Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3TiGjFf9XnFQDMahHm8CHr8qHLTk3iNpEyotWooVGUJ9/1/34352e3138352e362e302f32342d3234203d3e20323639333535.roa
File:                     34352e3138352e362e302f32342d3234203d3e20323639333535.roa (raw, json)
Hash identifier:          RZ7EouS76RPe2n/1G4WcKy2rLxOxeDExIWunvY+J1C0=
Subject key identifier:   15:6C:F2:7B:B9:87:48:2A:50:B1:3C:8B:06:B8:BE:65:7A:AF:B0:D0
Certificate issuer:       /CN=446D4F390AB834CB395232A0680D14394BE75FCC
Certificate serial:       3133F3DE4FA278C6F4C860E0FCC5D694F10A9053
Authority key identifier: 44:6D:4F:39:0A:B8:34:CB:39:52:32:A0:68:0D:14:39:4B:E7:5F:CC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/446D4F390AB834CB395232A0680D14394BE75FCC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3TiGjFf9XnFQDMahHm8CHr8qHLTk3iNpEyotWooVGUJ9/1/34352e3138352e362e302f32342d3234203d3e20323639333535.roa
Signing time:             Fri 05 Apr 2024 00:27:26 +0000
ROA not before:           Fri 05 Apr 2024 00:22:26 +0000
ROA not after:            Fri 04 Apr 2025 00:27:26 +0000
asID:                     269355
IP address blocks:        45.185.6.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3TiGjFf9XnFQDMahHm8CHr8qHLTk3iNpEyotWooVGUJ9/1/446D4F390AB834CB395232A0680D14394BE75FCC.crl
                          rsync://rpki-repo.registro.br/repo/3TiGjFf9XnFQDMahHm8CHr8qHLTk3iNpEyotWooVGUJ9/1/446D4F390AB834CB395232A0680D14394BE75FCC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/446D4F390AB834CB395232A0680D14394BE75FCC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:33:f3:de:4f:a2:78:c6:f4:c8:60:e0:fc:c5:d6:94:f1:0a:90:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=446D4F390AB834CB395232A0680D14394BE75FCC
        Validity
            Not Before: Apr  5 00:22:26 2024 GMT
            Not After : Apr  4 00:27:26 2025 GMT
        Subject: CN=156CF27BB987482A50B13C8B06B8BE657AAFB0D0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:0d:71:c5:9e:e6:6e:73:ee:e5:22:3e:43:52:
                    9c:f2:b7:cc:13:a5:b5:f2:28:7d:8e:dc:63:21:51:
                    a6:75:7b:aa:b2:61:fc:b7:71:04:04:51:aa:a8:3b:
                    b7:4b:da:8b:17:1d:24:63:28:c4:3e:2e:f1:3b:ce:
                    6c:ac:99:fa:d9:bd:c3:53:d9:97:8f:77:b2:03:6e:
                    4c:c1:5f:f3:1f:9c:42:bd:dc:f6:8c:3a:61:bb:db:
                    19:e8:72:fd:e3:18:86:57:9d:7c:0f:93:2b:81:58:
                    7e:81:cb:f9:17:4c:14:c5:ca:02:50:0c:05:c3:33:
                    51:4c:e9:75:09:97:cb:0a:0e:01:9f:a5:3c:e1:94:
                    c6:75:7f:bf:17:50:39:72:bc:dd:46:93:52:73:2c:
                    8b:3e:4c:56:e5:bd:34:3e:ba:1d:9f:fd:76:0f:f4:
                    be:af:3a:9d:05:94:74:3a:57:05:ab:29:24:74:bf:
                    c6:9f:73:f4:c3:f0:ba:9c:22:f8:b4:43:6b:3c:be:
                    e0:f3:7a:d8:38:2b:8e:2e:0e:6f:62:97:4e:67:6c:
                    2c:58:62:d7:ab:83:61:58:b0:04:68:13:c7:ba:72:
                    5d:98:71:fe:2c:38:c3:74:e8:50:14:1d:84:ca:11:
                    66:c0:3d:e9:1c:a8:f7:e2:f3:e8:df:c6:f1:8b:3b:
                    97:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:6C:F2:7B:B9:87:48:2A:50:B1:3C:8B:06:B8:BE:65:7A:AF:B0:D0
            X509v3 Authority Key Identifier:
                keyid:44:6D:4F:39:0A:B8:34:CB:39:52:32:A0:68:0D:14:39:4B:E7:5F:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3TiGjFf9XnFQDMahHm8CHr8qHLTk3iNpEyotWooVGUJ9/1/446D4F390AB834CB395232A0680D14394BE75FCC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/446D4F390AB834CB395232A0680D14394BE75FCC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3TiGjFf9XnFQDMahHm8CHr8qHLTk3iNpEyotWooVGUJ9/1/34352e3138352e362e302f32342d3234203d3e20323639333535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.185.6.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5f:64:76:16:80:17:b7:8c:8a:dd:e4:61:00:0a:62:d5:f9:83:
         89:ef:d1:9e:12:7f:de:b7:dc:a3:7d:5a:e9:8f:4f:a2:bd:72:
         d6:1c:d7:d7:61:da:e6:b2:17:5e:5a:17:c3:5e:0e:5f:18:c7:
         ae:73:cd:c6:8a:56:63:34:87:b5:ad:d2:c0:f6:ac:56:d8:86:
         e0:a0:3f:3c:7e:e8:1b:32:a3:b1:99:09:52:12:69:ca:1d:c4:
         13:28:46:9f:2d:01:c5:ef:eb:56:5a:22:c9:51:40:6e:88:c0:
         2c:77:43:42:b5:3a:9e:7b:c2:f3:8f:81:1e:b0:49:c6:39:36:
         56:06:40:59:9e:0d:f8:17:ab:fc:c9:c3:ae:ea:4e:13:ed:fb:
         52:21:52:5f:4f:c2:a8:0f:93:94:d7:63:1f:3c:6e:9b:d0:b5:
         bf:61:ec:01:fd:bb:8b:e3:5b:fa:3a:f5:f3:08:bf:7f:87:cc:
         27:bc:ba:74:97:05:96:89:e8:9c:c2:11:14:6a:89:71:4f:e9:
         0d:87:0f:78:46:a1:58:5a:89:3b:f3:25:73:fb:f8:1c:cf:34:
         e3:82:f2:2b:80:4d:05:87:52:3b:32:02:75:53:82:87:25:28:
         76:bb:97:31:fa:36:78:58:96:b0:36:06:66:a9:ef:de:11:5f:
         bb:13:42:b6
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUMTPz3k+ieMb0yGDg/MXWlPEKkFMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDQ2RDRGMzkwQUI4MzRDQjM5NTIzMkEwNjgwRDE0Mzk0
QkU3NUZDQzAeFw0yNDA0MDUwMDIyMjZaFw0yNTA0MDQwMDI3MjZaMDMxMTAvBgNV
BAMTKDE1NkNGMjdCQjk4NzQ4MkE1MEIxM0M4QjA2QjhCRTY1N0FBRkIwRDAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZDXHFnuZuc+7lIj5DUpzyt8wT
pbXyKH2O3GMhUaZ1e6qyYfy3cQQEUaqoO7dL2osXHSRjKMQ+LvE7zmysmfrZvcNT
2ZePd7IDbkzBX/MfnEK93PaMOmG72xnocv3jGIZXnXwPkyuBWH6By/kXTBTFygJQ
DAXDM1FM6XUJl8sKDgGfpTzhlMZ1f78XUDlyvN1Gk1JzLIs+TFblvTQ+uh2f/XYP
9L6vOp0FlHQ6VwWrKSR0v8afc/TD8LqcIvi0Q2s8vuDzetg4K44uDm9il05nbCxY
Yterg2FYsARoE8e6cl2Ycf4sOMN06FAUHYTKEWbAPekcqPfi8+jfxvGLO5cbAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUFWzye7mHSCpQsTyLBri+ZXqvsNAwHwYDVR0j
BBgwFoAURG1POQq4NMs5UjKgaA0UOUvnX8wwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM1RpR2pGZjlYbkZRRE1haEhtOENIcjhxSExUazNpTnBFeW90V29vVkdV
SjkvMS80NDZENEYzOTBBQjgzNENCMzk1MjMyQTA2ODBEMTQzOTRCRTc1RkNDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQ0NkQ0RjM5MEFCODM0Q0Iz
OTUyMzJBMDY4MEQxNDM5NEJFNzVGQ0MuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNUaUdqRmY5WG5GUURNYWhIbThDSHI4cUhMVGszaU5wRXlvdFdvb1ZHVUo5LzEv
MzQzNTJlMzEzODM1MmUzNjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzYzOTMz
MzUzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEAC25BjANBgkqhkiG9w0BAQsFAAOCAQEAX2R2FoAXt4yK
3eRhAApi1fmDie/RnhJ/3rfco31a6Y9Por1y1hzX12Ha5rIXXloXw14OXxjHrnPN
xopWYzSHta3SwPasVtiG4KA/PH7oGzKjsZkJUhJpyh3EEyhGny0Bxe/rVloiyVFA
bojALHdDQrU6nnvC84+BHrBJxjk2VgZAWZ4N+Ber/MnDrupOE+37UiFSX0/CqA+T
lNdjHzxum9C1v2HsAf27i+Nb+jr18wi/f4fMJ7y6dJcFlononMIRFGqJcU/pDYcP
eEahWFqJO/Mlc/v4HM8044LyK4BNBYdSOzICdVOChyUodruXMfo2eFiWsDYGZqnv
3hFfuxNCtg==
-----END CERTIFICATE-----
Generated at Sat Nov 23 02:30:02 2024 by rpki-client on console-fra.rpki-client.org