Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6x6GwSHWUKQr9H9suKr67AUfpCrpqxWKdQzfgmUZQjjW/1/34352e3138322e38382e302f32322d3234203d3e20323639323736.roa
File:                     34352e3138322e38382e302f32322d3234203d3e20323639323736.roa (raw, json)
Hash identifier:          T6kuaeUBcYw8Slo4yPLEXxtp7b8oXPmrkwDSsIm90KQ=
Subject key identifier:   30:93:11:68:AC:19:93:00:E4:3C:2F:9D:62:BD:2E:6B:08:22:46:7A
Certificate issuer:       /CN=BDFDA8D24F7FE492E3B1FC3D2D5CC4969765C26F
Certificate serial:       454998EB148E5AA67859B6A7A02BD06AD56D1A46
Authority key identifier: BD:FD:A8:D2:4F:7F:E4:92:E3:B1:FC:3D:2D:5C:C4:96:97:65:C2:6F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BDFDA8D24F7FE492E3B1FC3D2D5CC4969765C26F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6x6GwSHWUKQr9H9suKr67AUfpCrpqxWKdQzfgmUZQjjW/1/34352e3138322e38382e302f32322d3234203d3e20323639323736.roa
Signing time:             Tue 24 Sep 2024 14:20:03 +0000
ROA not before:           Tue 24 Sep 2024 14:15:03 +0000
ROA not after:            Tue 23 Sep 2025 14:20:03 +0000
asID:                     269276
IP address blocks:        45.182.88.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6x6GwSHWUKQr9H9suKr67AUfpCrpqxWKdQzfgmUZQjjW/1/BDFDA8D24F7FE492E3B1FC3D2D5CC4969765C26F.crl
                          rsync://rpki-repo.registro.br/repo/6x6GwSHWUKQr9H9suKr67AUfpCrpqxWKdQzfgmUZQjjW/1/BDFDA8D24F7FE492E3B1FC3D2D5CC4969765C26F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BDFDA8D24F7FE492E3B1FC3D2D5CC4969765C26F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 21:41:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:49:98:eb:14:8e:5a:a6:78:59:b6:a7:a0:2b:d0:6a:d5:6d:1a:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BDFDA8D24F7FE492E3B1FC3D2D5CC4969765C26F
        Validity
            Not Before: Sep 24 14:15:03 2024 GMT
            Not After : Sep 23 14:20:03 2025 GMT
        Subject: CN=30931168AC199300E43C2F9D62BD2E6B0822467A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:61:f9:0e:ff:c4:94:5a:af:b0:f3:02:af:75:
                    8a:06:90:1b:07:86:b6:a7:b2:c5:81:25:6f:3f:3b:
                    1c:39:72:67:7a:c9:16:63:a1:df:98:88:0e:77:c4:
                    81:92:8f:da:d8:0c:81:7d:3c:99:70:61:20:86:35:
                    d6:d2:a6:f9:e6:bf:70:62:c4:f0:d5:ef:f9:87:4f:
                    f1:f8:ff:51:c7:c7:22:07:be:8d:b0:5c:80:f7:31:
                    02:de:b2:18:23:17:90:e2:3c:2d:1f:43:be:f2:8d:
                    91:14:e0:be:16:13:16:17:07:d5:74:7e:87:59:97:
                    bc:fe:63:5b:0e:d0:92:fe:22:8f:a8:29:30:10:f7:
                    b1:ef:85:37:74:53:9d:cd:55:c4:7b:0b:cc:27:dc:
                    3f:0a:24:54:1a:cc:54:f6:ed:50:15:fd:22:24:7e:
                    97:0b:2d:99:c7:15:1f:8d:47:1e:9c:50:9c:ac:75:
                    3e:7d:f5:ef:8a:bc:61:1e:b9:50:a1:19:04:ca:35:
                    6d:98:cf:d8:9d:45:f6:44:57:50:d2:3e:e8:2c:c4:
                    77:97:ec:35:84:05:4a:9f:9d:7d:7f:d9:da:57:d9:
                    c7:e2:e5:aa:2f:c8:9c:9b:68:6a:c5:79:a1:4b:35:
                    09:dc:86:b5:13:af:e4:1b:7a:9f:c6:7e:5a:b1:f1:
                    36:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:93:11:68:AC:19:93:00:E4:3C:2F:9D:62:BD:2E:6B:08:22:46:7A
            X509v3 Authority Key Identifier:
                keyid:BD:FD:A8:D2:4F:7F:E4:92:E3:B1:FC:3D:2D:5C:C4:96:97:65:C2:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6x6GwSHWUKQr9H9suKr67AUfpCrpqxWKdQzfgmUZQjjW/1/BDFDA8D24F7FE492E3B1FC3D2D5CC4969765C26F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BDFDA8D24F7FE492E3B1FC3D2D5CC4969765C26F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6x6GwSHWUKQr9H9suKr67AUfpCrpqxWKdQzfgmUZQjjW/1/34352e3138322e38382e302f32322d3234203d3e20323639323736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.182.88.0/22

    Signature Algorithm: sha256WithRSAEncryption
         75:b8:a6:b2:c0:b5:11:d0:7b:a7:2c:7a:fe:0f:b8:2a:0b:45:
         e1:53:4e:02:b5:d7:57:9e:c4:39:63:85:96:e7:72:7e:7e:64:
         fd:c9:bc:d3:b3:1e:c5:ef:8d:14:85:83:ba:ca:d6:b9:e6:1c:
         fc:7d:50:aa:65:8d:56:be:8b:26:a9:40:1c:55:49:df:ed:0c:
         5f:51:a1:47:5a:15:0f:d2:e2:09:f1:ac:44:8b:df:54:04:db:
         ff:54:6e:d9:a4:d7:ac:81:a6:8e:07:38:b3:51:18:ff:73:d1:
         ab:7f:4a:88:e3:d5:b0:75:24:05:f0:54:bd:c0:7d:f0:6d:44:
         64:77:6b:b6:4d:e0:2f:ff:8f:ff:f8:65:13:6f:97:03:54:0a:
         ce:76:f5:93:52:34:12:31:91:18:de:fe:60:82:ed:b2:6d:5a:
         e0:4a:f2:c4:e5:6d:e8:b7:b5:47:7f:1a:b5:f0:98:8e:fd:aa:
         f2:47:03:23:c4:a8:57:ac:35:d6:5b:62:b5:c0:e1:19:bd:32:
         6f:9a:79:cd:ce:90:92:0a:2c:ad:41:f8:35:39:74:eb:33:b4:
         1c:1f:0b:b8:ae:49:eb:58:01:75:5a:29:4d:2d:76:a7:eb:d8:
         70:6a:f3:e9:64:19:ed:44:43:44:0a:ee:50:ab:30:5b:8c:71:
         50:d5:4b:24
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIURUmY6xSOWqZ4WbanoCvQatVtGkYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkRGREE4RDI0RjdGRTQ5MkUzQjFGQzNEMkQ1Q0M0OTY5
NzY1QzI2RjAeFw0yNDA5MjQxNDE1MDNaFw0yNTA5MjMxNDIwMDNaMDMxMTAvBgNV
BAMTKDMwOTMxMTY4QUMxOTkzMDBFNDNDMkY5RDYyQkQyRTZCMDgyMjQ2N0EwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUYfkO/8SUWq+w8wKvdYoGkBsH
hranssWBJW8/Oxw5cmd6yRZjod+YiA53xIGSj9rYDIF9PJlwYSCGNdbSpvnmv3Bi
xPDV7/mHT/H4/1HHxyIHvo2wXID3MQLeshgjF5DiPC0fQ77yjZEU4L4WExYXB9V0
fodZl7z+Y1sO0JL+Io+oKTAQ97HvhTd0U53NVcR7C8wn3D8KJFQazFT27VAV/SIk
fpcLLZnHFR+NRx6cUJysdT599e+KvGEeuVChGQTKNW2Yz9idRfZEV1DSPugsxHeX
7DWEBUqfnX1/2dpX2cfi5aovyJybaGrFeaFLNQnchrUTr+Qbep/Gflqx8TZtAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUMJMRaKwZkwDkPC+dYr0uawgiRnowHwYDVR0j
BBgwFoAUvf2o0k9/5JLjsfw9LVzElpdlwm8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNng2R3dTSFdVS1FyOUg5c3VLcjY3QVVmcENycHF4V0tkUXpmZ21VWlFq
alcvMS9CREZEQThEMjRGN0ZFNDkyRTNCMUZDM0QyRDVDQzQ5Njk3NjVDMjZGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0JERkRBOEQyNEY3RkU0OTJF
M0IxRkMzRDJENUNDNDk2OTc2NUMyNkYuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzZ4Nkd3U0hXVUtRcjlIOXN1S3I2N0FVZnBDcnBxeFdLZFF6ZmdtVVpRampXLzEv
MzQzNTJlMzEzODMyMmUzODM4MmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNjM5
MzIzNzM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCLbZYMA0GCSqGSIb3DQEBCwUAA4IBAQB1uKaywLUR
0HunLHr+D7gqC0XhU04CtddXnsQ5Y4WW53J+fmT9ybzTsx7F740UhYO6yta55hz8
fVCqZY1WvosmqUAcVUnf7QxfUaFHWhUP0uIJ8axEi99UBNv/VG7ZpNesgaaOBziz
URj/c9Grf0qI49WwdSQF8FS9wH3wbURkd2u2TeAv/4//+GUTb5cDVArOdvWTUjQS
MZEY3v5ggu2ybVrgSvLE5W3ot7VHfxq18JiO/aryRwMjxKhXrDXWW2K1wOEZvTJv
mnnNzpCSCiytQfg1OXTrM7QcHwu4rknrWAF1WilNLXan69hwavPpZBntRENECu5Q
qzBbjHFQ1Usk
-----END CERTIFICATE-----
Generated at Fri Nov 22 22:10:00 2024 by rpki-client on console-ams.rpki-client.org