Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3TiGjFf9XnFQDMahHm8CHr8qHLTk3iNpEyotWooVGUJ9/1/34352e3138352e352e302f32342d3234203d3e20323639333535.roa
File:                     34352e3138352e352e302f32342d3234203d3e20323639333535.roa (raw, json)
Hash identifier:          ubDaPoZ+SjNH/7ssCFe9ZojOBRpGmHXFj3ZsIatb5TQ=
Subject key identifier:   24:C5:20:27:21:24:CC:92:2C:FF:07:27:EC:A5:B5:74:C5:73:C0:E3
Certificate issuer:       /CN=446D4F390AB834CB395232A0680D14394BE75FCC
Certificate serial:       35AE0452043F77E764C251DB580C3CE741E9B8B8
Authority key identifier: 44:6D:4F:39:0A:B8:34:CB:39:52:32:A0:68:0D:14:39:4B:E7:5F:CC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/446D4F390AB834CB395232A0680D14394BE75FCC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3TiGjFf9XnFQDMahHm8CHr8qHLTk3iNpEyotWooVGUJ9/1/34352e3138352e352e302f32342d3234203d3e20323639333535.roa
Signing time:             Fri 05 Apr 2024 00:27:27 +0000
ROA not before:           Fri 05 Apr 2024 00:22:27 +0000
ROA not after:            Fri 04 Apr 2025 00:27:27 +0000
asID:                     269355
IP address blocks:        45.185.5.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3TiGjFf9XnFQDMahHm8CHr8qHLTk3iNpEyotWooVGUJ9/1/446D4F390AB834CB395232A0680D14394BE75FCC.crl
                          rsync://rpki-repo.registro.br/repo/3TiGjFf9XnFQDMahHm8CHr8qHLTk3iNpEyotWooVGUJ9/1/446D4F390AB834CB395232A0680D14394BE75FCC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/446D4F390AB834CB395232A0680D14394BE75FCC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:ae:04:52:04:3f:77:e7:64:c2:51:db:58:0c:3c:e7:41:e9:b8:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=446D4F390AB834CB395232A0680D14394BE75FCC
        Validity
            Not Before: Apr  5 00:22:27 2024 GMT
            Not After : Apr  4 00:27:27 2025 GMT
        Subject: CN=24C520272124CC922CFF0727ECA5B574C573C0E3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:83:fe:65:cc:ba:5f:c3:07:b0:28:7c:bf:6a:
                    85:5b:eb:c1:87:b5:c8:44:83:6b:c3:90:37:8d:8b:
                    92:a4:fe:26:db:83:23:39:80:59:df:d7:27:1c:67:
                    88:05:36:4d:48:fc:07:3c:47:af:44:93:6c:26:44:
                    9c:22:df:41:78:be:3b:c7:48:02:4e:00:12:ac:a2:
                    1a:92:bb:69:60:f4:cd:43:0e:1a:82:ee:3e:8c:53:
                    e0:5e:e1:9f:44:69:bd:13:f0:ec:89:4f:51:6a:5d:
                    dc:39:64:51:1e:74:28:ca:c7:ee:20:32:87:b0:7a:
                    f0:af:eb:c9:51:17:34:e8:a8:1b:10:f9:78:55:11:
                    1f:46:07:a9:1a:f8:49:40:6e:06:4f:c7:46:20:c1:
                    3d:e8:69:2e:37:86:1c:58:f0:3c:74:29:6b:37:f1:
                    a1:d6:57:be:86:8a:63:0d:d0:6b:cd:71:4d:7d:f2:
                    a0:16:e5:2e:c0:67:c3:dd:fa:67:17:c6:bb:6a:82:
                    3c:05:03:16:d5:97:e9:51:97:ca:c0:17:bf:4a:64:
                    9d:48:e9:23:36:08:d9:d8:83:0a:cf:e8:e1:f1:ec:
                    33:65:08:7e:60:6b:25:67:09:01:18:bd:82:d4:9f:
                    d0:b4:c9:36:ba:54:8e:84:3f:75:c8:83:83:be:da:
                    fe:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:C5:20:27:21:24:CC:92:2C:FF:07:27:EC:A5:B5:74:C5:73:C0:E3
            X509v3 Authority Key Identifier:
                keyid:44:6D:4F:39:0A:B8:34:CB:39:52:32:A0:68:0D:14:39:4B:E7:5F:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3TiGjFf9XnFQDMahHm8CHr8qHLTk3iNpEyotWooVGUJ9/1/446D4F390AB834CB395232A0680D14394BE75FCC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/446D4F390AB834CB395232A0680D14394BE75FCC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3TiGjFf9XnFQDMahHm8CHr8qHLTk3iNpEyotWooVGUJ9/1/34352e3138352e352e302f32342d3234203d3e20323639333535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.185.5.0/24

    Signature Algorithm: sha256WithRSAEncryption
         36:11:a6:38:bd:92:31:cc:6a:c2:1a:27:66:81:08:38:d7:10:
         52:cd:75:ea:5a:78:8d:9d:1f:04:b8:63:69:bc:5a:d7:4d:31:
         97:e7:19:ed:b9:dc:b8:1b:53:1a:bb:a9:7e:3c:af:25:7e:77:
         a0:a4:aa:99:c1:f9:c3:1f:3a:ee:d8:dd:ff:38:1d:a9:ac:7e:
         0c:fd:92:6d:9c:0b:59:10:ea:08:b1:67:0d:cb:20:5e:c0:07:
         ae:29:2a:8e:a8:4f:93:7c:96:16:6b:f2:aa:9b:45:68:88:df:
         aa:d2:d2:c8:c0:05:ff:84:b7:e6:d8:a5:48:d1:45:e2:db:89:
         32:7a:83:8a:26:58:77:55:9b:c5:1c:cf:76:6b:36:49:c8:62:
         55:da:08:a3:29:1a:e4:d4:14:94:cd:5b:93:f9:4a:dc:e9:fd:
         c1:74:b2:19:d7:8a:0e:04:d3:f0:50:62:91:8c:2f:ff:a4:6b:
         86:c8:a7:23:27:b8:11:fc:86:40:ec:da:fa:a6:9f:b6:10:c3:
         7c:5d:e9:fe:41:41:5c:32:9a:98:b6:23:00:0c:79:c5:2e:38:
         a3:3f:c8:8a:ef:71:fb:c4:0e:ab:e1:a7:88:50:07:e7:8c:cf:
         3b:dc:51:64:cc:d7:f4:d9:a3:a8:44:f3:17:75:ae:94:b0:a3:
         bd:73:12:e0
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUNa4EUgQ/d+dkwlHbWAw850HpuLgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDQ2RDRGMzkwQUI4MzRDQjM5NTIzMkEwNjgwRDE0Mzk0
QkU3NUZDQzAeFw0yNDA0MDUwMDIyMjdaFw0yNTA0MDQwMDI3MjdaMDMxMTAvBgNV
BAMTKDI0QzUyMDI3MjEyNENDOTIyQ0ZGMDcyN0VDQTVCNTc0QzU3M0MwRTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsg/5lzLpfwwewKHy/aoVb68GH
tchEg2vDkDeNi5Kk/ibbgyM5gFnf1yccZ4gFNk1I/Ac8R69Ek2wmRJwi30F4vjvH
SAJOABKsohqSu2lg9M1DDhqC7j6MU+Be4Z9Eab0T8OyJT1FqXdw5ZFEedCjKx+4g
MoewevCv68lRFzToqBsQ+XhVER9GB6ka+ElAbgZPx0YgwT3oaS43hhxY8Dx0KWs3
8aHWV76GimMN0GvNcU198qAW5S7AZ8Pd+mcXxrtqgjwFAxbVl+lRl8rAF79KZJ1I
6SM2CNnYgwrP6OHx7DNlCH5gayVnCQEYvYLUn9C0yTa6VI6EP3XIg4O+2v6BAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUJMUgJyEkzJIs/wcn7KW1dMVzwOMwHwYDVR0j
BBgwFoAURG1POQq4NMs5UjKgaA0UOUvnX8wwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM1RpR2pGZjlYbkZRRE1haEhtOENIcjhxSExUazNpTnBFeW90V29vVkdV
SjkvMS80NDZENEYzOTBBQjgzNENCMzk1MjMyQTA2ODBEMTQzOTRCRTc1RkNDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQ0NkQ0RjM5MEFCODM0Q0Iz
OTUyMzJBMDY4MEQxNDM5NEJFNzVGQ0MuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNUaUdqRmY5WG5GUURNYWhIbThDSHI4cUhMVGszaU5wRXlvdFdvb1ZHVUo5LzEv
MzQzNTJlMzEzODM1MmUzNTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzYzOTMz
MzUzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEAC25BTANBgkqhkiG9w0BAQsFAAOCAQEANhGmOL2SMcxq
whonZoEIONcQUs116lp4jZ0fBLhjabxa100xl+cZ7bncuBtTGrupfjyvJX53oKSq
mcH5wx867tjd/zgdqax+DP2SbZwLWRDqCLFnDcsgXsAHrikqjqhPk3yWFmvyqptF
aIjfqtLSyMAF/4S35tilSNFF4tuJMnqDiiZYd1WbxRzPdms2SchiVdoIoyka5NQU
lM1bk/lK3On9wXSyGdeKDgTT8FBikYwv/6RrhsinIye4EfyGQOza+qafthDDfF3p
/kFBXDKamLYjAAx5xS44oz/Iiu9x+8QOq+GniFAH54zPO9xRZMzX9NmjqETzF3Wu
lLCjvXMS4A==
-----END CERTIFICATE-----
Generated at Sat Nov 23 02:30:02 2024 by rpki-client on console-fra.rpki-client.org