Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HkQvwk9Tmp6xZJyeAMduevtEvUNQGji4MySSPEHuEBQr/0/3136382e3230352e34382e302f32322d3332203d3e20323635333633.roa
File:                     3136382e3230352e34382e302f32322d3332203d3e20323635333633.roa (raw, json)
Hash identifier:          VIgLAgwoHdrXJglVPx6k39YmF2TzCxgFAOT45JEk2Jo=
Subject key identifier:   5B:C0:D8:79:C5:E0:30:94:85:89:30:1A:60:DA:76:AE:AA:4A:58:9B
Certificate issuer:       /CN=A6572C12EBB3DB7EB7771295E22A0EB108B6D55C
Certificate serial:       4D61AFD02014004FB073F915A7AF5B2DC6EFE5F4
Authority key identifier: A6:57:2C:12:EB:B3:DB:7E:B7:77:12:95:E2:2A:0E:B1:08:B6:D5:5C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A6572C12EBB3DB7EB7771295E22A0EB108B6D55C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HkQvwk9Tmp6xZJyeAMduevtEvUNQGji4MySSPEHuEBQr/0/3136382e3230352e34382e302f32322d3332203d3e20323635333633.roa
Signing time:             Sat 10 Aug 2024 23:35:02 +0000
ROA not before:           Sat 10 Aug 2024 23:30:02 +0000
ROA not after:            Sat 09 Aug 2025 23:35:02 +0000
asID:                     265363
IP address blocks:        168.205.48.0/22 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HkQvwk9Tmp6xZJyeAMduevtEvUNQGji4MySSPEHuEBQr/0/A6572C12EBB3DB7EB7771295E22A0EB108B6D55C.crl
                          rsync://rpki-repo.registro.br/repo/HkQvwk9Tmp6xZJyeAMduevtEvUNQGji4MySSPEHuEBQr/0/A6572C12EBB3DB7EB7771295E22A0EB108B6D55C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A6572C12EBB3DB7EB7771295E22A0EB108B6D55C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 28 Nov 2024 06:15:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:61:af:d0:20:14:00:4f:b0:73:f9:15:a7:af:5b:2d:c6:ef:e5:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A6572C12EBB3DB7EB7771295E22A0EB108B6D55C
        Validity
            Not Before: Aug 10 23:30:02 2024 GMT
            Not After : Aug  9 23:35:02 2025 GMT
        Subject: CN=5BC0D879C5E030948589301A60DA76AEAA4A589B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:ba:d9:b5:4e:44:7e:88:26:c1:64:81:07:cb:
                    6f:74:78:97:85:73:21:f2:8b:05:bb:0b:3a:d5:91:
                    d2:10:32:91:5d:50:d1:ba:0e:76:5f:27:a9:b9:f5:
                    6e:e4:4e:32:1a:95:dc:53:6f:3f:bb:86:49:ef:ff:
                    63:ab:55:79:2b:d7:54:2e:e3:a4:44:c4:b1:3e:ec:
                    b0:10:6a:00:53:c1:07:cc:1d:7b:2d:52:77:3d:a7:
                    9b:0f:3c:8d:1e:a3:48:da:72:0c:ac:10:2d:ea:33:
                    dd:32:72:5c:51:93:70:97:db:4c:2d:13:d6:11:55:
                    22:4d:ae:69:f1:d3:20:ef:7d:3e:38:c9:fb:9b:1d:
                    a2:34:96:bb:4d:5f:4b:b5:dd:5f:f5:84:96:4a:1a:
                    f5:8e:4d:48:c2:e6:c4:04:d9:5f:de:57:78:d6:70:
                    b0:7f:d7:fd:4d:b8:ab:af:24:2a:05:e6:a5:4e:95:
                    88:32:c2:76:51:3b:12:76:57:51:96:59:64:45:1c:
                    f0:ab:aa:49:32:39:50:cf:c5:aa:83:84:68:4b:57:
                    3f:1a:a7:b1:49:36:c8:7d:73:d9:b9:d3:67:40:52:
                    78:bb:d0:f0:1e:52:09:60:e2:d5:80:a8:b8:ee:3e:
                    4e:fd:68:6c:e5:15:67:e8:1d:89:c9:e9:f2:24:19:
                    ec:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:C0:D8:79:C5:E0:30:94:85:89:30:1A:60:DA:76:AE:AA:4A:58:9B
            X509v3 Authority Key Identifier:
                keyid:A6:57:2C:12:EB:B3:DB:7E:B7:77:12:95:E2:2A:0E:B1:08:B6:D5:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HkQvwk9Tmp6xZJyeAMduevtEvUNQGji4MySSPEHuEBQr/0/A6572C12EBB3DB7EB7771295E22A0EB108B6D55C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A6572C12EBB3DB7EB7771295E22A0EB108B6D55C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HkQvwk9Tmp6xZJyeAMduevtEvUNQGji4MySSPEHuEBQr/0/3136382e3230352e34382e302f32322d3332203d3e20323635333633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.205.48.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b1:10:d5:39:bc:de:e6:a2:2b:f9:5d:db:3c:e8:3e:a5:f9:44:
         9f:3f:6d:47:ce:d4:79:13:5d:e5:54:35:b1:30:42:e3:94:02:
         ae:d0:10:6e:58:4b:70:6d:67:83:d9:96:8f:db:25:af:83:9f:
         77:ee:e8:e8:1b:6a:ab:6f:93:17:f5:67:66:e0:04:52:34:20:
         3f:a0:49:81:9e:20:59:ee:b0:27:ff:f0:12:70:ab:c4:d1:c8:
         b0:23:f7:59:c6:82:7a:82:5f:9f:0f:6e:df:a9:e7:ad:d2:ba:
         f3:b6:3e:3a:eb:ef:df:e9:c5:1f:23:ea:b1:6e:d9:f0:f7:30:
         e2:48:cf:33:05:5f:b9:da:32:e3:35:31:01:69:9b:fc:8d:c0:
         11:a4:99:d0:50:90:1e:4e:2c:42:1f:0d:db:3d:fe:4c:e1:2e:
         ce:15:46:f6:ea:ea:49:8a:ff:2b:44:25:f6:42:07:48:9b:ff:
         e1:d1:13:49:59:7e:32:ff:eb:bd:3c:a3:b7:87:0c:e6:6d:ed:
         4a:be:d4:1f:e2:02:06:09:af:42:c0:f3:bc:ea:e6:2f:f9:ed:
         18:d5:34:9a:02:e0:08:4f:1d:12:7c:65:2d:1c:4f:19:2a:73:
         75:f3:47:1d:01:9f:7c:55:a3:89:67:a9:b1:c2:ab:47:c7:eb:
         b1:0d:7b:39
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUTWGv0CAUAE+wc/kVp69bLcbv5fQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTY1NzJDMTJFQkIzREI3RUI3NzcxMjk1RTIyQTBFQjEw
OEI2RDU1QzAeFw0yNDA4MTAyMzMwMDJaFw0yNTA4MDkyMzM1MDJaMDMxMTAvBgNV
BAMTKDVCQzBEODc5QzVFMDMwOTQ4NTg5MzAxQTYwREE3NkFFQUE0QTU4OUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKutm1TkR+iCbBZIEHy290eJeF
cyHyiwW7CzrVkdIQMpFdUNG6DnZfJ6m59W7kTjIaldxTbz+7hknv/2OrVXkr11Qu
46RExLE+7LAQagBTwQfMHXstUnc9p5sPPI0eo0jacgysEC3qM90yclxRk3CX20wt
E9YRVSJNrmnx0yDvfT44yfubHaI0lrtNX0u13V/1hJZKGvWOTUjC5sQE2V/eV3jW
cLB/1/1NuKuvJCoF5qVOlYgywnZROxJ2V1GWWWRFHPCrqkkyOVDPxaqDhGhLVz8a
p7FJNsh9c9m502dAUni70PAeUglg4tWAqLjuPk79aGzlFWfoHYnJ6fIkGezJAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUW8DYecXgMJSFiTAaYNp2rqpKWJswHwYDVR0j
BBgwFoAUplcsEuuz2363dxKV4ioOsQi21VwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSGtRdndrOVRtcDZ4Wkp5ZUFNZHVldnRFdlVOUUdqaTRNeVNTUEVIdUVC
UXIvMC9BNjU3MkMxMkVCQjNEQjdFQjc3NzEyOTVFMjJBMEVCMTA4QjZENTVDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0E2NTcyQzEyRUJCM0RCN0VC
Nzc3MTI5NUUyMkEwRUIxMDhCNkQ1NUMuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hrUXZ3azlUbXA2eFpKeWVBTWR1ZXZ0RXZVTlFHamk0TXlTU1BFSHVFQlFyLzAv
MzEzNjM4MmUzMjMwMzUyZTM0MzgyZTMwMmYzMjMyMmQzMzMyMjAzZDNlMjAzMjM2
MzUzMzM2MzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAKozTAwDQYJKoZIhvcNAQELBQADggEBALEQ1Tm8
3uaiK/ld2zzoPqX5RJ8/bUfO1HkTXeVUNbEwQuOUAq7QEG5YS3BtZ4PZlo/bJa+D
n3fu6Ogbaqtvkxf1Z2bgBFI0ID+gSYGeIFnusCf/8BJwq8TRyLAj91nGgnqCX58P
bt+p563SuvO2Pjrr79/pxR8j6rFu2fD3MOJIzzMFX7naMuM1MQFpm/yNwBGkmdBQ
kB5OLEIfDds9/kzhLs4VRvbq6kmK/ytEJfZCB0ib/+HRE0lZfjL/6708o7eHDOZt
7Uq+1B/iAgYJr0LA87zq5i/57RjVNJoC4AhPHRJ8ZS0cTxkqc3XzRx0Bn3xVo4ln
qbHCq0fH67ENezk=
-----END CERTIFICATE-----
Generated at Wed Nov 27 07:37:25 2024 by rpki-client on console-ams.rpki-client.org