Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HxE5ZuxqjJkWw9hf4g9s1Rv24w4X4NypADJ3DpgogAqr/1/3136382e3139342e3233362e302f32322d3234203d3e20323634343434.roa
File:                     3136382e3139342e3233362e302f32322d3234203d3e20323634343434.roa (raw, json)
Hash identifier:          btBrhk/vnir3/WkjAJpbhfUXh+S5JEUg1vU7ZFwfGGQ=
Subject key identifier:   C2:20:3E:29:F5:1F:B4:67:01:A3:30:D9:D0:D3:17:7B:82:92:E4:D8
Certificate issuer:       /CN=99448BDECD83ABA3D08AD5929B682374FE13BE98
Certificate serial:       3823364CEDAA2C43D9BF8F2FF70E6DCAEF04DA79
Authority key identifier: 99:44:8B:DE:CD:83:AB:A3:D0:8A:D5:92:9B:68:23:74:FE:13:BE:98
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99448BDECD83ABA3D08AD5929B682374FE13BE98.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HxE5ZuxqjJkWw9hf4g9s1Rv24w4X4NypADJ3DpgogAqr/1/3136382e3139342e3233362e302f32322d3234203d3e20323634343434.roa
Signing time:             Wed 03 Apr 2024 20:29:44 +0000
ROA not before:           Wed 03 Apr 2024 20:24:44 +0000
ROA not after:            Wed 02 Apr 2025 20:29:44 +0000
asID:                     264444
IP address blocks:        168.194.236.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HxE5ZuxqjJkWw9hf4g9s1Rv24w4X4NypADJ3DpgogAqr/1/99448BDECD83ABA3D08AD5929B682374FE13BE98.crl
                          rsync://rpki-repo.registro.br/repo/HxE5ZuxqjJkWw9hf4g9s1Rv24w4X4NypADJ3DpgogAqr/1/99448BDECD83ABA3D08AD5929B682374FE13BE98.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99448BDECD83ABA3D08AD5929B682374FE13BE98.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 12:03:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:23:36:4c:ed:aa:2c:43:d9:bf:8f:2f:f7:0e:6d:ca:ef:04:da:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99448BDECD83ABA3D08AD5929B682374FE13BE98
        Validity
            Not Before: Apr  3 20:24:44 2024 GMT
            Not After : Apr  2 20:29:44 2025 GMT
        Subject: CN=C2203E29F51FB46701A330D9D0D3177B8292E4D8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:11:c7:76:87:8b:37:dd:f7:10:31:0f:66:a6:
                    cc:a6:0d:e9:f2:92:c6:5e:91:f4:20:96:78:3a:26:
                    9a:31:27:f4:c0:49:1f:2b:ad:33:46:17:be:df:4e:
                    de:16:96:63:a9:12:f1:d9:e1:f0:67:40:6e:37:85:
                    58:66:7f:fb:01:9a:53:79:e3:88:cc:98:91:47:c8:
                    92:14:29:f3:e6:06:e4:f8:3f:9c:e9:be:82:f8:fc:
                    d0:cf:99:1d:9c:7a:57:91:7f:32:28:67:e3:54:02:
                    a7:47:c1:48:d5:58:69:d4:5e:33:94:59:ac:21:55:
                    02:a4:b6:82:8b:7a:44:fe:73:ed:d2:13:11:ca:24:
                    36:55:7c:b5:6d:84:89:ac:66:9d:79:f5:e4:f6:d8:
                    1c:ab:34:f5:6c:02:76:bc:87:97:97:4b:cd:95:60:
                    97:0c:91:86:5d:8d:14:60:f3:f9:cb:70:1d:fe:7e:
                    85:14:47:de:5e:6a:36:ed:ad:24:4a:9e:fe:20:5f:
                    18:1a:14:f0:29:b1:81:84:80:12:0e:45:66:51:6a:
                    cb:e8:d3:8f:05:42:b1:ee:c2:91:05:5f:af:e3:08:
                    9c:2e:fb:5d:1d:81:c5:cc:62:b4:20:49:d9:fc:52:
                    49:f2:6c:76:10:ed:3a:ca:11:1f:69:7d:54:5d:27:
                    1a:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:20:3E:29:F5:1F:B4:67:01:A3:30:D9:D0:D3:17:7B:82:92:E4:D8
            X509v3 Authority Key Identifier:
                keyid:99:44:8B:DE:CD:83:AB:A3:D0:8A:D5:92:9B:68:23:74:FE:13:BE:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HxE5ZuxqjJkWw9hf4g9s1Rv24w4X4NypADJ3DpgogAqr/1/99448BDECD83ABA3D08AD5929B682374FE13BE98.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99448BDECD83ABA3D08AD5929B682374FE13BE98.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HxE5ZuxqjJkWw9hf4g9s1Rv24w4X4NypADJ3DpgogAqr/1/3136382e3139342e3233362e302f32322d3234203d3e20323634343434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.194.236.0/22

    Signature Algorithm: sha256WithRSAEncryption
         63:f8:c1:62:62:16:0c:d2:67:28:92:ff:6e:60:94:84:8f:12:
         fe:2e:e3:f1:4a:55:35:eb:af:5e:7f:d3:c3:e5:02:c1:fb:15:
         8f:92:10:fb:b1:85:ea:d7:32:2e:92:be:76:24:dc:71:cd:99:
         b8:75:e7:38:6b:eb:e3:c7:3a:56:43:ea:56:14:90:97:96:5c:
         a3:bf:58:1d:b0:eb:a5:9f:cc:75:a0:a0:7a:73:71:a1:29:be:
         99:19:70:d2:c1:df:d4:88:04:68:10:08:38:aa:69:ed:44:4d:
         ad:9d:6c:b0:d9:f0:36:d8:f5:18:a9:81:3c:32:4c:5c:1f:91:
         e3:4b:34:47:40:66:6a:bb:b2:94:46:15:28:0e:fd:1d:ea:5b:
         1b:95:ee:71:f5:39:27:22:22:91:05:ff:2f:41:94:98:e0:f5:
         bd:f8:39:3b:14:0a:b2:9d:2f:5d:a7:9d:b2:90:cd:f0:26:bd:
         95:cd:05:05:92:9e:8f:86:15:46:40:67:e7:78:65:bf:95:2e:
         c4:d9:9a:31:c3:b4:19:6d:73:90:8c:8e:f4:5d:5a:41:55:dc:
         69:97:82:d5:6f:fe:f7:78:53:18:e1:8f:de:61:fe:74:da:df:
         1f:a9:54:81:17:df:0d:92:32:94:be:81:a8:34:fd:62:f4:2e:
         77:8c:df:85
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUOCM2TO2qLEPZv48v9w5tyu8E2nkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTk0NDhCREVDRDgzQUJBM0QwOEFENTkyOUI2ODIzNzRG
RTEzQkU5ODAeFw0yNDA0MDMyMDI0NDRaFw0yNTA0MDIyMDI5NDRaMDMxMTAvBgNV
BAMTKEMyMjAzRTI5RjUxRkI0NjcwMUEzMzBEOUQwRDMxNzdCODI5MkU0RDgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9Ecd2h4s33fcQMQ9mpsymDeny
ksZekfQglng6JpoxJ/TASR8rrTNGF77fTt4WlmOpEvHZ4fBnQG43hVhmf/sBmlN5
44jMmJFHyJIUKfPmBuT4P5zpvoL4/NDPmR2celeRfzIoZ+NUAqdHwUjVWGnUXjOU
WawhVQKktoKLekT+c+3SExHKJDZVfLVthImsZp159eT22ByrNPVsAna8h5eXS82V
YJcMkYZdjRRg8/nLcB3+foUUR95eajbtrSRKnv4gXxgaFPApsYGEgBIORWZRasvo
048FQrHuwpEFX6/jCJwu+10dgcXMYrQgSdn8UknybHYQ7TrKER9pfVRdJxodAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUwiA+KfUftGcBozDZ0NMXe4KS5NgwHwYDVR0j
BBgwFoAUmUSL3s2Dq6PQitWSm2gjdP4TvpgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSHhFNVp1eHFqSmtXdzloZjRnOXMxUnYyNHc0WDROeXBBREozRHBnb2dB
cXIvMS85OTQ0OEJERUNEODNBQkEzRDA4QUQ1OTI5QjY4MjM3NEZFMTNCRTk4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzk5NDQ4QkRFQ0Q4M0FCQTNE
MDhBRDU5MjlCNjgyMzc0RkUxM0JFOTguY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0h4RTVadXhxakprV3c5aGY0ZzlzMVJ2MjR3NFg0TnlwQURKM0RwZ29nQXFyLzEv
MzEzNjM4MmUzMTM5MzQyZTMyMzMzNjJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMy
MzYzNDM0MzQzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAqjC7DANBgkqhkiG9w0BAQsFAAOCAQEAY/jB
YmIWDNJnKJL/bmCUhI8S/i7j8UpVNeuvXn/Tw+UCwfsVj5IQ+7GF6tcyLpK+diTc
cc2ZuHXnOGvr48c6VkPqVhSQl5Zco79YHbDrpZ/MdaCgenNxoSm+mRlw0sHf1IgE
aBAIOKpp7URNrZ1ssNnwNtj1GKmBPDJMXB+R40s0R0BmaruylEYVKA79HepbG5Xu
cfU5JyIikQX/L0GUmOD1vfg5OxQKsp0vXaedspDN8Ca9lc0FBZKej4YVRkBn53hl
v5UuxNmaMcO0GW1zkIyO9F1aQVXcaZeC1W/+93hTGOGP3mH+dNrfH6lUgRffDZIy
lL6BqDT9YvQud4zfhQ==
-----END CERTIFICATE-----
Generated at Fri Nov 22 11:14:55 2024 by rpki-client on console-fra.rpki-client.org