Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H3ZqEMzC9pm2FhV6Zq2XrNzJ1BuBf5NC8Fj4X6KBGVFE/1/3136382e3138312e34302e302f32322d3332203d3e203533303239.roa
File:                     3136382e3138312e34302e302f32322d3332203d3e203533303239.roa (raw, json)
Hash identifier:          vbbq5TrvuPFAfH9ENL48bMPRwgOck8joNjvBj2EUs2Y=
Subject key identifier:   06:46:A6:D4:C3:28:78:97:11:29:60:56:3B:6C:A5:E1:9B:C7:5A:CF
Certificate issuer:       /CN=CD119443A2689BA4FC616BCD6929E636B5032FC0
Certificate serial:       225918E7323F7F8D78D24047496A683561E9E8FD
Authority key identifier: CD:11:94:43:A2:68:9B:A4:FC:61:6B:CD:69:29:E6:36:B5:03:2F:C0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD119443A2689BA4FC616BCD6929E636B5032FC0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H3ZqEMzC9pm2FhV6Zq2XrNzJ1BuBf5NC8Fj4X6KBGVFE/1/3136382e3138312e34302e302f32322d3332203d3e203533303239.roa
Signing time:             Thu 04 Apr 2024 14:10:19 +0000
ROA not before:           Thu 04 Apr 2024 14:05:19 +0000
ROA not after:            Thu 03 Apr 2025 14:10:19 +0000
asID:                     53029
IP address blocks:        168.181.40.0/22 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/H3ZqEMzC9pm2FhV6Zq2XrNzJ1BuBf5NC8Fj4X6KBGVFE/1/CD119443A2689BA4FC616BCD6929E636B5032FC0.crl
                          rsync://rpki-repo.registro.br/repo/H3ZqEMzC9pm2FhV6Zq2XrNzJ1BuBf5NC8Fj4X6KBGVFE/1/CD119443A2689BA4FC616BCD6929E636B5032FC0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD119443A2689BA4FC616BCD6929E636B5032FC0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 19:40:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:59:18:e7:32:3f:7f:8d:78:d2:40:47:49:6a:68:35:61:e9:e8:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CD119443A2689BA4FC616BCD6929E636B5032FC0
        Validity
            Not Before: Apr  4 14:05:19 2024 GMT
            Not After : Apr  3 14:10:19 2025 GMT
        Subject: CN=0646A6D4C3287897112960563B6CA5E19BC75ACF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:ed:85:a6:17:11:e8:f6:0e:66:1c:d5:cf:c8:
                    fa:3f:3d:d3:19:57:d5:ec:b6:34:68:d5:88:c8:fe:
                    b9:1a:a9:98:c7:8f:2f:26:bb:74:5b:40:33:97:46:
                    89:77:7f:83:41:1d:c1:8d:5a:28:73:a3:d6:8d:ac:
                    37:78:87:39:04:d9:bf:59:5a:90:8a:2a:50:8f:f6:
                    81:bf:bf:49:7f:3f:3e:64:ce:39:fa:be:55:57:a8:
                    e4:fe:f7:d5:a5:30:72:29:6e:75:ad:e2:b5:85:c3:
                    2d:52:3c:ad:54:bf:19:ad:c7:d5:a5:f6:5f:15:8a:
                    f3:7c:85:a1:08:33:7e:76:80:46:55:5e:52:cf:91:
                    30:34:0b:0f:0f:3c:17:c8:27:e0:fc:77:22:f2:0e:
                    a6:7b:ee:e7:f4:f9:aa:68:f0:df:19:42:53:45:f4:
                    95:e1:7e:7d:e1:32:86:ae:1b:64:20:59:17:a7:44:
                    30:60:ed:38:a4:1b:1f:ce:94:f1:f2:18:a8:ef:4c:
                    63:5b:ab:e6:f1:d4:63:85:83:c9:20:9c:0f:56:bb:
                    d6:63:75:5c:70:20:37:8a:e9:1c:2c:f1:e5:31:69:
                    c5:4b:ab:a4:73:7a:64:7b:36:0c:ce:eb:b1:33:e0:
                    ae:94:66:6e:55:44:7b:93:e7:d0:f9:26:d4:15:67:
                    1e:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:46:A6:D4:C3:28:78:97:11:29:60:56:3B:6C:A5:E1:9B:C7:5A:CF
            X509v3 Authority Key Identifier:
                keyid:CD:11:94:43:A2:68:9B:A4:FC:61:6B:CD:69:29:E6:36:B5:03:2F:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H3ZqEMzC9pm2FhV6Zq2XrNzJ1BuBf5NC8Fj4X6KBGVFE/1/CD119443A2689BA4FC616BCD6929E636B5032FC0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD119443A2689BA4FC616BCD6929E636B5032FC0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H3ZqEMzC9pm2FhV6Zq2XrNzJ1BuBf5NC8Fj4X6KBGVFE/1/3136382e3138312e34302e302f32322d3332203d3e203533303239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.181.40.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b7:87:94:c8:ed:b0:78:39:8e:3e:da:4d:39:88:35:e6:ca:20:
         24:68:6d:79:43:a9:6a:24:93:06:a8:3b:f2:9d:24:f4:39:d5:
         2c:9d:2d:8e:52:d7:f1:c5:06:27:ea:9c:3e:b5:91:3a:f8:3f:
         ea:8f:64:da:1d:0a:5a:1b:15:05:8e:d6:70:63:63:34:d9:a7:
         a7:fa:fb:e3:1d:a4:23:6e:2e:08:7c:d9:75:ff:ba:ba:fa:38:
         49:8f:f8:7c:ea:58:7d:46:53:9b:06:52:f7:e4:85:3e:4a:cb:
         03:ac:19:6a:12:37:04:eb:14:4a:fe:3a:34:22:c2:3f:d1:3c:
         e2:69:7a:3e:52:c4:82:6a:3d:3e:27:bd:ba:8a:28:2d:49:57:
         d9:db:37:3f:45:85:bc:3c:b0:06:d1:c5:1d:67:58:b0:bb:1f:
         aa:13:8f:9e:f1:38:17:69:fe:cb:4f:e6:9a:1e:bf:77:6a:ca:
         a5:4e:9e:cc:e8:fd:82:1e:cf:74:bc:b8:0f:98:ac:1a:47:93:
         d5:0c:a2:95:c1:7d:7b:3f:26:5c:f9:cd:c2:51:06:bd:e2:c6:
         ca:d4:bc:a5:21:dd:73:a7:ad:79:ab:01:36:57:12:6c:36:d9:
         30:06:0e:60:bb:f6:b2:e6:9b:e7:7d:34:e8:99:b8:e6:8c:0e:
         87:c4:91:14
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUIlkY5zI/f4140kBHSWpoNWHp6P0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0QxMTk0NDNBMjY4OUJBNEZDNjE2QkNENjkyOUU2MzZC
NTAzMkZDMDAeFw0yNDA0MDQxNDA1MTlaFw0yNTA0MDMxNDEwMTlaMDMxMTAvBgNV
BAMTKDA2NDZBNkQ0QzMyODc4OTcxMTI5NjA1NjNCNkNBNUUxOUJDNzVBQ0YwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCu7YWmFxHo9g5mHNXPyPo/PdMZ
V9XstjRo1YjI/rkaqZjHjy8mu3RbQDOXRol3f4NBHcGNWihzo9aNrDd4hzkE2b9Z
WpCKKlCP9oG/v0l/Pz5kzjn6vlVXqOT+99WlMHIpbnWt4rWFwy1SPK1Uvxmtx9Wl
9l8VivN8haEIM352gEZVXlLPkTA0Cw8PPBfIJ+D8dyLyDqZ77uf0+apo8N8ZQlNF
9JXhfn3hMoauG2QgWRenRDBg7TikGx/OlPHyGKjvTGNbq+bx1GOFg8kgnA9Wu9Zj
dVxwIDeK6Rws8eUxacVLq6RzemR7NgzO67Ez4K6UZm5VRHuT59D5JtQVZx4RAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUBkam1MMoeJcRKWBWO2yl4ZvHWs8wHwYDVR0j
BBgwFoAUzRGUQ6Jom6T8YWvNaSnmNrUDL8AwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSDNacUVNekM5cG0yRmhWNlpxMlhyTnpKMUJ1QmY1TkM4Rmo0WDZLQkdW
RkUvMS9DRDExOTQ0M0EyNjg5QkE0RkM2MTZCQ0Q2OTI5RTYzNkI1MDMyRkMwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NEMTE5NDQzQTI2ODlCQTRG
QzYxNkJDRDY5MjlFNjM2QjUwMzJGQzAuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0gzWnFFTXpDOXBtMkZoVjZacTJYck56SjFCdUJmNU5DOEZqNFg2S0JHVkZFLzEv
MzEzNjM4MmUzMTM4MzEyZTM0MzAyZTMwMmYzMjMyMmQzMzMyMjAzZDNlMjAzNTMz
MzAzMjM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCqLUoMA0GCSqGSIb3DQEBCwUAA4IBAQC3h5TI7bB4
OY4+2k05iDXmyiAkaG15Q6lqJJMGqDvynST0OdUsnS2OUtfxxQYn6pw+tZE6+D/q
j2TaHQpaGxUFjtZwY2M02aen+vvjHaQjbi4IfNl1/7q6+jhJj/h86lh9RlObBlL3
5IU+SssDrBlqEjcE6xRK/jo0IsI/0TziaXo+UsSCaj0+J726iigtSVfZ2zc/RYW8
PLAG0cUdZ1iwux+qE4+e8TgXaf7LT+aaHr93asqlTp7M6P2CHs90vLgPmKwaR5PV
DKKVwX17PyZc+c3CUQa94sbK1LylId1zp615qwE2VxJsNtkwBg5gu/ay5pvnfTTo
mbjmjA6HxJEU
-----END CERTIFICATE-----
Generated at Fri Nov 22 19:42:23 2024 by rpki-client on console-fra.rpki-client.org