Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HuUsg4KdrKFxq9qg8LzgkVLkqdAEc9km7eVdyDFRCSKa/0/3136382e3233322e3234302e302f32332d3233203d3e20323634393532.roa
File:                     3136382e3233322e3234302e302f32332d3233203d3e20323634393532.roa (raw, json)
Hash identifier:          gwc4vrU1HDKyL/Ko7kclGypddakKUYYo4mQ+7zltDMg=
Subject key identifier:   CA:A4:BD:33:54:15:53:4A:A7:13:03:ED:3B:8C:3B:96:9E:E2:18:40
Certificate issuer:       /CN=3E212DB1B302950E59672700155B176D07CFDAEA
Certificate serial:       1593C1335FBC5D756F87548D098AC99E5DC9D6B9
Authority key identifier: 3E:21:2D:B1:B3:02:95:0E:59:67:27:00:15:5B:17:6D:07:CF:DA:EA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3E212DB1B302950E59672700155B176D07CFDAEA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HuUsg4KdrKFxq9qg8LzgkVLkqdAEc9km7eVdyDFRCSKa/0/3136382e3233322e3234302e302f32332d3233203d3e20323634393532.roa
Signing time:             Tue 01 Apr 2025 15:26:45 +0000
ROA not before:           Tue 01 Apr 2025 15:21:45 +0000
ROA not after:            Tue 31 Mar 2026 15:26:45 +0000
asID:                     264952
IP address blocks:        168.232.240.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HuUsg4KdrKFxq9qg8LzgkVLkqdAEc9km7eVdyDFRCSKa/0/3E212DB1B302950E59672700155B176D07CFDAEA.crl
                          rsync://rpki-repo.registro.br/repo/HuUsg4KdrKFxq9qg8LzgkVLkqdAEc9km7eVdyDFRCSKa/0/3E212DB1B302950E59672700155B176D07CFDAEA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3E212DB1B302950E59672700155B176D07CFDAEA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 17:44:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:93:c1:33:5f:bc:5d:75:6f:87:54:8d:09:8a:c9:9e:5d:c9:d6:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3E212DB1B302950E59672700155B176D07CFDAEA
        Validity
            Not Before: Apr  1 15:21:45 2025 GMT
            Not After : Mar 31 15:26:45 2026 GMT
        Subject: CN=CAA4BD335415534AA71303ED3B8C3B969EE21840
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:1e:bb:c7:79:5e:c4:53:1a:6e:51:22:99:41:
                    07:0d:7c:4b:77:b2:f2:81:b4:be:62:22:f5:71:66:
                    3b:2f:b1:97:f8:25:23:ef:46:79:89:d7:e4:78:a0:
                    34:58:64:3b:03:27:bd:fd:c2:35:7b:e3:c1:7d:f0:
                    11:e2:f3:43:63:1c:b6:36:0d:86:5f:4e:7c:96:7f:
                    7b:ca:df:f8:f6:b5:f7:cb:1b:b6:eb:89:8a:46:39:
                    ab:68:dc:c1:da:96:a2:3d:a3:36:2d:b0:32:a6:15:
                    91:3d:e8:7e:30:1a:12:b6:8d:e0:fb:06:6b:23:a8:
                    33:22:ba:2b:14:1b:2b:f0:a8:1e:28:a5:68:86:a4:
                    c7:52:fd:13:99:e9:29:2b:b2:32:63:8e:d7:8b:e6:
                    e8:d0:6e:36:53:08:d7:31:54:fd:fa:10:fa:27:0f:
                    41:94:a3:28:c1:88:f4:c8:7e:af:b7:18:36:92:c1:
                    41:cd:a5:2b:90:b6:38:56:04:57:33:1e:d6:64:b2:
                    75:44:f3:46:cc:b1:da:14:fa:86:0b:ea:d0:10:e6:
                    04:b7:ab:61:59:8d:d7:39:ca:a2:fc:f7:1a:cf:16:
                    0a:a3:59:3d:60:82:b0:30:ef:b1:46:04:1c:9a:7b:
                    5b:ca:47:a6:bb:97:d1:f6:73:49:d0:8b:07:c0:fa:
                    14:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:A4:BD:33:54:15:53:4A:A7:13:03:ED:3B:8C:3B:96:9E:E2:18:40
            X509v3 Authority Key Identifier:
                keyid:3E:21:2D:B1:B3:02:95:0E:59:67:27:00:15:5B:17:6D:07:CF:DA:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HuUsg4KdrKFxq9qg8LzgkVLkqdAEc9km7eVdyDFRCSKa/0/3E212DB1B302950E59672700155B176D07CFDAEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3E212DB1B302950E59672700155B176D07CFDAEA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HuUsg4KdrKFxq9qg8LzgkVLkqdAEc9km7eVdyDFRCSKa/0/3136382e3233322e3234302e302f32332d3233203d3e20323634393532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.232.240.0/23

    Signature Algorithm: sha256WithRSAEncryption
         90:3c:d6:55:96:ec:9e:21:e7:60:0b:1e:a0:a5:19:aa:5e:94:
         ae:8e:ce:fb:c6:4b:05:96:d7:7f:32:22:dc:af:b5:3c:7a:13:
         04:c9:a4:b8:7b:93:d9:e5:8e:60:d9:04:91:32:60:e6:98:12:
         df:ef:aa:bd:90:43:cd:d0:aa:5e:8b:3e:74:2c:95:6e:eb:c0:
         29:8b:98:90:0d:2d:02:6f:d0:fb:5a:7f:d1:81:03:bc:70:57:
         09:9e:e4:32:61:4c:c5:0a:7d:0d:00:05:e7:85:4a:e1:22:3a:
         cb:d2:24:22:51:85:55:2d:20:10:9b:d6:c4:14:d5:1c:de:cd:
         52:0c:ff:96:94:31:91:de:26:d1:61:fe:a4:54:a5:15:38:3f:
         9f:07:30:3d:b7:af:0d:ca:e1:57:cd:32:1b:58:37:26:1a:0e:
         b8:b7:30:5d:74:db:36:f7:2f:6f:a3:3e:9a:8c:4e:db:1d:69:
         92:35:92:bb:0a:a4:dd:de:c2:5b:b2:2a:31:bc:aa:8c:44:d3:
         f3:c8:e9:c3:a5:e2:d2:97:b2:27:45:f4:fe:08:c3:c6:94:72:
         49:eb:0b:8c:3a:b6:ea:39:21:cb:17:66:0f:cd:06:28:81:83:
         a2:06:a0:33:b4:a5:bb:6d:17:da:ee:55:ad:ae:e1:58:25:06:
         e7:1c:71:0b
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUFZPBM1+8XXVvh1SNCYrJnl3J1rkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0UyMTJEQjFCMzAyOTUwRTU5NjcyNzAwMTU1QjE3NkQw
N0NGREFFQTAeFw0yNTA0MDExNTIxNDVaFw0yNjAzMzExNTI2NDVaMDMxMTAvBgNV
BAMTKENBQTRCRDMzNTQxNTUzNEFBNzEzMDNFRDNCOEMzQjk2OUVFMjE4NDAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYHrvHeV7EUxpuUSKZQQcNfEt3
svKBtL5iIvVxZjsvsZf4JSPvRnmJ1+R4oDRYZDsDJ739wjV748F98BHi80NjHLY2
DYZfTnyWf3vK3/j2tffLG7briYpGOato3MHalqI9ozYtsDKmFZE96H4wGhK2jeD7
BmsjqDMiuisUGyvwqB4opWiGpMdS/ROZ6SkrsjJjjteL5ujQbjZTCNcxVP36EPon
D0GUoyjBiPTIfq+3GDaSwUHNpSuQtjhWBFczHtZksnVE80bMsdoU+oYL6tAQ5gS3
q2FZjdc5yqL89xrPFgqjWT1ggrAw77FGBByae1vKR6a7l9H2c0nQiwfA+hRfAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUyqS9M1QVU0qnEwPtO4w7lp7iGEAwHwYDVR0j
BBgwFoAUPiEtsbMClQ5ZZycAFVsXbQfP2uowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSHVVc2c0S2RyS0Z4cTlxZzhMemdrVkxrcWRBRWM5a203ZVZkeURGUkNT
S2EvMC8zRTIxMkRCMUIzMDI5NTBFNTk2NzI3MDAxNTVCMTc2RDA3Q0ZEQUVBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzNFMjEyREIxQjMwMjk1MEU1
OTY3MjcwMDE1NUIxNzZEMDdDRkRBRUEuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0h1VXNnNEtkcktGeHE5cWc4THpna1ZMa3FkQUVjOWttN2VWZHlERlJDU0thLzAv
MzEzNjM4MmUzMjMzMzIyZTMyMzQzMDJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDMy
MzYzNDM5MzUzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAajo8DANBgkqhkiG9w0BAQsFAAOCAQEAkDzW
VZbsniHnYAseoKUZql6Uro7O+8ZLBZbXfzIi3K+1PHoTBMmkuHuT2eWOYNkEkTJg
5pgS3++qvZBDzdCqXos+dCyVbuvAKYuYkA0tAm/Q+1p/0YEDvHBXCZ7kMmFMxQp9
DQAF54VK4SI6y9IkIlGFVS0gEJvWxBTVHN7NUgz/lpQxkd4m0WH+pFSlFTg/nwcw
PbevDcrhV80yG1g3JhoOuLcwXXTbNvcvb6M+moxO2x1pkjWSuwqk3d7CW7IqMbyq
jETT88jpw6Xi0peyJ0X0/gjDxpRySesLjDq26jkhyxdmD80GKIGDogagM7Slu20X
2u5Vra7hWCUG5xxxCw==
-----END CERTIFICATE-----
Generated at Mon Apr 28 20:06:50 2025 by rpki-client on console.sobornost.net