Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DVuNsaLjaa2XTbQkrbZigjnVys7QZdATMPiGjirASWfj/0/3136382e3230352e3135342e302f32332d3233203d3e203532393434.roa
File:                     3136382e3230352e3135342e302f32332d3233203d3e203532393434.roa (raw, json)
Hash identifier:          kastLIK8B2svY1B0J0lOsO6Cbixck7KnqSRmoRK/+AE=
Subject key identifier:   81:BF:78:5F:0F:C3:23:F2:34:64:5C:30:3D:FC:A1:B5:60:40:18:7C
Certificate issuer:       /CN=2B7B2B36CB333C1CF60039B1C38742338BE69E2F
Certificate serial:       3639FDCE00E7E0851719CB4BD915AB00ECF753F9
Authority key identifier: 2B:7B:2B:36:CB:33:3C:1C:F6:00:39:B1:C3:87:42:33:8B:E6:9E:2F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2B7B2B36CB333C1CF60039B1C38742338BE69E2F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DVuNsaLjaa2XTbQkrbZigjnVys7QZdATMPiGjirASWfj/0/3136382e3230352e3135342e302f32332d3233203d3e203532393434.roa
Signing time:             Tue 06 May 2025 14:31:55 +0000
ROA not before:           Tue 06 May 2025 14:26:55 +0000
ROA not after:            Tue 05 May 2026 14:31:55 +0000
asID:                     52944
IP address blocks:        168.205.154.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DVuNsaLjaa2XTbQkrbZigjnVys7QZdATMPiGjirASWfj/0/2B7B2B36CB333C1CF60039B1C38742338BE69E2F.crl
                          rsync://rpki-repo.registro.br/repo/DVuNsaLjaa2XTbQkrbZigjnVys7QZdATMPiGjirASWfj/0/2B7B2B36CB333C1CF60039B1C38742338BE69E2F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2B7B2B36CB333C1CF60039B1C38742338BE69E2F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 12 May 2025 19:29:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:39:fd:ce:00:e7:e0:85:17:19:cb:4b:d9:15:ab:00:ec:f7:53:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2B7B2B36CB333C1CF60039B1C38742338BE69E2F
        Validity
            Not Before: May  6 14:26:55 2025 GMT
            Not After : May  5 14:31:55 2026 GMT
        Subject: CN=81BF785F0FC323F234645C303DFCA1B56040187C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:8d:c6:50:fa:57:1d:f0:38:da:3e:2d:97:ae:
                    8e:08:81:18:52:91:2e:dd:b5:7c:bb:8c:88:66:75:
                    4c:3d:e6:21:b4:ba:09:94:dc:1a:cb:30:a1:b1:33:
                    fe:a1:6b:fc:84:4e:40:93:fc:21:ab:35:f8:42:a8:
                    86:94:ee:24:de:75:56:a3:03:fe:d0:cb:00:e7:ec:
                    47:51:5e:a4:29:4f:55:54:cf:24:2b:cd:09:a3:8f:
                    f5:3a:73:a0:0a:d3:72:3a:ef:60:9c:18:bf:9b:4d:
                    b5:9a:44:a3:a9:8f:c4:f1:d1:8d:00:6b:de:e7:a0:
                    cd:69:a3:38:80:25:96:fb:7a:d0:38:ad:54:04:3d:
                    be:ef:39:29:77:f7:8f:5e:5e:27:9f:31:96:70:33:
                    ac:3d:d7:7a:86:96:93:36:ba:7e:c1:66:2e:24:71:
                    a5:07:98:f8:47:b8:9c:01:07:5c:52:a7:13:27:ef:
                    de:02:4d:26:02:52:ee:0b:92:6c:de:47:b7:d1:92:
                    1d:5c:03:72:11:e8:2f:d3:93:07:2c:84:af:bb:14:
                    78:39:28:c5:f5:d4:18:d1:37:46:2e:18:7c:94:7d:
                    1e:26:87:df:66:2b:4a:4e:d1:ed:39:4f:3c:68:1e:
                    e2:83:97:b8:de:96:68:b4:35:b8:c1:05:43:e7:25:
                    1f:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:BF:78:5F:0F:C3:23:F2:34:64:5C:30:3D:FC:A1:B5:60:40:18:7C
            X509v3 Authority Key Identifier:
                keyid:2B:7B:2B:36:CB:33:3C:1C:F6:00:39:B1:C3:87:42:33:8B:E6:9E:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DVuNsaLjaa2XTbQkrbZigjnVys7QZdATMPiGjirASWfj/0/2B7B2B36CB333C1CF60039B1C38742338BE69E2F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2B7B2B36CB333C1CF60039B1C38742338BE69E2F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DVuNsaLjaa2XTbQkrbZigjnVys7QZdATMPiGjirASWfj/0/3136382e3230352e3135342e302f32332d3233203d3e203532393434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.205.154.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a7:a4:74:50:4f:cd:3a:05:86:fa:a2:2b:8d:00:31:27:a7:df:
         bb:59:d8:01:78:e7:8b:ff:82:86:97:68:6c:c4:cf:30:4f:89:
         f0:0d:93:81:27:ec:d9:84:be:33:67:83:11:d8:ba:3d:af:0c:
         64:b0:2a:14:7c:40:f1:33:4d:6c:72:f2:7b:2f:72:b2:ef:2a:
         66:bb:c3:5f:a9:72:7c:e5:b6:b6:21:fb:68:23:91:60:a7:1f:
         92:00:cd:89:0c:5c:6b:c6:83:fd:c5:51:b9:39:a9:be:c6:09:
         69:eb:76:e7:e1:80:f3:32:49:c0:2d:84:58:0f:d3:79:48:de:
         06:51:f8:6b:cc:ed:bc:63:bb:b1:ff:c8:86:e8:3e:16:db:32:
         fe:72:50:01:2f:b2:a9:6b:a2:7c:21:64:d5:89:e4:f1:18:ad:
         b2:b5:c4:4a:8c:37:42:34:d8:f9:57:6a:2b:e7:26:77:c9:11:
         c0:26:75:69:83:00:e5:d8:ad:27:0c:e1:6b:bc:93:1d:40:3f:
         e4:01:39:f8:77:cf:50:29:dd:08:d9:f8:aa:ea:78:9f:8a:98:
         fc:e8:e2:ca:fb:b0:1c:8c:d3:5a:4a:73:88:f1:5e:13:c0:99:
         25:a9:cc:73:ed:2a:b1:06:cc:d4:2c:88:31:72:93:71:08:48:
         be:3a:ec:b7
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUNjn9zgDn4IUXGctL2RWrAOz3U/kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkI3QjJCMzZDQjMzM0MxQ0Y2MDAzOUIxQzM4NzQyMzM4
QkU2OUUyRjAeFw0yNTA1MDYxNDI2NTVaFw0yNjA1MDUxNDMxNTVaMDMxMTAvBgNV
BAMTKDgxQkY3ODVGMEZDMzIzRjIzNDY0NUMzMDNERkNBMUI1NjA0MDE4N0MwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCujcZQ+lcd8DjaPi2Xro4IgRhS
kS7dtXy7jIhmdUw95iG0ugmU3BrLMKGxM/6ha/yETkCT/CGrNfhCqIaU7iTedVaj
A/7QywDn7EdRXqQpT1VUzyQrzQmjj/U6c6AK03I672CcGL+bTbWaRKOpj8Tx0Y0A
a97noM1poziAJZb7etA4rVQEPb7vOSl3949eXiefMZZwM6w913qGlpM2un7BZi4k
caUHmPhHuJwBB1xSpxMn794CTSYCUu4LkmzeR7fRkh1cA3IR6C/TkwcshK+7FHg5
KMX11BjRN0YuGHyUfR4mh99mK0pO0e05TzxoHuKDl7jelmi0NbjBBUPnJR/rAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUgb94Xw/DI/I0ZFwwPfyhtWBAGHwwHwYDVR0j
BBgwFoAUK3srNsszPBz2ADmxw4dCM4vmni8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRFZ1TnNhTGphYTJYVGJRa3JiWmlnam5WeXM3UVpkQVRNUGlHamlyQVNX
ZmovMC8yQjdCMkIzNkNCMzMzQzFDRjYwMDM5QjFDMzg3NDIzMzhCRTY5RTJGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJCN0IyQjM2Q0IzMzNDMUNG
NjAwMzlCMUMzODc0MjMzOEJFNjlFMkYuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RWdU5zYUxqYWEyWFRiUWtyYlppZ2puVnlzN1FaZEFUTVBpR2ppckFTV2ZqLzAv
MzEzNjM4MmUzMjMwMzUyZTMxMzUzNDJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDM1
MzIzOTM0MzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAGozZowDQYJKoZIhvcNAQELBQADggEBAKekdFBP
zToFhvqiK40AMSen37tZ2AF454v/goaXaGzEzzBPifANk4En7NmEvjNngxHYuj2v
DGSwKhR8QPEzTWxy8nsvcrLvKma7w1+pcnzltrYh+2gjkWCnH5IAzYkMXGvGg/3F
Ubk5qb7GCWnrdufhgPMyScAthFgP03lI3gZR+GvM7bxju7H/yIboPhbbMv5yUAEv
sqlronwhZNWJ5PEYrbK1xEqMN0I02PlXaivnJnfJEcAmdWmDAOXYrScM4Wu8kx1A
P+QBOfh3z1Ap3QjZ+KrqeJ+KmPzo4sr7sByM01pKc4jxXhPAmSWpzHPtKrEGzNQs
iDFyk3EISL467Lc=
-----END CERTIFICATE-----
Generated at Mon May 12 04:00:16 2025 by rpki-client