Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HuUsg4KdrKFxq9qg8LzgkVLkqdAEc9km7eVdyDFRCSKa/0/3136382e3233322e3234332e302f32342d3234203d3e20323634393532.roa
File:                     3136382e3233322e3234332e302f32342d3234203d3e20323634393532.roa (raw, json)
Hash identifier:          9AH38xqVCl5v78lIPXliSOVfN++SHc8i0ITfSfauP38=
Subject key identifier:   54:14:8F:D5:2D:D4:20:C2:B9:7E:87:32:D3:21:FA:CC:B7:CD:AF:CB
Certificate issuer:       /CN=3E212DB1B302950E59672700155B176D07CFDAEA
Certificate serial:       0852B66B31E07A94145FE413A705F7725F237A0F
Authority key identifier: 3E:21:2D:B1:B3:02:95:0E:59:67:27:00:15:5B:17:6D:07:CF:DA:EA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3E212DB1B302950E59672700155B176D07CFDAEA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HuUsg4KdrKFxq9qg8LzgkVLkqdAEc9km7eVdyDFRCSKa/0/3136382e3233322e3234332e302f32342d3234203d3e20323634393532.roa
Signing time:             Tue 30 Apr 2024 15:18:51 +0000
ROA not before:           Tue 30 Apr 2024 15:13:51 +0000
ROA not after:            Tue 29 Apr 2025 15:18:51 +0000
asID:                     264952
IP address blocks:        168.232.243.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HuUsg4KdrKFxq9qg8LzgkVLkqdAEc9km7eVdyDFRCSKa/0/3E212DB1B302950E59672700155B176D07CFDAEA.crl
                          rsync://rpki-repo.registro.br/repo/HuUsg4KdrKFxq9qg8LzgkVLkqdAEc9km7eVdyDFRCSKa/0/3E212DB1B302950E59672700155B176D07CFDAEA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3E212DB1B302950E59672700155B176D07CFDAEA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 23 Oct 2024 22:53:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:52:b6:6b:31:e0:7a:94:14:5f:e4:13:a7:05:f7:72:5f:23:7a:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3E212DB1B302950E59672700155B176D07CFDAEA
        Validity
            Not Before: Apr 30 15:13:51 2024 GMT
            Not After : Apr 29 15:18:51 2025 GMT
        Subject: CN=54148FD52DD420C2B97E8732D321FACCB7CDAFCB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:ef:e2:46:ca:e7:61:3c:8c:ba:cd:63:a6:2b:
                    d3:07:b6:72:e4:34:bb:de:46:1e:c5:51:fe:3d:95:
                    03:ef:7a:3c:21:2d:24:40:f7:e7:ab:aa:a3:86:43:
                    f5:81:f7:f6:4e:99:a5:81:48:aa:10:ad:9e:fa:55:
                    49:b1:c4:39:ad:cf:0d:93:84:23:c6:0b:2d:ff:2b:
                    48:bf:15:94:49:69:04:8a:4f:8b:bf:f2:c6:34:a9:
                    16:c0:d3:ef:63:91:07:4d:52:f1:81:f5:22:e4:cb:
                    d2:0e:76:eb:7b:08:97:b8:80:2a:3f:08:c9:7a:0b:
                    17:08:99:f2:a5:c6:b3:a1:83:7d:eb:c0:73:5d:06:
                    8f:cc:11:26:8c:ee:0c:89:e1:14:45:23:b1:76:d9:
                    58:0e:c8:29:4b:c9:f8:b1:b7:92:a6:67:10:c2:54:
                    c8:59:94:1f:f0:66:e4:85:b2:c5:e2:82:1f:4f:8c:
                    26:fe:b0:aa:ab:62:07:be:6f:af:13:9f:b1:e3:54:
                    37:4c:7e:d6:00:ae:2f:17:db:fd:7e:1d:a8:9e:ac:
                    5a:11:f1:1d:3c:f0:0c:b1:64:97:db:53:89:4d:fe:
                    5a:8a:30:44:5a:07:9d:88:48:f3:56:47:23:3b:b0:
                    2f:83:4c:d7:c8:04:eb:54:d8:fb:5f:e8:e5:9e:ea:
                    cb:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:14:8F:D5:2D:D4:20:C2:B9:7E:87:32:D3:21:FA:CC:B7:CD:AF:CB
            X509v3 Authority Key Identifier:
                keyid:3E:21:2D:B1:B3:02:95:0E:59:67:27:00:15:5B:17:6D:07:CF:DA:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HuUsg4KdrKFxq9qg8LzgkVLkqdAEc9km7eVdyDFRCSKa/0/3E212DB1B302950E59672700155B176D07CFDAEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3E212DB1B302950E59672700155B176D07CFDAEA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HuUsg4KdrKFxq9qg8LzgkVLkqdAEc9km7eVdyDFRCSKa/0/3136382e3233322e3234332e302f32342d3234203d3e20323634393532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.232.243.0/24

    Signature Algorithm: sha256WithRSAEncryption
         82:45:74:42:32:f2:b3:ea:b6:06:55:6c:73:47:4e:84:ab:3d:
         a3:46:50:e6:0b:4f:2c:2e:e5:62:a2:9e:db:4a:ab:41:26:ab:
         70:ef:69:e7:3e:49:89:d6:cd:56:ec:5b:2d:16:f0:6b:c6:24:
         6f:97:b0:83:72:22:d7:a2:ae:92:a9:bb:71:2d:ef:81:be:f4:
         e9:a8:c0:f8:7f:43:2a:af:96:36:45:e8:4f:bf:20:d9:66:50:
         b7:e1:69:34:47:06:50:60:fa:b5:24:dc:77:21:3a:b1:1a:4a:
         b3:79:02:9e:37:06:eb:79:85:18:07:ec:d2:e3:30:f2:e8:3d:
         61:2b:78:5b:92:e3:12:26:9f:1a:fe:d9:56:f7:43:37:bf:e4:
         f1:01:3d:f8:f4:4e:b5:60:a1:3d:bb:09:c6:ea:06:38:a8:7c:
         dd:94:8e:14:da:9b:d1:21:f7:64:ad:ff:2f:fe:bb:d9:4d:8d:
         27:b4:12:69:e2:cb:28:66:89:f9:96:2b:43:46:42:c9:be:35:
         a3:08:e8:1e:44:0f:69:50:24:cf:3a:2d:53:43:90:a3:d0:0f:
         e5:96:93:3f:e9:79:68:0d:16:0c:24:dd:05:95:c2:71:48:e3:
         9f:01:d3:3e:fb:7f:97:7b:99:39:4c:bc:31:70:37:aa:89:2c:
         bf:b0:bb:4b
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUCFK2azHgepQUX+QTpwX3cl8jeg8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0UyMTJEQjFCMzAyOTUwRTU5NjcyNzAwMTU1QjE3NkQw
N0NGREFFQTAeFw0yNDA0MzAxNTEzNTFaFw0yNTA0MjkxNTE4NTFaMDMxMTAvBgNV
BAMTKDU0MTQ4RkQ1MkRENDIwQzJCOTdFODczMkQzMjFGQUNDQjdDREFGQ0IwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCy7+JGyudhPIy6zWOmK9MHtnLk
NLveRh7FUf49lQPvejwhLSRA9+erqqOGQ/WB9/ZOmaWBSKoQrZ76VUmxxDmtzw2T
hCPGCy3/K0i/FZRJaQSKT4u/8sY0qRbA0+9jkQdNUvGB9SLky9IOdut7CJe4gCo/
CMl6CxcImfKlxrOhg33rwHNdBo/MESaM7gyJ4RRFI7F22VgOyClLyfixt5KmZxDC
VMhZlB/wZuSFssXigh9PjCb+sKqrYge+b68Tn7HjVDdMftYAri8X2/1+HaierFoR
8R088AyxZJfbU4lN/lqKMERaB52ISPNWRyM7sC+DTNfIBOtU2Ptf6OWe6subAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUVBSP1S3UIMK5focy0yH6zLfNr8swHwYDVR0j
BBgwFoAUPiEtsbMClQ5ZZycAFVsXbQfP2uowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSHVVc2c0S2RyS0Z4cTlxZzhMemdrVkxrcWRBRWM5a203ZVZkeURGUkNT
S2EvMC8zRTIxMkRCMUIzMDI5NTBFNTk2NzI3MDAxNTVCMTc2RDA3Q0ZEQUVBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzNFMjEyREIxQjMwMjk1MEU1
OTY3MjcwMDE1NUIxNzZEMDdDRkRBRUEuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0h1VXNnNEtkcktGeHE5cWc4THpna1ZMa3FkQUVjOWttN2VWZHlERlJDU0thLzAv
MzEzNjM4MmUzMjMzMzIyZTMyMzQzMzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzYzNDM5MzUzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAKjo8zANBgkqhkiG9w0BAQsFAAOCAQEAgkV0
QjLys+q2BlVsc0dOhKs9o0ZQ5gtPLC7lYqKe20qrQSarcO9p5z5JidbNVuxbLRbw
a8Ykb5ewg3Ii16Kukqm7cS3vgb706ajA+H9DKq+WNkXoT78g2WZQt+FpNEcGUGD6
tSTcdyE6sRpKs3kCnjcG63mFGAfs0uMw8ug9YSt4W5LjEiafGv7ZVvdDN7/k8QE9
+PROtWChPbsJxuoGOKh83ZSOFNqb0SH3ZK3/L/672U2NJ7QSaeLLKGaJ+ZYrQ0ZC
yb41owjoHkQPaVAkzzotU0OQo9AP5ZaTP+l5aA0WDCTdBZXCcUjjnwHTPvt/l3uZ
OUy8MXA3qoksv7C7Sw==
-----END CERTIFICATE-----
Generated at Tue Oct 22 22:42:38 2024 by rpki-client on console-ams.rpki-client.org