Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EfMCm3yG68Jbket8pdi829Z3iEJX87F8heRwMUmoSRmm/0/3136382e3139372e3135352e302f32342d3234203d3e20323635343834.roa
File:                     3136382e3139372e3135352e302f32342d3234203d3e20323635343834.roa (raw, json)
Hash identifier:          8Dms8FxxSXvgKeGzdY3CPSNhUok7EuZJIQxZMwqa+L4=
Subject key identifier:   7B:86:09:D6:68:10:5F:70:31:1A:CF:71:75:30:86:1F:8A:57:F6:F4
Certificate issuer:       /CN=282867FDA1906735DA18D9838B50748AC97E1655
Certificate serial:       6CE69D925C8DE008FCAFDBC9D35C1415AE1E8D2D
Authority key identifier: 28:28:67:FD:A1:90:67:35:DA:18:D9:83:8B:50:74:8A:C9:7E:16:55
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/282867FDA1906735DA18D9838B50748AC97E1655.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EfMCm3yG68Jbket8pdi829Z3iEJX87F8heRwMUmoSRmm/0/3136382e3139372e3135352e302f32342d3234203d3e20323635343834.roa
Signing time:             Tue 16 Apr 2024 18:44:59 +0000
ROA not before:           Tue 16 Apr 2024 18:39:59 +0000
ROA not after:            Tue 15 Apr 2025 18:44:59 +0000
asID:                     265484
IP address blocks:        168.197.155.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EfMCm3yG68Jbket8pdi829Z3iEJX87F8heRwMUmoSRmm/0/282867FDA1906735DA18D9838B50748AC97E1655.crl
                          rsync://rpki-repo.registro.br/repo/EfMCm3yG68Jbket8pdi829Z3iEJX87F8heRwMUmoSRmm/0/282867FDA1906735DA18D9838B50748AC97E1655.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/282867FDA1906735DA18D9838B50748AC97E1655.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 20:17:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:e6:9d:92:5c:8d:e0:08:fc:af:db:c9:d3:5c:14:15:ae:1e:8d:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=282867FDA1906735DA18D9838B50748AC97E1655
        Validity
            Not Before: Apr 16 18:39:59 2024 GMT
            Not After : Apr 15 18:44:59 2025 GMT
        Subject: CN=7B8609D668105F70311ACF717530861F8A57F6F4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:8a:7e:49:06:98:88:45:79:80:77:36:27:f6:
                    e3:f6:e5:79:3d:c7:26:24:af:18:44:86:f7:e8:b6:
                    a3:44:5f:ff:09:d7:ea:fc:a5:29:4e:71:9b:e0:8a:
                    9f:f8:6b:a9:47:96:4e:32:f1:fe:9b:a5:4b:2b:b4:
                    da:8f:d9:f8:18:06:c8:d2:f3:fe:7c:60:09:d2:bb:
                    e6:2c:cd:6f:23:48:f7:6e:a8:6b:a3:a2:8d:6e:ac:
                    18:20:c4:a2:0d:5c:b9:72:83:ec:ee:e8:5c:1e:2c:
                    9a:94:32:6b:f8:8a:40:d0:90:8f:5a:cd:23:60:80:
                    8f:c3:b3:3c:6c:a8:ac:00:cd:6d:08:89:b1:14:f8:
                    2b:c4:6d:40:66:49:e6:5a:cb:52:0c:4e:05:19:23:
                    20:2c:d3:d2:7a:6d:10:f0:44:1a:6f:18:4a:e2:b2:
                    36:af:12:f2:93:65:28:49:2e:24:74:dd:80:6c:8a:
                    3a:0c:a0:e2:26:1e:43:7d:4b:0b:d2:bb:12:4b:23:
                    e7:a0:1f:55:8e:c2:2a:03:e1:b9:27:f5:21:af:10:
                    a4:57:3f:98:08:48:bd:f0:20:a5:45:fd:61:75:e3:
                    d6:dc:cb:8a:3a:03:39:a1:c5:bd:43:31:d5:b5:1c:
                    a6:f0:90:a3:48:c5:37:33:1a:51:7a:6c:43:86:08:
                    eb:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:86:09:D6:68:10:5F:70:31:1A:CF:71:75:30:86:1F:8A:57:F6:F4
            X509v3 Authority Key Identifier:
                keyid:28:28:67:FD:A1:90:67:35:DA:18:D9:83:8B:50:74:8A:C9:7E:16:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EfMCm3yG68Jbket8pdi829Z3iEJX87F8heRwMUmoSRmm/0/282867FDA1906735DA18D9838B50748AC97E1655.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/282867FDA1906735DA18D9838B50748AC97E1655.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EfMCm3yG68Jbket8pdi829Z3iEJX87F8heRwMUmoSRmm/0/3136382e3139372e3135352e302f32342d3234203d3e20323635343834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.197.155.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2a:71:5f:b2:62:ef:2d:3a:19:0c:49:71:97:c9:b1:b4:0e:d4:
         d1:aa:1e:77:ac:0d:c5:6e:45:ff:6f:e7:d0:7f:50:fe:82:8f:
         4e:d8:1b:b4:55:b0:3d:f3:6d:fe:6c:55:34:26:0a:56:a1:86:
         c5:8a:7c:9b:f0:57:f1:33:c6:e1:4e:f1:ce:ad:40:3a:31:99:
         52:c0:1f:3e:52:b2:68:6f:4a:fc:6c:13:39:63:3c:bf:27:9a:
         75:67:24:01:4d:e2:28:9b:5d:8d:65:a4:73:08:c7:19:32:1e:
         f2:3f:b3:fa:5e:24:71:3f:60:bf:63:71:87:25:99:19:71:d0:
         aa:a2:e3:18:13:f7:9e:4e:fe:92:f1:bc:76:db:16:ce:03:b5:
         c6:4b:ec:9a:46:11:f7:1d:94:c0:ec:46:71:a4:a4:30:b1:1a:
         a0:a8:02:71:6a:a9:8a:f6:a8:b7:82:46:0a:d2:9c:41:bd:9a:
         c6:b9:f7:e3:ac:8c:85:83:d3:f3:ae:37:d0:2f:a5:b5:8a:7a:
         31:7e:65:47:8f:51:6b:d2:be:d1:af:dc:f2:26:17:7a:16:ce:
         b4:3f:c3:33:17:af:96:cb:e7:54:77:3e:38:18:09:0f:76:68:
         ea:c4:19:7f:bb:c0:70:2b:71:d9:1d:07:aa:87:be:a9:55:a8:
         0a:64:6c:85
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUbOadklyN4Aj8r9vJ01wUFa4ejS0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjgyODY3RkRBMTkwNjczNURBMThEOTgzOEI1MDc0OEFD
OTdFMTY1NTAeFw0yNDA0MTYxODM5NTlaFw0yNTA0MTUxODQ0NTlaMDMxMTAvBgNV
BAMTKDdCODYwOUQ2NjgxMDVGNzAzMTFBQ0Y3MTc1MzA4NjFGOEE1N0Y2RjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbin5JBpiIRXmAdzYn9uP25Xk9
xyYkrxhEhvfotqNEX/8J1+r8pSlOcZvgip/4a6lHlk4y8f6bpUsrtNqP2fgYBsjS
8/58YAnSu+YszW8jSPduqGujoo1urBggxKINXLlyg+zu6FweLJqUMmv4ikDQkI9a
zSNggI/DszxsqKwAzW0IibEU+CvEbUBmSeZay1IMTgUZIyAs09J6bRDwRBpvGEri
sjavEvKTZShJLiR03YBsijoMoOImHkN9SwvSuxJLI+egH1WOwioD4bkn9SGvEKRX
P5gISL3wIKVF/WF149bcy4o6Azmhxb1DMdW1HKbwkKNIxTczGlF6bEOGCOuTAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUe4YJ1mgQX3AxGs9xdTCGH4pX9vQwHwYDVR0j
BBgwFoAUKChn/aGQZzXaGNmDi1B0isl+FlUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRWZNQ20zeUc2OEpia2V0OHBkaTgyOVozaUVKWDg3RjhoZVJ3TVVtb1NS
bW0vMC8yODI4NjdGREExOTA2NzM1REExOEQ5ODM4QjUwNzQ4QUM5N0UxNjU1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzI4Mjg2N0ZEQTE5MDY3MzVE
QTE4RDk4MzhCNTA3NDhBQzk3RTE2NTUuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0VmTUNtM3lHNjhKYmtldDhwZGk4MjlaM2lFSlg4N0Y4aGVSd01VbW9TUm1tLzAv
MzEzNjM4MmUzMTM5MzcyZTMxMzUzNTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzYzNTM0MzgzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAKjFmzANBgkqhkiG9w0BAQsFAAOCAQEAKnFf
smLvLToZDElxl8mxtA7U0aoed6wNxW5F/2/n0H9Q/oKPTtgbtFWwPfNt/mxVNCYK
VqGGxYp8m/BX8TPG4U7xzq1AOjGZUsAfPlKyaG9K/GwTOWM8vyeadWckAU3iKJtd
jWWkcwjHGTIe8j+z+l4kcT9gv2NxhyWZGXHQqqLjGBP3nk7+kvG8dtsWzgO1xkvs
mkYR9x2UwOxGcaSkMLEaoKgCcWqpivaot4JGCtKcQb2axrn346yMhYPT86430C+l
tYp6MX5lR49Ra9K+0a/c8iYXehbOtD/DMxevlsvnVHc+OBgJD3Zo6sQZf7vAcCtx
2R0Hqoe+qVWoCmRshQ==
-----END CERTIFICATE-----
Generated at Sat Sep 28 18:35:35 2024 by rpki-client on console-fra.rpki-client.org