Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/37QGbg9eE49TNE4jumjb7TuT1PnK3X4sLosLgP8hWRYK/0/34352e3138372e3131362e302f32332d3332203d3e20323731333232.roa
File:                     34352e3138372e3131362e302f32332d3332203d3e20323731333232.roa (raw, json)
Hash identifier:          tm2GcyhraB2bzKMM3PMsgnklCV43kUUyZAJWKdscTIs=
Subject key identifier:   CA:61:31:AF:91:CC:11:F8:D3:B4:89:E0:C2:4D:E5:3E:4B:3B:E3:65
Certificate issuer:       /CN=D682FC0D48A4FA14E019615F107CD42BB78C18A5
Certificate serial:       1C92C866732731E46A725AC39550FF59F26E9B81
Authority key identifier: D6:82:FC:0D:48:A4:FA:14:E0:19:61:5F:10:7C:D4:2B:B7:8C:18:A5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D682FC0D48A4FA14E019615F107CD42BB78C18A5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/37QGbg9eE49TNE4jumjb7TuT1PnK3X4sLosLgP8hWRYK/0/34352e3138372e3131362e302f32332d3332203d3e20323731333232.roa
Signing time:             Thu 01 Aug 2024 12:28:50 +0000
ROA not before:           Thu 01 Aug 2024 12:23:50 +0000
ROA not after:            Thu 31 Jul 2025 12:28:50 +0000
asID:                     271322
IP address blocks:        45.187.116.0/23 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/37QGbg9eE49TNE4jumjb7TuT1PnK3X4sLosLgP8hWRYK/0/D682FC0D48A4FA14E019615F107CD42BB78C18A5.crl
                          rsync://rpki-repo.registro.br/repo/37QGbg9eE49TNE4jumjb7TuT1PnK3X4sLosLgP8hWRYK/0/D682FC0D48A4FA14E019615F107CD42BB78C18A5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D682FC0D48A4FA14E019615F107CD42BB78C18A5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:92:c8:66:73:27:31:e4:6a:72:5a:c3:95:50:ff:59:f2:6e:9b:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D682FC0D48A4FA14E019615F107CD42BB78C18A5
        Validity
            Not Before: Aug  1 12:23:50 2024 GMT
            Not After : Jul 31 12:28:50 2025 GMT
        Subject: CN=CA6131AF91CC11F8D3B489E0C24DE53E4B3BE365
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:fc:de:8a:d7:5a:b6:ce:a3:69:1c:c8:37:22:
                    11:7e:6d:19:bf:0e:94:0b:46:8e:5f:18:fd:c7:3a:
                    82:93:e4:34:25:25:30:24:ff:1e:f2:24:19:5c:9a:
                    00:61:63:17:e2:cf:c1:ad:95:87:15:ae:81:c3:e1:
                    32:87:d9:16:51:00:16:a8:04:84:f1:a7:ff:47:f4:
                    da:a6:87:c9:51:60:3a:c2:c4:de:8c:21:f7:bb:15:
                    ac:90:5f:c1:40:54:1a:39:bd:a1:80:a4:5f:f4:9e:
                    ab:4d:b6:0d:76:95:77:08:1b:24:36:14:76:fa:a2:
                    3b:8f:e2:da:18:e1:99:59:8a:d3:48:a2:ad:c3:da:
                    90:b1:3c:bf:01:13:7a:ac:1b:77:23:fe:35:62:b5:
                    32:f5:44:ca:7f:5c:51:d7:f9:41:e1:4e:05:ce:4a:
                    b5:43:7f:c4:79:54:75:15:37:2e:04:50:ea:eb:3c:
                    e4:7c:92:43:f4:0b:6c:91:cc:a5:bb:d0:14:77:79:
                    4e:31:30:68:37:88:cf:ae:bb:93:96:c4:14:0a:07:
                    94:62:30:91:43:99:05:97:ae:d2:89:66:0d:d1:ed:
                    a7:d5:c2:0a:06:d8:94:85:7d:a2:df:64:2b:2b:19:
                    59:73:e2:d3:c1:2e:5b:37:5a:4f:2f:2f:17:13:c9:
                    de:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:61:31:AF:91:CC:11:F8:D3:B4:89:E0:C2:4D:E5:3E:4B:3B:E3:65
            X509v3 Authority Key Identifier:
                keyid:D6:82:FC:0D:48:A4:FA:14:E0:19:61:5F:10:7C:D4:2B:B7:8C:18:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/37QGbg9eE49TNE4jumjb7TuT1PnK3X4sLosLgP8hWRYK/0/D682FC0D48A4FA14E019615F107CD42BB78C18A5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D682FC0D48A4FA14E019615F107CD42BB78C18A5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/37QGbg9eE49TNE4jumjb7TuT1PnK3X4sLosLgP8hWRYK/0/34352e3138372e3131362e302f32332d3332203d3e20323731333232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.187.116.0/23

    Signature Algorithm: sha256WithRSAEncryption
         24:7a:4f:ac:b1:be:f0:47:83:53:de:1a:38:82:0e:79:73:b5:
         c1:29:9e:1f:87:f7:c5:5a:33:e8:df:15:64:cf:70:87:ae:05:
         82:cd:6d:ee:2a:8e:2b:2f:2a:98:e5:bb:ef:d6:68:84:70:45:
         49:d2:f1:99:2e:8a:4f:58:3f:88:5f:21:67:00:21:39:fe:19:
         7d:3b:d3:71:9d:c4:37:97:57:12:3c:57:34:8f:48:ac:e8:7e:
         f5:c8:a7:ad:b1:d6:e5:e5:e8:3d:6d:a2:1a:a3:63:65:f5:71:
         3e:23:ef:40:bd:ac:38:ba:af:7b:e0:ed:ea:eb:54:60:19:fe:
         3a:56:2e:a3:da:0d:8a:2a:22:d7:d3:80:a4:ba:0c:c8:c9:17:
         ab:74:da:4c:78:f3:9f:2b:06:a1:3c:78:b4:d9:07:a5:c9:5b:
         5b:51:81:15:c9:57:46:82:57:87:70:99:fa:1d:dc:05:97:73:
         01:46:7f:40:4e:1c:8d:57:2a:fb:ca:a6:40:30:46:4f:52:ec:
         60:f6:db:35:eb:48:9f:98:b2:db:f1:dc:f5:a7:91:0c:8f:9a:
         42:0f:83:dd:4d:aa:bb:d7:2f:08:43:d7:06:c7:9d:43:eb:e1:
         83:95:47:98:23:3f:e7:9b:70:54:66:f7:62:a7:af:6e:50:54:
         7a:6d:72:e2
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUHJLIZnMnMeRqclrDlVD/WfJum4EwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDY4MkZDMEQ0OEE0RkExNEUwMTk2MTVGMTA3Q0Q0MkJC
NzhDMThBNTAeFw0yNDA4MDExMjIzNTBaFw0yNTA3MzExMjI4NTBaMDMxMTAvBgNV
BAMTKENBNjEzMUFGOTFDQzExRjhEM0I0ODlFMEMyNERFNTNFNEIzQkUzNjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCO/N6K11q2zqNpHMg3IhF+bRm/
DpQLRo5fGP3HOoKT5DQlJTAk/x7yJBlcmgBhYxfiz8GtlYcVroHD4TKH2RZRABao
BITxp/9H9Nqmh8lRYDrCxN6MIfe7FayQX8FAVBo5vaGApF/0nqtNtg12lXcIGyQ2
FHb6ojuP4toY4ZlZitNIoq3D2pCxPL8BE3qsG3cj/jVitTL1RMp/XFHX+UHhTgXO
SrVDf8R5VHUVNy4EUOrrPOR8kkP0C2yRzKW70BR3eU4xMGg3iM+uu5OWxBQKB5Ri
MJFDmQWXrtKJZg3R7afVwgoG2JSFfaLfZCsrGVlz4tPBLls3Wk8vLxcTyd5TAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUymExr5HMEfjTtIngwk3lPks742UwHwYDVR0j
BBgwFoAU1oL8DUik+hTgGWFfEHzUK7eMGKUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMzdRR2JnOWVFNDlUTkU0anVtamI3VHVUMVBuSzNYNHNMb3NMZ1A4aFdS
WUsvMC9ENjgyRkMwRDQ4QTRGQTE0RTAxOTYxNUYxMDdDRDQyQkI3OEMxOEE1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Q2ODJGQzBENDhBNEZBMTRF
MDE5NjE1RjEwN0NENDJCQjc4QzE4QTUuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzM3UUdiZzllRTQ5VE5FNGp1bWpiN1R1VDFQbkszWDRzTG9zTGdQOGhXUllLLzAv
MzQzNTJlMzEzODM3MmUzMTMxMzYyZTMwMmYzMjMzMmQzMzMyMjAzZDNlMjAzMjM3
MzEzMzMyMzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAEtu3QwDQYJKoZIhvcNAQELBQADggEBACR6T6yx
vvBHg1PeGjiCDnlztcEpnh+H98VaM+jfFWTPcIeuBYLNbe4qjisvKpjlu+/WaIRw
RUnS8Zkuik9YP4hfIWcAITn+GX0703GdxDeXVxI8VzSPSKzofvXIp62x1uXl6D1t
ohqjY2X1cT4j70C9rDi6r3vg7errVGAZ/jpWLqPaDYoqItfTgKS6DMjJF6t02kx4
858rBqE8eLTZB6XJW1tRgRXJV0aCV4dwmfod3AWXcwFGf0BOHI1XKvvKpkAwRk9S
7GD22zXrSJ+Ystvx3PWnkQyPmkIPg91NqrvXLwhD1wbHnUPr4YOVR5gjP+ebcFRm
92Knr25QVHptcuI=
-----END CERTIFICATE-----
Generated at Sat Nov 23 12:36:30 2024 by rpki-client on console-ams.rpki-client.org