Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2e96ApuCzfWJnto1yPf5Q2XZC8gtq34VickzhoUhdmMN/1/34352e3138302e3138342e302f32332d3233203d3e20323639313435.roa
File:                     34352e3138302e3138342e302f32332d3233203d3e20323639313435.roa (raw, json)
Hash identifier:          yB+Ch481t+7ACKOo49k4yZC0OBUVaLKoE0z/XcyViUY=
Subject key identifier:   8A:2E:E1:9F:42:21:83:7D:79:A3:D4:CA:32:0F:B5:9A:25:D0:E9:B5
Certificate issuer:       /CN=3FA6453FF6EE48DAD9C20C552F9A4AFA13BF74F0
Certificate serial:       5714E358FCCDB51C65CE1E365834A845C5C1B0B3
Authority key identifier: 3F:A6:45:3F:F6:EE:48:DA:D9:C2:0C:55:2F:9A:4A:FA:13:BF:74:F0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3FA6453FF6EE48DAD9C20C552F9A4AFA13BF74F0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2e96ApuCzfWJnto1yPf5Q2XZC8gtq34VickzhoUhdmMN/1/34352e3138302e3138342e302f32332d3233203d3e20323639313435.roa
Signing time:             Thu 04 Apr 2024 08:36:29 +0000
ROA not before:           Thu 04 Apr 2024 08:31:29 +0000
ROA not after:            Thu 03 Apr 2025 08:36:29 +0000
asID:                     269145
IP address blocks:        45.180.184.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2e96ApuCzfWJnto1yPf5Q2XZC8gtq34VickzhoUhdmMN/1/3FA6453FF6EE48DAD9C20C552F9A4AFA13BF74F0.crl
                          rsync://rpki-repo.registro.br/repo/2e96ApuCzfWJnto1yPf5Q2XZC8gtq34VickzhoUhdmMN/1/3FA6453FF6EE48DAD9C20C552F9A4AFA13BF74F0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3FA6453FF6EE48DAD9C20C552F9A4AFA13BF74F0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 14:03:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:14:e3:58:fc:cd:b5:1c:65:ce:1e:36:58:34:a8:45:c5:c1:b0:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3FA6453FF6EE48DAD9C20C552F9A4AFA13BF74F0
        Validity
            Not Before: Apr  4 08:31:29 2024 GMT
            Not After : Apr  3 08:36:29 2025 GMT
        Subject: CN=8A2EE19F4221837D79A3D4CA320FB59A25D0E9B5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:33:1a:03:45:65:fa:7d:4f:5e:44:47:1c:6a:
                    92:74:75:fa:70:3e:6f:aa:be:8e:2b:ae:80:26:e6:
                    f2:e2:29:3c:88:5e:6f:a8:cc:e5:6b:a3:99:6f:a8:
                    07:04:ce:17:bf:d0:7f:1b:84:ae:14:6d:8a:ce:d4:
                    14:63:c8:94:71:82:c5:3b:2c:98:cd:f1:26:34:4c:
                    e8:e4:2e:0b:a6:97:38:1e:e6:2e:98:4d:34:3f:1e:
                    31:ad:d7:b9:07:7f:1b:e5:7c:90:20:4e:cd:5f:25:
                    af:78:a8:5b:a1:a8:95:90:ad:15:1f:8d:bf:1d:70:
                    46:8d:ae:4f:db:53:b5:54:e4:36:d1:8f:98:92:e3:
                    5a:86:79:f0:ae:cc:d7:25:97:7e:85:83:51:7f:01:
                    93:72:c6:90:bf:a7:94:9a:1b:69:da:5d:c9:e3:bd:
                    ed:0a:fa:85:17:f9:15:17:9c:8b:e8:a6:c6:39:0e:
                    87:0a:d0:59:aa:a9:53:80:15:2d:a6:60:65:9c:e5:
                    a8:5c:49:0a:36:d7:7d:b0:20:50:7f:50:38:36:18:
                    fe:e0:8b:c8:a4:93:4a:a3:fe:bf:21:f1:61:36:fd:
                    d7:76:64:c6:f9:76:de:75:aa:c4:99:82:7d:61:00:
                    3c:ca:d1:f8:65:7f:55:71:78:56:75:6b:3f:f2:79:
                    f2:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:2E:E1:9F:42:21:83:7D:79:A3:D4:CA:32:0F:B5:9A:25:D0:E9:B5
            X509v3 Authority Key Identifier:
                keyid:3F:A6:45:3F:F6:EE:48:DA:D9:C2:0C:55:2F:9A:4A:FA:13:BF:74:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2e96ApuCzfWJnto1yPf5Q2XZC8gtq34VickzhoUhdmMN/1/3FA6453FF6EE48DAD9C20C552F9A4AFA13BF74F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3FA6453FF6EE48DAD9C20C552F9A4AFA13BF74F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2e96ApuCzfWJnto1yPf5Q2XZC8gtq34VickzhoUhdmMN/1/34352e3138302e3138342e302f32332d3233203d3e20323639313435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.180.184.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2f:ee:a9:7a:00:4b:44:2f:ab:13:5b:47:ec:cc:1f:b1:a1:79:
         62:9f:cd:e7:33:ef:dd:5b:c7:6d:95:cf:3d:2b:93:1c:7a:b5:
         71:98:7b:12:70:7c:7b:9d:97:b6:66:07:9f:82:7f:fc:ef:e1:
         97:d8:25:95:34:20:01:7d:aa:e9:a2:9d:12:aa:f9:a8:28:f1:
         7b:dc:43:87:2a:b6:20:04:01:7f:c9:c5:4e:b7:cc:99:99:6a:
         7b:38:d2:da:9b:69:bc:3f:0b:15:e9:92:be:37:39:88:a1:0a:
         bc:d3:5b:3c:46:e9:fa:5a:bd:07:9e:13:e0:bc:f5:58:23:c4:
         3e:4f:85:3c:16:9d:ba:22:c3:d5:1f:11:e0:f3:60:43:aa:ea:
         b7:83:8a:7d:44:a1:41:60:12:83:28:82:12:eb:73:4f:1b:1d:
         87:25:28:cd:43:c8:b9:c8:3f:04:4c:39:42:5d:21:eb:0c:9f:
         80:92:a5:c5:4b:c8:28:27:43:7f:8c:26:94:0f:58:77:43:c4:
         72:1f:ba:4f:ad:19:66:95:be:36:07:b8:64:95:4e:b7:1b:05:
         6e:3a:93:d1:d8:73:aa:29:fe:a3:a1:f3:a3:0b:f1:0b:2e:86:
         58:ba:c0:8e:ac:b1:5e:5d:b1:80:8e:e8:f0:33:46:4c:5b:42:
         e3:79:ac:b8
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUVxTjWPzNtRxlzh42WDSoRcXBsLMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0ZBNjQ1M0ZGNkVFNDhEQUQ5QzIwQzU1MkY5QTRBRkEx
M0JGNzRGMDAeFw0yNDA0MDQwODMxMjlaFw0yNTA0MDMwODM2MjlaMDMxMTAvBgNV
BAMTKDhBMkVFMTlGNDIyMTgzN0Q3OUEzRDRDQTMyMEZCNTlBMjVEMEU5QjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSMxoDRWX6fU9eREccapJ0dfpw
Pm+qvo4rroAm5vLiKTyIXm+ozOVro5lvqAcEzhe/0H8bhK4UbYrO1BRjyJRxgsU7
LJjN8SY0TOjkLgumlzge5i6YTTQ/HjGt17kHfxvlfJAgTs1fJa94qFuhqJWQrRUf
jb8dcEaNrk/bU7VU5DbRj5iS41qGefCuzNcll36Fg1F/AZNyxpC/p5SaG2naXcnj
ve0K+oUX+RUXnIvopsY5DocK0FmqqVOAFS2mYGWc5ahcSQo2132wIFB/UDg2GP7g
i8ikk0qj/r8h8WE2/dd2ZMb5dt51qsSZgn1hADzK0fhlf1VxeFZ1az/yefLbAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUii7hn0Ihg315o9TKMg+1miXQ6bUwHwYDVR0j
BBgwFoAUP6ZFP/buSNrZwgxVL5pK+hO/dPAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMmU5NkFwdUN6ZldKbnRvMXlQZjVRMlhaQzhndHEzNFZpY2t6aG9VaGRt
TU4vMS8zRkE2NDUzRkY2RUU0OERBRDlDMjBDNTUyRjlBNEFGQTEzQkY3NEYwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzNGQTY0NTNGRjZFRTQ4REFE
OUMyMEM1NTJGOUE0QUZBMTNCRjc0RjAuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJlOTZBcHVDemZXSm50bzF5UGY1UTJYWkM4Z3RxMzRWaWNremhvVWhkbU1OLzEv
MzQzNTJlMzEzODMwMmUzMTM4MzQyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjM2
MzkzMTM0MzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAEttLgwDQYJKoZIhvcNAQELBQADggEBAC/uqXoA
S0QvqxNbR+zMH7GheWKfzecz791bx22Vzz0rkxx6tXGYexJwfHudl7ZmB5+Cf/zv
4ZfYJZU0IAF9quminRKq+ago8XvcQ4cqtiAEAX/JxU63zJmZans40tqbabw/CxXp
kr43OYihCrzTWzxG6fpavQeeE+C89VgjxD5PhTwWnboiw9UfEeDzYEOq6reDin1E
oUFgEoMoghLrc08bHYclKM1DyLnIPwRMOUJdIesMn4CSpcVLyCgnQ3+MJpQPWHdD
xHIfuk+tGWaVvjYHuGSVTrcbBW46k9HYc6op/qOh86ML8Qsuhli6wI6ssV5dsYCO
6PAzRkxbQuN5rLg=
-----END CERTIFICATE-----
Generated at Sat Sep 28 15:15:19 2024 by rpki-client on console-fra.rpki-client.org