Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fj1CpBxLer2FxphJFAB96dB4Goa1MyXQyfGanGkQtahC/0/3136382e3138312e3139322e302f32322d3232203d3e203631373438.roa
File:                     3136382e3138312e3139322e302f32322d3232203d3e203631373438.roa (raw, json)
Hash identifier:          jAHfig24++uHA90SDIPlgNUmuIPB84HwkpeoJakzNgU=
Subject key identifier:   17:99:CE:54:FD:27:0C:F2:82:E5:B2:65:34:2E:23:AC:13:FE:36:98
Certificate issuer:       /CN=553A87CDE2E92ADFD4442328CE2DB7349CECEA42
Certificate serial:       7BB6E760F8FBFBB4914284C6635E7E5841207B79
Authority key identifier: 55:3A:87:CD:E2:E9:2A:DF:D4:44:23:28:CE:2D:B7:34:9C:EC:EA:42
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/553A87CDE2E92ADFD4442328CE2DB7349CECEA42.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fj1CpBxLer2FxphJFAB96dB4Goa1MyXQyfGanGkQtahC/0/3136382e3138312e3139322e302f32322d3232203d3e203631373438.roa
Signing time:             Wed 10 Apr 2024 19:19:16 +0000
ROA not before:           Wed 10 Apr 2024 19:14:16 +0000
ROA not after:            Wed 09 Apr 2025 19:19:16 +0000
asID:                     61748
IP address blocks:        168.181.192.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Fj1CpBxLer2FxphJFAB96dB4Goa1MyXQyfGanGkQtahC/0/553A87CDE2E92ADFD4442328CE2DB7349CECEA42.crl
                          rsync://rpki-repo.registro.br/repo/Fj1CpBxLer2FxphJFAB96dB4Goa1MyXQyfGanGkQtahC/0/553A87CDE2E92ADFD4442328CE2DB7349CECEA42.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/553A87CDE2E92ADFD4442328CE2DB7349CECEA42.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 10:50:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:b6:e7:60:f8:fb:fb:b4:91:42:84:c6:63:5e:7e:58:41:20:7b:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=553A87CDE2E92ADFD4442328CE2DB7349CECEA42
        Validity
            Not Before: Apr 10 19:14:16 2024 GMT
            Not After : Apr  9 19:19:16 2025 GMT
        Subject: CN=1799CE54FD270CF282E5B265342E23AC13FE3698
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:88:e9:39:4e:ee:a0:07:95:1f:59:dc:68:04:
                    52:f5:46:4f:4f:de:90:2a:4a:cd:6b:60:64:ad:7c:
                    49:c9:ec:60:65:95:60:76:c1:cd:44:a4:7f:d9:43:
                    7e:bc:fa:58:44:3b:bf:33:31:c1:49:2d:f8:d4:1e:
                    10:58:5e:a9:45:db:ef:7d:01:29:d4:93:c0:2c:0c:
                    0e:e1:78:45:83:e7:06:0c:5a:66:cf:d9:0b:50:16:
                    d5:1c:88:02:e0:73:28:65:08:d8:be:71:ec:c6:86:
                    08:c8:18:6e:db:84:c0:cf:40:6a:02:01:e4:6b:3a:
                    b2:90:03:fd:06:d6:07:cd:d8:34:92:9d:b9:6a:c9:
                    fc:c5:d3:f9:4c:50:ea:07:bf:d9:b1:36:b2:a4:26:
                    3d:a6:73:e8:68:1e:60:9a:3c:4f:58:05:a5:b6:d7:
                    b0:1c:dc:7c:31:52:5f:16:26:b0:fe:9f:47:91:17:
                    62:26:3d:7c:b0:df:48:69:39:1d:02:3f:d3:7e:cd:
                    19:36:eb:83:03:34:44:52:5f:a3:e5:2f:4c:6c:7a:
                    d1:2f:0c:43:40:65:79:52:97:3d:a6:1a:da:9e:32:
                    a3:7e:5d:f6:2a:ba:4c:e3:2e:81:f0:a0:f2:4d:77:
                    ef:30:3d:70:da:b3:c3:ed:cf:c3:e5:40:0a:c4:01:
                    b3:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:99:CE:54:FD:27:0C:F2:82:E5:B2:65:34:2E:23:AC:13:FE:36:98
            X509v3 Authority Key Identifier:
                keyid:55:3A:87:CD:E2:E9:2A:DF:D4:44:23:28:CE:2D:B7:34:9C:EC:EA:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fj1CpBxLer2FxphJFAB96dB4Goa1MyXQyfGanGkQtahC/0/553A87CDE2E92ADFD4442328CE2DB7349CECEA42.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/553A87CDE2E92ADFD4442328CE2DB7349CECEA42.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fj1CpBxLer2FxphJFAB96dB4Goa1MyXQyfGanGkQtahC/0/3136382e3138312e3139322e302f32322d3232203d3e203631373438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.181.192.0/22

    Signature Algorithm: sha256WithRSAEncryption
         06:f7:65:bf:eb:65:64:f1:c7:4b:cf:bc:96:c3:37:35:d0:0f:
         83:6a:d3:d9:08:7a:d2:38:ed:2f:47:a6:7d:4a:1e:dd:f4:94:
         e6:b1:eb:fb:ba:a2:98:72:e5:c0:d8:cb:2b:78:a6:23:92:9d:
         ca:46:f8:e7:29:c7:a5:c8:54:ab:b1:62:fc:33:d0:5e:c1:08:
         d4:d8:84:7b:65:7b:dc:0d:2c:43:2f:16:5f:a9:23:84:6c:2f:
         28:86:83:0d:bd:b5:2a:f7:97:47:e4:1d:9c:c4:35:a0:a5:a3:
         81:90:4f:eb:00:39:a9:1f:72:fb:74:49:36:2b:6b:bc:71:91:
         0f:85:9d:69:9c:f1:82:9a:c8:94:0a:50:40:40:ce:6c:64:a5:
         9d:a5:17:fb:4e:5a:dc:c5:90:db:12:52:55:dc:bf:3c:1d:0a:
         29:c8:94:fa:c2:2e:3c:42:4b:29:cf:94:e3:45:9c:09:59:2c:
         15:64:22:e7:ca:38:b0:0d:5c:28:c0:63:77:97:5b:7c:79:34:
         d3:4f:64:09:8a:24:e5:47:fb:d5:51:e5:22:e0:85:6d:46:d5:
         32:7d:ec:db:2c:39:a5:b8:74:55:90:b7:5a:f6:1e:cb:56:89:
         97:c2:25:5d:61:ab:9c:64:ee:b2:79:7a:43:45:a2:d9:c9:bc:
         af:47:11:ad
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUe7bnYPj7+7SRQoTGY15+WEEge3kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTUzQTg3Q0RFMkU5MkFERkQ0NDQyMzI4Q0UyREI3MzQ5
Q0VDRUE0MjAeFw0yNDA0MTAxOTE0MTZaFw0yNTA0MDkxOTE5MTZaMDMxMTAvBgNV
BAMTKDE3OTlDRTU0RkQyNzBDRjI4MkU1QjI2NTM0MkUyM0FDMTNGRTM2OTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4iOk5Tu6gB5UfWdxoBFL1Rk9P
3pAqSs1rYGStfEnJ7GBllWB2wc1EpH/ZQ368+lhEO78zMcFJLfjUHhBYXqlF2+99
ASnUk8AsDA7heEWD5wYMWmbP2QtQFtUciALgcyhlCNi+cezGhgjIGG7bhMDPQGoC
AeRrOrKQA/0G1gfN2DSSnblqyfzF0/lMUOoHv9mxNrKkJj2mc+hoHmCaPE9YBaW2
17Ac3HwxUl8WJrD+n0eRF2ImPXyw30hpOR0CP9N+zRk264MDNERSX6PlL0xsetEv
DENAZXlSlz2mGtqeMqN+XfYqukzjLoHwoPJNd+8wPXDas8Ptz8PlQArEAbPDAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUF5nOVP0nDPKC5bJlNC4jrBP+NpgwHwYDVR0j
BBgwFoAUVTqHzeLpKt/URCMozi23NJzs6kIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRmoxQ3BCeExlcjJGeHBoSkZBQjk2ZEI0R29hMU15WFF5ZkdhbkdrUXRh
aEMvMC81NTNBODdDREUyRTkyQURGRDQ0NDIzMjhDRTJEQjczNDlDRUNFQTQyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzU1M0E4N0NERTJFOTJBREZE
NDQ0MjMyOENFMkRCNzM0OUNFQ0VBNDIuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0ZqMUNwQnhMZXIyRnhwaEpGQUI5NmRCNEdvYTFNeVhReWZHYW5Ha1F0YWhDLzAv
MzEzNjM4MmUzMTM4MzEyZTMxMzkzMjJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDM2
MzEzNzM0Mzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAKotcAwDQYJKoZIhvcNAQELBQADggEBAAb3Zb/r
ZWTxx0vPvJbDNzXQD4Nq09kIetI47S9Hpn1KHt30lOax6/u6ophy5cDYyyt4piOS
ncpG+Ocpx6XIVKuxYvwz0F7BCNTYhHtle9wNLEMvFl+pI4RsLyiGgw29tSr3l0fk
HZzENaClo4GQT+sAOakfcvt0STYra7xxkQ+FnWmc8YKayJQKUEBAzmxkpZ2lF/tO
WtzFkNsSUlXcvzwdCinIlPrCLjxCSynPlONFnAlZLBVkIufKOLANXCjAY3eXW3x5
NNNPZAmKJOVH+9VR5SLghW1G1TJ97NssOaW4dFWQt1r2HstWiZfCJV1hq5xk7rJ5
ekNFotnJvK9HEa0=
-----END CERTIFICATE-----
Generated at Fri Nov 22 09:30:12 2024 by rpki-client on console-fra.rpki-client.org