Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6i6Rh4rU2y661ghc9heZQQUeApePx62NPddc7q5xFADh/1/34352e3138352e3233312e302f32342d3234203d3e20323639343333.roa
File:                     34352e3138352e3233312e302f32342d3234203d3e20323639343333.roa (raw, json)
Hash identifier:          pilTEgReXK1OFOyaeaWOUZ3cq4LC78TqW9p1axjFiOY=
Subject key identifier:   F7:07:36:BC:61:7F:D9:1B:81:D5:BF:59:13:FB:B6:91:24:14:29:26
Certificate issuer:       /CN=9F472E07BB7ED71E84731C0B2E8F68BF7A6F02D3
Certificate serial:       3DFCF3E92FF67CFD03F3FE38B913B28E9E720B42
Authority key identifier: 9F:47:2E:07:BB:7E:D7:1E:84:73:1C:0B:2E:8F:68:BF:7A:6F:02:D3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9F472E07BB7ED71E84731C0B2E8F68BF7A6F02D3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6i6Rh4rU2y661ghc9heZQQUeApePx62NPddc7q5xFADh/1/34352e3138352e3233312e302f32342d3234203d3e20323639343333.roa
Signing time:             Thu 04 Apr 2024 23:51:22 +0000
ROA not before:           Thu 04 Apr 2024 23:46:22 +0000
ROA not after:            Thu 03 Apr 2025 23:51:22 +0000
asID:                     269433
IP address blocks:        45.185.231.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6i6Rh4rU2y661ghc9heZQQUeApePx62NPddc7q5xFADh/1/9F472E07BB7ED71E84731C0B2E8F68BF7A6F02D3.crl
                          rsync://rpki-repo.registro.br/repo/6i6Rh4rU2y661ghc9heZQQUeApePx62NPddc7q5xFADh/1/9F472E07BB7ED71E84731C0B2E8F68BF7A6F02D3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9F472E07BB7ED71E84731C0B2E8F68BF7A6F02D3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 15:26:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:fc:f3:e9:2f:f6:7c:fd:03:f3:fe:38:b9:13:b2:8e:9e:72:0b:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9F472E07BB7ED71E84731C0B2E8F68BF7A6F02D3
        Validity
            Not Before: Apr  4 23:46:22 2024 GMT
            Not After : Apr  3 23:51:22 2025 GMT
        Subject: CN=F70736BC617FD91B81D5BF5913FBB69124142926
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:cc:d2:62:84:13:dc:9c:2e:30:9c:fb:37:c4:
                    cb:58:82:41:be:b7:ed:e6:27:04:2a:a8:5f:2f:96:
                    f1:d4:97:9d:40:9f:35:2c:67:f3:a8:bf:20:07:66:
                    f9:09:c4:83:3b:78:f4:07:29:09:6c:3b:23:31:0a:
                    f0:b1:81:b6:1b:75:66:24:f4:4a:04:21:20:21:90:
                    ef:23:bc:69:51:d5:be:ed:8a:97:c7:72:66:27:75:
                    b2:9b:71:3b:57:fa:4c:52:a3:7e:2f:5c:33:58:c9:
                    7d:25:26:c7:09:b0:c3:97:a9:7d:b3:10:62:4c:d4:
                    68:c6:cc:62:1f:ee:3e:21:c1:76:2a:4b:11:c2:87:
                    40:2b:60:af:1c:e4:f4:40:72:84:97:fd:f7:4e:24:
                    51:97:2e:62:5e:00:12:a0:3e:11:0d:a8:fd:4b:ee:
                    ac:bf:4e:85:af:78:b5:db:a3:e8:85:88:fb:3b:a1:
                    5e:b1:4d:bc:11:dc:a4:6c:dd:c2:13:2d:0a:fa:ff:
                    39:47:6b:fd:a7:a3:01:3d:02:1d:0b:c6:ae:3e:5e:
                    62:d1:5b:f7:ab:44:6f:29:7c:13:bd:78:e7:e0:20:
                    25:0d:40:90:27:31:7a:5a:45:65:e0:3c:45:0f:40:
                    34:a2:c5:15:eb:fb:b5:59:7f:39:b9:72:d8:8c:f8:
                    ca:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:07:36:BC:61:7F:D9:1B:81:D5:BF:59:13:FB:B6:91:24:14:29:26
            X509v3 Authority Key Identifier:
                keyid:9F:47:2E:07:BB:7E:D7:1E:84:73:1C:0B:2E:8F:68:BF:7A:6F:02:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6i6Rh4rU2y661ghc9heZQQUeApePx62NPddc7q5xFADh/1/9F472E07BB7ED71E84731C0B2E8F68BF7A6F02D3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9F472E07BB7ED71E84731C0B2E8F68BF7A6F02D3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6i6Rh4rU2y661ghc9heZQQUeApePx62NPddc7q5xFADh/1/34352e3138352e3233312e302f32342d3234203d3e20323639343333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.185.231.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4a:1c:66:ea:22:2f:85:f6:59:ad:3b:25:ad:c9:08:12:59:bb:
         58:fc:16:b9:f1:05:09:21:ef:97:0a:94:6e:5c:a9:55:01:aa:
         a9:14:c9:7e:f5:1b:50:b5:61:83:f2:90:91:6d:59:17:c7:51:
         8c:4d:54:3b:40:04:19:9c:1a:88:85:62:54:fb:d3:e1:c1:15:
         e2:e7:3e:08:9d:b4:e6:85:6b:81:cf:b4:70:2c:fe:ed:e5:b8:
         d7:7a:22:17:70:49:e6:8d:19:6d:be:bf:95:64:04:10:57:6c:
         e4:51:0f:15:d9:29:29:63:ae:d1:38:35:60:8f:be:90:3c:d1:
         b4:12:e3:e3:4e:ff:99:20:2e:aa:a9:4e:78:4d:9e:a2:0c:39:
         1d:eb:e7:0b:8f:8a:b6:4d:cd:1e:f1:d9:44:eb:b4:fb:bc:db:
         3f:3c:83:c8:61:80:76:56:50:cc:8f:d0:4b:e2:2f:b9:8e:e5:
         26:d6:7f:7f:11:39:73:39:09:8c:d4:59:30:69:11:50:bd:80:
         86:0e:8d:0d:ef:89:8d:aa:0d:1f:98:9f:f1:50:cd:ea:cc:00:
         0a:f7:79:70:7f:cb:76:f3:1e:44:e3:95:13:f2:05:a3:dd:0e:
         db:7c:e2:5d:6c:af:43:02:3c:33:de:42:1d:ba:4b:01:1d:29:
         c4:97:07:00
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUPfzz6S/2fP0D8/44uROyjp5yC0IwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUY0NzJFMDdCQjdFRDcxRTg0NzMxQzBCMkU4RjY4QkY3
QTZGMDJEMzAeFw0yNDA0MDQyMzQ2MjJaFw0yNTA0MDMyMzUxMjJaMDMxMTAvBgNV
BAMTKEY3MDczNkJDNjE3RkQ5MUI4MUQ1QkY1OTEzRkJCNjkxMjQxNDI5MjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDazNJihBPcnC4wnPs3xMtYgkG+
t+3mJwQqqF8vlvHUl51AnzUsZ/OovyAHZvkJxIM7ePQHKQlsOyMxCvCxgbYbdWYk
9EoEISAhkO8jvGlR1b7tipfHcmYndbKbcTtX+kxSo34vXDNYyX0lJscJsMOXqX2z
EGJM1GjGzGIf7j4hwXYqSxHCh0ArYK8c5PRAcoSX/fdOJFGXLmJeABKgPhENqP1L
7qy/ToWveLXbo+iFiPs7oV6xTbwR3KRs3cITLQr6/zlHa/2nowE9Ah0Lxq4+XmLR
W/erRG8pfBO9eOfgICUNQJAnMXpaRWXgPEUPQDSixRXr+7VZfzm5ctiM+MolAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU9wc2vGF/2RuB1b9ZE/u2kSQUKSYwHwYDVR0j
BBgwFoAUn0cuB7t+1x6EcxwLLo9ov3pvAtMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNmk2Umg0clUyeTY2MWdoYzloZVpRUVVlQXBlUHg2Mk5QZGRjN3E1eEZB
RGgvMS85RjQ3MkUwN0JCN0VENzFFODQ3MzFDMEIyRThGNjhCRjdBNkYwMkQzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzlGNDcyRTA3QkI3RUQ3MUU4
NDczMUMwQjJFOEY2OEJGN0E2RjAyRDMuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzZpNlJoNHJVMnk2NjFnaGM5aGVaUVFVZUFwZVB4NjJOUGRkYzdxNXhGQURoLzEv
MzQzNTJlMzEzODM1MmUzMjMzMzEyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzkzNDMzMzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAAtuecwDQYJKoZIhvcNAQELBQADggEBAEocZuoi
L4X2Wa07Ja3JCBJZu1j8FrnxBQkh75cKlG5cqVUBqqkUyX71G1C1YYPykJFtWRfH
UYxNVDtABBmcGoiFYlT70+HBFeLnPgidtOaFa4HPtHAs/u3luNd6IhdwSeaNGW2+
v5VkBBBXbORRDxXZKSljrtE4NWCPvpA80bQS4+NO/5kgLqqpTnhNnqIMOR3r5wuP
irZNzR7x2UTrtPu82z88g8hhgHZWUMyP0EviL7mO5SbWf38ROXM5CYzUWTBpEVC9
gIYOjQ3viY2qDR+Yn/FQzerMAAr3eXB/y3bzHkTjlRPyBaPdDtt84l1sr0MCPDPe
Qh26SwEdKcSXBwA=
-----END CERTIFICATE-----
Generated at Fri Nov 22 15:22:38 2024 by rpki-client on console-fra.rpki-client.org