Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/He7bPZqear8UkEq3odf9SEZSYvbQ9uP444qhs5qZbJGQ/1/3136382e3139342e31322e302f32322d3232203d3e20323635333737.roa
File:                     3136382e3139342e31322e302f32322d3232203d3e20323635333737.roa (raw, json)
Hash identifier:          IPsE9FVq049WqHQLIEv1iYb4WahG5K9WF63DuxIXs2s=
Subject key identifier:   89:ED:DE:74:06:B9:08:A9:23:1A:02:F0:2D:C8:93:EC:C5:BC:A5:1F
Certificate issuer:       /CN=A4C9B133126401D92DA5457C573EA0078BF42BA8
Certificate serial:       3C2C3767F4F21B124B7857E1AF2918F5D67BF511
Authority key identifier: A4:C9:B1:33:12:64:01:D9:2D:A5:45:7C:57:3E:A0:07:8B:F4:2B:A8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A4C9B133126401D92DA5457C573EA0078BF42BA8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/He7bPZqear8UkEq3odf9SEZSYvbQ9uP444qhs5qZbJGQ/1/3136382e3139342e31322e302f32322d3232203d3e20323635333737.roa
Signing time:             Thu 04 Apr 2024 22:03:19 +0000
ROA not before:           Thu 04 Apr 2024 21:58:19 +0000
ROA not after:            Thu 03 Apr 2025 22:03:19 +0000
asID:                     265377
IP address blocks:        168.194.12.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/He7bPZqear8UkEq3odf9SEZSYvbQ9uP444qhs5qZbJGQ/1/A4C9B133126401D92DA5457C573EA0078BF42BA8.crl
                          rsync://rpki-repo.registro.br/repo/He7bPZqear8UkEq3odf9SEZSYvbQ9uP444qhs5qZbJGQ/1/A4C9B133126401D92DA5457C573EA0078BF42BA8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A4C9B133126401D92DA5457C573EA0078BF42BA8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 13:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:2c:37:67:f4:f2:1b:12:4b:78:57:e1:af:29:18:f5:d6:7b:f5:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A4C9B133126401D92DA5457C573EA0078BF42BA8
        Validity
            Not Before: Apr  4 21:58:19 2024 GMT
            Not After : Apr  3 22:03:19 2025 GMT
        Subject: CN=89EDDE7406B908A9231A02F02DC893ECC5BCA51F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:8c:ba:ef:84:fa:a2:66:19:88:ee:9e:d0:0e:
                    1c:b1:44:9c:04:71:2a:65:8d:9d:7a:6b:52:8f:3e:
                    9e:73:48:ae:eb:8a:d6:44:52:cf:cf:64:c1:ef:da:
                    79:17:fe:52:48:3e:c6:25:d2:a8:fc:78:97:66:1e:
                    a5:b5:cc:e1:76:98:e9:ea:16:5c:61:0e:4e:bf:44:
                    aa:3e:67:39:77:a0:d7:21:fb:e0:dd:3e:c2:62:24:
                    bb:13:88:86:d8:35:a1:e0:7d:98:91:20:99:ae:77:
                    1e:a7:29:9c:23:52:f1:ce:93:a3:c2:42:9c:39:91:
                    aa:82:cc:2a:ff:66:a7:39:0d:e9:e9:a0:b2:81:95:
                    ac:51:45:37:f3:c1:04:36:71:ad:72:58:25:bf:a0:
                    31:06:e2:ff:a2:a2:84:82:96:82:f3:e9:04:06:98:
                    5a:f0:f3:b9:ed:f7:5c:33:91:26:3e:1e:40:90:78:
                    84:2f:8e:d0:0f:f0:98:c7:b5:b7:96:9b:76:5b:41:
                    ae:6e:56:5c:79:9e:c5:4e:4b:43:e4:21:09:03:4a:
                    44:c1:22:ec:18:7e:7f:ee:c2:de:89:49:9f:92:46:
                    bd:d0:6e:1b:1d:60:c7:a6:9a:ad:e0:fd:ce:e6:2a:
                    07:63:58:19:0a:04:f3:29:9f:b1:02:46:20:01:12:
                    18:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:ED:DE:74:06:B9:08:A9:23:1A:02:F0:2D:C8:93:EC:C5:BC:A5:1F
            X509v3 Authority Key Identifier:
                keyid:A4:C9:B1:33:12:64:01:D9:2D:A5:45:7C:57:3E:A0:07:8B:F4:2B:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/He7bPZqear8UkEq3odf9SEZSYvbQ9uP444qhs5qZbJGQ/1/A4C9B133126401D92DA5457C573EA0078BF42BA8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A4C9B133126401D92DA5457C573EA0078BF42BA8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/He7bPZqear8UkEq3odf9SEZSYvbQ9uP444qhs5qZbJGQ/1/3136382e3139342e31322e302f32322d3232203d3e20323635333737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.194.12.0/22

    Signature Algorithm: sha256WithRSAEncryption
         78:bb:54:a5:97:35:94:85:60:27:68:ae:e0:e8:29:85:cf:8d:
         46:b6:7c:22:8f:9f:e1:49:b9:84:32:06:b4:b9:28:94:b4:79:
         92:3c:81:5d:e5:da:41:63:4e:a9:2d:15:58:1f:ec:d1:94:80:
         f4:26:4d:7e:2e:a5:91:8e:fb:29:d3:7f:cb:17:8f:44:f0:8a:
         45:7a:51:88:c4:25:4a:ef:b7:00:c1:7e:ab:8a:90:95:66:c7:
         56:31:a5:f0:9b:0e:84:d1:56:d4:47:75:cc:07:3b:ab:73:58:
         60:41:16:77:c6:65:56:c5:01:70:26:2c:b3:0e:dd:fe:12:e1:
         51:47:c4:40:67:d4:0b:23:ef:0a:4e:3c:b8:0b:ca:03:06:c6:
         da:20:f9:d8:9a:51:1a:8e:a2:13:bf:a9:28:16:e7:4e:94:8f:
         a5:c2:c2:04:32:2b:a1:4a:cd:8b:af:ab:bb:ff:0f:37:b0:6b:
         88:a3:86:0a:3c:df:59:e1:f4:51:ed:14:63:18:3b:26:ce:1a:
         ca:fe:fa:49:b8:93:10:b7:1a:f5:66:44:5c:66:3b:7d:6f:0f:
         d1:43:11:36:95:55:21:bc:99:8c:26:ef:50:b9:92:4a:d1:b8:
         75:0d:4c:8f:49:3a:3a:5d:10:64:25:6d:36:7a:34:3d:cc:5c:
         e7:31:cf:98
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUPCw3Z/TyGxJLeFfhrykY9dZ79REwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTRDOUIxMzMxMjY0MDFEOTJEQTU0NTdDNTczRUEwMDc4
QkY0MkJBODAeFw0yNDA0MDQyMTU4MTlaFw0yNTA0MDMyMjAzMTlaMDMxMTAvBgNV
BAMTKDg5RURERTc0MDZCOTA4QTkyMzFBMDJGMDJEQzg5M0VDQzVCQ0E1MUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjjLrvhPqiZhmI7p7QDhyxRJwE
cSpljZ16a1KPPp5zSK7ritZEUs/PZMHv2nkX/lJIPsYl0qj8eJdmHqW1zOF2mOnq
FlxhDk6/RKo+Zzl3oNch++DdPsJiJLsTiIbYNaHgfZiRIJmudx6nKZwjUvHOk6PC
Qpw5kaqCzCr/Zqc5DenpoLKBlaxRRTfzwQQ2ca1yWCW/oDEG4v+iooSCloLz6QQG
mFrw87nt91wzkSY+HkCQeIQvjtAP8JjHtbeWm3ZbQa5uVlx5nsVOS0PkIQkDSkTB
IuwYfn/uwt6JSZ+SRr3QbhsdYMemmq3g/c7mKgdjWBkKBPMpn7ECRiABEhhbAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUie3edAa5CKkjGgLwLciT7MW8pR8wHwYDVR0j
BBgwFoAUpMmxMxJkAdktpUV8Vz6gB4v0K6gwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSGU3YlBacWVhcjhVa0VxM29kZjlTRVpTWXZiUTl1UDQ0NHFoczVxWmJK
R1EvMS9BNEM5QjEzMzEyNjQwMUQ5MkRBNTQ1N0M1NzNFQTAwNzhCRjQyQkE4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0E0QzlCMTMzMTI2NDAxRDky
REE1NDU3QzU3M0VBMDA3OEJGNDJCQTguY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hlN2JQWnFlYXI4VWtFcTNvZGY5U0VaU1l2YlE5dVA0NDRxaHM1cVpiSkdRLzEv
MzEzNjM4MmUzMTM5MzQyZTMxMzIyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzMjM2
MzUzMzM3Mzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAKowgwwDQYJKoZIhvcNAQELBQADggEBAHi7VKWX
NZSFYCdoruDoKYXPjUa2fCKPn+FJuYQyBrS5KJS0eZI8gV3l2kFjTqktFVgf7NGU
gPQmTX4upZGO+ynTf8sXj0TwikV6UYjEJUrvtwDBfquKkJVmx1YxpfCbDoTRVtRH
dcwHO6tzWGBBFnfGZVbFAXAmLLMO3f4S4VFHxEBn1Asj7wpOPLgLygMGxtog+dia
URqOohO/qSgW506Uj6XCwgQyK6FKzYuvq7v/Dzewa4ijhgo831nh9FHtFGMYOybO
Gsr++km4kxC3GvVmRFxmO31vD9FDETaVVSG8mYwm71C5kkrRuHUNTI9JOjpdEGQl
bTZ6ND3MXOcxz5g=
-----END CERTIFICATE-----
Generated at Sat Sep 28 11:59:59 2024 by rpki-client on console-fra.rpki-client.org