Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H2418EEtW4ZrpiHyQTYXjXWWA494i8Lo2wMgo1PveFsZ/0/3136382e3139362e38392e302f32342d3234203d3e20323634313131.roa
File:                     3136382e3139362e38392e302f32342d3234203d3e20323634313131.roa (raw, json)
Hash identifier:          PX272TRLuDmcT6oye5jMPELvBdj5H5zsaBRjAFRwc9w=
Subject key identifier:   D8:3C:21:38:59:10:A2:F2:01:F5:46:28:2F:1F:35:FE:08:97:DE:59
Certificate issuer:       /CN=732008C67B67B29496E25CA0E43402A0B56D183A
Certificate serial:       21893381700C1444ECF4A353C97923309E479034
Authority key identifier: 73:20:08:C6:7B:67:B2:94:96:E2:5C:A0:E4:34:02:A0:B5:6D:18:3A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/732008C67B67B29496E25CA0E43402A0B56D183A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H2418EEtW4ZrpiHyQTYXjXWWA494i8Lo2wMgo1PveFsZ/0/3136382e3139362e38392e302f32342d3234203d3e20323634313131.roa
Signing time:             Tue 30 Apr 2024 14:29:21 +0000
ROA not before:           Tue 30 Apr 2024 14:24:21 +0000
ROA not after:            Tue 29 Apr 2025 14:29:21 +0000
asID:                     264111
IP address blocks:        168.196.89.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/H2418EEtW4ZrpiHyQTYXjXWWA494i8Lo2wMgo1PveFsZ/0/732008C67B67B29496E25CA0E43402A0B56D183A.crl
                          rsync://rpki-repo.registro.br/repo/H2418EEtW4ZrpiHyQTYXjXWWA494i8Lo2wMgo1PveFsZ/0/732008C67B67B29496E25CA0E43402A0B56D183A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/732008C67B67B29496E25CA0E43402A0B56D183A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 06:14:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:89:33:81:70:0c:14:44:ec:f4:a3:53:c9:79:23:30:9e:47:90:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=732008C67B67B29496E25CA0E43402A0B56D183A
        Validity
            Not Before: Apr 30 14:24:21 2024 GMT
            Not After : Apr 29 14:29:21 2025 GMT
        Subject: CN=D83C21385910A2F201F546282F1F35FE0897DE59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:6e:86:5c:2e:62:9a:0d:a4:55:05:63:95:82:
                    a4:01:1d:a3:bc:3a:8a:c6:78:93:68:5a:db:5c:43:
                    bc:28:30:29:95:bc:aa:98:76:30:8d:c3:48:ac:49:
                    88:2e:c3:20:39:bf:5b:0b:ea:77:4a:dc:7e:e4:5d:
                    bc:52:a7:2b:12:c5:bf:a2:ba:5d:02:58:5e:5a:c1:
                    12:8a:e0:a0:49:07:8f:9c:12:d7:5d:8a:f4:87:43:
                    cc:bb:b6:93:2b:3f:72:c9:25:27:13:88:8a:cb:80:
                    d7:17:6c:61:3a:f4:14:7f:55:a1:c2:a2:6e:c0:06:
                    b1:df:ff:c9:47:69:1f:91:e6:ce:cf:73:44:c3:2b:
                    9e:21:81:34:30:f0:88:1f:ab:97:79:67:63:f4:ff:
                    8d:42:cb:60:d3:7c:e8:b7:71:1d:83:e4:44:37:27:
                    a7:29:b9:e0:5d:c8:8d:2c:af:19:0a:98:5e:2a:26:
                    d0:42:11:d5:cf:e1:5b:00:a3:b0:1c:96:55:ec:4f:
                    ba:d7:a4:20:93:f5:d9:68:65:a9:1d:43:33:2c:e5:
                    1d:11:0e:ba:76:9b:13:d6:71:0e:87:cd:37:68:6c:
                    0a:08:5d:ae:54:49:64:d3:59:02:f5:6f:a5:80:53:
                    84:54:8f:a8:89:0b:fe:c3:6a:81:e8:11:7c:10:4d:
                    70:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:3C:21:38:59:10:A2:F2:01:F5:46:28:2F:1F:35:FE:08:97:DE:59
            X509v3 Authority Key Identifier:
                keyid:73:20:08:C6:7B:67:B2:94:96:E2:5C:A0:E4:34:02:A0:B5:6D:18:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H2418EEtW4ZrpiHyQTYXjXWWA494i8Lo2wMgo1PveFsZ/0/732008C67B67B29496E25CA0E43402A0B56D183A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/732008C67B67B29496E25CA0E43402A0B56D183A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H2418EEtW4ZrpiHyQTYXjXWWA494i8Lo2wMgo1PveFsZ/0/3136382e3139362e38392e302f32342d3234203d3e20323634313131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.196.89.0/24

    Signature Algorithm: sha256WithRSAEncryption
         33:cb:47:81:18:2f:f2:c8:44:d2:b0:7f:f4:48:89:cd:d0:9c:
         ad:c8:53:77:c2:39:d7:21:21:c9:85:45:d7:be:95:38:38:38:
         3b:c8:9a:7c:76:b5:81:80:e2:96:9e:44:a1:ef:f1:32:d9:ad:
         c1:8f:a2:2e:41:7c:76:2e:49:a3:57:86:f4:a6:99:1a:68:63:
         cc:84:df:17:b9:d0:86:ad:2e:dc:1b:19:3a:64:86:2b:8b:47:
         ea:fb:2f:1a:26:1e:38:6f:e7:54:37:d6:30:ea:2d:be:d4:d4:
         67:73:a4:ae:77:10:3e:ed:76:8f:84:90:f8:3b:55:73:90:9d:
         9e:e3:ef:ed:63:8a:7e:a6:bb:44:8f:0f:0b:6f:09:75:71:26:
         6a:af:a4:69:9f:9f:81:6a:96:ba:8a:ad:0c:2a:3e:12:0f:05:
         11:a1:ec:5e:54:54:44:07:54:d7:55:d2:c0:95:7a:b0:a5:34:
         57:c5:e8:e4:ec:53:3a:31:54:0f:c4:07:ba:3d:ff:15:22:cd:
         57:3e:6c:0f:ed:3f:ac:b3:69:a8:c4:1e:23:34:3d:61:69:17:
         dd:f2:16:b5:3a:cf:66:8e:49:10:60:3a:14:f7:b0:f5:fa:5b:
         53:a4:90:dc:1b:c4:05:69:ca:b5:c9:44:e7:c4:58:12:e8:74:
         62:c3:d3:cf
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUIYkzgXAMFETs9KNTyXkjMJ5HkDQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzMyMDA4QzY3QjY3QjI5NDk2RTI1Q0EwRTQzNDAyQTBC
NTZEMTgzQTAeFw0yNDA0MzAxNDI0MjFaFw0yNTA0MjkxNDI5MjFaMDMxMTAvBgNV
BAMTKEQ4M0MyMTM4NTkxMEEyRjIwMUY1NDYyODJGMUYzNUZFMDg5N0RFNTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFboZcLmKaDaRVBWOVgqQBHaO8
OorGeJNoWttcQ7woMCmVvKqYdjCNw0isSYguwyA5v1sL6ndK3H7kXbxSpysSxb+i
ul0CWF5awRKK4KBJB4+cEtddivSHQ8y7tpMrP3LJJScTiIrLgNcXbGE69BR/VaHC
om7ABrHf/8lHaR+R5s7Pc0TDK54hgTQw8Igfq5d5Z2P0/41Cy2DTfOi3cR2D5EQ3
J6cpueBdyI0srxkKmF4qJtBCEdXP4VsAo7AcllXsT7rXpCCT9dloZakdQzMs5R0R
Drp2mxPWcQ6HzTdobAoIXa5USWTTWQL1b6WAU4RUj6iJC/7DaoHoEXwQTXArAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU2DwhOFkQovIB9UYoLx81/giX3lkwHwYDVR0j
BBgwFoAUcyAIxntnspSW4lyg5DQCoLVtGDowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSDI0MThFRXRXNFpycGlIeVFUWVhqWFdXQTQ5NGk4TG8yd01nbzFQdmVG
c1ovMC83MzIwMDhDNjdCNjdCMjk0OTZFMjVDQTBFNDM0MDJBMEI1NkQxODNBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzczMjAwOEM2N0I2N0IyOTQ5
NkUyNUNBMEU0MzQwMkEwQjU2RDE4M0EuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0gyNDE4RUV0VzRacnBpSHlRVFlYalhXV0E0OTRpOExvMndNZ28xUHZlRnNaLzAv
MzEzNjM4MmUzMTM5MzYyZTM4MzkyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzQzMTMxMzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBACoxFkwDQYJKoZIhvcNAQELBQADggEBADPLR4EY
L/LIRNKwf/RIic3QnK3IU3fCOdchIcmFRde+lTg4ODvImnx2tYGA4paeRKHv8TLZ
rcGPoi5BfHYuSaNXhvSmmRpoY8yE3xe50IatLtwbGTpkhiuLR+r7LxomHjhv51Q3
1jDqLb7U1GdzpK53ED7tdo+EkPg7VXOQnZ7j7+1jin6mu0SPDwtvCXVxJmqvpGmf
n4FqlrqKrQwqPhIPBRGh7F5UVEQHVNdV0sCVerClNFfF6OTsUzoxVA/EB7o9/xUi
zVc+bA/tP6yzaajEHiM0PWFpF93yFrU6z2aOSRBgOhT3sPX6W1OkkNwbxAVpyrXJ
ROfEWBLodGLD088=
-----END CERTIFICATE-----
Generated at Sat Nov 23 05:01:09 2024 by rpki-client on console-fra.rpki-client.org