Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3XfMyyuGXJ6zvqDaSDXwNCC8ke6QQJbRSqci6RfFGmnN/0/34352e37312e3134312e302f32342d3234203d3e20323636393137.roa
File:                     34352e37312e3134312e302f32342d3234203d3e20323636393137.roa (raw, json)
Hash identifier:          c5z93dO26kkHCfHOkJEaHwtWIuqo+DDZ3sKPvQIAwT8=
Subject key identifier:   DD:DD:76:F6:11:E2:51:76:32:9F:B2:44:69:A6:8F:50:33:70:89:FF
Certificate issuer:       /CN=0B8669C70E9ED5741CBEC40B6864B185977F0A18
Certificate serial:       633D09FDCFC302955DDD178C50A7E0E23D857B78
Authority key identifier: 0B:86:69:C7:0E:9E:D5:74:1C:BE:C4:0B:68:64:B1:85:97:7F:0A:18
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0B8669C70E9ED5741CBEC40B6864B185977F0A18.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3XfMyyuGXJ6zvqDaSDXwNCC8ke6QQJbRSqci6RfFGmnN/0/34352e37312e3134312e302f32342d3234203d3e20323636393137.roa
Signing time:             Wed 02 Oct 2024 19:33:03 +0000
ROA not before:           Wed 02 Oct 2024 19:28:03 +0000
ROA not after:            Wed 01 Oct 2025 19:33:03 +0000
asID:                     266917
IP address blocks:        45.71.141.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3XfMyyuGXJ6zvqDaSDXwNCC8ke6QQJbRSqci6RfFGmnN/0/0B8669C70E9ED5741CBEC40B6864B185977F0A18.crl
                          rsync://rpki-repo.registro.br/repo/3XfMyyuGXJ6zvqDaSDXwNCC8ke6QQJbRSqci6RfFGmnN/0/0B8669C70E9ED5741CBEC40B6864B185977F0A18.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0B8669C70E9ED5741CBEC40B6864B185977F0A18.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 07:57:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:3d:09:fd:cf:c3:02:95:5d:dd:17:8c:50:a7:e0:e2:3d:85:7b:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0B8669C70E9ED5741CBEC40B6864B185977F0A18
        Validity
            Not Before: Oct  2 19:28:03 2024 GMT
            Not After : Oct  1 19:33:03 2025 GMT
        Subject: CN=DDDD76F611E25176329FB24469A68F50337089FF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:f8:30:70:da:de:4a:93:ae:ce:9a:54:ee:b9:
                    24:3e:2e:5e:52:98:dc:2d:8e:f1:4b:5f:c2:95:55:
                    5a:07:80:58:94:bc:c4:ea:32:be:e6:61:34:c4:a8:
                    77:1c:2f:74:00:16:fa:c1:44:4c:8a:02:1e:45:b0:
                    e5:1b:fd:a2:99:07:06:b5:ab:63:60:f1:38:62:a3:
                    95:56:d1:6b:cc:e3:e0:82:86:e0:6a:66:4c:43:9c:
                    9a:6c:20:3d:fc:6b:37:5d:71:a9:18:31:6d:9b:ce:
                    95:43:c1:5e:c7:f6:4a:1d:02:24:df:8a:f6:ae:a2:
                    f7:c4:7a:ac:55:c5:82:e5:bc:4b:25:5d:4a:53:e5:
                    88:97:b0:57:95:af:d5:fd:71:ba:f0:03:2a:87:99:
                    a4:60:78:f9:f5:86:23:a3:d9:58:22:91:98:a9:eb:
                    c3:af:90:96:b1:da:50:86:24:8e:66:77:e9:c4:3e:
                    70:a7:bb:d4:14:03:0f:40:95:17:e9:8d:82:7c:a1:
                    3b:9d:16:fc:1d:b2:d4:40:cf:29:d2:4d:23:6c:6b:
                    42:7d:0c:a3:e6:d7:28:9e:6e:c7:f3:06:53:6c:bf:
                    15:40:c2:5b:9a:cb:bb:32:c0:e0:0b:77:d5:06:86:
                    65:1e:e1:e4:51:98:c6:86:39:6f:60:04:24:7e:ed:
                    94:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:DD:76:F6:11:E2:51:76:32:9F:B2:44:69:A6:8F:50:33:70:89:FF
            X509v3 Authority Key Identifier:
                keyid:0B:86:69:C7:0E:9E:D5:74:1C:BE:C4:0B:68:64:B1:85:97:7F:0A:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3XfMyyuGXJ6zvqDaSDXwNCC8ke6QQJbRSqci6RfFGmnN/0/0B8669C70E9ED5741CBEC40B6864B185977F0A18.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0B8669C70E9ED5741CBEC40B6864B185977F0A18.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3XfMyyuGXJ6zvqDaSDXwNCC8ke6QQJbRSqci6RfFGmnN/0/34352e37312e3134312e302f32342d3234203d3e20323636393137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.71.141.0/24

    Signature Algorithm: sha256WithRSAEncryption
         65:56:c4:92:77:68:fb:d9:7a:28:0c:a1:00:7b:fd:61:ee:d7:
         c4:b8:ed:7f:50:11:69:d9:a3:2b:97:ae:4b:3a:d6:6d:62:62:
         00:b8:a7:68:2e:d6:58:1b:09:da:2e:5a:1a:bb:c6:60:ab:ab:
         81:e0:dd:6a:eb:78:42:90:32:c8:72:74:56:03:0f:ab:45:07:
         32:23:ec:55:74:32:8a:0e:10:e8:9a:1f:2a:f0:04:40:89:9d:
         23:cb:6a:ca:f9:66:67:0c:31:f0:d3:ea:c5:d1:80:b0:2d:f9:
         fc:59:c4:67:23:bd:df:a8:a1:d6:1f:43:74:24:a2:bc:1a:d7:
         12:12:cd:ad:f6:b9:e2:3e:4a:02:41:0b:f6:6a:bf:ae:2c:db:
         c7:e6:a6:d5:9e:d9:e9:8a:02:2d:9a:28:b0:b1:91:25:54:5f:
         fb:a0:ae:b9:39:d0:3b:2d:77:63:30:ab:b0:9d:b8:13:ed:3e:
         c4:10:41:64:9a:c2:4f:4c:bb:d2:d0:77:56:86:f6:09:22:2d:
         77:46:fd:bc:2e:ed:61:0a:2f:c1:85:c4:00:47:8e:3f:44:e0:
         a4:06:80:42:52:c8:2e:78:23:3a:63:ce:4b:f8:56:d2:b5:67:
         5b:93:fe:c8:ac:9a:dd:49:8a:2c:7f:f6:55:47:02:db:9e:a4:
         c6:20:26:a5
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUYz0J/c/DApVd3ReMUKfg4j2Fe3gwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEI4NjY5QzcwRTlFRDU3NDFDQkVDNDBCNjg2NEIxODU5
NzdGMEExODAeFw0yNDEwMDIxOTI4MDNaFw0yNTEwMDExOTMzMDNaMDMxMTAvBgNV
BAMTKEREREQ3NkY2MTFFMjUxNzYzMjlGQjI0NDY5QTY4RjUwMzM3MDg5RkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCS+DBw2t5Kk67OmlTuuSQ+Ll5S
mNwtjvFLX8KVVVoHgFiUvMTqMr7mYTTEqHccL3QAFvrBREyKAh5FsOUb/aKZBwa1
q2Ng8Thio5VW0WvM4+CChuBqZkxDnJpsID38azddcakYMW2bzpVDwV7H9kodAiTf
ivauovfEeqxVxYLlvEslXUpT5YiXsFeVr9X9cbrwAyqHmaRgePn1hiOj2VgikZip
68OvkJax2lCGJI5md+nEPnCnu9QUAw9AlRfpjYJ8oTudFvwdstRAzynSTSNsa0J9
DKPm1yiebsfzBlNsvxVAwluay7sywOALd9UGhmUe4eRRmMaGOW9gBCR+7ZQXAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQU3d129hHiUXYyn7JEaaaPUDNwif8wHwYDVR0j
BBgwFoAUC4Zpxw6e1XQcvsQLaGSxhZd/ChgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM1hmTXl5dUdYSjZ6dnFEYVNEWHdOQ0M4a2U2UVFKYlJTcWNpNlJmRkdt
bk4vMC8wQjg2NjlDNzBFOUVENTc0MUNCRUM0MEI2ODY0QjE4NTk3N0YwQTE4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzBCODY2OUM3MEU5RUQ1NzQx
Q0JFQzQwQjY4NjRCMTg1OTc3RjBBMTguY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNYZk15eXVHWEo2enZxRGFTRFh3TkNDOGtlNlFRSmJSU3FjaTZSZkZHbW5OLzAv
MzQzNTJlMzczMTJlMzEzNDMxMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM2
MzkzMTM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQALUeNMA0GCSqGSIb3DQEBCwUAA4IBAQBlVsSSd2j7
2XooDKEAe/1h7tfEuO1/UBFp2aMrl65LOtZtYmIAuKdoLtZYGwnaLloau8Zgq6uB
4N1q63hCkDLIcnRWAw+rRQcyI+xVdDKKDhDomh8q8ARAiZ0jy2rK+WZnDDHw0+rF
0YCwLfn8WcRnI73fqKHWH0N0JKK8GtcSEs2t9rniPkoCQQv2ar+uLNvH5qbVntnp
igItmiiwsZElVF/7oK65OdA7LXdjMKuwnbgT7T7EEEFkmsJPTLvS0HdWhvYJIi13
Rv28Lu1hCi/BhcQAR44/ROCkBoBCUsgueCM6Y85L+FbStWdbk/7IrJrdSYosf/ZV
RwLbnqTGICal
-----END CERTIFICATE-----
Generated at Tue Nov 26 07:51:01 2024 by rpki-client on console-fra.rpki-client.org