Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6ncG9s2gupX8sELknXjoT2628XXVamFRqgmBaNXEmUYQ/0/34352e3138362e3134332e302f32342d3234203d3e203631363030.roa
File:                     34352e3138362e3134332e302f32342d3234203d3e203631363030.roa (raw, json)
Hash identifier:          k1hcI9nO9X9S7wh/gHdSapShUnJQXtmpCeggDbpWkbs=
Subject key identifier:   4B:4F:98:76:99:8E:62:3D:02:17:0C:0B:C2:7B:C5:41:5C:E6:0F:B1
Certificate issuer:       /CN=CE687BDFD3E8EBACE7EE1EA84F7FC1BB278B3CC3
Certificate serial:       524A0DB1899D673095DB38E95E558E2EB081979D
Authority key identifier: CE:68:7B:DF:D3:E8:EB:AC:E7:EE:1E:A8:4F:7F:C1:BB:27:8B:3C:C3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE687BDFD3E8EBACE7EE1EA84F7FC1BB278B3CC3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6ncG9s2gupX8sELknXjoT2628XXVamFRqgmBaNXEmUYQ/0/34352e3138362e3134332e302f32342d3234203d3e203631363030.roa
Signing time:             Tue 04 Jun 2024 14:34:20 +0000
ROA not before:           Tue 04 Jun 2024 14:29:20 +0000
ROA not after:            Tue 03 Jun 2025 14:34:20 +0000
asID:                     61600
IP address blocks:        45.186.143.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6ncG9s2gupX8sELknXjoT2628XXVamFRqgmBaNXEmUYQ/0/CE687BDFD3E8EBACE7EE1EA84F7FC1BB278B3CC3.crl
                          rsync://rpki-repo.registro.br/repo/6ncG9s2gupX8sELknXjoT2628XXVamFRqgmBaNXEmUYQ/0/CE687BDFD3E8EBACE7EE1EA84F7FC1BB278B3CC3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE687BDFD3E8EBACE7EE1EA84F7FC1BB278B3CC3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 17 Feb 2025 12:05:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:4a:0d:b1:89:9d:67:30:95:db:38:e9:5e:55:8e:2e:b0:81:97:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CE687BDFD3E8EBACE7EE1EA84F7FC1BB278B3CC3
        Validity
            Not Before: Jun  4 14:29:20 2024 GMT
            Not After : Jun  3 14:34:20 2025 GMT
        Subject: CN=4B4F9876998E623D02170C0BC27BC5415CE60FB1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:18:05:a8:c2:6a:90:0b:90:60:43:f3:4d:31:
                    cb:48:3d:40:2b:10:11:d3:e2:dd:91:33:5c:f3:89:
                    4a:8d:22:2d:38:a3:7a:61:20:2e:02:d3:6d:8f:1d:
                    4e:66:fe:f9:26:5e:0c:74:b4:2c:17:3a:12:27:44:
                    2b:ba:67:b4:bc:e6:fd:6a:65:ad:0e:76:14:11:a3:
                    94:a8:0b:c0:d2:19:f6:b6:a8:44:94:b9:76:8b:9e:
                    61:42:c1:24:52:c1:2a:fd:39:64:b5:36:2f:d1:f7:
                    dd:81:e9:a6:11:99:e8:fd:41:34:a5:ef:e7:f2:22:
                    df:9c:20:fb:d2:0b:32:f8:4f:1d:41:bf:44:55:6c:
                    b0:84:c6:23:76:5c:2d:cf:5a:77:fb:b6:28:5f:9f:
                    73:fb:e8:70:c4:83:9b:44:27:b4:83:e4:20:49:e8:
                    de:4f:01:63:05:17:68:79:76:89:4c:a8:fb:4a:c1:
                    a2:3d:be:cf:4d:c4:a6:3e:29:3b:03:0d:aa:61:e8:
                    e4:44:40:ae:59:ae:65:a7:37:f5:ce:ef:f3:bb:25:
                    e5:d3:6a:2c:f9:59:17:f9:a5:ac:e2:28:3e:3d:33:
                    12:89:0c:18:5e:15:10:03:bf:63:7d:f7:38:a0:0f:
                    41:75:75:30:d8:db:33:1d:f0:9b:22:52:d6:9c:fa:
                    03:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:4F:98:76:99:8E:62:3D:02:17:0C:0B:C2:7B:C5:41:5C:E6:0F:B1
            X509v3 Authority Key Identifier:
                keyid:CE:68:7B:DF:D3:E8:EB:AC:E7:EE:1E:A8:4F:7F:C1:BB:27:8B:3C:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6ncG9s2gupX8sELknXjoT2628XXVamFRqgmBaNXEmUYQ/0/CE687BDFD3E8EBACE7EE1EA84F7FC1BB278B3CC3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE687BDFD3E8EBACE7EE1EA84F7FC1BB278B3CC3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6ncG9s2gupX8sELknXjoT2628XXVamFRqgmBaNXEmUYQ/0/34352e3138362e3134332e302f32342d3234203d3e203631363030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.186.143.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4c:ee:2c:a6:cd:c6:7f:c2:18:82:98:4f:2e:31:95:3e:5d:e2:
         8f:e5:b0:36:a6:b4:b4:69:7b:7b:65:cc:db:cf:6c:f6:ad:46:
         12:d2:98:f3:df:61:95:12:b5:55:95:a1:0d:0c:eb:fd:4d:cb:
         72:de:bd:fc:ae:d5:0f:a3:1e:a2:5d:53:ca:0a:5f:63:4b:4f:
         1c:32:9c:2c:ce:5e:59:53:e1:bb:c8:e2:4a:78:06:46:b2:f3:
         83:f6:6c:c5:96:4d:59:3d:65:72:94:6d:e9:d7:20:3d:d4:35:
         a2:57:c8:dc:44:78:7f:ee:78:3c:a7:18:12:16:5a:a6:65:e0:
         f8:82:57:c0:e2:69:ed:61:20:27:3f:6e:48:c1:99:57:94:66:
         28:44:69:ed:8e:be:4b:46:cc:ec:4b:37:d3:30:a6:14:bb:bb:
         b4:15:bd:ce:23:92:7c:b5:a6:92:62:1b:fb:68:3c:98:47:dd:
         3b:b4:56:7b:2e:f2:04:ca:fc:11:aa:2a:63:f8:15:b0:d6:c7:
         57:35:d3:96:67:bf:10:e0:a8:39:55:7d:e0:01:6e:57:13:9e:
         1a:dd:3d:53:5e:6d:4e:da:85:de:b6:8e:92:21:e2:18:e3:a5:
         32:6e:1e:78:04:63:fc:1f:b5:22:28:a2:8f:ef:d0:28:ed:39:
         f6:81:5b:85
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUUkoNsYmdZzCV2zjpXlWOLrCBl50wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0U2ODdCREZEM0U4RUJBQ0U3RUUxRUE4NEY3RkMxQkIy
NzhCM0NDMzAeFw0yNDA2MDQxNDI5MjBaFw0yNTA2MDMxNDM0MjBaMDMxMTAvBgNV
BAMTKDRCNEY5ODc2OTk4RTYyM0QwMjE3MEMwQkMyN0JDNTQxNUNFNjBGQjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXGAWowmqQC5BgQ/NNMctIPUAr
EBHT4t2RM1zziUqNIi04o3phIC4C022PHU5m/vkmXgx0tCwXOhInRCu6Z7S85v1q
Za0OdhQRo5SoC8DSGfa2qESUuXaLnmFCwSRSwSr9OWS1Ni/R992B6aYRmej9QTSl
7+fyIt+cIPvSCzL4Tx1Bv0RVbLCExiN2XC3PWnf7tihfn3P76HDEg5tEJ7SD5CBJ
6N5PAWMFF2h5dolMqPtKwaI9vs9NxKY+KTsDDaph6OREQK5ZrmWnN/XO7/O7JeXT
aiz5WRf5paziKD49MxKJDBheFRADv2N99zigD0F1dTDY2zMd8JsiUtac+gO7AgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUS0+YdpmOYj0CFwwLwnvFQVzmD7EwHwYDVR0j
BBgwFoAUzmh739Po66zn7h6oT3/BuyeLPMMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNm5jRzlzMmd1cFg4c0VMa25Yam9UMjYyOFhYVmFtRlJxZ21CYU5YRW1V
WVEvMC9DRTY4N0JERkQzRThFQkFDRTdFRTFFQTg0RjdGQzFCQjI3OEIzQ0MzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NFNjg3QkRGRDNFOEVCQUNF
N0VFMUVBODRGN0ZDMUJCMjc4QjNDQzMuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzZuY0c5czJndXBYOHNFTGtuWGpvVDI2MjhYWFZhbUZScWdtQmFOWEVtVVlRLzAv
MzQzNTJlMzEzODM2MmUzMTM0MzMyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNjMx
MzYzMDMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQALbqPMA0GCSqGSIb3DQEBCwUAA4IBAQBM7iymzcZ/
whiCmE8uMZU+XeKP5bA2prS0aXt7Zczbz2z2rUYS0pjz32GVErVVlaENDOv9Tcty
3r38rtUPox6iXVPKCl9jS08cMpwszl5ZU+G7yOJKeAZGsvOD9mzFlk1ZPWVylG3p
1yA91DWiV8jcRHh/7ng8pxgSFlqmZeD4glfA4mntYSAnP25IwZlXlGYoRGntjr5L
RszsSzfTMKYUu7u0Fb3OI5J8taaSYhv7aDyYR907tFZ7LvIEyvwRqipj+BWw1sdX
NdOWZ78Q4Kg5VX3gAW5XE54a3T1TXm1O2oXeto6SIeIY46Uybh54BGP8H7UiKKKP
79Ao7Tn2gVuF
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:00:37 2025 by rpki-client