Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3Rj249xesmuL7iX6AdCejJcxf65SmPqsF2CAH8RVT5jP/1/34352e3233382e34342e302f32322d3234203d3e20323638333132.roa
File:                     34352e3233382e34342e302f32322d3234203d3e20323638333132.roa (raw, json)
Hash identifier:          zURBlLyG+HZrqo3vOFTDZHMep9JFZOe5jCqJyLf2/IM=
Subject key identifier:   00:48:62:6D:0C:44:49:A8:43:8E:7A:18:D2:01:64:C1:0C:A2:9A:F7
Certificate issuer:       /CN=F977CCF4428A4568379EFF8DC7F9F1A45C92D40C
Certificate serial:       3C757940EB08CA1B621BF3C5271D379CACFA13
Authority key identifier: F9:77:CC:F4:42:8A:45:68:37:9E:FF:8D:C7:F9:F1:A4:5C:92:D4:0C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F977CCF4428A4568379EFF8DC7F9F1A45C92D40C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3Rj249xesmuL7iX6AdCejJcxf65SmPqsF2CAH8RVT5jP/1/34352e3233382e34342e302f32322d3234203d3e20323638333132.roa
Signing time:             Wed 03 Apr 2024 18:31:35 +0000
ROA not before:           Wed 03 Apr 2024 18:26:35 +0000
ROA not after:            Wed 02 Apr 2025 18:31:35 +0000
asID:                     268312
IP address blocks:        45.238.44.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3Rj249xesmuL7iX6AdCejJcxf65SmPqsF2CAH8RVT5jP/1/F977CCF4428A4568379EFF8DC7F9F1A45C92D40C.crl
                          rsync://rpki-repo.registro.br/repo/3Rj249xesmuL7iX6AdCejJcxf65SmPqsF2CAH8RVT5jP/1/F977CCF4428A4568379EFF8DC7F9F1A45C92D40C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F977CCF4428A4568379EFF8DC7F9F1A45C92D40C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 07:23:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:75:79:40:eb:08:ca:1b:62:1b:f3:c5:27:1d:37:9c:ac:fa:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F977CCF4428A4568379EFF8DC7F9F1A45C92D40C
        Validity
            Not Before: Apr  3 18:26:35 2024 GMT
            Not After : Apr  2 18:31:35 2025 GMT
        Subject: CN=0048626D0C4449A8438E7A18D20164C10CA29AF7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:1d:d9:9c:42:06:39:d2:ec:7c:b4:b7:9f:b6:
                    34:10:56:17:f2:1e:e8:e5:d2:79:b0:86:7e:5c:39:
                    06:51:60:64:2e:39:b2:71:ff:57:70:6c:e1:63:9c:
                    0e:f0:24:0b:dd:e6:1b:c9:62:be:57:b9:73:8b:3c:
                    16:e2:15:a0:32:7e:47:b5:82:e5:18:ee:52:23:2c:
                    44:5e:c7:ae:d8:01:96:67:bd:72:ab:4c:f8:55:40:
                    8c:8e:d1:77:85:e9:ad:a4:86:9b:f1:1d:4a:06:b0:
                    77:5b:8b:7e:66:c8:42:cb:86:99:3d:68:69:62:85:
                    17:a8:de:f4:50:0c:5c:02:7f:50:33:e9:79:a5:cb:
                    eb:0b:47:eb:04:d8:96:cf:1c:5d:2b:85:02:43:45:
                    e6:86:97:fc:fc:7f:7a:cf:76:35:0e:81:71:34:be:
                    9b:2d:8f:4b:4f:9a:ce:8a:29:ba:2d:b1:f6:ef:84:
                    32:51:85:ea:89:a4:74:b4:c5:ee:27:a4:39:af:7a:
                    f4:fd:9f:cc:10:30:e0:7a:ce:75:0e:ad:4e:20:9d:
                    31:6f:36:41:6c:5b:99:60:8a:09:10:fc:a6:56:c1:
                    c1:ce:16:2c:1b:e0:33:08:76:80:17:bf:e2:c0:a9:
                    45:9b:44:6d:80:d7:e6:ac:12:d9:6d:a6:ba:2f:e8:
                    30:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:48:62:6D:0C:44:49:A8:43:8E:7A:18:D2:01:64:C1:0C:A2:9A:F7
            X509v3 Authority Key Identifier:
                keyid:F9:77:CC:F4:42:8A:45:68:37:9E:FF:8D:C7:F9:F1:A4:5C:92:D4:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3Rj249xesmuL7iX6AdCejJcxf65SmPqsF2CAH8RVT5jP/1/F977CCF4428A4568379EFF8DC7F9F1A45C92D40C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F977CCF4428A4568379EFF8DC7F9F1A45C92D40C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Rj249xesmuL7iX6AdCejJcxf65SmPqsF2CAH8RVT5jP/1/34352e3233382e34342e302f32322d3234203d3e20323638333132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.238.44.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8d:04:3e:75:13:6b:d5:25:e4:33:94:6f:fa:de:41:0e:a4:e1:
         eb:73:73:e3:91:e7:df:48:82:01:ba:1a:f6:21:35:b6:69:e2:
         8b:db:3d:38:27:e5:a9:f0:2c:d3:74:ef:6d:56:19:4e:42:c0:
         9d:4f:23:14:9e:db:0f:97:03:1a:5e:03:2b:93:f7:03:a0:48:
         8c:1d:f9:0b:f3:a6:db:bb:ce:db:31:51:d1:e2:29:2f:a4:19:
         75:99:f9:45:c6:29:a3:9a:7e:eb:6b:37:91:a6:4b:a1:d1:d2:
         86:a2:21:73:96:95:96:60:a6:0f:8d:11:ea:db:bd:1d:9f:01:
         ba:df:06:45:33:b2:d2:5d:54:cb:6d:f2:43:8b:38:40:bd:46:
         c2:f6:3d:91:eb:16:50:67:13:40:a4:80:62:8e:96:de:16:b5:
         02:e1:e1:9a:30:5e:95:57:76:a2:da:b2:19:72:ab:8a:11:a4:
         20:79:fe:20:55:30:a6:e6:18:b6:c8:d7:2c:29:f2:cc:9b:ee:
         42:df:82:e2:0d:88:39:94:2a:91:00:74:ef:1a:17:00:1c:c1:
         70:b0:20:11:c0:8d:02:ea:b5:1a:25:ac:62:b3:8d:6b:c5:a1:
         23:6c:65:8d:73:7d:d1:7c:97:2c:6e:4b:50:4c:71:04:c1:34:
         bb:de:65:74
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgITPHV5QOsIyhtiG/PFJx03nKz6EzANBgkqhkiG9w0BAQsF
ADAzMTEwLwYDVQQDEyhGOTc3Q0NGNDQyOEE0NTY4Mzc5RUZGOERDN0Y5RjFBNDVD
OTJENDBDMB4XDTI0MDQwMzE4MjYzNVoXDTI1MDQwMjE4MzEzNVowMzExMC8GA1UE
AxMoMDA0ODYyNkQwQzQ0NDlBODQzOEU3QTE4RDIwMTY0QzEwQ0EyOUFGNzCCASIw
DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAOcd2ZxCBjnS7Hy0t5+2NBBWF/Ie
6OXSebCGflw5BlFgZC45snH/V3Bs4WOcDvAkC93mG8livle5c4s8FuIVoDJ+R7WC
5RjuUiMsRF7HrtgBlme9cqtM+FVAjI7Rd4XpraSGm/EdSgawd1uLfmbIQsuGmT1o
aWKFF6je9FAMXAJ/UDPpeaXL6wtH6wTYls8cXSuFAkNF5oaX/Px/es92NQ6BcTS+
my2PS0+azoopui2x9u+EMlGF6omkdLTF7iekOa969P2fzBAw4HrOdQ6tTiCdMW82
QWxbmWCKCRD8plbBwc4WLBvgMwh2gBe/4sCpRZtEbYDX5qwS2W2mui/oMAcCAwEA
AaOCAk8wggJLMB0GA1UdDgQWBBQASGJtDERJqEOOehjSAWTBDKKa9zAfBgNVHSME
GDAWgBT5d8z0QopFaDee/43H+fGkXJLUDDAOBgNVHQ8BAf8EBAMCB4AwgZQGA1Ud
HwSBjDCBiTCBhqCBg6CBgIZ+cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby8zUmoyNDl4ZXNtdUw3aVg2QWRDZWpKY3hmNjVTbVBxc0YyQ0FIOFJWVDVq
UC8xL0Y5NzdDQ0Y0NDI4QTQ1NjgzNzlFRkY4REM3RjlGMUE0NUM5MkQ0MEMuY3Js
MHgGCCsGAQUFBwEBBGwwajBoBggrBgEFBQcwAoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvRjk3N0NDRjQ0MjhBNDU2ODM3
OUVGRjhEQzdGOUYxQTQ1QzkyRDQwQy5jZXIwgawGCCsGAQUFBwELBIGfMIGcMIGZ
BggrBgEFBQcwC4aBjHJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
M1JqMjQ5eGVzbXVMN2lYNkFkQ2VqSmN4ZjY1U21QcXNGMkNBSDhSVlQ1alAvMS8z
NDM1MmUzMjMzMzgyZTM0MzQyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM2Mzgz
MzMxMzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcB
Af8EEDAOMAwEAgABMAYDBAIt7iwwDQYJKoZIhvcNAQELBQADggEBAI0EPnUTa9Ul
5DOUb/reQQ6k4etzc+OR599IggG6GvYhNbZp4ovbPTgn5anwLNN0721WGU5CwJ1P
IxSe2w+XAxpeAyuT9wOgSIwd+Qvzptu7ztsxUdHiKS+kGXWZ+UXGKaOafutrN5Gm
S6HR0oaiIXOWlZZgpg+NEerbvR2fAbrfBkUzstJdVMtt8kOLOEC9RsL2PZHrFlBn
E0CkgGKOlt4WtQLh4ZowXpVXdqLashlyq4oRpCB5/iBVMKbmGLbI1ywp8syb7kLf
guINiDmUKpEAdO8aFwAcwXCwIBHAjQLqtRolrGKzjWvFoSNsZY1zfdF8lyxuS1BM
cQTBNLveZXQ=
-----END CERTIFICATE-----
Generated at Tue Nov 26 07:01:31 2024 by rpki-client on console-ams.rpki-client.org