Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/73CP25Y7qyu4tk7HkL6MKp6RAHYxh5XssJiHJJ7W25hH/1/34352e3136302e3136362e302f32342d3234203d3e20323638343132.roa
File:                     34352e3136302e3136362e302f32342d3234203d3e20323638343132.roa (raw, json)
Hash identifier:          9fCjyUw/4JKviywZFqZS4jnfWDcR69IdLFnSyT8h7q4=
Subject key identifier:   45:12:2B:6B:65:22:68:0F:E9:E2:45:EF:9F:55:72:F9:9E:08:D2:C8
Certificate issuer:       /CN=68048497B89FF318156BA3D021C73EDE420ED5C8
Certificate serial:       57F18D39269791BA7AAD4BAAB426A789BBD70E69
Authority key identifier: 68:04:84:97:B8:9F:F3:18:15:6B:A3:D0:21:C7:3E:DE:42:0E:D5:C8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68048497B89FF318156BA3D021C73EDE420ED5C8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/73CP25Y7qyu4tk7HkL6MKp6RAHYxh5XssJiHJJ7W25hH/1/34352e3136302e3136362e302f32342d3234203d3e20323638343132.roa
Signing time:             Thu 04 Apr 2024 06:57:16 +0000
ROA not before:           Thu 04 Apr 2024 06:52:16 +0000
ROA not after:            Thu 03 Apr 2025 06:57:16 +0000
asID:                     268412
IP address blocks:        45.160.166.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/73CP25Y7qyu4tk7HkL6MKp6RAHYxh5XssJiHJJ7W25hH/1/68048497B89FF318156BA3D021C73EDE420ED5C8.crl
                          rsync://rpki-repo.registro.br/repo/73CP25Y7qyu4tk7HkL6MKp6RAHYxh5XssJiHJJ7W25hH/1/68048497B89FF318156BA3D021C73EDE420ED5C8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68048497B89FF318156BA3D021C73EDE420ED5C8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 23:11:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:f1:8d:39:26:97:91:ba:7a:ad:4b:aa:b4:26:a7:89:bb:d7:0e:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68048497B89FF318156BA3D021C73EDE420ED5C8
        Validity
            Not Before: Apr  4 06:52:16 2024 GMT
            Not After : Apr  3 06:57:16 2025 GMT
        Subject: CN=45122B6B6522680FE9E245EF9F5572F99E08D2C8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:48:e2:38:f5:93:4e:18:c1:d7:6c:c6:b1:3f:
                    92:a5:11:1b:93:5e:2d:1d:97:d9:0c:ff:f5:3b:56:
                    b2:0e:40:5f:35:f0:35:31:06:75:c4:64:b8:6b:68:
                    4b:12:c1:79:0a:56:13:49:e3:48:45:bc:25:64:76:
                    5b:67:21:36:7c:7d:59:37:7b:b8:08:c8:ad:f9:46:
                    71:19:e1:3f:be:71:f7:e5:5d:5a:96:03:ca:05:7b:
                    ba:44:4c:a0:13:66:ba:1f:92:b4:6b:60:d3:99:ac:
                    e8:86:ac:2b:43:32:8f:26:e6:e4:30:48:e7:ad:26:
                    2a:31:97:a6:4a:19:d6:e4:2a:94:9b:c2:2a:1e:9e:
                    98:74:1a:31:f4:b2:db:9f:17:35:e6:d9:d2:a9:1c:
                    16:7c:be:59:3e:92:0a:fa:a8:53:cd:5c:64:e9:68:
                    b3:45:a1:27:bf:cf:a2:f6:ae:1d:e9:a2:68:c5:84:
                    d5:b3:aa:f3:81:4e:38:10:1d:b8:c3:76:75:a9:9c:
                    08:5b:a7:20:b4:11:06:1b:54:5f:07:75:68:5d:e4:
                    25:e5:93:29:20:e0:b3:d3:7b:51:5d:a2:3e:7d:30:
                    5c:6a:e9:70:64:05:42:ee:08:09:0f:e1:d8:7d:58:
                    84:81:92:41:08:48:3b:47:43:b0:4c:c2:23:8d:e2:
                    53:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:12:2B:6B:65:22:68:0F:E9:E2:45:EF:9F:55:72:F9:9E:08:D2:C8
            X509v3 Authority Key Identifier:
                keyid:68:04:84:97:B8:9F:F3:18:15:6B:A3:D0:21:C7:3E:DE:42:0E:D5:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/73CP25Y7qyu4tk7HkL6MKp6RAHYxh5XssJiHJJ7W25hH/1/68048497B89FF318156BA3D021C73EDE420ED5C8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68048497B89FF318156BA3D021C73EDE420ED5C8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/73CP25Y7qyu4tk7HkL6MKp6RAHYxh5XssJiHJJ7W25hH/1/34352e3136302e3136362e302f32342d3234203d3e20323638343132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.160.166.0/24

    Signature Algorithm: sha256WithRSAEncryption
         45:6c:2d:65:e0:41:2b:05:c1:8d:da:31:90:91:13:99:8b:eb:
         46:a8:8c:85:d2:12:f0:20:b8:92:0d:7b:78:cb:52:1b:94:a9:
         0c:c4:af:26:0d:4d:bb:00:3b:91:a6:67:ed:d0:15:b2:5d:82:
         54:95:4a:08:15:73:7c:06:ad:ee:a2:82:d2:a4:92:69:af:11:
         a1:5c:02:f6:50:aa:71:0d:ca:fb:c3:a9:84:3f:af:f6:8c:c7:
         bd:6f:23:8e:3b:0a:30:0f:ad:f5:00:92:33:2b:dd:bb:30:d2:
         ee:55:89:76:08:79:57:ca:45:c8:9f:d8:bb:47:f9:01:23:44:
         ed:15:71:7d:f9:a7:b1:3c:79:cf:81:30:5d:30:dc:22:96:db:
         4c:e3:1b:e7:d1:8c:b8:8d:f0:bf:7a:c1:75:6c:8c:21:bf:e2:
         6b:0d:ef:09:46:86:c5:64:67:a8:8e:4b:55:8f:a6:e4:fb:e7:
         34:1f:02:bd:24:4f:6a:a9:f4:ca:9d:bc:c2:2e:5f:45:df:2f:
         60:e7:54:aa:97:91:dd:71:6e:d8:73:d7:22:6a:66:1a:02:40:
         a8:b9:29:09:76:3a:84:7c:d5:a0:3d:70:51:ae:84:40:ae:ff:
         a7:9e:54:87:71:32:18:03:4f:a9:a5:c2:cf:e6:2d:36:db:fc:
         84:7c:bc:dd
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUV/GNOSaXkbp6rUuqtCanibvXDmkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjgwNDg0OTdCODlGRjMxODE1NkJBM0QwMjFDNzNFREU0
MjBFRDVDODAeFw0yNDA0MDQwNjUyMTZaFw0yNTA0MDMwNjU3MTZaMDMxMTAvBgNV
BAMTKDQ1MTIyQjZCNjUyMjY4MEZFOUUyNDVFRjlGNTU3MkY5OUUwOEQyQzgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsSOI49ZNOGMHXbMaxP5KlERuT
Xi0dl9kM//U7VrIOQF818DUxBnXEZLhraEsSwXkKVhNJ40hFvCVkdltnITZ8fVk3
e7gIyK35RnEZ4T++cfflXVqWA8oFe7pETKATZrofkrRrYNOZrOiGrCtDMo8m5uQw
SOetJioxl6ZKGdbkKpSbwioenph0GjH0stufFzXm2dKpHBZ8vlk+kgr6qFPNXGTp
aLNFoSe/z6L2rh3pomjFhNWzqvOBTjgQHbjDdnWpnAhbpyC0EQYbVF8HdWhd5CXl
kykg4LPTe1Fdoj59MFxq6XBkBULuCAkP4dh9WISBkkEISDtHQ7BMwiON4lOfAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQURRIra2UiaA/p4kXvn1Vy+Z4I0sgwHwYDVR0j
BBgwFoAUaASEl7if8xgVa6PQIcc+3kIO1cgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNzNDUDI1WTdxeXU0dGs3SGtMNk1LcDZSQUhZeGg1WHNzSmlISko3VzI1
aEgvMS82ODA0ODQ5N0I4OUZGMzE4MTU2QkEzRDAyMUM3M0VERTQyMEVENUM4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzY4MDQ4NDk3Qjg5RkYzMTgx
NTZCQTNEMDIxQzczRURFNDIwRUQ1QzguY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzczQ1AyNVk3cXl1NHRrN0hrTDZNS3A2UkFIWXhoNVhzc0ppSEpKN1cyNWhILzEv
MzQzNTJlMzEzNjMwMmUzMTM2MzYyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzgzNDMxMzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAAtoKYwDQYJKoZIhvcNAQELBQADggEBAEVsLWXg
QSsFwY3aMZCRE5mL60aojIXSEvAguJINe3jLUhuUqQzEryYNTbsAO5GmZ+3QFbJd
glSVSggVc3wGre6igtKkkmmvEaFcAvZQqnENyvvDqYQ/r/aMx71vI447CjAPrfUA
kjMr3bsw0u5ViXYIeVfKRcif2LtH+QEjRO0VcX35p7E8ec+BMF0w3CKW20zjG+fR
jLiN8L96wXVsjCG/4msN7wlGhsVkZ6iOS1WPpuT75zQfAr0kT2qp9MqdvMIuX0Xf
L2DnVKqXkd1xbthz1yJqZhoCQKi5KQl2OoR81aA9cFGuhECu/6eeVIdxMhgDT6ml
ws/mLTbb/IR8vN0=
-----END CERTIFICATE-----
Generated at Sat Nov 23 00:05:37 2024 by rpki-client on console-ams.rpki-client.org