Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6NRAZqTUi9C2gYdm8MhEir6NsveCUXxywwjZYJ8ES9MT/0/34352e3136382e3230372e302f32342d3234203d3e20323638303833.roa
File:                     34352e3136382e3230372e302f32342d3234203d3e20323638303833.roa (raw, json)
Hash identifier:          z6wBnHAZ82VG0oGYQT52JjQ6c6wa1QKFmIV1aMEg3nk=
Subject key identifier:   A4:4A:A1:78:BA:D2:2F:D2:7D:CD:B8:89:60:FE:11:CE:6F:F5:EB:73
Certificate issuer:       /CN=F079F5320F80269459179C5278F52BB945D6A636
Certificate serial:       1D3AFF53DDB61344FEB760CD6B8B6F69C676A5DD
Authority key identifier: F0:79:F5:32:0F:80:26:94:59:17:9C:52:78:F5:2B:B9:45:D6:A6:36
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F079F5320F80269459179C5278F52BB945D6A636.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6NRAZqTUi9C2gYdm8MhEir6NsveCUXxywwjZYJ8ES9MT/0/34352e3136382e3230372e302f32342d3234203d3e20323638303833.roa
Signing time:             Tue 22 Oct 2024 21:14:44 +0000
ROA not before:           Tue 22 Oct 2024 21:09:44 +0000
ROA not after:            Tue 21 Oct 2025 21:14:44 +0000
asID:                     268083
IP address blocks:        45.168.207.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6NRAZqTUi9C2gYdm8MhEir6NsveCUXxywwjZYJ8ES9MT/0/F079F5320F80269459179C5278F52BB945D6A636.crl
                          rsync://rpki-repo.registro.br/repo/6NRAZqTUi9C2gYdm8MhEir6NsveCUXxywwjZYJ8ES9MT/0/F079F5320F80269459179C5278F52BB945D6A636.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F079F5320F80269459179C5278F52BB945D6A636.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 12:09:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:3a:ff:53:dd:b6:13:44:fe:b7:60:cd:6b:8b:6f:69:c6:76:a5:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F079F5320F80269459179C5278F52BB945D6A636
        Validity
            Not Before: Oct 22 21:09:44 2024 GMT
            Not After : Oct 21 21:14:44 2025 GMT
        Subject: CN=A44AA178BAD22FD27DCDB88960FE11CE6FF5EB73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:e8:c0:fe:c6:e9:48:8d:b5:f7:fa:c0:1d:96:
                    bc:44:5b:7b:ab:a7:8f:d1:22:76:c6:94:49:b4:27:
                    20:5d:4a:1e:ec:c1:48:27:a8:9b:16:9b:3b:fd:ef:
                    07:13:92:5d:c1:6a:d4:83:93:2f:e7:fc:e8:fa:03:
                    80:df:c4:7f:f8:ae:25:61:3d:75:d2:9c:e4:48:c7:
                    dc:38:70:60:72:62:e3:ce:24:e2:77:e9:a1:6a:c3:
                    70:b0:27:be:0a:c5:07:ea:46:52:ff:07:71:3b:63:
                    e8:ca:4c:84:0f:e5:0a:d8:50:c4:ea:5d:3a:ee:5c:
                    9a:73:91:2d:cd:9d:a5:55:25:11:42:88:81:8c:5c:
                    e7:ac:fe:be:38:07:0b:4f:65:53:5f:8c:d3:ef:3c:
                    e4:ea:00:da:1e:f0:c5:e3:fa:ff:40:94:15:6b:51:
                    ac:05:72:d9:70:72:26:72:ff:b7:db:57:1f:26:f2:
                    10:19:39:78:e0:17:35:43:7b:60:94:97:46:8f:6a:
                    dd:e8:7f:4e:ce:64:2a:73:c1:1c:c1:79:c0:7d:72:
                    2e:73:37:0d:55:b7:e6:ad:c7:f9:6e:60:a4:ff:9e:
                    50:51:b0:17:e3:8d:7f:1c:ba:d7:07:15:68:91:ad:
                    18:5f:92:7d:92:9c:89:33:0f:83:c0:ea:91:af:c8:
                    10:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:4A:A1:78:BA:D2:2F:D2:7D:CD:B8:89:60:FE:11:CE:6F:F5:EB:73
            X509v3 Authority Key Identifier:
                keyid:F0:79:F5:32:0F:80:26:94:59:17:9C:52:78:F5:2B:B9:45:D6:A6:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6NRAZqTUi9C2gYdm8MhEir6NsveCUXxywwjZYJ8ES9MT/0/F079F5320F80269459179C5278F52BB945D6A636.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F079F5320F80269459179C5278F52BB945D6A636.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6NRAZqTUi9C2gYdm8MhEir6NsveCUXxywwjZYJ8ES9MT/0/34352e3136382e3230372e302f32342d3234203d3e20323638303833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.168.207.0/24

    Signature Algorithm: sha256WithRSAEncryption
         55:89:01:ea:cf:b7:ea:87:cb:56:13:42:60:f2:fa:e7:a3:4f:
         94:42:8f:42:a2:3c:5b:f7:34:61:b3:c4:64:58:ec:ec:ab:82:
         62:79:13:ef:20:64:31:16:6a:81:34:13:32:69:3f:70:1d:df:
         04:a4:ca:51:70:09:cf:67:3a:d7:3b:d9:05:16:05:b4:1e:fe:
         85:ca:20:fd:41:11:b2:27:36:15:12:20:77:d9:8b:63:0e:44:
         4d:04:01:69:68:0b:3c:dc:bf:92:fd:23:b4:15:04:c1:d9:f6:
         e9:70:b0:13:78:2c:ea:e1:49:d0:3d:15:d8:bb:44:47:9c:c3:
         a3:4a:bf:71:38:e0:17:b3:26:8d:5e:db:a2:dd:98:26:fd:f6:
         bc:48:7d:37:f4:9a:3a:0a:b2:5a:0b:cb:ce:09:eb:86:ca:c0:
         0b:9c:1b:7a:ab:8a:c2:b1:a7:24:05:53:d0:5e:eb:5f:b0:0a:
         a3:a8:09:27:51:10:c9:0e:b8:21:30:52:e9:c2:48:e2:58:e6:
         4a:58:ca:ae:0c:93:54:37:cd:0b:32:db:0a:b8:4e:ad:ea:67:
         92:5b:aa:a8:28:b8:a2:74:c4:96:1c:bb:41:11:f8:c6:10:d1:
         c7:a1:a5:52:bc:14:63:3f:f6:2f:99:91:a8:1b:49:a4:b2:f8:
         be:3e:fe:3e
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUHTr/U922E0T+t2DNa4tvacZ2pd0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjA3OUY1MzIwRjgwMjY5NDU5MTc5QzUyNzhGNTJCQjk0
NUQ2QTYzNjAeFw0yNDEwMjIyMTA5NDRaFw0yNTEwMjEyMTE0NDRaMDMxMTAvBgNV
BAMTKEE0NEFBMTc4QkFEMjJGRDI3RENEQjg4OTYwRkUxMUNFNkZGNUVCNzMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCv6MD+xulIjbX3+sAdlrxEW3ur
p4/RInbGlEm0JyBdSh7swUgnqJsWmzv97wcTkl3BatSDky/n/Oj6A4DfxH/4riVh
PXXSnORIx9w4cGByYuPOJOJ36aFqw3CwJ74KxQfqRlL/B3E7Y+jKTIQP5QrYUMTq
XTruXJpzkS3NnaVVJRFCiIGMXOes/r44BwtPZVNfjNPvPOTqANoe8MXj+v9AlBVr
UawFctlwciZy/7fbVx8m8hAZOXjgFzVDe2CUl0aPat3of07OZCpzwRzBecB9ci5z
Nw1Vt+atx/luYKT/nlBRsBfjjX8cutcHFWiRrRhfkn2SnIkzD4PA6pGvyBDhAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUpEqheLrSL9J9zbiJYP4Rzm/163MwHwYDVR0j
BBgwFoAU8Hn1Mg+AJpRZF5xSePUruUXWpjYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNk5SQVpxVFVpOUMyZ1lkbThNaEVpcjZOc3ZlQ1VYeHl3d2paWUo4RVM5
TVQvMC9GMDc5RjUzMjBGODAyNjk0NTkxNzlDNTI3OEY1MkJCOTQ1RDZBNjM2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0YwNzlGNTMyMEY4MDI2OTQ1
OTE3OUM1Mjc4RjUyQkI5NDVENkE2MzYuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzZOUkFacVRVaTlDMmdZZG04TWhFaXI2TnN2ZUNVWHh5d3dqWllKOEVTOU1ULzAv
MzQzNTJlMzEzNjM4MmUzMjMwMzcyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzgzMDM4MzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAAtqM8wDQYJKoZIhvcNAQELBQADggEBAFWJAerP
t+qHy1YTQmDy+uejT5RCj0KiPFv3NGGzxGRY7OyrgmJ5E+8gZDEWaoE0EzJpP3Ad
3wSkylFwCc9nOtc72QUWBbQe/oXKIP1BEbInNhUSIHfZi2MORE0EAWloCzzcv5L9
I7QVBMHZ9ulwsBN4LOrhSdA9Fdi7REecw6NKv3E44BezJo1e26LdmCb99rxIfTf0
mjoKsloLy84J64bKwAucG3qrisKxpyQFU9Be61+wCqOoCSdREMkOuCEwUunCSOJY
5kpYyq4Mk1Q3zQsy2wq4Tq3qZ5JbqqgouKJ0xJYcu0ER+MYQ0cehpVK8FGM/9i+Z
kagbSaSy+L4+/j4=
-----END CERTIFICATE-----
Generated at Tue Nov 26 14:16:51 2024 by rpki-client on console-ams.rpki-client.org