Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6yV4iJKDzNTvkwTMm9CKaY646wLN2NbtGt7boUUxvV62/0/34352e3136352e36382e302f32322d3234203d3e20323638363739.roa
File:                     34352e3136352e36382e302f32322d3234203d3e20323638363739.roa (raw, json)
Hash identifier:          XoC8Y89WY7ttjxamKFCIUePVs7rqov8TKqbaGW7UIhg=
Subject key identifier:   F2:21:B9:F6:3E:07:7A:A4:3A:7E:A5:D3:06:1E:6E:C1:00:17:E0:86
Certificate issuer:       /CN=D29DE518BF73E49B6087F7DE6776534CE238CD69
Certificate serial:       35626C1BF5F56283D26F2B19B72BF77F37DFE266
Authority key identifier: D2:9D:E5:18:BF:73:E4:9B:60:87:F7:DE:67:76:53:4C:E2:38:CD:69
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D29DE518BF73E49B6087F7DE6776534CE238CD69.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6yV4iJKDzNTvkwTMm9CKaY646wLN2NbtGt7boUUxvV62/0/34352e3136352e36382e302f32322d3234203d3e20323638363739.roa
Signing time:             Fri 16 Aug 2024 14:54:27 +0000
ROA not before:           Fri 16 Aug 2024 14:49:27 +0000
ROA not after:            Fri 15 Aug 2025 14:54:27 +0000
asID:                     268679
IP address blocks:        45.165.68.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6yV4iJKDzNTvkwTMm9CKaY646wLN2NbtGt7boUUxvV62/0/D29DE518BF73E49B6087F7DE6776534CE238CD69.crl
                          rsync://rpki-repo.registro.br/repo/6yV4iJKDzNTvkwTMm9CKaY646wLN2NbtGt7boUUxvV62/0/D29DE518BF73E49B6087F7DE6776534CE238CD69.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D29DE518BF73E49B6087F7DE6776534CE238CD69.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 02:45:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:62:6c:1b:f5:f5:62:83:d2:6f:2b:19:b7:2b:f7:7f:37:df:e2:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D29DE518BF73E49B6087F7DE6776534CE238CD69
        Validity
            Not Before: Aug 16 14:49:27 2024 GMT
            Not After : Aug 15 14:54:27 2025 GMT
        Subject: CN=F221B9F63E077AA43A7EA5D3061E6EC10017E086
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:64:dd:71:9a:17:de:e4:cf:30:2a:7b:92:0b:
                    5f:68:11:34:bf:f3:77:fc:ce:0f:e5:63:33:55:cb:
                    2b:78:90:6f:91:91:92:a0:54:d1:f1:50:ed:a0:49:
                    31:ba:31:2c:45:39:91:9a:b8:6f:6a:c5:65:4a:29:
                    ab:b6:42:3d:32:0e:5b:6b:b2:2a:e1:ec:3b:8f:4b:
                    86:42:13:04:1f:0d:3a:d3:9a:8b:e9:64:3c:b3:b8:
                    12:7c:26:67:4b:ea:0c:78:b8:0d:b5:a0:2d:6b:70:
                    26:98:75:51:7d:8c:c8:1f:45:78:7f:49:9c:9b:ae:
                    5f:99:16:e6:91:b4:b2:89:ec:eb:08:1d:f6:f6:4e:
                    f0:5c:4c:c0:58:9b:48:b4:02:05:b6:fb:31:14:96:
                    82:3b:98:7d:9a:2c:74:c3:99:02:6f:1d:c7:82:49:
                    99:2f:e6:7d:9e:6b:c3:90:a9:b4:c2:ae:5f:9c:c7:
                    ac:51:ba:4a:c1:df:44:3c:7a:b6:6f:7f:6e:09:e6:
                    04:39:0e:18:1f:ea:cd:79:d2:47:57:b0:9b:7a:4f:
                    f4:ff:03:16:c4:04:4b:e1:1d:74:b9:c7:03:b7:f2:
                    d0:1d:97:f0:d8:68:df:64:12:9d:d8:4e:94:22:93:
                    71:8b:a9:4d:23:71:6d:47:5f:98:18:c8:27:b8:a9:
                    67:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:21:B9:F6:3E:07:7A:A4:3A:7E:A5:D3:06:1E:6E:C1:00:17:E0:86
            X509v3 Authority Key Identifier:
                keyid:D2:9D:E5:18:BF:73:E4:9B:60:87:F7:DE:67:76:53:4C:E2:38:CD:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6yV4iJKDzNTvkwTMm9CKaY646wLN2NbtGt7boUUxvV62/0/D29DE518BF73E49B6087F7DE6776534CE238CD69.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D29DE518BF73E49B6087F7DE6776534CE238CD69.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6yV4iJKDzNTvkwTMm9CKaY646wLN2NbtGt7boUUxvV62/0/34352e3136352e36382e302f32322d3234203d3e20323638363739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.165.68.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6b:91:bc:c7:b9:26:f4:5d:f2:89:11:a1:7a:8e:68:ef:16:cd:
         85:5e:a6:28:f1:c7:94:38:14:6e:32:a6:2e:d7:09:2f:8c:84:
         2e:af:5f:99:ef:6e:a2:d8:6a:a3:02:2c:5e:c0:31:30:2d:13:
         8a:57:bb:dc:b9:92:d5:bb:32:65:70:94:0e:ba:59:0d:80:0e:
         5f:42:d8:c2:65:af:58:7e:cc:c3:8e:b9:8a:e5:b5:06:5a:65:
         29:6d:82:1a:aa:a5:39:0f:8b:38:47:83:8a:c3:cb:e6:5f:ba:
         25:b2:1a:3b:aa:de:9a:4a:43:0c:53:fc:4f:01:fc:3d:88:6e:
         05:0f:33:0b:e6:b6:cc:37:61:e3:13:64:74:6b:ca:5a:03:fd:
         31:e4:de:78:2b:ae:06:dc:b8:b3:3f:c0:70:0a:17:96:5b:93:
         2a:41:56:36:82:63:33:aa:e2:2f:2e:64:73:d0:5e:48:2a:68:
         2e:ed:9d:d1:4a:28:2b:13:d4:ee:f0:59:21:80:af:cd:e1:59:
         13:1e:36:ae:70:e6:76:d8:25:59:17:d3:dd:3c:29:a2:b9:6d:
         8c:be:d3:c2:6c:ff:96:3c:3e:98:86:b5:03:f8:b7:d3:b4:e0:
         39:a4:bb:32:eb:df:a8:9d:2a:cc:5a:51:44:09:d7:47:50:6c:
         3d:2d:70:90
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUNWJsG/X1YoPSbysZtyv3fzff4mYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDI5REU1MThCRjczRTQ5QjYwODdGN0RFNjc3NjUzNENF
MjM4Q0Q2OTAeFw0yNDA4MTYxNDQ5MjdaFw0yNTA4MTUxNDU0MjdaMDMxMTAvBgNV
BAMTKEYyMjFCOUY2M0UwNzdBQTQzQTdFQTVEMzA2MUU2RUMxMDAxN0UwODYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCZN1xmhfe5M8wKnuSC19oETS/
83f8zg/lYzNVyyt4kG+RkZKgVNHxUO2gSTG6MSxFOZGauG9qxWVKKau2Qj0yDltr
sirh7DuPS4ZCEwQfDTrTmovpZDyzuBJ8JmdL6gx4uA21oC1rcCaYdVF9jMgfRXh/
SZybrl+ZFuaRtLKJ7OsIHfb2TvBcTMBYm0i0AgW2+zEUloI7mH2aLHTDmQJvHceC
SZkv5n2ea8OQqbTCrl+cx6xRukrB30Q8erZvf24J5gQ5Dhgf6s150kdXsJt6T/T/
AxbEBEvhHXS5xwO38tAdl/DYaN9kEp3YTpQik3GLqU0jcW1HX5gYyCe4qWepAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQU8iG59j4HeqQ6fqXTBh5uwQAX4IYwHwYDVR0j
BBgwFoAU0p3lGL9z5Jtgh/feZ3ZTTOI4zWkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNnlWNGlKS0R6TlR2a3dUTW05Q0thWTY0NndMTjJOYnRHdDdib1VVeHZW
NjIvMC9EMjlERTUxOEJGNzNFNDlCNjA4N0Y3REU2Nzc2NTM0Q0UyMzhDRDY5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0QyOURFNTE4QkY3M0U0OUI2
MDg3RjdERTY3NzY1MzRDRTIzOENENjkuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzZ5VjRpSktEek5Udmt3VE1tOUNLYVk2NDZ3TE4yTmJ0R3Q3Ym9VVXh2VjYyLzAv
MzQzNTJlMzEzNjM1MmUzNjM4MmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNjM4
MzYzNzM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCLaVEMA0GCSqGSIb3DQEBCwUAA4IBAQBrkbzHuSb0
XfKJEaF6jmjvFs2FXqYo8ceUOBRuMqYu1wkvjIQur1+Z726i2GqjAixewDEwLROK
V7vcuZLVuzJlcJQOulkNgA5fQtjCZa9YfszDjrmK5bUGWmUpbYIaqqU5D4s4R4OK
w8vmX7olsho7qt6aSkMMU/xPAfw9iG4FDzML5rbMN2HjE2R0a8paA/0x5N54K64G
3LizP8BwCheWW5MqQVY2gmMzquIvLmRz0F5IKmgu7Z3RSigrE9Tu8FkhgK/N4VkT
HjaucOZ22CVZF9PdPCmiuW2MvtPCbP+WPD6YhrUD+LfTtOA5pLsy69+onSrMWlFE
CddHUGw9LXCQ
-----END CERTIFICATE-----
Generated at Fri Nov 22 03:51:18 2024 by rpki-client on console-fra.rpki-client.org