Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/62pERL7Kke964WpvWhB66Gas5by2VNCEC9uAUNZQxdt9/0/34352e3137342e362e302f32342d3234203d3e20323638393134.roa
File:                     34352e3137342e362e302f32342d3234203d3e20323638393134.roa (raw, json)
Hash identifier:          /6CsxyDNo6Ix1xqVk4uy/aVf//cgiK4MVD8+awitaxs=
Subject key identifier:   DB:E0:AC:7A:F1:9C:F2:05:99:E9:BC:DC:44:2E:51:50:ED:5E:48:A8
Certificate issuer:       /CN=659E92F5914C997CC52D83DD0F162368DAC18EA2
Certificate serial:       0A23FF0B5D0CEABE2356B7665597F6A58DEEF9CB
Authority key identifier: 65:9E:92:F5:91:4C:99:7C:C5:2D:83:DD:0F:16:23:68:DA:C1:8E:A2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/659E92F5914C997CC52D83DD0F162368DAC18EA2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/62pERL7Kke964WpvWhB66Gas5by2VNCEC9uAUNZQxdt9/0/34352e3137342e362e302f32342d3234203d3e20323638393134.roa
Signing time:             Mon 18 Nov 2024 17:13:28 +0000
ROA not before:           Mon 18 Nov 2024 17:08:28 +0000
ROA not after:            Mon 17 Nov 2025 17:13:28 +0000
asID:                     268914
IP address blocks:        45.174.6.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/62pERL7Kke964WpvWhB66Gas5by2VNCEC9uAUNZQxdt9/0/659E92F5914C997CC52D83DD0F162368DAC18EA2.crl
                          rsync://rpki-repo.registro.br/repo/62pERL7Kke964WpvWhB66Gas5by2VNCEC9uAUNZQxdt9/0/659E92F5914C997CC52D83DD0F162368DAC18EA2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/659E92F5914C997CC52D83DD0F162368DAC18EA2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 07:57:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:23:ff:0b:5d:0c:ea:be:23:56:b7:66:55:97:f6:a5:8d:ee:f9:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=659E92F5914C997CC52D83DD0F162368DAC18EA2
        Validity
            Not Before: Nov 18 17:08:28 2024 GMT
            Not After : Nov 17 17:13:28 2025 GMT
        Subject: CN=DBE0AC7AF19CF20599E9BCDC442E5150ED5E48A8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:06:23:00:f8:f2:a9:2f:a5:a9:4b:d8:93:9b:
                    d0:0f:bf:2a:68:a3:05:c2:47:d4:e0:90:dd:04:04:
                    4d:ee:ba:7f:fe:94:b0:f8:41:5f:94:18:d8:c8:89:
                    4b:15:40:f5:de:a3:2c:97:47:00:c6:76:26:48:10:
                    14:c3:83:6f:c2:ef:98:c8:21:ed:95:c3:41:3a:e2:
                    f4:63:05:c2:6b:66:4f:ed:6f:c5:b7:7c:0c:87:23:
                    07:6b:8d:c9:72:17:c7:b0:1f:91:66:00:09:95:da:
                    57:71:af:c3:2e:4f:fe:58:bc:46:a2:6e:1f:da:f5:
                    39:d6:33:5b:05:f3:f2:3b:08:0e:fd:d4:b1:48:68:
                    53:8b:f9:8d:bb:65:78:bb:9d:e0:d6:6f:00:23:f2:
                    57:70:8a:7f:e8:63:09:a1:46:7f:55:5d:59:dc:51:
                    1e:8d:49:6b:c5:6b:9d:c1:2a:a2:c4:fd:33:54:11:
                    4d:83:09:68:3d:d7:3e:9c:f5:53:75:80:9a:0f:f4:
                    43:6e:72:ae:a3:81:db:de:db:c3:73:3a:f7:03:48:
                    c4:15:bb:79:23:82:1b:93:09:97:4a:46:47:f4:0d:
                    a6:ec:dd:65:16:29:1a:3a:d4:28:fc:68:18:a1:42:
                    6f:8e:96:d9:19:9f:41:d7:e6:32:cc:74:09:a4:fb:
                    0f:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:E0:AC:7A:F1:9C:F2:05:99:E9:BC:DC:44:2E:51:50:ED:5E:48:A8
            X509v3 Authority Key Identifier:
                keyid:65:9E:92:F5:91:4C:99:7C:C5:2D:83:DD:0F:16:23:68:DA:C1:8E:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/62pERL7Kke964WpvWhB66Gas5by2VNCEC9uAUNZQxdt9/0/659E92F5914C997CC52D83DD0F162368DAC18EA2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/659E92F5914C997CC52D83DD0F162368DAC18EA2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/62pERL7Kke964WpvWhB66Gas5by2VNCEC9uAUNZQxdt9/0/34352e3137342e362e302f32342d3234203d3e20323638393134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.174.6.0/24

    Signature Algorithm: sha256WithRSAEncryption
         05:e6:ee:a0:b9:00:81:04:98:74:c8:37:0e:40:ac:b4:8d:08:
         ff:90:45:54:66:ca:f0:e5:fe:23:f1:e8:d8:89:88:8e:be:3a:
         1a:d4:17:02:14:51:2a:b1:22:17:d1:ac:8f:11:bc:9e:b1:b1:
         6a:bc:87:6f:60:66:f2:3e:1a:1f:ff:11:66:f2:cb:d3:df:25:
         5f:32:ce:bd:5c:d9:04:26:d1:3c:9e:5e:83:4a:22:dc:7e:d5:
         e1:54:1a:aa:5e:02:af:e4:4e:4d:1c:88:a8:88:7c:92:1f:14:
         3d:10:b8:1c:70:16:e4:35:47:72:2e:25:85:bc:63:c8:fe:2d:
         39:77:d4:3b:93:fe:8c:4e:f7:4e:23:45:9a:26:c8:38:d5:11:
         9a:f2:df:aa:06:92:b7:6a:60:88:7c:65:96:3e:3c:45:1b:93:
         4f:42:7a:98:6b:56:8e:20:88:64:ef:77:db:e9:c7:17:43:39:
         85:3b:8c:71:34:ca:fe:d1:8c:6f:6f:17:16:34:e4:69:0a:a4:
         6d:77:e0:e5:53:ea:9d:f3:a5:bb:65:69:b4:6b:8e:31:bf:5f:
         2a:e9:59:b8:0a:98:1d:8d:21:f8:e6:e7:fd:a7:a2:dd:52:0c:
         c3:01:3f:88:3f:b1:4e:05:3a:cd:53:34:fd:b8:d2:1e:6d:31:
         5e:29:e5:18
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUCiP/C10M6r4jVrdmVZf2pY3u+cswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjU5RTkyRjU5MTRDOTk3Q0M1MkQ4M0REMEYxNjIzNjhE
QUMxOEVBMjAeFw0yNDExMTgxNzA4MjhaFw0yNTExMTcxNzEzMjhaMDMxMTAvBgNV
BAMTKERCRTBBQzdBRjE5Q0YyMDU5OUU5QkNEQzQ0MkU1MTUwRUQ1RTQ4QTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDmBiMA+PKpL6WpS9iTm9APvypo
owXCR9TgkN0EBE3uun/+lLD4QV+UGNjIiUsVQPXeoyyXRwDGdiZIEBTDg2/C75jI
Ie2Vw0E64vRjBcJrZk/tb8W3fAyHIwdrjclyF8ewH5FmAAmV2ldxr8MuT/5YvEai
bh/a9TnWM1sF8/I7CA791LFIaFOL+Y27ZXi7neDWbwAj8ldwin/oYwmhRn9VXVnc
UR6NSWvFa53BKqLE/TNUEU2DCWg91z6c9VN1gJoP9ENucq6jgdve28NzOvcDSMQV
u3kjghuTCZdKRkf0Dabs3WUWKRo61Cj8aBihQm+OltkZn0HX5jLMdAmk+w8vAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQU2+CsevGc8gWZ6bzcRC5RUO1eSKgwHwYDVR0j
BBgwFoAUZZ6S9ZFMmXzFLYPdDxYjaNrBjqIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNjJwRVJMN0trZTk2NFdwdldoQjY2R2FzNWJ5MlZOQ0VDOXVBVU5aUXhk
dDkvMC82NTlFOTJGNTkxNEM5OTdDQzUyRDgzREQwRjE2MjM2OERBQzE4RUEyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzY1OUU5MkY1OTE0Qzk5N0ND
NTJEODNERDBGMTYyMzY4REFDMThFQTIuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzYycEVSTDdLa2U5NjRXcHZXaEI2NkdhczVieTJWTkNFQzl1QVVOWlF4ZHQ5LzAv
MzQzNTJlMzEzNzM0MmUzNjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzYzODM5
MzEzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEAC2uBjANBgkqhkiG9w0BAQsFAAOCAQEABebuoLkAgQSY
dMg3DkCstI0I/5BFVGbK8OX+I/Ho2ImIjr46GtQXAhRRKrEiF9GsjxG8nrGxaryH
b2Bm8j4aH/8RZvLL098lXzLOvVzZBCbRPJ5eg0oi3H7V4VQaql4Cr+ROTRyIqIh8
kh8UPRC4HHAW5DVHci4lhbxjyP4tOXfUO5P+jE73TiNFmibIONURmvLfqgaSt2pg
iHxllj48RRuTT0J6mGtWjiCIZO932+nHF0M5hTuMcTTK/tGMb28XFjTkaQqkbXfg
5VPqnfOlu2VptGuOMb9fKulZuAqYHY0h+Obn/aei3VIMwwE/iD+xTgU6zVM0/bjS
Hm0xXinlGA==
-----END CERTIFICATE-----
Generated at Tue Nov 26 07:51:03 2024 by rpki-client on console-fra.rpki-client.org