Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DXUyF2Vm4aZWcDczs3JMRh4ruGBS1tnMtPNcvCFet6ze/0/3230312e3135392e3135362e302f32322d3234203d3e203631383133.roa
File:                     3230312e3135392e3135362e302f32322d3234203d3e203631383133.roa (raw, json)
Hash identifier:          zRKJjNlvQ2HdIxHhmp7UlVGkW34r9jJWFrSdlNk8rfo=
Subject key identifier:   85:BD:8C:8F:65:86:13:54:49:35:99:D7:91:FE:A3:19:77:90:70:2F
Certificate issuer:       /CN=36ED969D92322E6C7F28A050D3ABC47947497160
Certificate serial:       659D158169BFAFDAFF759EC080B175D1AC10F326
Authority key identifier: 36:ED:96:9D:92:32:2E:6C:7F:28:A0:50:D3:AB:C4:79:47:49:71:60
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/36ED969D92322E6C7F28A050D3ABC47947497160.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DXUyF2Vm4aZWcDczs3JMRh4ruGBS1tnMtPNcvCFet6ze/0/3230312e3135392e3135362e302f32322d3234203d3e203631383133.roa
Signing time:             Fri 17 May 2024 14:27:26 +0000
ROA not before:           Fri 17 May 2024 14:22:26 +0000
ROA not after:            Fri 16 May 2025 14:27:26 +0000
asID:                     61813
IP address blocks:        201.159.156.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DXUyF2Vm4aZWcDczs3JMRh4ruGBS1tnMtPNcvCFet6ze/0/36ED969D92322E6C7F28A050D3ABC47947497160.crl
                          rsync://rpki-repo.registro.br/repo/DXUyF2Vm4aZWcDczs3JMRh4ruGBS1tnMtPNcvCFet6ze/0/36ED969D92322E6C7F28A050D3ABC47947497160.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/36ED969D92322E6C7F28A050D3ABC47947497160.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 16:27:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:9d:15:81:69:bf:af:da:ff:75:9e:c0:80:b1:75:d1:ac:10:f3:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36ED969D92322E6C7F28A050D3ABC47947497160
        Validity
            Not Before: May 17 14:22:26 2024 GMT
            Not After : May 16 14:27:26 2025 GMT
        Subject: CN=85BD8C8F65861354493599D791FEA3197790702F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:d2:97:59:98:17:6e:d9:c6:2a:f3:98:ab:cc:
                    ef:98:e3:4e:66:ad:4b:8b:4b:27:61:61:82:d8:8f:
                    c5:cd:44:52:72:8d:ad:e9:4f:e3:8b:6a:c8:ff:42:
                    63:f7:34:32:7d:c6:49:a0:11:03:55:fa:9f:b5:4c:
                    2d:15:38:01:2e:8f:0c:1f:9e:d8:5b:c8:4e:a6:3a:
                    8a:ce:33:a2:b5:5f:97:e8:41:01:23:65:a8:fe:85:
                    ed:e4:cb:9b:e3:df:fc:15:27:02:fb:58:6f:82:4f:
                    87:74:b2:2d:1b:55:f4:2a:3d:ef:e6:93:11:a3:7c:
                    ea:8d:4e:db:17:a3:7f:ca:ff:bc:b9:b8:d3:d8:70:
                    84:a2:40:5b:f8:24:d5:b7:ec:c1:1c:d6:03:9b:28:
                    71:31:db:ed:d7:5e:84:f7:2b:6f:33:8e:0a:08:f0:
                    5a:a8:9d:6b:9b:e9:92:b8:37:ea:62:fa:63:9c:cc:
                    b1:67:bf:6d:bf:09:bf:a4:b6:1e:df:c0:97:b7:79:
                    67:3f:6e:e4:aa:f0:42:ab:21:d6:0a:8a:e2:12:65:
                    f3:7c:42:5c:67:3d:96:f8:06:57:da:9d:50:6f:56:
                    08:9c:b4:12:66:61:f6:9b:75:34:c8:92:8a:76:07:
                    af:93:69:ca:7a:d0:bd:2f:82:39:e3:02:1f:c1:51:
                    8e:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:BD:8C:8F:65:86:13:54:49:35:99:D7:91:FE:A3:19:77:90:70:2F
            X509v3 Authority Key Identifier:
                keyid:36:ED:96:9D:92:32:2E:6C:7F:28:A0:50:D3:AB:C4:79:47:49:71:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DXUyF2Vm4aZWcDczs3JMRh4ruGBS1tnMtPNcvCFet6ze/0/36ED969D92322E6C7F28A050D3ABC47947497160.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/36ED969D92322E6C7F28A050D3ABC47947497160.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DXUyF2Vm4aZWcDczs3JMRh4ruGBS1tnMtPNcvCFet6ze/0/3230312e3135392e3135362e302f32322d3234203d3e203631383133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.159.156.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a7:27:79:e4:48:0b:76:c6:63:39:13:21:3a:27:51:5b:ab:82:
         db:9a:e4:42:82:e9:e9:12:c3:ef:f5:36:30:81:47:4b:99:b4:
         f6:85:3c:e0:d0:58:81:97:71:8c:71:fa:58:e1:fb:cc:9f:de:
         9a:09:d2:41:39:6e:c1:99:13:89:58:1d:33:3e:f9:20:28:be:
         62:12:64:65:95:e8:af:25:52:06:7c:3d:24:9f:ec:62:c2:9b:
         e7:a7:68:01:60:b8:50:c9:9a:15:c7:2e:b2:29:90:47:68:ba:
         ea:43:d8:68:f3:85:4e:65:72:5c:bb:cf:7b:af:78:e0:e7:4e:
         81:d9:2d:a9:fc:96:d7:7a:f7:d2:e1:cf:89:31:83:c3:4d:98:
         19:78:22:84:29:53:45:a3:4a:d2:28:31:ad:1a:77:85:b9:a8:
         74:cc:09:ec:f9:6c:29:01:63:b4:c5:78:7c:a3:db:85:cd:f9:
         3d:48:12:c1:80:ad:70:de:0d:1d:83:ef:e7:55:d9:53:ab:c6:
         06:a5:f3:78:8e:03:a7:0a:62:5f:d5:e6:df:a2:57:0e:ae:9e:
         cf:83:ab:88:7e:85:91:a9:6d:ea:d0:72:bc:2f:2d:93:4a:67:
         e2:d5:0d:06:51:e4:2d:68:12:79:48:71:ba:12:7e:64:af:bb:
         a5:75:d9:69
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUZZ0VgWm/r9r/dZ7AgLF10awQ8yYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzZFRDk2OUQ5MjMyMkU2QzdGMjhBMDUwRDNBQkM0Nzk0
NzQ5NzE2MDAeFw0yNDA1MTcxNDIyMjZaFw0yNTA1MTYxNDI3MjZaMDMxMTAvBgNV
BAMTKDg1QkQ4QzhGNjU4NjEzNTQ0OTM1OTlENzkxRkVBMzE5Nzc5MDcwMkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCn0pdZmBdu2cYq85irzO+Y405m
rUuLSydhYYLYj8XNRFJyja3pT+OLasj/QmP3NDJ9xkmgEQNV+p+1TC0VOAEujwwf
nthbyE6mOorOM6K1X5foQQEjZaj+he3ky5vj3/wVJwL7WG+CT4d0si0bVfQqPe/m
kxGjfOqNTtsXo3/K/7y5uNPYcISiQFv4JNW37MEc1gObKHEx2+3XXoT3K28zjgoI
8FqonWub6ZK4N+pi+mOczLFnv22/Cb+kth7fwJe3eWc/buSq8EKrIdYKiuISZfN8
QlxnPZb4BlfanVBvVgictBJmYfabdTTIkop2B6+Tacp60L0vgjnjAh/BUY7jAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUhb2Mj2WGE1RJNZnXkf6jGXeQcC8wHwYDVR0j
BBgwFoAUNu2WnZIyLmx/KKBQ06vEeUdJcWAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRFhVeUYyVm00YVpXY0RjenMzSk1SaDRydUdCUzF0bk10UE5jdkNGZXQ2
emUvMC8zNkVEOTY5RDkyMzIyRTZDN0YyOEEwNTBEM0FCQzQ3OTQ3NDk3MTYwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzM2RUQ5NjlEOTIzMjJFNkM3
RjI4QTA1MEQzQUJDNDc5NDc0OTcxNjAuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RYVXlGMlZtNGFaV2NEY3pzM0pNUmg0cnVHQlMxdG5NdFBOY3ZDRmV0NnplLzAv
MzIzMDMxMmUzMTM1MzkyZTMxMzUzNjJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDM2
MzEzODMxMzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBALJn5wwDQYJKoZIhvcNAQELBQADggEBAKcneeRI
C3bGYzkTITonUVurgtua5EKC6ekSw+/1NjCBR0uZtPaFPODQWIGXcYxx+ljh+8yf
3poJ0kE5bsGZE4lYHTM++SAovmISZGWV6K8lUgZ8PSSf7GLCm+enaAFguFDJmhXH
LrIpkEdouupD2GjzhU5lcly7z3uveODnToHZLan8ltd699Lhz4kxg8NNmBl4IoQp
U0WjStIoMa0ad4W5qHTMCez5bCkBY7TFeHyj24XN+T1IEsGArXDeDR2D7+dV2VOr
xgal83iOA6cKYl/V5t+iVw6uns+Dq4h+hZGpberQcrwvLZNKZ+LVDQZR5C1oEnlI
cboSfmSvu6V12Wk=
-----END CERTIFICATE-----
Generated at Mon Nov 25 17:55:44 2024 by rpki-client on console-fra.rpki-client.org