Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4wg6znyq2KkGtQAkuUrnSTvSskRGsMfrPrSbpwjHLG3p/1/34352e3137382e3130382e302f32322d3234203d3e20323639303334.roa
File:                     34352e3137382e3130382e302f32322d3234203d3e20323639303334.roa (raw, json)
Hash identifier:          eQDXhAmVTRICDGLxNSsQ6h64aknt5EkUSIzlTFgl5AM=
Subject key identifier:   05:9A:25:3C:CA:DC:95:D2:7E:88:71:46:A6:3C:7F:79:4D:6F:C9:B9
Certificate issuer:       /CN=BDC82DF1BE60CEAFEF5E98711ACAA71E9A0B6F66
Certificate serial:       090675B6C24E11CF68CAB71BC84D8E1FCEE993FA
Authority key identifier: BD:C8:2D:F1:BE:60:CE:AF:EF:5E:98:71:1A:CA:A7:1E:9A:0B:6F:66
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BDC82DF1BE60CEAFEF5E98711ACAA71E9A0B6F66.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4wg6znyq2KkGtQAkuUrnSTvSskRGsMfrPrSbpwjHLG3p/1/34352e3137382e3130382e302f32322d3234203d3e20323639303334.roa
Signing time:             Fri 05 Apr 2024 02:20:10 +0000
ROA not before:           Fri 05 Apr 2024 02:15:10 +0000
ROA not after:            Fri 04 Apr 2025 02:20:10 +0000
asID:                     269034
IP address blocks:        45.178.108.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4wg6znyq2KkGtQAkuUrnSTvSskRGsMfrPrSbpwjHLG3p/1/BDC82DF1BE60CEAFEF5E98711ACAA71E9A0B6F66.crl
                          rsync://rpki-repo.registro.br/repo/4wg6znyq2KkGtQAkuUrnSTvSskRGsMfrPrSbpwjHLG3p/1/BDC82DF1BE60CEAFEF5E98711ACAA71E9A0B6F66.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BDC82DF1BE60CEAFEF5E98711ACAA71E9A0B6F66.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 16:33:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:06:75:b6:c2:4e:11:cf:68:ca:b7:1b:c8:4d:8e:1f:ce:e9:93:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BDC82DF1BE60CEAFEF5E98711ACAA71E9A0B6F66
        Validity
            Not Before: Apr  5 02:15:10 2024 GMT
            Not After : Apr  4 02:20:10 2025 GMT
        Subject: CN=059A253CCADC95D27E887146A63C7F794D6FC9B9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:a6:82:bf:6c:df:78:e4:85:5d:06:87:7a:7f:
                    8f:3c:63:36:a2:0b:1e:63:3a:e0:8f:b9:50:41:bd:
                    21:10:ae:38:3f:d1:00:06:9e:02:70:83:43:a7:07:
                    38:ae:39:c1:0d:4f:5a:4a:29:7d:91:cd:8e:93:dd:
                    de:91:d3:37:89:cf:13:a8:b1:38:7d:ce:f4:62:09:
                    77:4d:91:6d:27:f0:9d:4f:54:15:ca:a2:ab:d9:46:
                    be:92:ac:73:ba:63:ae:e6:5f:15:06:f2:e2:b7:07:
                    4e:0a:13:be:0f:ae:d3:5e:a6:d8:56:71:d5:cc:30:
                    1f:2f:08:9e:b9:9f:31:23:6c:9a:21:1b:83:4f:9f:
                    a9:31:49:31:bf:4a:08:f9:ba:cd:66:39:04:28:c9:
                    ad:ff:56:da:69:a6:4b:1b:31:54:f6:f8:68:3c:be:
                    dd:f7:ad:77:18:40:f3:ad:0f:42:d4:2b:88:d4:1a:
                    03:a7:8f:c0:fa:ee:4d:76:74:f4:5a:63:19:04:47:
                    d0:5e:09:53:6a:d2:d2:57:5f:a8:70:37:06:e9:d6:
                    05:d4:80:ae:b3:72:e3:17:d7:b2:2b:a8:a5:ff:56:
                    28:6c:71:6a:cf:35:23:7e:9d:d2:a3:c4:8e:74:e7:
                    dc:16:ed:bb:66:af:f8:17:b8:ac:a0:47:41:c7:86:
                    9b:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:9A:25:3C:CA:DC:95:D2:7E:88:71:46:A6:3C:7F:79:4D:6F:C9:B9
            X509v3 Authority Key Identifier:
                keyid:BD:C8:2D:F1:BE:60:CE:AF:EF:5E:98:71:1A:CA:A7:1E:9A:0B:6F:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4wg6znyq2KkGtQAkuUrnSTvSskRGsMfrPrSbpwjHLG3p/1/BDC82DF1BE60CEAFEF5E98711ACAA71E9A0B6F66.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BDC82DF1BE60CEAFEF5E98711ACAA71E9A0B6F66.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4wg6znyq2KkGtQAkuUrnSTvSskRGsMfrPrSbpwjHLG3p/1/34352e3137382e3130382e302f32322d3234203d3e20323639303334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.178.108.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1d:ee:99:d0:60:30:19:21:13:82:a8:07:31:ec:3e:63:71:b5:
         74:c1:73:d4:b1:3b:e8:30:ae:6d:1f:aa:1d:2e:8e:f8:83:e1:
         a9:19:32:75:77:a2:f4:64:80:cf:82:5d:b7:05:e1:4b:fd:24:
         11:c8:fe:9c:51:8a:f0:4f:54:b0:31:e2:c3:18:08:24:8d:37:
         26:ef:5e:41:1b:89:c1:d3:32:a2:33:59:ee:a5:a0:2c:23:7c:
         27:a4:fc:58:6e:c8:dd:0d:47:44:ad:f2:f5:dd:7c:56:c0:f6:
         05:b1:56:f4:76:87:2a:3f:fd:ea:5f:fa:9e:76:5e:de:9c:7f:
         f3:c4:f4:f3:40:36:1f:d1:a5:b1:56:7b:47:08:d5:8e:47:90:
         ab:b5:c3:43:9b:73:97:2b:bc:f4:de:f6:f7:e5:b5:9c:86:8c:
         95:a3:9c:62:bf:ff:00:35:07:52:6b:7b:fc:36:d1:c6:6c:54:
         d9:ee:4b:77:b9:b1:73:c3:e7:67:b6:52:40:27:5b:98:b2:4b:
         d9:57:ad:ac:c0:6b:36:87:70:66:82:3e:f0:8f:52:85:4c:0d:
         cf:73:e3:35:9a:2b:4f:ca:fc:f3:34:66:f0:d1:4d:9b:d4:df:
         ef:f4:b4:12:4a:f7:c7:ba:98:84:da:dc:5e:4d:57:7c:91:29:
         fc:33:c0:ba
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUCQZ1tsJOEc9oyrcbyE2OH87pk/owDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkRDODJERjFCRTYwQ0VBRkVGNUU5ODcxMUFDQUE3MUU5
QTBCNkY2NjAeFw0yNDA0MDUwMjE1MTBaFw0yNTA0MDQwMjIwMTBaMDMxMTAvBgNV
BAMTKDA1OUEyNTNDQ0FEQzk1RDI3RTg4NzE0NkE2M0M3Rjc5NEQ2RkM5QjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1poK/bN945IVdBod6f488Yzai
Cx5jOuCPuVBBvSEQrjg/0QAGngJwg0OnBziuOcENT1pKKX2RzY6T3d6R0zeJzxOo
sTh9zvRiCXdNkW0n8J1PVBXKoqvZRr6SrHO6Y67mXxUG8uK3B04KE74PrtNepthW
cdXMMB8vCJ65nzEjbJohG4NPn6kxSTG/Sgj5us1mOQQoya3/VtpppksbMVT2+Gg8
vt33rXcYQPOtD0LUK4jUGgOnj8D67k12dPRaYxkER9BeCVNq0tJXX6hwNwbp1gXU
gK6zcuMX17IrqKX/VihscWrPNSN+ndKjxI5059wW7btmr/gXuKygR0HHhpsTAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUBZolPMrcldJ+iHFGpjx/eU1vybkwHwYDVR0j
BBgwFoAUvcgt8b5gzq/vXphxGsqnHpoLb2YwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNHdnNnpueXEyS2tHdFFBa3VVcm5TVHZTc2tSR3NNZnJQclNicHdqSExH
M3AvMS9CREM4MkRGMUJFNjBDRUFGRUY1RTk4NzExQUNBQTcxRTlBMEI2RjY2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0JEQzgyREYxQkU2MENFQUZF
RjVFOTg3MTFBQ0FBNzFFOUEwQjZGNjYuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzR3ZzZ6bnlxMktrR3RRQWt1VXJuU1R2U3NrUkdzTWZyUHJTYnB3akhMRzNwLzEv
MzQzNTJlMzEzNzM4MmUzMTMwMzgyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM2
MzkzMDMzMzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAItsmwwDQYJKoZIhvcNAQELBQADggEBAB3umdBg
MBkhE4KoBzHsPmNxtXTBc9SxO+gwrm0fqh0ujviD4akZMnV3ovRkgM+CXbcF4Uv9
JBHI/pxRivBPVLAx4sMYCCSNNybvXkEbicHTMqIzWe6loCwjfCek/FhuyN0NR0St
8vXdfFbA9gWxVvR2hyo//epf+p52Xt6cf/PE9PNANh/RpbFWe0cI1Y5HkKu1w0Ob
c5crvPTe9vfltZyGjJWjnGK//wA1B1Jre/w20cZsVNnuS3e5sXPD52e2UkAnW5iy
S9lXrazAazaHcGaCPvCPUoVMDc9z4zWaK0/K/PM0ZvDRTZvU3+/0tBJK98e6mITa
3F5NV3yRKfwzwLo=
-----END CERTIFICATE-----
Generated at Fri Nov 22 16:43:57 2024 by rpki-client on console-ams.rpki-client.org