:
                    83:4b:61:e1:18:40:af:e1:6b:62:de:3b:87:28:5a:
                    8a:0f:62:6e:d4:03:6b:96:37:6f:f7:f4:47:4c:34:
                    99:1d:25:9f:b6:c2:ae:fe:23:48:30:26:77:dd:8d:
                    97:7c:94:1b:8c:80:b9:62:ba:cf:27:20:cd:c6:bb:
                    10:e2:db:b7:36:8d:59:43:7f:a3:1d:9a:9f:f0:76:
                    56:d8:d2:8f:e7:8d:a3:8e:59:c0:59:b1:f9:45:61:
                    7c:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:5A:DB:1D:37:71:04:9C:F2:0C:07:3E:BD:02:6C:85:A9:CB:2E:43
            X509v3 Authority Key Identifier:
                keyid:CC:03:8C:42:F3:3B:3D:55:89:31:76:9A:27:D9:7E:34:12:75:11:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DC2HkqRBtZQPFqnGrMFkDZLB52U1wyDk8hDzeAenLzjb/1/CC038C42F33B3D558931769A27D97E3412751117.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CC038C42F33B3D558931769A27D97E3412751117.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DC2HkqRBtZQPFqnGrMFkDZLB52U1wyDk8hDzeAenLzjb/1/3136382e3139372e38302e302f32322d3234203d3e20323634333836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.197.80.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4a:df:8a:3e:91:23:ee:da:95:4a:d7:35:b2:45:31:d7:33:01:
         d9:72:33:ce:88:b5:5e:70:2f:f6:d9:0c:ab:47:db:5e:a7:e9:
         23:09:02:a5:db:d3:60:56:45:83:03:2c:31:3e:1c:d4:96:c3:
         4e:56:a9:3e:ec:a2:11:8c:dd:2a:0c:64:11:8d:81:ac:17:16:
         0c:26:e7:40:6f:4c:fb:88:1e:a3:03:ed:98:2e:a2:29:5e:48:
         60:ed:c5:f5:42:cd:06:94:43:ac:d9:0e:78:48:94:95:1a:7c:
         b7:10:b6:46:2e:d0:36:f7:95:7d:c4:a2:31:2c:90:0e:34:cc:
         44:b9:34:dc:54:ed:8c:64:4e:40:d3:e9:38:89:64:ae:6a:4f:
         ae:06:83:7c:7f:d7:c9:52:39:8f:c2:76:78:da:80:18:50:71:
         5a:c0:51:44:fd:35:c3:66:1e:d8:a9:e1:39:e9:09:07:85:23:
         f1:8f:01:cd:3c:f1:de:39:f9:ae:ba:5d:4b:16:9d:b4:b2:05:
         9c:03:71:3a:7e:a1:0f:41:ab:16:b8:bc:a3:3a:35:bc:4f:d9:
         cf:73:54:e5:df:46:b2:2c:96:ce:10:92:0e:27:f9:ed:84:78:
         33:de:67:4c:1b:b1:88:22:e8:0e:7c:c1:bf:15:66:a3:df:8c:
         35:6e:3d:7d
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUXIkPjCYGpW/Gb3nfweQAehIDsAkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0MwMzhDNDJGMzNCM0Q1NTg5MzE3NjlBMjdEOTdFMzQx
Mjc1MTExNzAeFw0yNDA0MTgxNzU2MzNaFw0yNTA0MTcxODAxMzNaMDMxMTAvBgNV
BAMTKEJDNUFEQjFEMzc3MTA0OUNGMjBDMDczRUJEMDI2Qzg1QTlDQjJFNDMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCI2uUEFiBRVY1NA/U+viXVpR4
EaROTbSFC72eHaOTFQggUN3tCbYp1mx9drsSCQpBRHi274OyJ+nYkdAa2X+UuYWU
OQELdWcy0AuO9kCE7ff/s37WeZaNDiPAu5bPP1gy4GFPtsOjXRJ0QCYFWkhhDxH5
hi8Gqte5X/VBSF9bgfHiW6L53SrU7vQzByp4bDGjFWj8oD68QMeA3T8u8poW6fCY
ZYNLYeEYQK/ha2LeO4coWooPYm7UA2uWN2/39EdMNJkdJZ+2wq7+I0gwJnfdjZd8
lBuMgLlius8nIM3GuxDi27c2jVlDf6Mdmp/wdlbY0o/njaOOWcBZsflFYXzpAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUvFrbHTdxBJzyDAc+vQJshanLLkMwHwYDVR0j
BBgwFoAUzAOMQvM7PVWJMXaaJ9l+NBJ1ERcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vREMySGtxUkJ0WlFQRnFuR3JNRmtEWkxCNTJVMXd5RGs4aER6ZUFlbkx6
amIvMS9DQzAzOEM0MkYzM0IzRDU1ODkzMTc2OUEyN0Q5N0UzNDEyNzUxMTE3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NDMDM4QzQyRjMzQjNENTU4
OTMxNzY5QTI3RDk3RTM0MTI3NTExMTcuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RDMkhrcVJCdFpRUEZxbkdyTUZrRFpMQjUyVTF3eURrOGhEemVBZW5MempiLzEv
MzEzNjM4MmUzMTM5MzcyZTM4MzAyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM2
MzQzMzM4MzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAKoxVAwDQYJKoZIhvcNAQELBQADggEBAErfij6R
I+7alUrXNbJFMdczAdlyM86ItV5wL/bZDKtH216n6SMJAqXb02BWRYMDLDE+HNSW
w05WqT7sohGM3SoMZBGNgawXFgwm50BvTPuIHqMD7ZguoileSGDtxfVCzQaUQ6zZ
DnhIlJUafLcQtkYu0Db3lX3EojEskA40zES5NNxU7YxkTkDT6TiJZK5qT64Gg3x/
18lSOY/CdnjagBhQcVrAUUT9NcNmHtip4TnpCQeFI/GPAc088d45+a66XUsWnbSy
BZwDcTp+oQ9Bqxa4vKM6NbxP2c9zVOXfRrIsls4Qkg4n+e2EeDPeZ0wbsYgi6A58
wb8VZqPfjDVuPX0=
-----END CERTIFICATE-----
Generated at Sat Nov 23 01:25:37 2024 by rpki-client on console-ams.rpki-client.org