Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H6zTo4nPv99zZemCHbVirduLWcfy6dfcn2SvDqw8toes/1/3136382e3132312e37322e302f32322d3234203d3e20323635333032.roa
File:                     3136382e3132312e37322e302f32322d3234203d3e20323635333032.roa (raw, json)
Hash identifier:          8i2J6oVfd0M5vUXzrrA/3JecMQAVZ6Z96lvrbEnCZL0=
Subject key identifier:   82:83:6C:A9:58:14:F6:1C:B3:58:51:6B:16:B3:C5:CF:28:46:43:5C
Certificate issuer:       /CN=197FCDDAE310D022081D86F4C3E65FDA0DAB655E
Certificate serial:       10F6790E3B69A01F973D206B817FADBBE0430B5C
Authority key identifier: 19:7F:CD:DA:E3:10:D0:22:08:1D:86:F4:C3:E6:5F:DA:0D:AB:65:5E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/197FCDDAE310D022081D86F4C3E65FDA0DAB655E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H6zTo4nPv99zZemCHbVirduLWcfy6dfcn2SvDqw8toes/1/3136382e3132312e37322e302f32322d3234203d3e20323635333032.roa
Signing time:             Thu 04 Apr 2024 13:37:38 +0000
ROA not before:           Thu 04 Apr 2024 13:32:38 +0000
ROA not after:            Thu 03 Apr 2025 13:37:38 +0000
asID:                     265302
IP address blocks:        168.121.72.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/H6zTo4nPv99zZemCHbVirduLWcfy6dfcn2SvDqw8toes/1/197FCDDAE310D022081D86F4C3E65FDA0DAB655E.crl
                          rsync://rpki-repo.registro.br/repo/H6zTo4nPv99zZemCHbVirduLWcfy6dfcn2SvDqw8toes/1/197FCDDAE310D022081D86F4C3E65FDA0DAB655E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/197FCDDAE310D022081D86F4C3E65FDA0DAB655E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 21 Sep 2024 13:14:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:f6:79:0e:3b:69:a0:1f:97:3d:20:6b:81:7f:ad:bb:e0:43:0b:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=197FCDDAE310D022081D86F4C3E65FDA0DAB655E
        Validity
            Not Before: Apr  4 13:32:38 2024 GMT
            Not After : Apr  3 13:37:38 2025 GMT
        Subject: CN=82836CA95814F61CB358516B16B3C5CF2846435C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:51:6c:54:d1:51:c7:9c:a2:45:b1:be:29:83:
                    03:91:4c:08:df:5e:12:1d:5b:cc:c0:10:ba:04:a6:
                    f3:a0:f2:8c:2c:e4:60:55:7a:26:67:d6:4f:67:b2:
                    52:ac:7c:bc:f4:76:b1:5a:e3:74:76:61:bc:6d:3a:
                    c0:af:c0:0c:fe:98:62:4a:d3:c7:90:37:a9:ec:f6:
                    04:93:f5:59:d2:74:92:19:40:f6:94:a4:97:fc:6f:
                    56:43:70:7a:56:80:2c:ed:0e:26:61:b6:e4:32:5c:
                    ab:a6:db:d0:80:09:ca:96:11:a8:cf:4a:04:15:e8:
                    5f:38:20:09:bb:96:bb:08:c2:e9:47:62:59:95:71:
                    0c:72:41:e0:d2:02:2b:4b:4c:be:54:f9:18:57:31:
                    57:a2:0b:c2:bb:98:e7:bf:91:4f:89:0c:c1:a5:8a:
                    e2:59:87:60:3e:06:ca:c7:85:e2:93:61:8b:62:3d:
                    43:b8:2e:02:a8:72:f2:fe:29:a4:d0:33:d3:91:ec:
                    a3:ab:c5:5b:25:9d:91:0b:db:cc:97:79:d4:81:e2:
                    22:ef:26:bf:5d:e3:d3:36:22:eb:88:d8:b1:86:8e:
                    8f:00:ce:6a:7e:83:9e:b9:e4:ab:6b:f2:f3:33:d8:
                    41:0f:0b:87:0e:26:0f:c8:d2:37:df:c7:03:93:17:
                    0f:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:83:6C:A9:58:14:F6:1C:B3:58:51:6B:16:B3:C5:CF:28:46:43:5C
            X509v3 Authority Key Identifier:
                keyid:19:7F:CD:DA:E3:10:D0:22:08:1D:86:F4:C3:E6:5F:DA:0D:AB:65:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H6zTo4nPv99zZemCHbVirduLWcfy6dfcn2SvDqw8toes/1/197FCDDAE310D022081D86F4C3E65FDA0DAB655E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/197FCDDAE310D022081D86F4C3E65FDA0DAB655E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H6zTo4nPv99zZemCHbVirduLWcfy6dfcn2SvDqw8toes/1/3136382e3132312e37322e302f32322d3234203d3e20323635333032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.121.72.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9f:2c:5b:0d:f7:37:71:f1:94:eb:f6:a4:44:fa:b0:80:51:e3:
         9b:65:db:61:23:8b:dc:1d:2c:3c:50:15:06:eb:0b:ed:e8:39:
         8f:cd:68:e5:96:f5:03:87:1d:53:bb:42:2e:98:4d:fc:0a:ec:
         33:47:19:02:37:84:ac:da:2b:58:8b:0a:50:1c:db:86:fd:fc:
         72:0b:9b:35:b2:c3:03:e0:0d:e4:e1:b2:49:9b:5b:08:fe:cd:
         ed:96:f2:3c:9d:66:e5:3e:26:14:7a:5e:9f:39:d6:25:5e:99:
         b8:13:eb:76:d4:5c:a2:e9:f3:8e:af:5b:e1:41:94:e7:a4:64:
         ae:32:d3:af:ae:b4:c5:6e:c2:e2:83:a8:3f:e9:15:87:2a:54:
         8e:5f:10:c0:4f:6c:ec:b9:b9:b5:70:0d:a8:9c:2e:d0:49:84:
         1d:3b:9c:53:9e:5d:00:18:d6:f6:7d:1b:d4:4f:29:28:21:47:
         84:70:ab:b3:36:00:f1:bd:e9:3c:af:47:e7:e5:40:a4:bd:c9:
         89:45:78:44:d2:6a:51:6e:36:c3:ab:63:b1:98:c2:0c:a2:1a:
         65:98:ef:8f:5a:7d:b3:f4:3b:b5:a4:12:83:6a:6a:e3:f0:ac:
         fc:94:6b:08:59:4e:ae:93:c3:29:81:e6:9c:ec:c6:7c:c6:c4:
         93:8b:d2:9a
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUEPZ5DjtpoB+XPSBrgX+tu+BDC1wwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTk3RkNEREFFMzEwRDAyMjA4MUQ4NkY0QzNFNjVGREEw
REFCNjU1RTAeFw0yNDA0MDQxMzMyMzhaFw0yNTA0MDMxMzM3MzhaMDMxMTAvBgNV
BAMTKDgyODM2Q0E5NTgxNEY2MUNCMzU4NTE2QjE2QjNDNUNGMjg0NjQzNUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhUWxU0VHHnKJFsb4pgwORTAjf
XhIdW8zAELoEpvOg8ows5GBVeiZn1k9nslKsfLz0drFa43R2YbxtOsCvwAz+mGJK
08eQN6ns9gST9VnSdJIZQPaUpJf8b1ZDcHpWgCztDiZhtuQyXKum29CACcqWEajP
SgQV6F84IAm7lrsIwulHYlmVcQxyQeDSAitLTL5U+RhXMVeiC8K7mOe/kU+JDMGl
iuJZh2A+BsrHheKTYYtiPUO4LgKocvL+KaTQM9OR7KOrxVslnZEL28yXedSB4iLv
Jr9d49M2IuuI2LGGjo8Azmp+g5655Ktr8vMz2EEPC4cOJg/I0jffxwOTFw8RAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUgoNsqVgU9hyzWFFrFrPFzyhGQ1wwHwYDVR0j
BBgwFoAUGX/N2uMQ0CIIHYb0w+Zf2g2rZV4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSDZ6VG80blB2OTl6WmVtQ0hiVmlyZHVMV2NmeTZkZmNuMlN2RHF3OHRv
ZXMvMS8xOTdGQ0REQUUzMTBEMDIyMDgxRDg2RjRDM0U2NUZEQTBEQUI2NTVFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzE5N0ZDRERBRTMxMEQwMjIw
ODFEODZGNEMzRTY1RkRBMERBQjY1NUUuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0g2elRvNG5Qdjk5elplbUNIYlZpcmR1TFdjZnk2ZGZjbjJTdkRxdzh0b2VzLzEv
MzEzNjM4MmUzMTMyMzEyZTM3MzIyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM2
MzUzMzMwMzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAKoeUgwDQYJKoZIhvcNAQELBQADggEBAJ8sWw33
N3HxlOv2pET6sIBR45tl22Eji9wdLDxQFQbrC+3oOY/NaOWW9QOHHVO7Qi6YTfwK
7DNHGQI3hKzaK1iLClAc24b9/HILmzWywwPgDeThskmbWwj+ze2W8jydZuU+JhR6
Xp851iVembgT63bUXKLp846vW+FBlOekZK4y06+utMVuwuKDqD/pFYcqVI5fEMBP
bOy5ubVwDaicLtBJhB07nFOeXQAY1vZ9G9RPKSghR4Rwq7M2APG96TyvR+flQKS9
yYlFeETSalFuNsOrY7GYwgyiGmWY749afbP0O7WkEoNqauPwrPyUawhZTq6TwymB
5pzsxnzGxJOL0po=
-----END CERTIFICATE-----
Generated at Fri Sep 20 13:53:36 2024 by rpki-client on console-fra.rpki-client.org