Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3mWw1Xr6uwLcxy8TVcz2WiFsFHWkQGfcoDy4wgb8PQ6a/1/34352e3137392e3136382e302f32322d3234203d3e20323639303932.roa
File:                     34352e3137392e3136382e302f32322d3234203d3e20323639303932.roa (raw, json)
Hash identifier:          qX6jXnTvV+36Ni3d9rDqeu6fTafwKBR4uND2I12m2hc=
Subject key identifier:   98:EC:DC:7B:FB:8E:34:CF:CA:ED:A6:EB:38:86:0D:A1:D3:EE:F2:79
Certificate issuer:       /CN=A73D6D578C402A7DD8AED3B5544070906E2FE163
Certificate serial:       479A030C6A9F34448EA58CB0968E484A34EAE0C4
Authority key identifier: A7:3D:6D:57:8C:40:2A:7D:D8:AE:D3:B5:54:40:70:90:6E:2F:E1:63
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A73D6D578C402A7DD8AED3B5544070906E2FE163.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3mWw1Xr6uwLcxy8TVcz2WiFsFHWkQGfcoDy4wgb8PQ6a/1/34352e3137392e3136382e302f32322d3234203d3e20323639303932.roa
Signing time:             Thu 04 Apr 2024 06:02:04 +0000
ROA not before:           Thu 04 Apr 2024 05:57:04 +0000
ROA not after:            Thu 03 Apr 2025 06:02:04 +0000
asID:                     269092
IP address blocks:        45.179.168.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3mWw1Xr6uwLcxy8TVcz2WiFsFHWkQGfcoDy4wgb8PQ6a/1/A73D6D578C402A7DD8AED3B5544070906E2FE163.crl
                          rsync://rpki-repo.registro.br/repo/3mWw1Xr6uwLcxy8TVcz2WiFsFHWkQGfcoDy4wgb8PQ6a/1/A73D6D578C402A7DD8AED3B5544070906E2FE163.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A73D6D578C402A7DD8AED3B5544070906E2FE163.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 20:41:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:9a:03:0c:6a:9f:34:44:8e:a5:8c:b0:96:8e:48:4a:34:ea:e0:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A73D6D578C402A7DD8AED3B5544070906E2FE163
        Validity
            Not Before: Apr  4 05:57:04 2024 GMT
            Not After : Apr  3 06:02:04 2025 GMT
        Subject: CN=98ECDC7BFB8E34CFCAEDA6EB38860DA1D3EEF279
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:2f:4c:b8:09:09:8f:76:a5:36:95:1b:08:f4:
                    3f:d5:c0:d8:29:70:e4:24:fc:92:ba:f9:2f:88:63:
                    d5:1e:e8:cd:6f:b6:7b:1a:26:4b:45:7a:7c:bd:56:
                    38:4e:83:0b:d8:69:41:51:8b:c1:11:41:fd:3f:4f:
                    6e:47:e5:47:b3:8f:6f:b5:54:e6:65:d5:f1:39:4d:
                    d3:41:e9:f8:55:a7:6f:4d:2d:75:d9:62:71:0d:44:
                    f6:9e:ed:c7:fb:20:30:d6:ce:c5:da:87:ef:9b:ad:
                    10:35:c0:d7:c3:e8:6c:26:e6:5d:d8:e6:ee:40:fa:
                    a1:b4:29:b7:c2:b0:b8:a2:20:bc:78:41:1a:ba:9a:
                    2b:91:85:69:d4:2b:02:5b:0c:56:59:6b:34:2b:8f:
                    4e:fe:17:92:9e:77:26:84:d7:d2:de:6f:01:15:8c:
                    95:5d:f0:2d:48:41:a4:eb:a1:55:92:1c:59:80:28:
                    ec:a7:79:cf:ff:f5:cb:7b:d8:76:62:6b:0d:24:32:
                    6b:6b:69:87:9d:50:f1:c9:61:c4:84:c6:bc:4b:12:
                    37:64:09:5f:3d:1b:13:1d:17:08:a9:35:75:60:fb:
                    df:5b:82:1e:3e:dd:1b:14:fb:5c:66:51:42:34:88:
                    67:08:4e:05:e3:eb:47:0f:9b:91:76:b1:22:01:9d:
                    60:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:EC:DC:7B:FB:8E:34:CF:CA:ED:A6:EB:38:86:0D:A1:D3:EE:F2:79
            X509v3 Authority Key Identifier:
                keyid:A7:3D:6D:57:8C:40:2A:7D:D8:AE:D3:B5:54:40:70:90:6E:2F:E1:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3mWw1Xr6uwLcxy8TVcz2WiFsFHWkQGfcoDy4wgb8PQ6a/1/A73D6D578C402A7DD8AED3B5544070906E2FE163.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A73D6D578C402A7DD8AED3B5544070906E2FE163.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3mWw1Xr6uwLcxy8TVcz2WiFsFHWkQGfcoDy4wgb8PQ6a/1/34352e3137392e3136382e302f32322d3234203d3e20323639303932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.179.168.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2d:1d:06:57:ac:a5:51:78:2d:c6:d1:86:5b:df:01:4b:bd:bd:
         fa:5f:31:8e:fb:a6:37:38:13:e0:f4:ca:c4:50:c0:11:3e:35:
         45:58:ee:ce:b5:4f:a0:e0:3a:d1:d7:eb:73:8a:5d:ad:58:9f:
         c3:18:e1:5c:96:8d:ab:42:5c:84:42:6f:1f:ba:27:09:b6:f8:
         96:a6:02:d1:85:23:4e:24:86:9c:2d:33:64:9e:39:11:75:6e:
         87:a1:fb:e9:b9:ab:a8:92:7d:51:83:86:45:fd:62:d4:8f:28:
         a0:ce:26:f7:52:3d:d6:22:90:13:c0:d9:8a:6a:91:2f:2c:98:
         8e:46:95:7c:a3:b8:6e:2a:7e:29:50:03:cc:f4:6a:6f:5b:55:
         01:b3:01:85:87:4d:d2:6f:a2:ae:b4:8c:56:19:99:f4:47:b4:
         17:41:57:d8:6b:87:3c:09:0b:19:4e:e6:ba:66:f7:f8:76:7b:
         19:64:07:d9:e4:72:fc:56:e8:af:61:d1:77:2d:94:d1:f9:30:
         90:1e:0a:2b:02:d8:db:00:fa:19:51:d7:74:3f:8e:52:57:f4:
         e5:6a:cf:f3:5c:c8:2f:97:50:4e:87:19:b0:2e:b6:de:7f:a9:
         91:a7:40:71:7e:4d:ba:06:b6:e4:58:15:01:c0:79:ab:ee:69:
         7f:f7:3d:76
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUR5oDDGqfNESOpYywlo5ISjTq4MQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTczRDZENTc4QzQwMkE3REQ4QUVEM0I1NTQ0MDcwOTA2
RTJGRTE2MzAeFw0yNDA0MDQwNTU3MDRaFw0yNTA0MDMwNjAyMDRaMDMxMTAvBgNV
BAMTKDk4RUNEQzdCRkI4RTM0Q0ZDQUVEQTZFQjM4ODYwREExRDNFRUYyNzkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYL0y4CQmPdqU2lRsI9D/VwNgp
cOQk/JK6+S+IY9Ue6M1vtnsaJktFeny9VjhOgwvYaUFRi8ERQf0/T25H5Uezj2+1
VOZl1fE5TdNB6fhVp29NLXXZYnENRPae7cf7IDDWzsXah++brRA1wNfD6Gwm5l3Y
5u5A+qG0KbfCsLiiILx4QRq6miuRhWnUKwJbDFZZazQrj07+F5KedyaE19LebwEV
jJVd8C1IQaTroVWSHFmAKOynec//9ct72HZiaw0kMmtraYedUPHJYcSExrxLEjdk
CV89GxMdFwipNXVg+99bgh4+3RsU+1xmUUI0iGcITgXj60cPm5F2sSIBnWB1AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUmOzce/uONM/K7abrOIYNodPu8nkwHwYDVR0j
BBgwFoAUpz1tV4xAKn3YrtO1VEBwkG4v4WMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM21XdzFYcjZ1d0xjeHk4VFZjejJXaUZzRkhXa1FHZmNvRHk0d2diOFBR
NmEvMS9BNzNENkQ1NzhDNDAyQTdERDhBRUQzQjU1NDQwNzA5MDZFMkZFMTYzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0E3M0Q2RDU3OEM0MDJBN0RE
OEFFRDNCNTU0NDA3MDkwNkUyRkUxNjMuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNtV3cxWHI2dXdMY3h5OFRWY3oyV2lGc0ZIV2tRR2Zjb0R5NHdnYjhQUTZhLzEv
MzQzNTJlMzEzNzM5MmUzMTM2MzgyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM2
MzkzMDM5MzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAIts6gwDQYJKoZIhvcNAQELBQADggEBAC0dBles
pVF4LcbRhlvfAUu9vfpfMY77pjc4E+D0ysRQwBE+NUVY7s61T6DgOtHX63OKXa1Y
n8MY4VyWjatCXIRCbx+6Jwm2+JamAtGFI04khpwtM2SeORF1boeh++m5q6iSfVGD
hkX9YtSPKKDOJvdSPdYikBPA2YpqkS8smI5GlXyjuG4qfilQA8z0am9bVQGzAYWH
TdJvoq60jFYZmfRHtBdBV9hrhzwJCxlO5rpm9/h2exlkB9nkcvxW6K9h0XctlNH5
MJAeCisC2NsA+hlR13Q/jlJX9OVqz/NcyC+XUE6HGbAutt5/qZGnQHF+TboGtuRY
FQHAeavuaX/3PXY=
-----END CERTIFICATE-----
Generated at Sat Sep 28 21:52:35 2024 by rpki-client on console-fra.rpki-client.org