Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/62pERL7Kke964WpvWhB66Gas5by2VNCEC9uAUNZQxdt9/0/34352e3137342e342e302f32322d3232203d3e20323638393134.roa
File:                     34352e3137342e342e302f32322d3232203d3e20323638393134.roa (raw, json)
Hash identifier:          dNIOfPg9QH6Pk71yhJlpOLaCOg9t1bHWSPF6ULE6wwY=
Subject key identifier:   73:F6:58:57:E5:F1:64:DB:76:8B:0F:8F:6A:72:06:B8:FC:2D:76:FA
Certificate issuer:       /CN=659E92F5914C997CC52D83DD0F162368DAC18EA2
Certificate serial:       23191835CF68CF32E50F83BD52EB7E8AC2A81623
Authority key identifier: 65:9E:92:F5:91:4C:99:7C:C5:2D:83:DD:0F:16:23:68:DA:C1:8E:A2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/659E92F5914C997CC52D83DD0F162368DAC18EA2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/62pERL7Kke964WpvWhB66Gas5by2VNCEC9uAUNZQxdt9/0/34352e3137342e342e302f32322d3232203d3e20323638393134.roa
Signing time:             Mon 18 Nov 2024 17:13:28 +0000
ROA not before:           Mon 18 Nov 2024 17:08:28 +0000
ROA not after:            Mon 17 Nov 2025 17:13:28 +0000
asID:                     268914
IP address blocks:        45.174.4.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/62pERL7Kke964WpvWhB66Gas5by2VNCEC9uAUNZQxdt9/0/659E92F5914C997CC52D83DD0F162368DAC18EA2.crl
                          rsync://rpki-repo.registro.br/repo/62pERL7Kke964WpvWhB66Gas5by2VNCEC9uAUNZQxdt9/0/659E92F5914C997CC52D83DD0F162368DAC18EA2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/659E92F5914C997CC52D83DD0F162368DAC18EA2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 07:57:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:19:18:35:cf:68:cf:32:e5:0f:83:bd:52:eb:7e:8a:c2:a8:16:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=659E92F5914C997CC52D83DD0F162368DAC18EA2
        Validity
            Not Before: Nov 18 17:08:28 2024 GMT
            Not After : Nov 17 17:13:28 2025 GMT
        Subject: CN=73F65857E5F164DB768B0F8F6A7206B8FC2D76FA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:61:2e:31:23:c9:07:98:dc:3d:3d:9f:61:a3:
                    a0:cb:f1:90:25:da:df:d4:79:62:95:0a:b8:c7:47:
                    a6:fa:0f:e3:eb:55:40:9e:f4:44:4a:43:88:f8:57:
                    92:1f:d2:a6:0f:e6:93:4a:82:69:bf:1b:2a:88:6f:
                    9e:30:2a:d0:f1:f3:dd:fd:13:95:73:03:10:e8:50:
                    75:c8:dc:d9:f5:6e:fb:0c:5b:f2:71:58:d8:c7:d5:
                    a8:f7:62:c2:e8:c2:69:00:56:c1:07:bf:4a:a1:1c:
                    ef:4e:8e:e2:c8:b2:79:5b:2a:d0:ee:77:6a:41:f2:
                    59:56:71:e1:54:05:88:04:ad:8e:d4:8e:66:82:d0:
                    47:dd:a0:89:96:6a:57:de:dd:58:d7:a5:5e:6e:d6:
                    97:b0:d1:52:1c:65:31:fa:21:75:b9:b7:6c:41:47:
                    5b:63:19:e7:07:9c:45:9d:d3:5c:16:cd:86:e3:21:
                    99:91:c0:19:9f:53:74:b3:fa:66:f9:e8:e9:68:5c:
                    03:64:1f:f7:05:63:44:51:41:f4:9c:18:82:96:50:
                    54:80:8d:f8:8c:1a:d7:1d:3a:e0:93:55:8b:65:3a:
                    a3:4f:0e:f4:65:b4:4d:75:17:80:6b:bc:45:40:fa:
                    69:08:67:6e:38:1c:11:9b:e0:a9:e9:c3:07:45:75:
                    66:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:F6:58:57:E5:F1:64:DB:76:8B:0F:8F:6A:72:06:B8:FC:2D:76:FA
            X509v3 Authority Key Identifier:
                keyid:65:9E:92:F5:91:4C:99:7C:C5:2D:83:DD:0F:16:23:68:DA:C1:8E:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/62pERL7Kke964WpvWhB66Gas5by2VNCEC9uAUNZQxdt9/0/659E92F5914C997CC52D83DD0F162368DAC18EA2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/659E92F5914C997CC52D83DD0F162368DAC18EA2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/62pERL7Kke964WpvWhB66Gas5by2VNCEC9uAUNZQxdt9/0/34352e3137342e342e302f32322d3232203d3e20323638393134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.174.4.0/22

    Signature Algorithm: sha256WithRSAEncryption
         46:09:79:cc:04:ed:29:60:16:f4:60:97:11:de:fb:54:dc:68:
         91:86:19:26:96:e6:a6:5f:21:ce:a9:95:11:fc:dd:ba:0d:2b:
         46:0a:e7:04:a7:fd:74:15:fe:3a:44:6b:3b:ad:f9:99:89:d1:
         67:19:12:93:8d:2b:f3:5c:18:af:27:6b:9d:21:cb:80:45:25:
         74:1b:5e:7a:19:eb:5d:d0:9d:45:14:1f:d6:16:93:5f:91:f4:
         c4:cf:f8:8b:e7:82:3b:f6:20:35:25:8d:1c:2b:23:15:45:8c:
         dc:e3:c9:a3:af:43:a4:2e:8e:05:69:b7:ed:74:c7:14:41:fa:
         b9:ea:3c:1f:c2:65:91:38:3d:c0:2f:db:99:3b:fa:86:02:da:
         cc:85:a3:e5:83:7c:ce:10:87:54:f8:43:70:ac:3b:89:b1:e0:
         27:ff:85:5d:b1:e5:f6:48:31:42:fc:ca:25:ee:a0:9d:a3:26:
         ed:82:e7:90:c8:b2:3e:34:c0:96:b0:5b:7f:73:b0:2d:01:53:
         8c:17:f6:f7:9c:15:33:4c:2f:b8:99:83:7b:69:3a:2b:54:da:
         70:bf:f1:16:50:ac:50:7c:80:0f:d1:72:0c:bc:f2:da:cc:6e:
         ea:79:55:2c:1a:72:98:fa:be:32:cc:33:9c:c5:55:8b:69:3a:
         25:81:68:d0
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUIxkYNc9ozzLlD4O9Uut+isKoFiMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjU5RTkyRjU5MTRDOTk3Q0M1MkQ4M0REMEYxNjIzNjhE
QUMxOEVBMjAeFw0yNDExMTgxNzA4MjhaFw0yNTExMTcxNzEzMjhaMDMxMTAvBgNV
BAMTKDczRjY1ODU3RTVGMTY0REI3NjhCMEY4RjZBNzIwNkI4RkMyRDc2RkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXYS4xI8kHmNw9PZ9ho6DL8ZAl
2t/UeWKVCrjHR6b6D+PrVUCe9ERKQ4j4V5If0qYP5pNKgmm/GyqIb54wKtDx8939
E5VzAxDoUHXI3Nn1bvsMW/JxWNjH1aj3YsLowmkAVsEHv0qhHO9OjuLIsnlbKtDu
d2pB8llWceFUBYgErY7UjmaC0EfdoImWalfe3VjXpV5u1pew0VIcZTH6IXW5t2xB
R1tjGecHnEWd01wWzYbjIZmRwBmfU3Sz+mb56OloXANkH/cFY0RRQfScGIKWUFSA
jfiMGtcdOuCTVYtlOqNPDvRltE11F4BrvEVA+mkIZ244HBGb4KnpwwdFdWZlAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUc/ZYV+XxZNt2iw+PanIGuPwtdvowHwYDVR0j
BBgwFoAUZZ6S9ZFMmXzFLYPdDxYjaNrBjqIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNjJwRVJMN0trZTk2NFdwdldoQjY2R2FzNWJ5MlZOQ0VDOXVBVU5aUXhk
dDkvMC82NTlFOTJGNTkxNEM5OTdDQzUyRDgzREQwRjE2MjM2OERBQzE4RUEyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzY1OUU5MkY1OTE0Qzk5N0ND
NTJEODNERDBGMTYyMzY4REFDMThFQTIuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzYycEVSTDdLa2U5NjRXcHZXaEI2NkdhczVieTJWTkNFQzl1QVVOWlF4ZHQ5LzAv
MzQzNTJlMzEzNzM0MmUzNDJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDMyMzYzODM5
MzEzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEAi2uBDANBgkqhkiG9w0BAQsFAAOCAQEARgl5zATtKWAW
9GCXEd77VNxokYYZJpbmpl8hzqmVEfzdug0rRgrnBKf9dBX+OkRrO635mYnRZxkS
k40r81wYrydrnSHLgEUldBteehnrXdCdRRQf1haTX5H0xM/4i+eCO/YgNSWNHCsj
FUWM3OPJo69DpC6OBWm37XTHFEH6ueo8H8JlkTg9wC/bmTv6hgLazIWj5YN8zhCH
VPhDcKw7ibHgJ/+FXbHl9kgxQvzKJe6gnaMm7YLnkMiyPjTAlrBbf3OwLQFTjBf2
95wVM0wvuJmDe2k6K1TacL/xFlCsUHyAD9FyDLzy2sxu6nlVLBpymPq+MswznMVV
i2k6JYFo0A==
-----END CERTIFICATE-----
Generated at Tue Nov 26 08:30:10 2024 by rpki-client on console-ams.rpki-client.org