Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/13rx2LJUvAMWEtWnPSSsFxDnczpHrSqgcx57VuCLyebr/1/34352e3137342e39362e302f32332d3234203d3e20323633353734.roa
File:                     34352e3137342e39362e302f32332d3234203d3e20323633353734.roa (raw, json)
Hash identifier:          S+T6kNJu4Dv6yCthoN3mrRlcNE8sVaMA9pHn9s5rh94=
Subject key identifier:   94:C7:EB:D1:5A:82:A1:32:CF:63:BB:23:86:FD:41:79:5D:6B:2E:EB
Certificate issuer:       /CN=8D0F799DDE369B44B3A0931DBECC6483E27050C6
Certificate serial:       455D570F5FBC1D6D18351F20225AFAD13EFCFCE3
Authority key identifier: 8D:0F:79:9D:DE:36:9B:44:B3:A0:93:1D:BE:CC:64:83:E2:70:50:C6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8D0F799DDE369B44B3A0931DBECC6483E27050C6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/13rx2LJUvAMWEtWnPSSsFxDnczpHrSqgcx57VuCLyebr/1/34352e3137342e39362e302f32332d3234203d3e20323633353734.roa
Signing time:             Tue 14 Jan 2025 15:02:09 +0000
ROA not before:           Tue 14 Jan 2025 14:57:09 +0000
ROA not after:            Tue 13 Jan 2026 15:02:09 +0000
asID:                     263574
IP address blocks:        45.174.96.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/13rx2LJUvAMWEtWnPSSsFxDnczpHrSqgcx57VuCLyebr/1/8D0F799DDE369B44B3A0931DBECC6483E27050C6.crl
                          rsync://rpki-repo.registro.br/repo/13rx2LJUvAMWEtWnPSSsFxDnczpHrSqgcx57VuCLyebr/1/8D0F799DDE369B44B3A0931DBECC6483E27050C6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8D0F799DDE369B44B3A0931DBECC6483E27050C6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Apr 2025 13:46:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:5d:57:0f:5f:bc:1d:6d:18:35:1f:20:22:5a:fa:d1:3e:fc:fc:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8D0F799DDE369B44B3A0931DBECC6483E27050C6
        Validity
            Not Before: Jan 14 14:57:09 2025 GMT
            Not After : Jan 13 15:02:09 2026 GMT
        Subject: CN=94C7EBD15A82A132CF63BB2386FD41795D6B2EEB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:01:3b:e8:74:28:00:f3:3e:01:98:b9:11:d6:
                    3b:1c:57:dd:e2:66:b3:64:8f:7f:e4:5f:f9:61:d8:
                    72:63:2e:e2:7d:06:a2:57:a8:0e:71:c2:5e:b9:88:
                    a1:01:bf:fd:d0:d1:b9:6d:93:70:f9:12:e8:cb:6a:
                    57:fe:ef:01:09:7e:22:ab:50:a9:4d:d3:87:f5:d8:
                    77:9c:2d:36:7d:e0:a5:7e:1a:c1:4c:9c:cc:29:bf:
                    da:aa:15:36:f3:2b:3c:31:a6:01:c2:6a:f0:e4:7f:
                    02:b0:0b:c6:8a:7e:49:93:5b:64:dd:8f:48:ec:45:
                    09:9b:a3:35:17:20:48:d3:21:45:45:a6:36:f5:85:
                    99:36:ed:c3:fb:53:bb:05:36:7d:c1:b6:0f:3b:36:
                    fe:28:d5:dd:29:a9:0e:71:e8:0e:4c:ed:81:ff:5d:
                    0f:72:d0:05:6e:97:c2:61:42:d4:71:91:06:8d:ce:
                    ff:b3:c7:c7:9f:57:63:c9:52:fa:fa:94:83:4e:ef:
                    81:f3:62:0a:19:f4:c8:37:a3:00:84:83:95:6e:fc:
                    15:7b:6c:b6:35:b6:c1:cb:67:7a:26:dc:3e:53:d7:
                    ce:ed:16:b3:f4:13:a5:bc:40:88:de:6b:b7:2c:79:
                    9a:70:50:20:e1:25:a8:6e:ef:c2:a6:02:56:42:80:
                    e9:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:C7:EB:D1:5A:82:A1:32:CF:63:BB:23:86:FD:41:79:5D:6B:2E:EB
            X509v3 Authority Key Identifier:
                keyid:8D:0F:79:9D:DE:36:9B:44:B3:A0:93:1D:BE:CC:64:83:E2:70:50:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/13rx2LJUvAMWEtWnPSSsFxDnczpHrSqgcx57VuCLyebr/1/8D0F799DDE369B44B3A0931DBECC6483E27050C6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8D0F799DDE369B44B3A0931DBECC6483E27050C6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/13rx2LJUvAMWEtWnPSSsFxDnczpHrSqgcx57VuCLyebr/1/34352e3137342e39362e302f32332d3234203d3e20323633353734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.174.96.0/23

    Signature Algorithm: sha256WithRSAEncryption
         04:cb:c4:d6:0c:33:9d:dd:c8:ca:6c:18:a5:09:7c:72:fa:a2:
         61:b2:e6:8f:9f:56:31:9f:96:97:4e:c0:cb:45:27:af:e8:ef:
         95:e5:b0:0a:c5:21:e8:83:e2:e5:ca:ed:87:65:b7:48:85:2e:
         26:a6:7d:5f:48:3a:74:48:bd:77:ec:e7:09:9a:04:ed:84:4d:
         7c:87:81:af:a5:a9:49:5f:a7:ea:e0:8a:da:8e:bc:47:ba:2c:
         8b:2d:04:02:3a:a1:9a:cf:39:52:b0:1f:3d:be:4c:fd:fe:c8:
         b9:3c:22:e4:4a:6d:5f:bd:d6:26:a0:6c:62:d4:06:e2:e2:f3:
         18:bf:5f:fc:48:59:4f:2f:c8:ba:6e:6d:c3:45:7d:08:af:4d:
         ff:80:e1:06:3a:18:5f:f3:62:fc:2c:59:60:e2:35:dd:3f:e0:
         a9:4b:30:18:d3:b7:ef:72:d2:56:fd:a8:a2:3b:d9:ce:83:0b:
         e1:d4:c6:c3:c0:8f:47:30:40:56:ea:cf:4e:e8:0b:b8:62:83:
         95:b0:5e:a2:7f:25:81:af:5f:80:80:1f:c9:69:ff:16:78:f1:
         0c:e4:90:91:4c:cd:82:da:a9:98:4f:49:f1:d8:f3:db:6a:ee:
         8e:cb:9c:62:51:32:f1:cf:47:09:ee:c2:cc:bf:d9:be:e2:54:
         bf:5a:6b:3d
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIURV1XD1+8HW0YNR8gIlr60T78/OMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEQwRjc5OURERTM2OUI0NEIzQTA5MzFEQkVDQzY0ODNF
MjcwNTBDNjAeFw0yNTAxMTQxNDU3MDlaFw0yNjAxMTMxNTAyMDlaMDMxMTAvBgNV
BAMTKDk0QzdFQkQxNUE4MkExMzJDRjYzQkIyMzg2RkQ0MTc5NUQ2QjJFRUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpATvodCgA8z4BmLkR1jscV93i
ZrNkj3/kX/lh2HJjLuJ9BqJXqA5xwl65iKEBv/3Q0bltk3D5EujLalf+7wEJfiKr
UKlN04f12HecLTZ94KV+GsFMnMwpv9qqFTbzKzwxpgHCavDkfwKwC8aKfkmTW2Td
j0jsRQmbozUXIEjTIUVFpjb1hZk27cP7U7sFNn3Btg87Nv4o1d0pqQ5x6A5M7YH/
XQ9y0AVul8JhQtRxkQaNzv+zx8efV2PJUvr6lINO74HzYgoZ9Mg3owCEg5Vu/BV7
bLY1tsHLZ3om3D5T187tFrP0E6W8QIjea7cseZpwUCDhJahu78KmAlZCgOk/AgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUlMfr0VqCoTLPY7sjhv1BeV1rLuswHwYDVR0j
BBgwFoAUjQ95nd42m0SzoJMdvsxkg+JwUMYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMTNyeDJMSlV2QU1XRXRXblBTU3NGeERuY3pwSHJTcWdjeDU3VnVDTHll
YnIvMS84RDBGNzk5RERFMzY5QjQ0QjNBMDkzMURCRUNDNjQ4M0UyNzA1MEM2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzhEMEY3OTlEREUzNjlCNDRC
M0EwOTMxREJFQ0M2NDgzRTI3MDUwQzYuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzEzcngyTEpVdkFNV0V0V25QU1NzRnhEbmN6cEhyU3FnY3g1N1Z1Q0x5ZWJyLzEv
MzQzNTJlMzEzNzM0MmUzOTM2MmUzMDJmMzIzMzJkMzIzNDIwM2QzZTIwMzIzNjMz
MzUzNzM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQBLa5gMA0GCSqGSIb3DQEBCwUAA4IBAQAEy8TWDDOd
3cjKbBilCXxy+qJhsuaPn1Yxn5aXTsDLRSev6O+V5bAKxSHog+Llyu2HZbdIhS4m
pn1fSDp0SL137OcJmgTthE18h4GvpalJX6fq4IrajrxHuiyLLQQCOqGazzlSsB89
vkz9/si5PCLkSm1fvdYmoGxi1Abi4vMYv1/8SFlPL8i6bm3DRX0Ir03/gOEGOhhf
82L8LFlg4jXdP+CpSzAY07fvctJW/aiiO9nOgwvh1MbDwI9HMEBW6s9O6Au4YoOV
sF6ifyWBr1+AgB/Jaf8WePEM5JCRTM2C2qmYT0nx2PPbau6Oy5xiUTLxz0cJ7sLM
v9m+4lS/Wms9
-----END CERTIFICATE-----
Generated at Sun Apr 13 02:16:47 2025 by rpki-client