Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3j65qZJqrAJDeRE89xEnU6Eq3TDfFUNAkgG2hwpZErAE/0/34352e3137362e3135322e302f32322d3234203d3e20323639303037.roa
File:                     34352e3137362e3135322e302f32322d3234203d3e20323639303037.roa (raw, json)
Hash identifier:          Qvum6A9tSRyAMauMd+lE/0rLlkyYbtVYCXvqJOtOlgE=
Subject key identifier:   06:DE:BE:71:11:1B:49:B3:E7:F1:BF:CF:B2:F5:3C:66:FB:EB:00:B9
Certificate issuer:       /CN=3B18B7DC9E3A9EE82BED80DD09B57D20045B0C30
Certificate serial:       51C587FB73305FB19CA6888D09E99849A969B0C7
Authority key identifier: 3B:18:B7:DC:9E:3A:9E:E8:2B:ED:80:DD:09:B5:7D:20:04:5B:0C:30
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3B18B7DC9E3A9EE82BED80DD09B57D20045B0C30.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3j65qZJqrAJDeRE89xEnU6Eq3TDfFUNAkgG2hwpZErAE/0/34352e3137362e3135322e302f32322d3234203d3e20323639303037.roa
Signing time:             Wed 10 Jul 2024 14:07:03 +0000
ROA not before:           Wed 10 Jul 2024 14:02:03 +0000
ROA not after:            Wed 09 Jul 2025 14:07:03 +0000
asID:                     269007
IP address blocks:        45.176.152.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3j65qZJqrAJDeRE89xEnU6Eq3TDfFUNAkgG2hwpZErAE/0/3B18B7DC9E3A9EE82BED80DD09B57D20045B0C30.crl
                          rsync://rpki-repo.registro.br/repo/3j65qZJqrAJDeRE89xEnU6Eq3TDfFUNAkgG2hwpZErAE/0/3B18B7DC9E3A9EE82BED80DD09B57D20045B0C30.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3B18B7DC9E3A9EE82BED80DD09B57D20045B0C30.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:c5:87:fb:73:30:5f:b1:9c:a6:88:8d:09:e9:98:49:a9:69:b0:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3B18B7DC9E3A9EE82BED80DD09B57D20045B0C30
        Validity
            Not Before: Jul 10 14:02:03 2024 GMT
            Not After : Jul  9 14:07:03 2025 GMT
        Subject: CN=06DEBE71111B49B3E7F1BFCFB2F53C66FBEB00B9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:00:13:03:8d:a5:cd:9a:30:52:2e:d2:a7:a7:
                    45:49:0f:6d:43:1e:69:87:2e:a4:ee:85:07:57:2d:
                    08:26:e4:5d:de:c1:ae:51:fd:30:68:9a:11:24:c1:
                    f8:49:e5:a9:19:0d:cc:4f:7e:5a:67:6e:b7:40:89:
                    60:f6:5d:e5:57:73:82:46:fa:c2:3f:ed:14:51:da:
                    ad:db:f8:14:a6:b3:38:5b:e8:16:8c:34:8a:84:d1:
                    6e:d0:4f:ee:e9:f5:73:00:b7:1c:b6:a3:e7:85:70:
                    3c:b0:d1:e7:8e:b0:d2:49:28:c0:c8:06:17:69:e5:
                    2f:36:1f:bf:d3:55:ea:09:e5:e0:ea:49:54:de:f0:
                    07:6e:f8:5f:db:4b:05:4e:d7:13:57:5f:49:ce:e3:
                    37:4d:26:b8:06:7e:7c:6f:38:6f:6c:87:40:9b:6e:
                    f1:28:04:68:6d:99:1b:fc:aa:7e:0f:06:85:2d:f1:
                    cd:fe:61:90:28:db:31:96:b0:df:5e:68:58:e5:78:
                    ce:35:82:ab:de:d4:00:eb:6a:b8:61:66:48:8a:84:
                    ac:61:62:45:31:a8:dd:2b:72:98:1d:d7:51:e7:b5:
                    ac:02:80:27:03:fc:fe:e7:87:85:09:74:c3:bd:67:
                    e1:9b:32:f6:b7:eb:96:f4:74:30:13:31:b6:7b:91:
                    a0:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:DE:BE:71:11:1B:49:B3:E7:F1:BF:CF:B2:F5:3C:66:FB:EB:00:B9
            X509v3 Authority Key Identifier:
                keyid:3B:18:B7:DC:9E:3A:9E:E8:2B:ED:80:DD:09:B5:7D:20:04:5B:0C:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3j65qZJqrAJDeRE89xEnU6Eq3TDfFUNAkgG2hwpZErAE/0/3B18B7DC9E3A9EE82BED80DD09B57D20045B0C30.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3B18B7DC9E3A9EE82BED80DD09B57D20045B0C30.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3j65qZJqrAJDeRE89xEnU6Eq3TDfFUNAkgG2hwpZErAE/0/34352e3137362e3135322e302f32322d3234203d3e20323639303037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.176.152.0/22

    Signature Algorithm: sha256WithRSAEncryption
         20:79:65:01:57:d4:75:1d:59:f4:81:ed:ec:4e:ec:54:59:91:
         0b:62:8b:82:7a:17:e6:a2:bc:88:7b:bc:8d:12:7a:cd:f2:af:
         d4:31:01:71:81:0c:78:c3:d5:5b:b2:0e:5f:21:dc:09:39:ca:
         85:1c:a8:ec:5d:fa:4d:fd:ac:33:94:db:57:00:b5:a3:74:b0:
         c7:6b:6f:8d:7d:91:a2:47:17:f0:4a:fb:3c:1b:a4:fc:77:8e:
         3f:53:bc:c6:23:ef:91:09:8f:a8:52:85:50:0a:e9:56:c0:6e:
         a0:35:77:ba:43:dc:d6:1c:bb:ac:6c:88:01:5c:0d:a6:6b:a0:
         9e:f6:c0:01:69:43:07:94:f5:3d:c5:b7:3d:cc:d5:53:e4:8d:
         2b:70:81:76:fa:a6:e5:e7:85:33:3c:e5:89:54:bf:ab:17:71:
         22:0e:bb:ae:a4:3e:99:12:b6:79:03:85:18:bb:12:27:c8:aa:
         0b:22:c0:67:03:68:c0:26:e7:02:e8:80:c5:a2:ce:ff:cf:99:
         ff:ce:79:d1:67:b5:82:9b:2f:44:bd:7f:31:4a:75:54:3d:0f:
         cb:66:c1:a8:d2:03:e0:1c:74:a5:da:49:1c:14:cd:e9:87:38:
         84:4a:2b:43:8a:e5:ea:28:0f:fc:c3:b7:e3:45:c8:98:ab:9f:
         b2:e0:b1:d7
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUUcWH+3MwX7GcpoiNCemYSalpsMcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0IxOEI3REM5RTNBOUVFODJCRUQ4MEREMDlCNTdEMjAw
NDVCMEMzMDAeFw0yNDA3MTAxNDAyMDNaFw0yNTA3MDkxNDA3MDNaMDMxMTAvBgNV
BAMTKDA2REVCRTcxMTExQjQ5QjNFN0YxQkZDRkIyRjUzQzY2RkJFQjAwQjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZABMDjaXNmjBSLtKnp0VJD21D
HmmHLqTuhQdXLQgm5F3ewa5R/TBomhEkwfhJ5akZDcxPflpnbrdAiWD2XeVXc4JG
+sI/7RRR2q3b+BSmszhb6BaMNIqE0W7QT+7p9XMAtxy2o+eFcDyw0eeOsNJJKMDI
Bhdp5S82H7/TVeoJ5eDqSVTe8Adu+F/bSwVO1xNXX0nO4zdNJrgGfnxvOG9sh0Cb
bvEoBGhtmRv8qn4PBoUt8c3+YZAo2zGWsN9eaFjleM41gqve1ADrarhhZkiKhKxh
YkUxqN0rcpgd11HntawCgCcD/P7nh4UJdMO9Z+GbMva365b0dDATMbZ7kaCBAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUBt6+cREbSbPn8b/PsvU8ZvvrALkwHwYDVR0j
BBgwFoAUOxi33J46nugr7YDdCbV9IARbDDAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM2o2NXFaSnFyQUpEZVJFODl4RW5VNkVxM1REZkZVTkFrZ0cyaHdwWkVy
QUUvMC8zQjE4QjdEQzlFM0E5RUU4MkJFRDgwREQwOUI1N0QyMDA0NUIwQzMwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzNCMThCN0RDOUUzQTlFRTgy
QkVEODBERDA5QjU3RDIwMDQ1QjBDMzAuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNqNjVxWkpxckFKRGVSRTg5eEVuVTZFcTNURGZGVU5Ba2dHMmh3cFpFckFFLzAv
MzQzNTJlMzEzNzM2MmUzMTM1MzIyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM2
MzkzMDMwMzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAItsJgwDQYJKoZIhvcNAQELBQADggEBACB5ZQFX
1HUdWfSB7exO7FRZkQtii4J6F+aivIh7vI0Ses3yr9QxAXGBDHjD1VuyDl8h3Ak5
yoUcqOxd+k39rDOU21cAtaN0sMdrb419kaJHF/BK+zwbpPx3jj9TvMYj75EJj6hS
hVAK6VbAbqA1d7pD3NYcu6xsiAFcDaZroJ72wAFpQweU9T3Ftz3M1VPkjStwgXb6
puXnhTM85YlUv6sXcSIOu66kPpkStnkDhRi7EifIqgsiwGcDaMAm5wLogMWizv/P
mf/OedFntYKbL0S9fzFKdVQ9D8tmwajSA+AcdKXaSRwUzemHOIRKK0OK5eooD/zD
t+NFyJirn7Lgsdc=
-----END CERTIFICATE-----
Generated at Sat Nov 23 02:30:02 2024 by rpki-client on console-fra.rpki-client.org