Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/syjY7itV6Q1ivBqZPV9GFeEyEhphfNoH1ZoE4KunWY9/0/3136382e3138312e36382e302f32322d3234203d3e20323632333931.roa
File:                     3136382e3138312e36382e302f32322d3234203d3e20323632333931.roa (raw, json)
Hash identifier:          kHWFpmRxhyxILiaYGtvnY7CVBrNrJS33d1o/LNAS/5Y=
Subject key identifier:   C1:CD:D1:50:54:3C:1C:B8:81:0F:90:D3:6C:E3:A1:60:1D:C2:49:24
Certificate issuer:       /CN=4EED9818567EF67A561AEB24FB9C960FF884B0BB
Certificate serial:       43BB23D42204AD6123B8D8A4C691743EA66F1662
Authority key identifier: 4E:ED:98:18:56:7E:F6:7A:56:1A:EB:24:FB:9C:96:0F:F8:84:B0:BB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4EED9818567EF67A561AEB24FB9C960FF884B0BB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/syjY7itV6Q1ivBqZPV9GFeEyEhphfNoH1ZoE4KunWY9/0/3136382e3138312e36382e302f32322d3234203d3e20323632333931.roa
Signing time:             Wed 14 Aug 2024 01:06:11 +0000
ROA not before:           Wed 14 Aug 2024 01:01:11 +0000
ROA not after:            Wed 13 Aug 2025 01:06:11 +0000
asID:                     262391
IP address blocks:        168.181.68.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/syjY7itV6Q1ivBqZPV9GFeEyEhphfNoH1ZoE4KunWY9/0/4EED9818567EF67A561AEB24FB9C960FF884B0BB.crl
                          rsync://rpki-repo.registro.br/repo/syjY7itV6Q1ivBqZPV9GFeEyEhphfNoH1ZoE4KunWY9/0/4EED9818567EF67A561AEB24FB9C960FF884B0BB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4EED9818567EF67A561AEB24FB9C960FF884B0BB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 22 Nov 2024 23:53:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:bb:23:d4:22:04:ad:61:23:b8:d8:a4:c6:91:74:3e:a6:6f:16:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4EED9818567EF67A561AEB24FB9C960FF884B0BB
        Validity
            Not Before: Aug 14 01:01:11 2024 GMT
            Not After : Aug 13 01:06:11 2025 GMT
        Subject: CN=C1CDD150543C1CB8810F90D36CE3A1601DC24924
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:51:3f:d4:53:36:78:95:e6:55:e1:7a:7b:31:
                    d6:2d:f6:0c:d2:c7:5e:f0:08:d8:12:cf:aa:43:1a:
                    18:bb:46:61:8d:8c:0d:f5:8f:d0:fd:00:fe:14:17:
                    ba:4a:d9:4f:a8:d2:51:19:31:64:cc:e1:3a:05:9e:
                    23:b5:ae:62:2d:48:41:f9:13:e0:66:1d:05:2d:98:
                    03:3d:72:ae:3a:43:13:93:bf:fa:8b:59:28:12:35:
                    e8:e7:05:3e:53:f2:1b:19:b5:4d:04:1a:22:2c:74:
                    4b:7e:d8:81:64:06:d2:82:ff:5a:bf:49:bf:c2:b0:
                    3c:ff:57:97:77:be:29:78:a9:4e:8b:ab:1c:22:74:
                    21:92:09:3e:89:f5:a0:9c:62:d0:fe:b6:bd:85:1d:
                    01:60:81:55:46:21:d3:52:a6:3d:e7:3a:5f:c1:48:
                    49:30:31:ec:6d:4b:d9:3c:c1:15:1d:15:ac:83:82:
                    8e:00:a9:1f:69:10:4a:58:84:bf:76:72:f3:91:5f:
                    69:a9:66:dd:5b:fb:2c:b9:bc:3e:5b:06:e6:9d:32:
                    40:93:5d:a8:3d:92:9b:20:eb:99:19:d5:19:ff:85:
                    de:3c:94:f4:99:80:aa:b5:00:cf:98:b6:00:d1:73:
                    de:31:01:af:62:e5:71:62:db:9f:8d:fe:d1:20:00:
                    1e:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:CD:D1:50:54:3C:1C:B8:81:0F:90:D3:6C:E3:A1:60:1D:C2:49:24
            X509v3 Authority Key Identifier:
                keyid:4E:ED:98:18:56:7E:F6:7A:56:1A:EB:24:FB:9C:96:0F:F8:84:B0:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/syjY7itV6Q1ivBqZPV9GFeEyEhphfNoH1ZoE4KunWY9/0/4EED9818567EF67A561AEB24FB9C960FF884B0BB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4EED9818567EF67A561AEB24FB9C960FF884B0BB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/syjY7itV6Q1ivBqZPV9GFeEyEhphfNoH1ZoE4KunWY9/0/3136382e3138312e36382e302f32322d3234203d3e20323632333931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.181.68.0/22

    Signature Algorithm: sha256WithRSAEncryption
         76:0f:f4:3b:b7:f8:9e:38:fa:56:62:2d:ad:e4:5a:36:26:41:
         49:d2:3c:90:ab:d9:eb:14:6d:ad:6f:77:a4:07:f0:2d:c1:9f:
         07:93:19:bd:42:a8:df:b6:3a:db:d3:0a:7e:63:7a:ef:0b:92:
         4d:6d:5d:06:3e:32:f4:a0:6c:9b:9c:8b:87:50:7b:d3:dc:8c:
         6b:d4:8c:82:09:bd:48:01:e9:75:af:bb:80:77:55:0e:3e:16:
         b8:bc:61:cb:7b:7d:fd:d4:1e:ec:77:c4:2f:9e:5e:57:48:f7:
         af:56:42:29:ff:6f:0d:63:2e:ee:03:eb:f4:38:a0:7d:79:0d:
         29:45:6f:b5:19:78:2d:f8:94:72:bc:28:67:2f:9d:f7:c2:31:
         e4:06:a2:5a:05:fd:c1:d5:20:81:79:41:f8:c1:c2:70:e1:2e:
         d1:2d:b4:b4:9f:9c:21:97:98:4a:27:9e:39:3a:5d:d7:1f:6c:
         52:1d:39:b9:28:90:7d:35:0b:a0:d9:2a:21:ff:f4:dd:63:d7:
         eb:50:42:0e:71:32:0b:71:bf:f0:c1:6a:0c:a6:d7:d6:d3:4b:
         4c:f9:59:08:1d:7d:89:c1:42:87:e7:f0:5b:4a:9a:30:a9:62:
         eb:45:b8:63:42:f7:5b:0d:3f:20:98:e5:e9:26:79:4d:c4:0e:
         e3:7a:9c:09
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgIUQ7sj1CIErWEjuNikxpF0PqZvFmIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEVFRDk4MTg1NjdFRjY3QTU2MUFFQjI0RkI5Qzk2MEZG
ODg0QjBCQjAeFw0yNDA4MTQwMTAxMTFaFw0yNTA4MTMwMTA2MTFaMDMxMTAvBgNV
BAMTKEMxQ0REMTUwNTQzQzFDQjg4MTBGOTBEMzZDRTNBMTYwMURDMjQ5MjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1UT/UUzZ4leZV4Xp7MdYt9gzS
x17wCNgSz6pDGhi7RmGNjA31j9D9AP4UF7pK2U+o0lEZMWTM4ToFniO1rmItSEH5
E+BmHQUtmAM9cq46QxOTv/qLWSgSNejnBT5T8hsZtU0EGiIsdEt+2IFkBtKC/1q/
Sb/CsDz/V5d3vil4qU6LqxwidCGSCT6J9aCcYtD+tr2FHQFggVVGIdNSpj3nOl/B
SEkwMextS9k8wRUdFayDgo4AqR9pEEpYhL92cvORX2mpZt1b+yy5vD5bBuadMkCT
Xag9kpsg65kZ1Rn/hd48lPSZgKq1AM+YtgDRc94xAa9i5XFi25+N/tEgAB55AgMB
AAGjggJOMIICSjAdBgNVHQ4EFgQUwc3RUFQ8HLiBD5DTbOOhYB3CSSQwHwYDVR0j
BBgwFoAUTu2YGFZ+9npWGusk+5yWD/iEsLswDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9zeWpZN2l0VjZRMWl2QnFaUFY5R0ZlRXlFaHBoZk5vSDFab0U0S3VuV1k5
LzAvNEVFRDk4MTg1NjdFRjY3QTU2MUFFQjI0RkI5Qzk2MEZGODg0QjBCQi5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS80RUVEOTgxODU2N0VGNjdBNTYx
QUVCMjRGQjlDOTYwRkY4ODRCMEJCLmNlcjCBrQYIKwYBBQUHAQsEgaAwgZ0wgZoG
CCsGAQUFBzALhoGNcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9z
eWpZN2l0VjZRMWl2QnFaUFY5R0ZlRXlFaHBoZk5vSDFab0U0S3VuV1k5LzAvMzEz
NjM4MmUzMTM4MzEyZTM2MzgyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM2MzIz
MzM5MzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcB
Af8EEDAOMAwEAgABMAYDBAKotUQwDQYJKoZIhvcNAQELBQADggEBAHYP9Du3+J44
+lZiLa3kWjYmQUnSPJCr2esUba1vd6QH8C3BnweTGb1CqN+2OtvTCn5jeu8Lkk1t
XQY+MvSgbJuci4dQe9PcjGvUjIIJvUgB6XWvu4B3VQ4+Fri8Yct7ff3UHux3xC+e
XldI969WQin/bw1jLu4D6/Q4oH15DSlFb7UZeC34lHK8KGcvnffCMeQGoloF/cHV
IIF5QfjBwnDhLtEttLSfnCGXmEonnjk6XdcfbFIdObkokH01C6DZKiH/9N1j1+tQ
Qg5xMgtxv/DBagym19bTS0z5WQgdfYnBQofn8FtKmjCpYutFuGNC91sNPyCY5ekm
eU3EDuN6nAk=
-----END CERTIFICATE-----
Generated at Thu Nov 21 23:34:29 2024 by rpki-client on console-ams.rpki-client.org