Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fj1CpBxLer2FxphJFAB96dB4Goa1MyXQyfGanGkQtahC/0/3136382e3138312e3139342e302f32342d3234203d3e203631373438.roa
File:                     3136382e3138312e3139342e302f32342d3234203d3e203631373438.roa (raw, json)
Hash identifier:          CY4ZXoeBSLVS91nPtmxwcZAiiXo3S6eVQ8ZoC/gFw1g=
Subject key identifier:   57:E3:62:70:CE:A1:16:9E:07:14:08:83:A3:A3:46:59:CD:3C:03:47
Certificate issuer:       /CN=553A87CDE2E92ADFD4442328CE2DB7349CECEA42
Certificate serial:       2E15E29381815BC71EEF5D787D2973F3F76AC6C8
Authority key identifier: 55:3A:87:CD:E2:E9:2A:DF:D4:44:23:28:CE:2D:B7:34:9C:EC:EA:42
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/553A87CDE2E92ADFD4442328CE2DB7349CECEA42.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fj1CpBxLer2FxphJFAB96dB4Goa1MyXQyfGanGkQtahC/0/3136382e3138312e3139342e302f32342d3234203d3e203631373438.roa
Signing time:             Wed 10 Apr 2024 19:19:38 +0000
ROA not before:           Wed 10 Apr 2024 19:14:38 +0000
ROA not after:            Wed 09 Apr 2025 19:19:38 +0000
asID:                     61748
IP address blocks:        168.181.194.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Fj1CpBxLer2FxphJFAB96dB4Goa1MyXQyfGanGkQtahC/0/553A87CDE2E92ADFD4442328CE2DB7349CECEA42.crl
                          rsync://rpki-repo.registro.br/repo/Fj1CpBxLer2FxphJFAB96dB4Goa1MyXQyfGanGkQtahC/0/553A87CDE2E92ADFD4442328CE2DB7349CECEA42.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/553A87CDE2E92ADFD4442328CE2DB7349CECEA42.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 10:50:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:15:e2:93:81:81:5b:c7:1e:ef:5d:78:7d:29:73:f3:f7:6a:c6:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=553A87CDE2E92ADFD4442328CE2DB7349CECEA42
        Validity
            Not Before: Apr 10 19:14:38 2024 GMT
            Not After : Apr  9 19:19:38 2025 GMT
        Subject: CN=57E36270CEA1169E07140883A3A34659CD3C0347
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:97:64:ab:66:d6:8a:7d:bb:46:6c:f0:8c:be:
                    4f:52:39:98:37:ef:bf:e5:be:cd:a2:40:75:12:21:
                    a8:ef:08:37:7a:76:0f:4c:e8:2f:07:42:6b:83:bc:
                    ca:75:d6:54:19:20:fc:79:8f:18:7d:71:8f:f8:3e:
                    0a:5b:1f:bf:c6:1a:8f:03:16:e6:7a:8d:e6:f9:5c:
                    4a:4a:d5:ad:b3:03:b1:6f:51:e5:be:0b:66:1c:f5:
                    c6:27:1a:a8:a2:19:23:ad:42:79:58:8f:63:ec:7d:
                    b2:1d:75:85:f5:57:9f:ca:bd:c5:26:cd:79:10:82:
                    ac:04:48:c6:2e:77:2f:51:05:e0:0c:5c:04:05:94:
                    35:a1:c1:e9:0a:fd:b2:96:7b:c2:9f:21:2b:01:69:
                    d2:89:db:c3:b7:98:8d:49:3b:0b:4f:3e:33:f3:9d:
                    35:41:66:8b:26:74:2c:ec:9a:9d:ed:33:c7:88:e2:
                    cd:38:a9:66:4c:dc:bf:c9:6e:18:c8:5b:f2:ac:37:
                    6d:80:56:80:51:bb:a5:a6:5a:79:17:7a:c3:ff:84:
                    60:a1:7b:29:b1:79:c4:1d:8d:48:a8:2b:68:71:09:
                    48:d2:0f:23:8b:d7:51:27:31:d6:ee:f4:96:cd:02:
                    08:b2:15:25:36:c2:f6:90:2d:aa:f4:38:bc:aa:96:
                    79:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:E3:62:70:CE:A1:16:9E:07:14:08:83:A3:A3:46:59:CD:3C:03:47
            X509v3 Authority Key Identifier:
                keyid:55:3A:87:CD:E2:E9:2A:DF:D4:44:23:28:CE:2D:B7:34:9C:EC:EA:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fj1CpBxLer2FxphJFAB96dB4Goa1MyXQyfGanGkQtahC/0/553A87CDE2E92ADFD4442328CE2DB7349CECEA42.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/553A87CDE2E92ADFD4442328CE2DB7349CECEA42.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fj1CpBxLer2FxphJFAB96dB4Goa1MyXQyfGanGkQtahC/0/3136382e3138312e3139342e302f32342d3234203d3e203631373438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.181.194.0/24

    Signature Algorithm: sha256WithRSAEncryption
         82:b6:62:68:ec:7c:22:be:fc:58:72:ed:2d:7c:78:f1:47:f7:
         bc:32:90:d4:f6:bd:53:22:08:a7:77:38:e7:ef:7f:d6:08:2b:
         19:be:a2:12:f1:a6:f6:23:dc:f4:46:d3:a0:48:8e:4b:7a:e6:
         1f:a1:9a:d4:25:6b:8c:d9:88:67:23:81:81:34:99:3f:3f:3b:
         db:15:79:7e:96:7e:6c:b2:57:7d:53:94:99:4c:d7:7d:fe:bd:
         1c:ec:05:b8:de:4e:11:9b:2b:60:82:30:c7:6d:90:db:d0:f9:
         9e:5d:a9:e5:a3:87:7d:c0:35:70:ea:df:10:0a:3a:7f:4e:a0:
         7c:ec:3b:fe:19:0c:5a:18:29:eb:8b:a7:ec:0f:54:04:69:28:
         98:df:dd:6d:7c:e0:84:02:99:55:21:7f:59:3e:2f:9f:72:94:
         14:ea:1e:54:97:3c:df:d5:d2:d2:02:42:2a:49:f9:46:32:7e:
         bb:bd:eb:f7:f8:82:a3:1e:7f:be:6c:4b:51:68:85:0f:44:15:
         a8:26:9a:99:77:4b:44:cc:99:46:8c:b2:bd:eb:8d:22:fb:ca:
         ef:17:3e:18:d2:bd:9b:27:72:ad:c7:bf:37:a8:c6:87:d5:7a:
         1c:88:6d:63:5e:f6:99:a8:8d:d7:5a:43:34:27:45:33:79:1b:
         79:04:0f:df
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIULhXik4GBW8ce7114fSlz8/dqxsgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTUzQTg3Q0RFMkU5MkFERkQ0NDQyMzI4Q0UyREI3MzQ5
Q0VDRUE0MjAeFw0yNDA0MTAxOTE0MzhaFw0yNTA0MDkxOTE5MzhaMDMxMTAvBgNV
BAMTKDU3RTM2MjcwQ0VBMTE2OUUwNzE0MDg4M0EzQTM0NjU5Q0QzQzAzNDcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNl2SrZtaKfbtGbPCMvk9SOZg3
77/lvs2iQHUSIajvCDd6dg9M6C8HQmuDvMp11lQZIPx5jxh9cY/4PgpbH7/GGo8D
FuZ6jeb5XEpK1a2zA7FvUeW+C2Yc9cYnGqiiGSOtQnlYj2PsfbIddYX1V5/KvcUm
zXkQgqwESMYudy9RBeAMXAQFlDWhwekK/bKWe8KfISsBadKJ28O3mI1JOwtPPjPz
nTVBZosmdCzsmp3tM8eI4s04qWZM3L/JbhjIW/KsN22AVoBRu6WmWnkXesP/hGCh
eymxecQdjUioK2hxCUjSDyOL11EnMdbu9JbNAgiyFSU2wvaQLar0OLyqlnmFAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUV+NicM6hFp4HFAiDo6NGWc08A0cwHwYDVR0j
BBgwFoAUVTqHzeLpKt/URCMozi23NJzs6kIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRmoxQ3BCeExlcjJGeHBoSkZBQjk2ZEI0R29hMU15WFF5ZkdhbkdrUXRh
aEMvMC81NTNBODdDREUyRTkyQURGRDQ0NDIzMjhDRTJEQjczNDlDRUNFQTQyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzU1M0E4N0NERTJFOTJBREZE
NDQ0MjMyOENFMkRCNzM0OUNFQ0VBNDIuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0ZqMUNwQnhMZXIyRnhwaEpGQUI5NmRCNEdvYTFNeVhReWZHYW5Ha1F0YWhDLzAv
MzEzNjM4MmUzMTM4MzEyZTMxMzkzNDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM2
MzEzNzM0Mzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBACotcIwDQYJKoZIhvcNAQELBQADggEBAIK2Ymjs
fCK+/Fhy7S18ePFH97wykNT2vVMiCKd3OOfvf9YIKxm+ohLxpvYj3PRG06BIjkt6
5h+hmtQla4zZiGcjgYE0mT8/O9sVeX6WfmyyV31TlJlM133+vRzsBbjeThGbK2CC
MMdtkNvQ+Z5dqeWjh33ANXDq3xAKOn9OoHzsO/4ZDFoYKeuLp+wPVARpKJjf3W18
4IQCmVUhf1k+L59ylBTqHlSXPN/V0tICQipJ+UYyfru96/f4gqMef75sS1FohQ9E
Fagmmpl3S0TMmUaMsr3rjSL7yu8XPhjSvZsncq3HvzeoxofVehyIbWNe9pmojdda
QzQnRTN5G3kED98=
-----END CERTIFICATE-----
Generated at Fri Nov 22 09:30:12 2024 by rpki-client on console-fra.rpki-client.org