Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4umefsZ2LuYcP4ruSh4A9sxMNxMatAyB3so1C1hJimuk/0/34352e3233342e3137302e302f32332d3233203d3e20323637333735.roa
File:                     34352e3233342e3137302e302f32332d3233203d3e20323637333735.roa (raw, json)
Hash identifier:          iBc5c4Bkt25Aer6Pme5uMmxcfFHZ7q+eLiHerY0UR2w=
Subject key identifier:   E7:4A:3C:A5:CF:AB:85:4F:C0:56:E7:20:D1:E0:A3:F2:93:78:F2:89
Certificate issuer:       /CN=F810C50445389ABEA8804CA283554A795AB49C80
Certificate serial:       10368A838D598CCEACD18C7E4105DBFA292B28A7
Authority key identifier: F8:10:C5:04:45:38:9A:BE:A8:80:4C:A2:83:55:4A:79:5A:B4:9C:80
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F810C50445389ABEA8804CA283554A795AB49C80.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4umefsZ2LuYcP4ruSh4A9sxMNxMatAyB3so1C1hJimuk/0/34352e3233342e3137302e302f32332d3233203d3e20323637333735.roa
Signing time:             Wed 17 Apr 2024 19:08:00 +0000
ROA not before:           Wed 17 Apr 2024 19:03:00 +0000
ROA not after:            Wed 16 Apr 2025 19:08:00 +0000
asID:                     267375
IP address blocks:        45.234.170.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4umefsZ2LuYcP4ruSh4A9sxMNxMatAyB3so1C1hJimuk/0/F810C50445389ABEA8804CA283554A795AB49C80.crl
                          rsync://rpki-repo.registro.br/repo/4umefsZ2LuYcP4ruSh4A9sxMNxMatAyB3so1C1hJimuk/0/F810C50445389ABEA8804CA283554A795AB49C80.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F810C50445389ABEA8804CA283554A795AB49C80.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 07:49:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:36:8a:83:8d:59:8c:ce:ac:d1:8c:7e:41:05:db:fa:29:2b:28:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F810C50445389ABEA8804CA283554A795AB49C80
        Validity
            Not Before: Apr 17 19:03:00 2024 GMT
            Not After : Apr 16 19:08:00 2025 GMT
        Subject: CN=E74A3CA5CFAB854FC056E720D1E0A3F29378F289
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:34:50:92:4c:0a:dc:79:a5:57:c0:67:99:7e:
                    d9:73:af:e1:83:44:bc:0a:10:57:2d:2d:2a:a6:aa:
                    76:70:64:aa:df:03:81:78:e3:93:bc:81:c5:06:66:
                    89:d0:3c:42:31:68:ce:46:2b:40:48:a8:61:2a:4a:
                    73:05:13:bd:cd:b3:15:2f:d3:fa:73:28:76:b0:49:
                    9f:4e:d9:0d:1c:5a:29:28:b8:ce:6c:04:ea:5c:2d:
                    bd:f6:2d:b1:c7:12:b0:0d:18:77:aa:84:ad:bf:71:
                    e5:01:33:af:86:a1:85:e0:9a:26:a7:15:4e:c4:7c:
                    c0:c8:09:28:bd:bd:f9:f2:44:a6:08:06:7b:7a:aa:
                    92:25:c6:2c:04:5e:d5:69:88:58:06:d7:c1:63:0e:
                    f9:10:29:24:f7:22:80:4b:42:34:6a:b7:04:6c:c4:
                    85:f9:95:c4:11:b1:57:e9:e0:ca:35:64:c2:dc:4f:
                    51:fb:55:e6:9b:d7:0b:5c:c7:88:36:26:92:33:d1:
                    c1:35:ed:c3:ae:81:d1:a1:04:e8:c4:dc:be:aa:b7:
                    e5:2b:f9:3d:35:2e:73:52:90:95:24:9f:e0:f8:e9:
                    cb:6f:82:31:d7:31:52:cd:36:81:28:c6:fb:23:e9:
                    28:fc:7f:63:4a:2e:2b:60:a9:da:f3:2f:af:f1:95:
                    e0:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:4A:3C:A5:CF:AB:85:4F:C0:56:E7:20:D1:E0:A3:F2:93:78:F2:89
            X509v3 Authority Key Identifier:
                keyid:F8:10:C5:04:45:38:9A:BE:A8:80:4C:A2:83:55:4A:79:5A:B4:9C:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4umefsZ2LuYcP4ruSh4A9sxMNxMatAyB3so1C1hJimuk/0/F810C50445389ABEA8804CA283554A795AB49C80.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F810C50445389ABEA8804CA283554A795AB49C80.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4umefsZ2LuYcP4ruSh4A9sxMNxMatAyB3so1C1hJimuk/0/34352e3233342e3137302e302f32332d3233203d3e20323637333735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.234.170.0/23

    Signature Algorithm: sha256WithRSAEncryption
         50:98:8a:72:11:34:7a:cc:9f:db:62:d8:28:7a:f1:08:71:24:
         8e:99:9a:18:69:d4:a9:d6:af:62:6a:c0:37:d5:c9:44:97:ac:
         65:53:40:34:c6:10:c6:92:fb:01:cb:9a:27:38:af:c9:7a:39:
         e0:e8:d1:2c:a8:bb:b9:70:26:a4:1b:01:04:74:62:da:ef:73:
         fb:a4:bd:4f:b0:da:0e:a3:c7:7b:7d:a9:cb:f4:f3:c2:c4:76:
         36:66:1b:94:dc:44:71:20:e0:7e:1e:51:d0:da:c7:3e:59:ab:
         82:73:eb:b4:ce:9b:4e:8a:98:1d:e0:90:e2:89:a7:e4:1d:17:
         26:ac:3f:17:13:b9:37:53:ef:8e:78:a7:33:0f:fe:8f:ec:e2:
         00:1c:9c:83:5d:82:79:2d:8c:fb:5c:79:ac:65:4e:42:05:d8:
         5f:57:ba:f3:90:8e:e9:25:56:8e:e3:8f:74:59:5e:4e:99:18:
         33:8c:d7:17:1c:75:aa:36:e7:90:08:10:5a:7b:06:df:9f:cc:
         0a:e1:92:fe:8c:72:d7:61:45:f9:86:49:ae:a8:6a:fb:83:07:
         e4:f9:6a:0e:7a:6a:63:3c:7e:8b:ee:01:3e:c9:45:67:db:a2:
         16:8b:1f:28:b1:05:6e:53:b1:fd:a1:75:82:62:83:89:61:71:
         2b:86:50:18
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUEDaKg41ZjM6s0Yx+QQXb+ikrKKcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjgxMEM1MDQ0NTM4OUFCRUE4ODA0Q0EyODM1NTRBNzk1
QUI0OUM4MDAeFw0yNDA0MTcxOTAzMDBaFw0yNTA0MTYxOTA4MDBaMDMxMTAvBgNV
BAMTKEU3NEEzQ0E1Q0ZBQjg1NEZDMDU2RTcyMEQxRTBBM0YyOTM3OEYyODkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxNFCSTArceaVXwGeZftlzr+GD
RLwKEFctLSqmqnZwZKrfA4F445O8gcUGZonQPEIxaM5GK0BIqGEqSnMFE73NsxUv
0/pzKHawSZ9O2Q0cWikouM5sBOpcLb32LbHHErANGHeqhK2/ceUBM6+GoYXgmian
FU7EfMDICSi9vfnyRKYIBnt6qpIlxiwEXtVpiFgG18FjDvkQKST3IoBLQjRqtwRs
xIX5lcQRsVfp4Mo1ZMLcT1H7Veab1wtcx4g2JpIz0cE17cOugdGhBOjE3L6qt+Ur
+T01LnNSkJUkn+D46ctvgjHXMVLNNoEoxvsj6Sj8f2NKLitgqdrzL6/xleCBAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU50o8pc+rhU/AVucg0eCj8pN48okwHwYDVR0j
BBgwFoAU+BDFBEU4mr6ogEyig1VKeVq0nIAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNHVtZWZzWjJMdVljUDRydVNoNEE5c3hNTnhNYXRBeUIzc28xQzFoSmlt
dWsvMC9GODEwQzUwNDQ1Mzg5QUJFQTg4MDRDQTI4MzU1NEE3OTVBQjQ5QzgwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Y4MTBDNTA0NDUzODlBQkVB
ODgwNENBMjgzNTU0QTc5NUFCNDlDODAuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzR1bWVmc1oyTHVZY1A0cnVTaDRBOXN4TU54TWF0QXlCM3NvMUMxaEppbXVrLzAv
MzQzNTJlMzIzMzM0MmUzMTM3MzAyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjM2
MzczMzM3MzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAEt6qowDQYJKoZIhvcNAQELBQADggEBAFCYinIR
NHrMn9ti2Ch68QhxJI6Zmhhp1KnWr2JqwDfVyUSXrGVTQDTGEMaS+wHLmic4r8l6
OeDo0Syou7lwJqQbAQR0Ytrvc/ukvU+w2g6jx3t9qcv088LEdjZmG5TcRHEg4H4e
UdDaxz5Zq4Jz67TOm06KmB3gkOKJp+QdFyasPxcTuTdT7454pzMP/o/s4gAcnINd
gnktjPtceaxlTkIF2F9XuvOQjuklVo7jj3RZXk6ZGDOM1xccdao255AIEFp7Bt+f
zArhkv6MctdhRfmGSa6oavuDB+T5ag56amM8fovuAT7JRWfbohaLHyixBW5Tsf2h
dYJig4lhcSuGUBg=
-----END CERTIFICATE-----
Generated at Tue Nov 26 07:51:02 2024 by rpki-client on console-fra.rpki-client.org