Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/rn4XoHmNZngndGbFoDA9G7X5tZLcShDcvNN3t5B4Qxw/0/3136382e3138312e3135322e302f32322d3234203d3e20323634323935.roa
File:                     3136382e3138312e3135322e302f32322d3234203d3e20323634323935.roa (raw, json)
Hash identifier:          DnULF92gOTXMOqAaw3Dzs9i6JNOfZmzR1R2cwXEP4AI=
Subject key identifier:   5B:29:F3:8D:20:B7:16:65:07:68:3F:28:4B:F0:D4:2A:54:0D:83:6B
Certificate issuer:       /CN=FF378FCED112801045DB136F6CA069344BA08F50
Certificate serial:       04118870535FB2A083D81DD6208919B0ECB488A5
Authority key identifier: FF:37:8F:CE:D1:12:80:10:45:DB:13:6F:6C:A0:69:34:4B:A0:8F:50
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF378FCED112801045DB136F6CA069344BA08F50.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/rn4XoHmNZngndGbFoDA9G7X5tZLcShDcvNN3t5B4Qxw/0/3136382e3138312e3135322e302f32322d3234203d3e20323634323935.roa
Signing time:             Tue 02 Jul 2024 17:55:46 +0000
ROA not before:           Tue 02 Jul 2024 17:50:46 +0000
ROA not after:            Tue 01 Jul 2025 17:55:46 +0000
asID:                     264295
IP address blocks:        168.181.152.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/rn4XoHmNZngndGbFoDA9G7X5tZLcShDcvNN3t5B4Qxw/0/FF378FCED112801045DB136F6CA069344BA08F50.crl
                          rsync://rpki-repo.registro.br/repo/rn4XoHmNZngndGbFoDA9G7X5tZLcShDcvNN3t5B4Qxw/0/FF378FCED112801045DB136F6CA069344BA08F50.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF378FCED112801045DB136F6CA069344BA08F50.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 04:50:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:11:88:70:53:5f:b2:a0:83:d8:1d:d6:20:89:19:b0:ec:b4:88:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF378FCED112801045DB136F6CA069344BA08F50
        Validity
            Not Before: Jul  2 17:50:46 2024 GMT
            Not After : Jul  1 17:55:46 2025 GMT
        Subject: CN=5B29F38D20B7166507683F284BF0D42A540D836B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:b7:11:e1:43:35:90:3c:00:37:19:79:b9:b2:
                    78:7c:f7:90:7d:df:f2:32:8b:b2:af:8f:7e:c1:1e:
                    6f:cf:59:75:5f:f9:86:9f:57:e2:c5:7a:d4:23:49:
                    8d:99:18:12:6c:73:74:50:d7:60:ab:6c:5c:e7:a3:
                    e7:17:01:c6:f4:7a:ba:15:59:ee:68:e7:3a:1a:61:
                    af:48:28:39:2f:ef:5f:06:00:e8:48:46:df:c7:c0:
                    e2:35:06:a3:fc:c9:9c:9b:5e:03:40:b0:64:49:ee:
                    c6:9a:08:0d:24:a5:f4:02:e0:cc:77:15:3b:cd:58:
                    8b:04:b0:c3:78:f1:95:96:e2:e6:10:2b:8c:61:9b:
                    cf:42:54:86:0b:75:77:20:69:b4:66:2f:07:34:ce:
                    cb:24:de:8a:00:06:3b:fe:0c:b9:c2:28:d2:0a:6e:
                    93:d6:b4:c3:65:f7:0d:a8:a3:62:03:2f:99:b2:2f:
                    34:4c:1f:b8:26:2f:87:00:5c:83:6e:d3:a9:10:3c:
                    55:dd:bf:4e:30:c6:51:43:bb:3f:22:2a:0a:31:5c:
                    ce:1c:ae:a3:a2:50:b6:13:b7:70:e2:47:66:b2:df:
                    9d:4d:73:62:7c:3c:d8:e5:12:75:89:09:4c:bb:34:
                    58:2f:ad:25:bc:20:06:48:c3:c7:c2:f4:dc:79:7b:
                    81:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:29:F3:8D:20:B7:16:65:07:68:3F:28:4B:F0:D4:2A:54:0D:83:6B
            X509v3 Authority Key Identifier:
                keyid:FF:37:8F:CE:D1:12:80:10:45:DB:13:6F:6C:A0:69:34:4B:A0:8F:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/rn4XoHmNZngndGbFoDA9G7X5tZLcShDcvNN3t5B4Qxw/0/FF378FCED112801045DB136F6CA069344BA08F50.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF378FCED112801045DB136F6CA069344BA08F50.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/rn4XoHmNZngndGbFoDA9G7X5tZLcShDcvNN3t5B4Qxw/0/3136382e3138312e3135322e302f32322d3234203d3e20323634323935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.181.152.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6d:d5:86:92:14:0c:eb:b6:cf:8d:9f:7b:23:34:fe:ba:53:d6:
         28:c7:4a:30:20:c3:4a:52:18:4d:7a:3a:0d:41:f2:97:ad:b8:
         9a:9d:9b:40:84:26:42:d6:0a:7b:84:d4:02:1b:f2:8c:7e:c0:
         ab:76:b4:41:86:3b:fb:68:66:93:c4:ea:92:45:40:24:96:62:
         e4:c1:e7:9e:0f:13:34:d0:44:e0:48:1b:e0:fd:f1:ec:b9:03:
         85:ca:12:4e:c2:51:60:cd:7f:2a:73:38:20:4b:71:bd:22:82:
         a4:80:7f:95:d0:41:ea:27:77:bf:32:31:ad:bc:7b:01:03:a9:
         1c:8f:3b:54:af:9a:cf:39:32:91:b0:d5:26:6a:e1:3e:a7:5d:
         2e:6b:ac:2e:46:a4:dd:75:d7:aa:72:6d:92:09:6c:b8:65:dd:
         03:46:82:86:14:3a:e1:fc:16:43:db:24:b4:26:59:5f:18:20:
         b2:d5:42:76:f5:3f:b8:ee:70:5d:29:42:02:ff:2a:3c:3a:13:
         e8:ca:3f:39:fc:85:0a:21:2b:14:11:1a:eb:1f:d7:bd:49:1f:
         88:a1:18:71:43:2d:d9:d9:64:96:52:41:25:5a:08:57:38:46:
         d0:9a:4e:11:d9:50:23:36:37:70:25:87:07:83:ac:0f:2a:34:
         61:5c:8b:8b
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUBBGIcFNfsqCD2B3WIIkZsOy0iKUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkYzNzhGQ0VEMTEyODAxMDQ1REIxMzZGNkNBMDY5MzQ0
QkEwOEY1MDAeFw0yNDA3MDIxNzUwNDZaFw0yNTA3MDExNzU1NDZaMDMxMTAvBgNV
BAMTKDVCMjlGMzhEMjBCNzE2NjUwNzY4M0YyODRCRjBENDJBNTQwRDgzNkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDtxHhQzWQPAA3GXm5snh895B9
3/Iyi7Kvj37BHm/PWXVf+YafV+LFetQjSY2ZGBJsc3RQ12CrbFzno+cXAcb0eroV
We5o5zoaYa9IKDkv718GAOhIRt/HwOI1BqP8yZybXgNAsGRJ7saaCA0kpfQC4Mx3
FTvNWIsEsMN48ZWW4uYQK4xhm89CVIYLdXcgabRmLwc0zssk3ooABjv+DLnCKNIK
bpPWtMNl9w2oo2IDL5myLzRMH7gmL4cAXINu06kQPFXdv04wxlFDuz8iKgoxXM4c
rqOiULYTt3DiR2ay351Nc2J8PNjlEnWJCUy7NFgvrSW8IAZIw8fC9Nx5e4GTAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUWynzjSC3FmUHaD8oS/DUKlQNg2swHwYDVR0j
BBgwFoAU/zePztESgBBF2xNvbKBpNEugj1AwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9ybjRYb0htTlpuZ25kR2JGb0RBOUc3WDV0WkxjU2hEY3ZOTjN0NUI0UXh3
LzAvRkYzNzhGQ0VEMTEyODAxMDQ1REIxMzZGNkNBMDY5MzQ0QkEwOEY1MC5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS9GRjM3OEZDRUQxMTI4MDEwNDVE
QjEzNkY2Q0EwNjkzNDRCQTA4RjUwLmNlcjCBrwYIKwYBBQUHAQsEgaIwgZ8wgZwG
CCsGAQUFBzALhoGPcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9y
bjRYb0htTlpuZ25kR2JGb0RBOUc3WDV0WkxjU2hEY3ZOTjN0NUI0UXh3LzAvMzEz
NjM4MmUzMTM4MzEyZTMxMzUzMjJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMyMzYz
NDMyMzkzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcB
BwEB/wQQMA4wDAQCAAEwBgMEAqi1mDANBgkqhkiG9w0BAQsFAAOCAQEAbdWGkhQM
67bPjZ97IzT+ulPWKMdKMCDDSlIYTXo6DUHyl624mp2bQIQmQtYKe4TUAhvyjH7A
q3a0QYY7+2hmk8TqkkVAJJZi5MHnng8TNNBE4Egb4P3x7LkDhcoSTsJRYM1/KnM4
IEtxvSKCpIB/ldBB6id3vzIxrbx7AQOpHI87VK+azzkykbDVJmrhPqddLmusLkak
3XXXqnJtkglsuGXdA0aChhQ64fwWQ9sktCZZXxggstVCdvU/uO5wXSlCAv8qPDoT
6Mo/OfyFCiErFBEa6x/XvUkfiKEYcUMt2dlkllJBJVoIVzhG0JpOEdlQIzY3cCWH
B4OsDyo0YVyLiw==
-----END CERTIFICATE-----
Generated at Tue Nov 26 04:36:56 2024 by rpki-client on console-fra.rpki-client.org