Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4GtEY61VzbXM3sSXnt9cWLAZeLKpb7bJH9jt1kwZLjtH/1/34352e3138312e39342e302f32342d3234203d3e20323639313735.roa
File:                     34352e3138312e39342e302f32342d3234203d3e20323639313735.roa (raw, json)
Hash identifier:          ViL9z2d5VKBeFrW01oEe+IyF5B45M98cIfCRHIxeZPk=
Subject key identifier:   B1:1E:F7:7A:00:53:3D:0A:49:AF:88:64:72:3B:C9:E4:E9:0B:73:FF
Certificate issuer:       /CN=D06B11E63B9C70F7F811C6806C7FE298F81295CC
Certificate serial:       245FF65EFE255B65BC9CC563654B59E5BF2A1794
Authority key identifier: D0:6B:11:E6:3B:9C:70:F7:F8:11:C6:80:6C:7F:E2:98:F8:12:95:CC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D06B11E63B9C70F7F811C6806C7FE298F81295CC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4GtEY61VzbXM3sSXnt9cWLAZeLKpb7bJH9jt1kwZLjtH/1/34352e3138312e39342e302f32342d3234203d3e20323639313735.roa
Signing time:             Wed 03 Apr 2024 21:10:47 +0000
ROA not before:           Wed 03 Apr 2024 21:05:47 +0000
ROA not after:            Wed 02 Apr 2025 21:10:47 +0000
asID:                     269175
IP address blocks:        45.181.94.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4GtEY61VzbXM3sSXnt9cWLAZeLKpb7bJH9jt1kwZLjtH/1/D06B11E63B9C70F7F811C6806C7FE298F81295CC.crl
                          rsync://rpki-repo.registro.br/repo/4GtEY61VzbXM3sSXnt9cWLAZeLKpb7bJH9jt1kwZLjtH/1/D06B11E63B9C70F7F811C6806C7FE298F81295CC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D06B11E63B9C70F7F811C6806C7FE298F81295CC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 28 Jun 2024 18:38:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:5f:f6:5e:fe:25:5b:65:bc:9c:c5:63:65:4b:59:e5:bf:2a:17:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D06B11E63B9C70F7F811C6806C7FE298F81295CC
        Validity
            Not Before: Apr  3 21:05:47 2024 GMT
            Not After : Apr  2 21:10:47 2025 GMT
        Subject: CN=B11EF77A00533D0A49AF8864723BC9E4E90B73FF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:38:b6:07:5e:ab:ca:42:74:85:84:44:71:00:
                    6c:1f:ce:02:a4:e0:4b:33:95:08:a6:e8:bc:b7:14:
                    12:d2:e7:bb:dc:c7:22:38:a3:25:10:80:3c:dc:a3:
                    7a:f1:aa:ba:47:a4:7a:35:7f:e4:bd:20:b5:45:17:
                    dc:1f:6d:1c:ac:d0:b1:e2:bf:7e:19:26:10:03:78:
                    9d:76:82:79:c1:bf:15:bd:66:63:4e:e5:f5:f6:05:
                    cf:6f:2d:5e:a4:7a:ec:50:9c:be:7f:17:41:4c:e5:
                    36:b1:2b:77:2f:8a:34:c4:67:d1:15:d7:5c:ea:1e:
                    bc:33:6a:f7:a4:82:72:4d:fd:27:23:2f:f9:43:b1:
                    21:40:59:0b:77:25:31:a7:00:69:9e:99:65:29:bb:
                    89:97:a9:40:fe:4c:af:dd:e5:ac:45:09:8c:e1:39:
                    6b:20:0d:4f:a5:f2:1c:c7:12:83:6f:3d:ea:16:6a:
                    52:65:f4:59:8e:8d:1a:73:32:26:41:ac:70:2a:06:
                    59:ed:bf:1f:6a:27:e3:b4:75:71:f5:5d:42:5d:c4:
                    1e:3d:aa:44:ce:c4:00:21:d6:c9:c7:76:1e:bd:69:
                    4e:59:53:18:3c:b9:9d:92:a9:6f:43:6d:c7:e0:01:
                    6d:56:f3:c3:f8:97:f0:2d:5b:78:d1:32:c6:d7:c3:
                    8a:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:1E:F7:7A:00:53:3D:0A:49:AF:88:64:72:3B:C9:E4:E9:0B:73:FF
            X509v3 Authority Key Identifier:
                keyid:D0:6B:11:E6:3B:9C:70:F7:F8:11:C6:80:6C:7F:E2:98:F8:12:95:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4GtEY61VzbXM3sSXnt9cWLAZeLKpb7bJH9jt1kwZLjtH/1/D06B11E63B9C70F7F811C6806C7FE298F81295CC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D06B11E63B9C70F7F811C6806C7FE298F81295CC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4GtEY61VzbXM3sSXnt9cWLAZeLKpb7bJH9jt1kwZLjtH/1/34352e3138312e39342e302f32342d3234203d3e20323639313735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.181.94.0/24

    Signature Algorithm: sha256WithRSAEncryption
         74:34:58:f4:71:39:4d:48:e8:00:a9:8b:b7:d5:fd:2f:0d:e1:
         37:59:3f:5d:6b:57:b6:ab:d8:43:eb:22:b9:20:0b:2c:35:c7:
         d8:bd:8b:fd:ff:00:f1:71:54:3f:1e:e3:fc:33:12:ab:ab:c1:
         e2:48:45:e0:42:a3:bc:ad:61:57:39:4b:e3:e7:d3:b8:cf:07:
         36:40:63:da:58:11:a1:52:b0:01:33:2e:c5:94:b1:c7:c4:74:
         1b:5e:2a:95:b7:a9:0e:54:7c:ea:93:7e:2b:bd:44:cf:a1:bc:
         67:8c:f3:b4:6c:c3:fa:d3:49:fa:9e:6e:6d:e0:3e:df:90:e4:
         1d:d7:41:5e:3e:7b:74:21:5e:b5:41:4b:06:ab:f9:6d:09:8a:
         3c:87:7d:20:f8:5a:fa:05:c7:dd:5f:1e:83:da:2e:3c:3f:86:
         7a:3a:be:f6:d8:6d:02:70:73:59:d5:97:f2:47:38:36:05:a7:
         da:45:4c:fc:53:64:b1:1f:f5:0a:58:e9:ed:b0:8e:a6:58:44:
         d7:49:68:fc:e2:ba:a9:5e:45:f1:11:61:d8:7b:fa:62:15:42:
         44:e0:09:a5:f4:7f:31:66:47:2f:0e:cf:72:7f:19:84:8c:93:
         ab:5a:e0:4c:67:49:27:47:db:b7:d4:03:a8:31:11:11:9c:27:
         6b:85:db:b6
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUJF/2Xv4lW2W8nMVjZUtZ5b8qF5QwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDA2QjExRTYzQjlDNzBGN0Y4MTFDNjgwNkM3RkUyOThG
ODEyOTVDQzAeFw0yNDA0MDMyMTA1NDdaFw0yNTA0MDIyMTEwNDdaMDMxMTAvBgNV
BAMTKEIxMUVGNzdBMDA1MzNEMEE0OUFGODg2NDcyM0JDOUU0RTkwQjczRkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIOLYHXqvKQnSFhERxAGwfzgKk
4EszlQim6Ly3FBLS57vcxyI4oyUQgDzco3rxqrpHpHo1f+S9ILVFF9wfbRys0LHi
v34ZJhADeJ12gnnBvxW9ZmNO5fX2Bc9vLV6keuxQnL5/F0FM5TaxK3cvijTEZ9EV
11zqHrwzavekgnJN/ScjL/lDsSFAWQt3JTGnAGmemWUpu4mXqUD+TK/d5axFCYzh
OWsgDU+l8hzHEoNvPeoWalJl9FmOjRpzMiZBrHAqBlntvx9qJ+O0dXH1XUJdxB49
qkTOxAAh1snHdh69aU5ZUxg8uZ2SqW9DbcfgAW1W88P4l/AtW3jRMsbXw4pdAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUsR73egBTPQpJr4hkcjvJ5OkLc/8wHwYDVR0j
BBgwFoAU0GsR5juccPf4EcaAbH/imPgSlcwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNEd0RVk2MVZ6YlhNM3NTWG50OWNXTEFaZUxLcGI3YkpIOWp0MWt3Wkxq
dEgvMS9EMDZCMTFFNjNCOUM3MEY3RjgxMUM2ODA2QzdGRTI5OEY4MTI5NUNDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0QwNkIxMUU2M0I5QzcwRjdG
ODExQzY4MDZDN0ZFMjk4RjgxMjk1Q0MuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRHdEVZNjFWemJYTTNzU1hudDljV0xBWmVMS3BiN2JKSDlqdDFrd1pManRILzEv
MzQzNTJlMzEzODMxMmUzOTM0MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM5
MzEzNzM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQALbVeMA0GCSqGSIb3DQEBCwUAA4IBAQB0NFj0cTlN
SOgAqYu31f0vDeE3WT9da1e2q9hD6yK5IAssNcfYvYv9/wDxcVQ/HuP8MxKrq8Hi
SEXgQqO8rWFXOUvj59O4zwc2QGPaWBGhUrABMy7FlLHHxHQbXiqVt6kOVHzqk34r
vUTPobxnjPO0bMP600n6nm5t4D7fkOQd10FePnt0IV61QUsGq/ltCYo8h30g+Fr6
BcfdXx6D2i48P4Z6Or722G0CcHNZ1ZfyRzg2BafaRUz8U2SxH/UKWOntsI6mWETX
SWj84rqpXkXxEWHYe/piFUJE4Aml9H8xZkcvDs9yfxmEjJOrWuBMZ0knR9u31AOo
MRERnCdrhdu2
-----END CERTIFICATE-----
Generated at Thu Jun 27 18:23:47 2024 by rpki-client on console-fra.rpki-client.org