Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/F7UrDDXgg7RNV6ZDrRxHXWCJwLuHUfjWai6kWWQi5uqT/1/34352e36352e3139322e302f32322d3234203d3e20323636323637.roa
File:                     34352e36352e3139322e302f32322d3234203d3e20323636323637.roa (raw, json)
Hash identifier:          f9FO6mCrM7JBNnd2QP/bug2NJproU50wvORlM3Cxf0o=
Subject key identifier:   18:83:99:04:2D:20:3F:13:F3:F7:76:50:BC:E1:1F:A4:D3:49:94:FC
Certificate issuer:       /CN=C9DC9B21AB6B082C1ADEA13F07394606D7D42C38
Certificate serial:       23189B6E9993752D0A2A851C27E7376D06B7A4DE
Authority key identifier: C9:DC:9B:21:AB:6B:08:2C:1A:DE:A1:3F:07:39:46:06:D7:D4:2C:38
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C9DC9B21AB6B082C1ADEA13F07394606D7D42C38.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F7UrDDXgg7RNV6ZDrRxHXWCJwLuHUfjWai6kWWQi5uqT/1/34352e36352e3139322e302f32322d3234203d3e20323636323637.roa
Signing time:             Thu 04 Apr 2024 08:25:11 +0000
ROA not before:           Thu 04 Apr 2024 08:20:11 +0000
ROA not after:            Thu 03 Apr 2025 08:25:11 +0000
asID:                     266267
IP address blocks:        45.65.192.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/F7UrDDXgg7RNV6ZDrRxHXWCJwLuHUfjWai6kWWQi5uqT/1/C9DC9B21AB6B082C1ADEA13F07394606D7D42C38.crl
                          rsync://rpki-repo.registro.br/repo/F7UrDDXgg7RNV6ZDrRxHXWCJwLuHUfjWai6kWWQi5uqT/1/C9DC9B21AB6B082C1ADEA13F07394606D7D42C38.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C9DC9B21AB6B082C1ADEA13F07394606D7D42C38.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 01:27:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:18:9b:6e:99:93:75:2d:0a:2a:85:1c:27:e7:37:6d:06:b7:a4:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C9DC9B21AB6B082C1ADEA13F07394606D7D42C38
        Validity
            Not Before: Apr  4 08:20:11 2024 GMT
            Not After : Apr  3 08:25:11 2025 GMT
        Subject: CN=188399042D203F13F3F77650BCE11FA4D34994FC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:2e:10:e2:6a:96:b1:19:9a:97:33:1e:07:e7:
                    75:82:7b:27:49:53:28:38:f4:7c:ed:dc:33:73:f5:
                    fc:41:13:38:90:ca:7f:88:50:56:e2:e1:78:48:71:
                    f7:aa:62:e7:65:fb:a5:f6:82:77:d2:40:14:a1:b9:
                    2e:e6:e0:59:f3:c0:db:72:fd:e0:66:f4:cb:b2:cf:
                    97:d2:a7:ab:13:7e:60:07:c5:b4:38:5e:6f:24:ff:
                    84:30:28:5b:3a:37:66:8d:4c:a2:dd:6b:a8:4b:2c:
                    0d:1b:12:b3:5d:8c:03:11:e6:9a:a0:29:6e:9d:9d:
                    a5:77:9f:dc:02:5b:77:0d:79:8d:26:80:5e:78:52:
                    89:32:cc:d6:67:fb:7a:b6:5d:4f:7a:f7:66:67:3f:
                    1c:e9:23:e2:28:7e:92:7a:09:7b:75:1c:84:ce:b2:
                    bc:26:ac:50:00:ae:68:29:76:2f:4b:9c:c1:90:e1:
                    d7:2f:69:21:2c:63:75:26:66:60:5e:56:85:d9:a4:
                    df:3f:44:90:d1:c9:b6:6a:c2:92:26:49:de:46:75:
                    f4:be:89:66:97:c0:6b:7e:af:21:c8:55:61:98:00:
                    dc:b8:65:8e:be:23:0c:94:9f:f3:ab:10:c5:fd:46:
                    d7:39:0e:3c:31:41:bf:a7:fe:45:1e:5d:33:da:d3:
                    97:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:83:99:04:2D:20:3F:13:F3:F7:76:50:BC:E1:1F:A4:D3:49:94:FC
            X509v3 Authority Key Identifier:
                keyid:C9:DC:9B:21:AB:6B:08:2C:1A:DE:A1:3F:07:39:46:06:D7:D4:2C:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F7UrDDXgg7RNV6ZDrRxHXWCJwLuHUfjWai6kWWQi5uqT/1/C9DC9B21AB6B082C1ADEA13F07394606D7D42C38.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C9DC9B21AB6B082C1ADEA13F07394606D7D42C38.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F7UrDDXgg7RNV6ZDrRxHXWCJwLuHUfjWai6kWWQi5uqT/1/34352e36352e3139322e302f32322d3234203d3e20323636323637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.65.192.0/22

    Signature Algorithm: sha256WithRSAEncryption
         03:7a:74:ad:88:43:cf:eb:be:30:ab:02:b6:18:6a:19:55:60:
         6f:21:0d:67:cc:fd:77:be:5e:10:21:53:a9:10:ea:bb:16:dd:
         17:d8:de:c9:93:5e:2c:e0:cb:49:b9:3d:fe:05:ec:78:70:c0:
         fb:02:d5:86:86:7c:36:e1:3d:d0:dd:30:ed:e4:06:ae:73:06:
         65:74:7a:9a:8d:8a:2f:95:2e:38:e6:4a:5a:f5:db:1c:a0:f0:
         b8:77:4a:78:98:13:63:92:74:30:8e:94:df:cc:34:89:01:3c:
         f8:cc:ad:e7:42:ab:8c:6b:60:97:bf:ac:64:6d:a7:ef:98:05:
         3f:e1:80:73:db:fc:6b:5d:8a:da:73:2a:a6:cc:0f:5f:c2:b5:
         5c:71:07:f8:f9:35:17:c5:9c:ab:80:50:c4:79:73:29:ad:20:
         ff:f3:cd:a4:68:4b:2b:f1:39:fc:c7:83:61:70:38:25:0b:be:
         91:6f:e0:08:e9:2d:61:a0:04:31:4d:e4:d1:ff:06:cd:72:63:
         37:67:f7:34:b8:f4:4a:7c:f8:3d:eb:ef:bd:a6:17:f8:e5:a8:
         23:f9:e9:22:9f:68:8c:fd:30:c5:35:88:c4:83:7d:ae:cf:31:
         c8:78:72:6a:86:92:e4:31:cf:91:c2:9f:4f:d5:78:d7:33:fb:
         95:a0:9b:a9
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUIxibbpmTdS0KKoUcJ+c3bQa3pN4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzlEQzlCMjFBQjZCMDgyQzFBREVBMTNGMDczOTQ2MDZE
N0Q0MkMzODAeFw0yNDA0MDQwODIwMTFaFw0yNTA0MDMwODI1MTFaMDMxMTAvBgNV
BAMTKDE4ODM5OTA0MkQyMDNGMTNGM0Y3NzY1MEJDRTExRkE0RDM0OTk0RkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDILhDiapaxGZqXMx4H53WCeydJ
Uyg49Hzt3DNz9fxBEziQyn+IUFbi4XhIcfeqYudl+6X2gnfSQBShuS7m4FnzwNty
/eBm9Muyz5fSp6sTfmAHxbQ4Xm8k/4QwKFs6N2aNTKLda6hLLA0bErNdjAMR5pqg
KW6dnaV3n9wCW3cNeY0mgF54UokyzNZn+3q2XU9692ZnPxzpI+IofpJ6CXt1HITO
srwmrFAArmgpdi9LnMGQ4dcvaSEsY3UmZmBeVoXZpN8/RJDRybZqwpImSd5GdfS+
iWaXwGt+ryHIVWGYANy4ZY6+IwyUn/OrEMX9Rtc5DjwxQb+n/kUeXTPa05f7AgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUGIOZBC0gPxPz93ZQvOEfpNNJlPwwHwYDVR0j
BBgwFoAUydybIatrCCwa3qE/BzlGBtfULDgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRjdVckREWGdnN1JOVjZaRHJSeEhYV0NKd0x1SFVmaldhaTZrV1dRaTV1
cVQvMS9DOURDOUIyMUFCNkIwODJDMUFERUExM0YwNzM5NDYwNkQ3RDQyQzM4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0M5REM5QjIxQUI2QjA4MkMx
QURFQTEzRjA3Mzk0NjA2RDdENDJDMzguY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0Y3VXJERFhnZzdSTlY2WkRyUnhIWFdDSndMdUhVZmpXYWk2a1dXUWk1dXFULzEv
MzQzNTJlMzYzNTJlMzEzOTMyMmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNjM2
MzIzNjM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCLUHAMA0GCSqGSIb3DQEBCwUAA4IBAQADenStiEPP
674wqwK2GGoZVWBvIQ1nzP13vl4QIVOpEOq7Ft0X2N7Jk14s4MtJuT3+Bex4cMD7
AtWGhnw24T3Q3TDt5AaucwZldHqajYovlS445kpa9dscoPC4d0p4mBNjknQwjpTf
zDSJATz4zK3nQquMa2CXv6xkbafvmAU/4YBz2/xrXYracyqmzA9fwrVccQf4+TUX
xZyrgFDEeXMprSD/882kaEsr8Tn8x4NhcDglC76Rb+AI6S1hoAQxTeTR/wbNcmM3
Z/c0uPRKfPg96++9phf45agj+ekin2iM/TDFNYjEg32uzzHIeHJqhpLkMc+Rwp9P
1XjXM/uVoJup
-----END CERTIFICATE-----
Generated at Fri Sep 27 23:26:34 2024 by rpki-client on console-fra.rpki-client.org