Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DkSmt1eyJYyLUjACX8LVkTU1fKdCwd61wVXuVvXSN29t/1/34352e3233312e31392e302f32342d3234203d3e20323637313931.roa
File:                     34352e3233312e31392e302f32342d3234203d3e20323637313931.roa (raw, json)
Hash identifier:          EtN2AytXds4e9UbBAtkgdXRpW1wc6qo40km17eYdKFg=
Subject key identifier:   AB:44:71:BE:10:69:DD:AF:DD:CA:50:AD:41:A3:5B:84:3B:53:42:D8
Certificate issuer:       /CN=60A5A0FCAC82AF800163FDA056041F5925116D3D
Certificate serial:       3DF49C555E5AAAEC6751C77F61FF49E5FFD83B0F
Authority key identifier: 60:A5:A0:FC:AC:82:AF:80:01:63:FD:A0:56:04:1F:59:25:11:6D:3D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/60A5A0FCAC82AF800163FDA056041F5925116D3D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DkSmt1eyJYyLUjACX8LVkTU1fKdCwd61wVXuVvXSN29t/1/34352e3233312e31392e302f32342d3234203d3e20323637313931.roa
Signing time:             Thu 04 Apr 2024 11:50:50 +0000
ROA not before:           Thu 04 Apr 2024 11:45:50 +0000
ROA not after:            Thu 03 Apr 2025 11:50:50 +0000
asID:                     267191
IP address blocks:        45.231.19.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DkSmt1eyJYyLUjACX8LVkTU1fKdCwd61wVXuVvXSN29t/1/60A5A0FCAC82AF800163FDA056041F5925116D3D.crl
                          rsync://rpki-repo.registro.br/repo/DkSmt1eyJYyLUjACX8LVkTU1fKdCwd61wVXuVvXSN29t/1/60A5A0FCAC82AF800163FDA056041F5925116D3D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/60A5A0FCAC82AF800163FDA056041F5925116D3D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 01:01:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:f4:9c:55:5e:5a:aa:ec:67:51:c7:7f:61:ff:49:e5:ff:d8:3b:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60A5A0FCAC82AF800163FDA056041F5925116D3D
        Validity
            Not Before: Apr  4 11:45:50 2024 GMT
            Not After : Apr  3 11:50:50 2025 GMT
        Subject: CN=AB4471BE1069DDAFDDCA50AD41A35B843B5342D8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:e4:56:88:3c:e2:fd:55:49:e0:ae:26:82:f0:
                    c6:bb:15:d8:49:4d:33:cd:99:37:d4:82:ba:2b:c6:
                    ac:d1:26:0a:85:7b:74:a6:72:5c:d5:4e:84:78:40:
                    37:44:5b:b2:3b:34:64:45:f7:a2:64:2e:b5:83:bf:
                    a9:dc:b3:a2:b9:40:74:7c:0b:93:43:2d:86:d5:37:
                    c6:3c:fe:0b:00:e2:77:bb:4d:50:13:4b:03:93:a0:
                    41:1a:28:9c:0d:e4:01:01:eb:61:ce:2e:a7:2b:cd:
                    ed:2c:1a:bf:13:bd:23:68:55:6e:c9:6d:c0:b3:65:
                    b1:2b:b1:4a:3c:61:c7:c3:05:6d:ef:4b:6f:95:06:
                    99:c5:a7:92:e4:b9:f6:d4:ff:76:f0:46:57:f9:f0:
                    75:b1:ea:32:c2:9b:c4:7b:cc:66:68:e1:e3:85:a2:
                    1f:6b:46:6c:fa:2b:78:ce:f6:02:a2:8c:a1:30:ba:
                    91:2a:df:4a:d3:2c:80:15:1b:06:1c:be:42:a9:e5:
                    b9:2c:8e:55:d3:62:a8:7c:f4:b1:55:48:4f:67:cb:
                    8a:2a:17:5e:72:82:48:05:5c:08:19:44:50:43:0e:
                    48:87:73:c9:80:d3:2b:5b:b2:dd:fe:61:af:2e:02:
                    59:3c:86:1d:28:6c:0e:fe:5b:86:eb:69:f6:4d:0f:
                    bb:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:44:71:BE:10:69:DD:AF:DD:CA:50:AD:41:A3:5B:84:3B:53:42:D8
            X509v3 Authority Key Identifier:
                keyid:60:A5:A0:FC:AC:82:AF:80:01:63:FD:A0:56:04:1F:59:25:11:6D:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DkSmt1eyJYyLUjACX8LVkTU1fKdCwd61wVXuVvXSN29t/1/60A5A0FCAC82AF800163FDA056041F5925116D3D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/60A5A0FCAC82AF800163FDA056041F5925116D3D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DkSmt1eyJYyLUjACX8LVkTU1fKdCwd61wVXuVvXSN29t/1/34352e3233312e31392e302f32342d3234203d3e20323637313931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.231.19.0/24

    Signature Algorithm: sha256WithRSAEncryption
         73:8c:62:ed:ab:72:0d:9d:a3:21:0d:c8:91:36:d3:68:17:d9:
         2e:5e:8a:62:9c:6d:a5:90:25:82:e8:a1:d0:23:f2:81:45:40:
         93:c6:aa:19:e1:b3:12:8c:c5:96:71:09:b8:a5:88:bc:bd:5d:
         a1:2e:0e:02:05:b4:c9:80:79:e8:71:b1:b0:29:37:56:e4:cb:
         77:fe:5b:33:c0:c8:b4:fb:04:c7:b6:ce:56:81:8c:75:16:69:
         34:5b:0b:55:46:57:90:d7:bf:60:c4:71:d8:12:d7:be:39:f4:
         50:d4:03:da:ba:22:b5:09:da:84:76:d3:8e:68:aa:98:75:6f:
         95:39:0a:34:2b:ce:d8:8b:51:a2:14:bb:42:2e:5b:71:20:56:
         77:55:91:de:5c:35:aa:3f:6b:e8:86:ae:2e:d1:25:d4:82:49:
         bc:79:3a:1a:19:f7:bc:a6:2e:35:f4:c7:7e:b6:e1:74:1b:d9:
         42:56:d2:b4:de:5c:5d:34:2c:87:87:f0:ee:e9:8a:83:bd:59:
         83:44:54:93:b7:d2:25:1a:3b:08:8b:19:45:3d:6e:c3:2e:68:
         c0:6f:9f:38:89:2a:d4:72:1b:c4:50:e8:5a:28:af:b7:90:6b:
         1f:02:5b:70:b1:ec:84:c4:57:f1:d3:d0:52:a5:26:3c:5a:f7:
         db:49:ac:68
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUPfScVV5aquxnUcd/Yf9J5f/YOw8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjBBNUEwRkNBQzgyQUY4MDAxNjNGREEwNTYwNDFGNTky
NTExNkQzRDAeFw0yNDA0MDQxMTQ1NTBaFw0yNTA0MDMxMTUwNTBaMDMxMTAvBgNV
BAMTKEFCNDQ3MUJFMTA2OUREQUZERENBNTBBRDQxQTM1Qjg0M0I1MzQyRDgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCw5FaIPOL9VUngriaC8Ma7FdhJ
TTPNmTfUgrorxqzRJgqFe3SmclzVToR4QDdEW7I7NGRF96JkLrWDv6ncs6K5QHR8
C5NDLYbVN8Y8/gsA4ne7TVATSwOToEEaKJwN5AEB62HOLqcrze0sGr8TvSNoVW7J
bcCzZbErsUo8YcfDBW3vS2+VBpnFp5LkufbU/3bwRlf58HWx6jLCm8R7zGZo4eOF
oh9rRmz6K3jO9gKijKEwupEq30rTLIAVGwYcvkKp5bksjlXTYqh89LFVSE9ny4oq
F15ygkgFXAgZRFBDDkiHc8mA0ytbst3+Ya8uAlk8hh0obA7+W4brafZND7v1AgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUq0RxvhBp3a/dylCtQaNbhDtTQtgwHwYDVR0j
BBgwFoAUYKWg/KyCr4ABY/2gVgQfWSURbT0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRGtTbXQxZXlKWXlMVWpBQ1g4TFZrVFUxZktkQ3dkNjF3Vlh1VnZYU04y
OXQvMS82MEE1QTBGQ0FDODJBRjgwMDE2M0ZEQTA1NjA0MUY1OTI1MTE2RDNELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzYwQTVBMEZDQUM4MkFGODAw
MTYzRkRBMDU2MDQxRjU5MjUxMTZEM0QuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RrU210MWV5Sll5TFVqQUNYOExWa1RVMWZLZEN3ZDYxd1ZYdVZ2WFNOMjl0LzEv
MzQzNTJlMzIzMzMxMmUzMTM5MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM3
MzEzOTMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQALecTMA0GCSqGSIb3DQEBCwUAA4IBAQBzjGLtq3IN
naMhDciRNtNoF9kuXopinG2lkCWC6KHQI/KBRUCTxqoZ4bMSjMWWcQm4pYi8vV2h
Lg4CBbTJgHnocbGwKTdW5Mt3/lszwMi0+wTHts5WgYx1Fmk0WwtVRleQ179gxHHY
Ete+OfRQ1APauiK1CdqEdtOOaKqYdW+VOQo0K87Yi1GiFLtCLltxIFZ3VZHeXDWq
P2vohq4u0SXUgkm8eToaGfe8pi419Md+tuF0G9lCVtK03lxdNCyHh/Du6YqDvVmD
RFSTt9IlGjsIixlFPW7DLmjAb584iSrUchvEUOhaKK+3kGsfAltwseyExFfx09BS
pSY8WvfbSaxo
-----END CERTIFICATE-----
Generated at Sat Sep 28 03:38:26 2024 by rpki-client on console-ams.rpki-client.org