Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3TiGjFf9XnFQDMahHm8CHr8qHLTk3iNpEyotWooVGUJ9/1/34352e3138352e342e302f32322d3232203d3e20323639333535.roa
File:                     34352e3138352e342e302f32322d3232203d3e20323639333535.roa (raw, json)
Hash identifier:          kiB9ASSK6U8Tj/77hab3Fr92avvnUJv0yciwpsLtIN8=
Subject key identifier:   F1:67:A1:13:55:66:41:99:2C:60:C6:65:84:D0:85:C6:5B:FC:E1:DD
Certificate issuer:       /CN=446D4F390AB834CB395232A0680D14394BE75FCC
Certificate serial:       15A33C2416A9C972758A85419E7A49DBE09D6021
Authority key identifier: 44:6D:4F:39:0A:B8:34:CB:39:52:32:A0:68:0D:14:39:4B:E7:5F:CC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/446D4F390AB834CB395232A0680D14394BE75FCC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3TiGjFf9XnFQDMahHm8CHr8qHLTk3iNpEyotWooVGUJ9/1/34352e3138352e342e302f32322d3232203d3e20323639333535.roa
Signing time:             Fri 05 Apr 2024 00:27:25 +0000
ROA not before:           Fri 05 Apr 2024 00:22:25 +0000
ROA not after:            Fri 04 Apr 2025 00:27:25 +0000
asID:                     269355
IP address blocks:        45.185.4.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3TiGjFf9XnFQDMahHm8CHr8qHLTk3iNpEyotWooVGUJ9/1/446D4F390AB834CB395232A0680D14394BE75FCC.crl
                          rsync://rpki-repo.registro.br/repo/3TiGjFf9XnFQDMahHm8CHr8qHLTk3iNpEyotWooVGUJ9/1/446D4F390AB834CB395232A0680D14394BE75FCC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/446D4F390AB834CB395232A0680D14394BE75FCC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:a3:3c:24:16:a9:c9:72:75:8a:85:41:9e:7a:49:db:e0:9d:60:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=446D4F390AB834CB395232A0680D14394BE75FCC
        Validity
            Not Before: Apr  5 00:22:25 2024 GMT
            Not After : Apr  4 00:27:25 2025 GMT
        Subject: CN=F167A113556641992C60C66584D085C65BFCE1DD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:7b:85:4a:69:3f:d4:5c:02:3d:5e:ea:6d:60:
                    a0:77:e1:fc:b1:86:ec:28:0c:42:9b:64:07:99:66:
                    ea:85:5a:6d:87:bb:81:ab:7e:5c:55:77:fd:bd:c1:
                    1d:ea:d3:98:fe:cb:d2:45:4f:0c:16:6d:c8:c8:fe:
                    76:43:db:37:37:14:1a:25:db:ca:8f:7a:76:0c:e7:
                    47:9c:b0:46:ed:9c:65:18:19:4c:db:c4:04:6e:d8:
                    f9:ac:5c:8c:e1:53:90:54:c4:8d:f4:5b:6f:be:fd:
                    d9:41:d2:9d:e9:72:20:19:43:5f:de:9b:9e:4b:a4:
                    ad:e0:1c:2f:22:9b:5f:99:bb:78:1e:79:53:82:52:
                    d0:f0:6c:8f:f4:ce:68:8a:14:1d:bc:0d:a4:f2:fc:
                    0a:39:49:f7:09:6e:3a:d2:e3:e4:da:33:44:01:1a:
                    bd:77:ef:e2:f3:c2:4c:ee:fc:c0:45:7d:d5:83:78:
                    9a:d8:52:39:a8:14:58:c8:2f:21:84:a6:e0:4d:da:
                    a9:e2:e6:cc:48:6b:0f:da:42:e0:05:4b:41:12:ca:
                    13:87:ac:8a:e1:6d:82:3d:c0:86:c8:a5:cc:d9:75:
                    8f:c8:83:98:a2:a9:e1:6d:46:be:3d:90:3f:12:54:
                    c7:3a:03:64:54:1a:52:a1:af:80:28:ba:97:bc:13:
                    71:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:67:A1:13:55:66:41:99:2C:60:C6:65:84:D0:85:C6:5B:FC:E1:DD
            X509v3 Authority Key Identifier:
                keyid:44:6D:4F:39:0A:B8:34:CB:39:52:32:A0:68:0D:14:39:4B:E7:5F:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3TiGjFf9XnFQDMahHm8CHr8qHLTk3iNpEyotWooVGUJ9/1/446D4F390AB834CB395232A0680D14394BE75FCC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/446D4F390AB834CB395232A0680D14394BE75FCC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3TiGjFf9XnFQDMahHm8CHr8qHLTk3iNpEyotWooVGUJ9/1/34352e3138352e342e302f32322d3232203d3e20323639333535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.185.4.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8a:20:7c:18:a9:54:fe:d7:9b:89:9e:f2:c1:b3:23:e1:b9:2f:
         e6:b1:84:bc:73:51:96:31:61:a1:72:d6:08:45:67:36:18:5c:
         6e:24:81:4d:b8:1c:7d:04:55:6a:c0:ab:5c:4f:e0:cd:04:0b:
         ab:48:00:c1:81:03:ff:2c:37:27:14:1d:ff:57:b6:bc:f2:0f:
         d5:c9:15:49:35:72:47:6d:a4:9f:1d:45:8d:aa:f1:b8:a0:ec:
         ea:da:b5:fa:b4:3e:74:3c:b3:4b:f6:0c:01:6d:e1:6d:a8:cb:
         a0:7d:b6:79:af:7a:a1:21:9b:59:4e:0f:d8:12:ca:4d:03:65:
         73:26:29:8a:0d:8d:3e:50:db:3e:e0:0b:8f:bf:23:63:0d:3b:
         c2:3b:0c:92:11:46:ff:e0:33:82:60:35:81:f0:79:50:e8:b2:
         d5:66:65:77:3a:3e:48:8d:40:e4:92:50:5a:8c:91:96:0f:32:
         ad:5e:dd:73:4f:1c:90:54:62:5a:16:39:5b:29:52:d2:a6:da:
         04:4b:ee:af:d7:ca:64:e9:01:ae:16:df:7d:50:da:d4:6f:61:
         41:66:2c:df:2f:67:30:2f:0a:e7:e3:c0:2e:27:26:27:3f:fe:
         6a:50:48:6d:57:8e:68:2e:29:cc:24:8f:23:8d:ea:09:13:b8:
         61:d5:47:5c
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUFaM8JBapyXJ1ioVBnnpJ2+CdYCEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDQ2RDRGMzkwQUI4MzRDQjM5NTIzMkEwNjgwRDE0Mzk0
QkU3NUZDQzAeFw0yNDA0MDUwMDIyMjVaFw0yNTA0MDQwMDI3MjVaMDMxMTAvBgNV
BAMTKEYxNjdBMTEzNTU2NjQxOTkyQzYwQzY2NTg0RDA4NUM2NUJGQ0UxREQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2e4VKaT/UXAI9XuptYKB34fyx
huwoDEKbZAeZZuqFWm2Hu4GrflxVd/29wR3q05j+y9JFTwwWbcjI/nZD2zc3FBol
28qPenYM50ecsEbtnGUYGUzbxARu2PmsXIzhU5BUxI30W2++/dlB0p3pciAZQ1/e
m55LpK3gHC8im1+Zu3geeVOCUtDwbI/0zmiKFB28DaTy/Ao5SfcJbjrS4+TaM0QB
Gr137+Lzwkzu/MBFfdWDeJrYUjmoFFjILyGEpuBN2qni5sxIaw/aQuAFS0ESyhOH
rIrhbYI9wIbIpczZdY/Ig5iiqeFtRr49kD8SVMc6A2RUGlKhr4Aoupe8E3FlAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQU8WehE1VmQZksYMZlhNCFxlv84d0wHwYDVR0j
BBgwFoAURG1POQq4NMs5UjKgaA0UOUvnX8wwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM1RpR2pGZjlYbkZRRE1haEhtOENIcjhxSExUazNpTnBFeW90V29vVkdV
SjkvMS80NDZENEYzOTBBQjgzNENCMzk1MjMyQTA2ODBEMTQzOTRCRTc1RkNDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQ0NkQ0RjM5MEFCODM0Q0Iz
OTUyMzJBMDY4MEQxNDM5NEJFNzVGQ0MuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNUaUdqRmY5WG5GUURNYWhIbThDSHI4cUhMVGszaU5wRXlvdFdvb1ZHVUo5LzEv
MzQzNTJlMzEzODM1MmUzNDJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDMyMzYzOTMz
MzUzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEAi25BDANBgkqhkiG9w0BAQsFAAOCAQEAiiB8GKlU/teb
iZ7ywbMj4bkv5rGEvHNRljFhoXLWCEVnNhhcbiSBTbgcfQRVasCrXE/gzQQLq0gA
wYED/yw3JxQd/1e2vPIP1ckVSTVyR22knx1FjarxuKDs6tq1+rQ+dDyzS/YMAW3h
bajLoH22ea96oSGbWU4P2BLKTQNlcyYpig2NPlDbPuALj78jYw07wjsMkhFG/+Az
gmA1gfB5UOiy1WZldzo+SI1A5JJQWoyRlg8yrV7dc08ckFRiWhY5WylS0qbaBEvu
r9fKZOkBrhbffVDa1G9hQWYs3y9nMC8K5+PALicmJz/+alBIbVeOaC4pzCSPI43q
CRO4YdVHXA==
-----END CERTIFICATE-----
Generated at Sat Nov 23 02:30:02 2024 by rpki-client on console-fra.rpki-client.org