Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4MrmEmRR6ax4jWTi8k8p83Lcn6SUWAjJGDMV9RhJhTe5/1/34352e3136312e342e302f32322d3232203d3e20323638343234.roa
File:                     34352e3136312e342e302f32322d3232203d3e20323638343234.roa (raw, json)
Hash identifier:          cD0tKuLiQlgOP+9JY/9FZ2tSM4AbZeE0wg6V8vDNRXY=
Subject key identifier:   7F:24:43:C4:32:C3:6B:2C:95:EA:A8:8B:E2:A7:93:34:32:FD:6D:BC
Certificate issuer:       /CN=9392D1DCA37701F3ACDBA5DAE6B44D125C28AE71
Certificate serial:       4F97263A1DFBD9C7C9BD077078B4066C66DA35F4
Authority key identifier: 93:92:D1:DC:A3:77:01:F3:AC:DB:A5:DA:E6:B4:4D:12:5C:28:AE:71
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9392D1DCA37701F3ACDBA5DAE6B44D125C28AE71.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4MrmEmRR6ax4jWTi8k8p83Lcn6SUWAjJGDMV9RhJhTe5/1/34352e3136312e342e302f32322d3232203d3e20323638343234.roa
Signing time:             Thu 04 Apr 2024 01:36:17 +0000
ROA not before:           Thu 04 Apr 2024 01:31:17 +0000
ROA not after:            Thu 03 Apr 2025 01:36:17 +0000
asID:                     268424
IP address blocks:        45.161.4.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4MrmEmRR6ax4jWTi8k8p83Lcn6SUWAjJGDMV9RhJhTe5/1/9392D1DCA37701F3ACDBA5DAE6B44D125C28AE71.crl
                          rsync://rpki-repo.registro.br/repo/4MrmEmRR6ax4jWTi8k8p83Lcn6SUWAjJGDMV9RhJhTe5/1/9392D1DCA37701F3ACDBA5DAE6B44D125C28AE71.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9392D1DCA37701F3ACDBA5DAE6B44D125C28AE71.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 10:53:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:97:26:3a:1d:fb:d9:c7:c9:bd:07:70:78:b4:06:6c:66:da:35:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9392D1DCA37701F3ACDBA5DAE6B44D125C28AE71
        Validity
            Not Before: Apr  4 01:31:17 2024 GMT
            Not After : Apr  3 01:36:17 2025 GMT
        Subject: CN=7F2443C432C36B2C95EAA88BE2A7933432FD6DBC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:c9:65:38:db:48:df:ce:fd:75:38:5e:3b:40:
                    71:a3:b0:ed:47:20:4b:4b:2a:64:57:76:b1:b7:20:
                    4c:fe:2c:fc:30:65:5f:1c:70:cb:42:27:f1:0d:a4:
                    0a:ce:fb:e0:93:05:06:15:9b:f3:ac:26:e4:44:a0:
                    c8:d0:b0:5a:d1:13:18:09:00:ba:f5:2c:70:a2:fd:
                    3e:e6:e4:d2:2f:3d:36:94:3e:90:9c:d8:76:98:3f:
                    53:b4:66:25:78:a1:d3:08:d9:7c:a3:ea:30:da:23:
                    9e:3d:20:eb:a7:e4:9a:9f:69:3f:fd:b7:78:3a:f3:
                    e6:7e:a3:a9:f3:1e:37:9a:16:89:4f:b0:10:09:12:
                    ac:65:1e:dc:51:ff:ab:e2:84:b3:64:d4:3b:23:02:
                    cf:ca:2c:ed:68:8e:19:a7:69:78:23:48:56:ac:bb:
                    38:52:6b:88:1a:d2:a8:ee:88:22:c0:bb:3d:e9:d6:
                    b3:ee:bd:f8:00:f0:07:b2:1b:49:2b:ed:af:53:e7:
                    4f:a2:b9:4d:e3:59:cd:19:af:cf:0b:5b:d8:97:85:
                    0f:37:83:35:64:31:62:89:c3:4e:7b:3b:72:b6:94:
                    05:fa:df:ab:9d:81:0d:76:b2:13:4f:5a:06:98:86:
                    1e:17:c5:2a:67:8d:e0:b6:46:31:3b:d0:e4:14:42:
                    1f:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:24:43:C4:32:C3:6B:2C:95:EA:A8:8B:E2:A7:93:34:32:FD:6D:BC
            X509v3 Authority Key Identifier:
                keyid:93:92:D1:DC:A3:77:01:F3:AC:DB:A5:DA:E6:B4:4D:12:5C:28:AE:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4MrmEmRR6ax4jWTi8k8p83Lcn6SUWAjJGDMV9RhJhTe5/1/9392D1DCA37701F3ACDBA5DAE6B44D125C28AE71.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9392D1DCA37701F3ACDBA5DAE6B44D125C28AE71.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4MrmEmRR6ax4jWTi8k8p83Lcn6SUWAjJGDMV9RhJhTe5/1/34352e3136312e342e302f32322d3232203d3e20323638343234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.161.4.0/22

    Signature Algorithm: sha256WithRSAEncryption
         39:c3:d7:58:3d:5f:85:16:9a:53:ed:1e:b8:68:f4:4b:bc:26:
         a1:1b:26:43:5d:9e:80:07:92:32:35:9f:20:3b:1d:91:2b:09:
         09:1d:42:e1:7d:1c:f4:92:48:6d:00:6c:6b:20:c5:3c:7f:15:
         67:d8:52:d7:a2:c5:fa:04:f3:6c:18:d9:8f:bd:80:a7:23:c8:
         67:69:00:fc:43:6c:f3:c5:72:e9:b9:ae:41:db:41:ef:9d:91:
         63:a5:b1:50:08:aa:ef:61:5a:a0:24:3e:bc:50:a6:7a:d2:81:
         bb:3a:1c:af:ea:d0:32:03:dc:8c:fc:a1:e0:19:9c:bc:9d:88:
         e3:fa:d3:3c:39:ea:75:2e:4e:67:bb:c3:1b:c3:88:4a:92:2b:
         eb:99:21:1a:52:bd:91:42:4a:f6:fd:b3:dc:5c:22:cd:82:b1:
         67:e7:3f:82:63:1b:4a:67:24:a3:79:c6:02:c9:1b:45:ae:2a:
         d8:e3:76:73:f4:71:79:f2:84:93:1c:cb:74:df:7e:a0:54:58:
         5c:8f:85:c1:bf:08:54:da:ae:f0:c5:3d:cd:2e:11:99:8b:a4:
         66:0b:b6:df:9d:d8:9f:a4:ec:89:86:42:f7:45:79:2b:4f:36:
         2b:fa:39:86:62:dd:6e:30:22:f3:a4:41:e2:e5:25:45:3c:3e:
         fc:9b:b5:7b
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUT5cmOh372cfJvQdweLQGbGbaNfQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTM5MkQxRENBMzc3MDFGM0FDREJBNURBRTZCNDREMTI1
QzI4QUU3MTAeFw0yNDA0MDQwMTMxMTdaFw0yNTA0MDMwMTM2MTdaMDMxMTAvBgNV
BAMTKDdGMjQ0M0M0MzJDMzZCMkM5NUVBQTg4QkUyQTc5MzM0MzJGRDZEQkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdyWU420jfzv11OF47QHGjsO1H
IEtLKmRXdrG3IEz+LPwwZV8ccMtCJ/ENpArO++CTBQYVm/OsJuREoMjQsFrRExgJ
ALr1LHCi/T7m5NIvPTaUPpCc2HaYP1O0ZiV4odMI2Xyj6jDaI549IOun5JqfaT/9
t3g68+Z+o6nzHjeaFolPsBAJEqxlHtxR/6vihLNk1DsjAs/KLO1ojhmnaXgjSFas
uzhSa4ga0qjuiCLAuz3p1rPuvfgA8AeyG0kr7a9T50+iuU3jWc0Zr88LW9iXhQ83
gzVkMWKJw057O3K2lAX636udgQ12shNPWgaYhh4XxSpnjeC2RjE70OQUQh9pAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUfyRDxDLDayyV6qiL4qeTNDL9bbwwHwYDVR0j
BBgwFoAUk5LR3KN3AfOs26Xa5rRNElwornEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNE1ybUVtUlI2YXg0aldUaThrOHA4M0xjbjZTVVdBakpHRE1WOVJoSmhU
ZTUvMS85MzkyRDFEQ0EzNzcwMUYzQUNEQkE1REFFNkI0NEQxMjVDMjhBRTcxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzkzOTJEMURDQTM3NzAxRjNB
Q0RCQTVEQUU2QjQ0RDEyNUMyOEFFNzEuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRNcm1FbVJSNmF4NGpXVGk4azhwODNMY242U1VXQWpKR0RNVjlSaEpoVGU1LzEv
MzQzNTJlMzEzNjMxMmUzNDJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDMyMzYzODM0
MzIzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEAi2hBDANBgkqhkiG9w0BAQsFAAOCAQEAOcPXWD1fhRaa
U+0euGj0S7wmoRsmQ12egAeSMjWfIDsdkSsJCR1C4X0c9JJIbQBsayDFPH8VZ9hS
16LF+gTzbBjZj72ApyPIZ2kA/ENs88Vy6bmuQdtB752RY6WxUAiq72FaoCQ+vFCm
etKBuzocr+rQMgPcjPyh4BmcvJ2I4/rTPDnqdS5OZ7vDG8OISpIr65khGlK9kUJK
9v2z3FwizYKxZ+c/gmMbSmcko3nGAskbRa4q2ON2c/RxefKEkxzLdN9+oFRYXI+F
wb8IVNqu8MU9zS4RmYukZgu2353Yn6TsiYZC90V5K082K/o5hmLdbjAi86RB4uUl
RTw+/Ju1ew==
-----END CERTIFICATE-----
Generated at Sat Sep 28 12:10:01 2024 by rpki-client on console-ams.rpki-client.org