Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4CRkoZdGo79T8JKgVNEhu9N64BDZyqygCXn8C6oREw55/0/34352e3137302e36342e302f32322d3332203d3e20323632323835.roa
File:                     34352e3137302e36342e302f32322d3332203d3e20323632323835.roa (raw, json)
Hash identifier:          8/nSFxJjb2Jlein0Y0+jEa5q1ei/KMm51Ogzpm1jDD8=
Subject key identifier:   C2:56:9C:0C:00:54:53:6E:39:DB:95:3B:D1:19:D1:3B:15:CF:60:2E
Certificate issuer:       /CN=3D059F9D67F14B6324D19CEDD7A94CED91E5D920
Certificate serial:       63ADDCFE1D77BE2549563102BC590A80A6BB5704
Authority key identifier: 3D:05:9F:9D:67:F1:4B:63:24:D1:9C:ED:D7:A9:4C:ED:91:E5:D9:20
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D059F9D67F14B6324D19CEDD7A94CED91E5D920.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4CRkoZdGo79T8JKgVNEhu9N64BDZyqygCXn8C6oREw55/0/34352e3137302e36342e302f32322d3332203d3e20323632323835.roa
Signing time:             Thu 06 Jun 2024 18:15:32 +0000
ROA not before:           Thu 06 Jun 2024 18:10:32 +0000
ROA not after:            Thu 05 Jun 2025 18:15:32 +0000
asID:                     262285
IP address blocks:        45.170.64.0/22 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4CRkoZdGo79T8JKgVNEhu9N64BDZyqygCXn8C6oREw55/0/3D059F9D67F14B6324D19CEDD7A94CED91E5D920.crl
                          rsync://rpki-repo.registro.br/repo/4CRkoZdGo79T8JKgVNEhu9N64BDZyqygCXn8C6oREw55/0/3D059F9D67F14B6324D19CEDD7A94CED91E5D920.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D059F9D67F14B6324D19CEDD7A94CED91E5D920.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:ad:dc:fe:1d:77:be:25:49:56:31:02:bc:59:0a:80:a6:bb:57:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3D059F9D67F14B6324D19CEDD7A94CED91E5D920
        Validity
            Not Before: Jun  6 18:10:32 2024 GMT
            Not After : Jun  5 18:15:32 2025 GMT
        Subject: CN=C2569C0C0054536E39DB953BD119D13B15CF602E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:b3:a6:7b:44:cf:19:0c:6f:17:75:2f:69:a6:
                    27:b8:a3:8b:f8:c9:55:1a:73:b3:af:a0:52:cb:af:
                    34:93:d7:06:f6:21:6b:df:1b:71:54:9e:fc:cc:ee:
                    59:24:3d:e2:72:a9:4b:f7:e5:c3:d5:25:8f:13:7b:
                    66:9f:62:97:f1:f0:12:9a:4e:40:a5:f9:42:88:14:
                    d5:c6:9e:43:7a:81:f1:ca:1d:4b:48:56:0f:76:ab:
                    3f:f4:51:98:67:98:04:db:b5:31:66:f6:9a:91:05:
                    7a:62:6e:a1:59:b7:7f:a0:65:9a:c0:07:02:b6:3e:
                    3f:49:bc:ee:45:f3:42:8a:1a:76:bb:11:8d:4b:8f:
                    d7:09:e3:a9:6b:2c:0c:ca:64:04:0f:f2:5f:a7:23:
                    18:5a:98:5b:3e:d3:d0:5d:ab:6e:19:38:7a:a4:37:
                    26:5c:88:81:96:2a:57:0e:0d:cf:58:b2:70:19:bc:
                    1c:52:2e:45:f5:82:f3:41:85:ae:66:7e:29:3b:1e:
                    97:99:0e:ff:7a:89:4f:7b:e1:77:16:9b:36:d2:21:
                    91:5f:ad:5e:8e:e7:02:14:63:a4:1e:1f:9d:06:a5:
                    03:2d:a7:ca:50:b8:2f:56:07:e6:87:5b:8d:25:0b:
                    ca:8c:84:9d:7a:6a:31:34:b4:23:95:19:5b:ca:f8:
                    7a:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:56:9C:0C:00:54:53:6E:39:DB:95:3B:D1:19:D1:3B:15:CF:60:2E
            X509v3 Authority Key Identifier:
                keyid:3D:05:9F:9D:67:F1:4B:63:24:D1:9C:ED:D7:A9:4C:ED:91:E5:D9:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4CRkoZdGo79T8JKgVNEhu9N64BDZyqygCXn8C6oREw55/0/3D059F9D67F14B6324D19CEDD7A94CED91E5D920.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D059F9D67F14B6324D19CEDD7A94CED91E5D920.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4CRkoZdGo79T8JKgVNEhu9N64BDZyqygCXn8C6oREw55/0/34352e3137302e36342e302f32322d3332203d3e20323632323835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.170.64.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7c:4f:c0:a2:fe:cb:bb:e4:f0:8b:e6:63:6a:5f:3d:91:22:74:
         ee:6c:66:96:62:19:dd:d4:c5:9f:18:42:b9:66:9a:0a:0a:f3:
         fb:e6:09:24:dc:37:67:2e:a8:90:42:f2:cc:e3:47:0e:61:1e:
         c3:c7:a3:9d:35:25:95:49:ec:b7:5a:60:ad:7b:97:d1:be:d2:
         9b:70:5c:df:c8:06:d8:7b:4a:7d:cd:ce:64:69:6b:67:6a:2a:
         e1:b9:0f:ab:d4:05:fd:19:2e:49:a5:cb:9d:5e:d2:6f:2d:f4:
         26:b0:b6:92:e7:fa:9c:1a:df:cc:9b:f2:4f:15:b3:09:fb:c1:
         3d:a9:42:5d:0d:ab:3e:ea:ff:d1:08:a4:5c:eb:d8:31:5f:19:
         22:46:54:e2:2d:c0:dd:d9:60:dd:70:a8:11:f3:58:d4:bd:19:
         63:a0:f6:d5:60:de:9a:db:f3:e0:f8:09:11:2e:73:f4:ad:d8:
         99:89:51:2f:bd:70:52:53:62:c4:c4:cf:b5:08:df:66:0f:1c:
         35:64:55:70:9d:7a:4b:2b:83:ed:91:e3:41:51:df:c8:86:6d:
         01:dc:d1:21:71:73:d2:1f:e9:ec:91:90:bc:cd:fb:51:45:b8:
         df:90:32:26:5f:56:43:17:75:88:cc:2a:1e:ed:fc:47:99:7c:
         63:94:30:dd
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUY63c/h13viVJVjECvFkKgKa7VwQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0QwNTlGOUQ2N0YxNEI2MzI0RDE5Q0VERDdBOTRDRUQ5
MUU1RDkyMDAeFw0yNDA2MDYxODEwMzJaFw0yNTA2MDUxODE1MzJaMDMxMTAvBgNV
BAMTKEMyNTY5QzBDMDA1NDUzNkUzOURCOTUzQkQxMTlEMTNCMTVDRjYwMkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRs6Z7RM8ZDG8XdS9ppie4o4v4
yVUac7OvoFLLrzST1wb2IWvfG3FUnvzM7lkkPeJyqUv35cPVJY8Te2afYpfx8BKa
TkCl+UKIFNXGnkN6gfHKHUtIVg92qz/0UZhnmATbtTFm9pqRBXpibqFZt3+gZZrA
BwK2Pj9JvO5F80KKGna7EY1Lj9cJ46lrLAzKZAQP8l+nIxhamFs+09Bdq24ZOHqk
NyZciIGWKlcODc9YsnAZvBxSLkX1gvNBha5mfik7HpeZDv96iU974XcWmzbSIZFf
rV6O5wIUY6QeH50GpQMtp8pQuC9WB+aHW40lC8qMhJ16ajE0tCOVGVvK+HoFAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUwlacDABUU24525U70RnROxXPYC4wHwYDVR0j
BBgwFoAUPQWfnWfxS2Mk0Zzt16lM7ZHl2SAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNENSa29aZEdvNzlUOEpLZ1ZORWh1OU42NEJEWnlxeWdDWG44QzZvUkV3
NTUvMC8zRDA1OUY5RDY3RjE0QjYzMjREMTlDRUREN0E5NENFRDkxRTVEOTIwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzNEMDU5RjlENjdGMTRCNjMy
NEQxOUNFREQ3QTk0Q0VEOTFFNUQ5MjAuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRDUmtvWmRHbzc5VDhKS2dWTkVodTlONjRCRFp5cXlnQ1huOEM2b1JFdzU1LzAv
MzQzNTJlMzEzNzMwMmUzNjM0MmUzMDJmMzIzMjJkMzMzMjIwM2QzZTIwMzIzNjMy
MzIzODM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCLapAMA0GCSqGSIb3DQEBCwUAA4IBAQB8T8Ci/su7
5PCL5mNqXz2RInTubGaWYhnd1MWfGEK5ZpoKCvP75gkk3DdnLqiQQvLM40cOYR7D
x6OdNSWVSey3WmCte5fRvtKbcFzfyAbYe0p9zc5kaWtnairhuQ+r1AX9GS5Jpcud
XtJvLfQmsLaS5/qcGt/Mm/JPFbMJ+8E9qUJdDas+6v/RCKRc69gxXxkiRlTiLcDd
2WDdcKgR81jUvRljoPbVYN6a2/Pg+AkRLnP0rdiZiVEvvXBSU2LExM+1CN9mDxw1
ZFVwnXpLK4PtkeNBUd/Ihm0B3NEhcXPSH+nskZC8zftRRbjfkDImX1ZDF3WIzCoe
7fxHmXxjlDDd
-----END CERTIFICATE-----
Generated at Sat Nov 23 13:12:16 2024 by rpki-client on console-fra.rpki-client.org