Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/79K4idmLm4ees52PwYMAJQKWXbcVQT85693ikRyzskbo/0/34352e3137342e31362e302f32332d3233203d3e20323638383738.roa
File:                     34352e3137342e31362e302f32332d3233203d3e20323638383738.roa (raw, json)
Hash identifier:          nLiE6yi8v2swM0N2WR++xc99oe2em4lVBJ/aphER4g0=
Subject key identifier:   4D:2C:AD:D2:53:9B:B7:DD:BF:8F:48:69:D5:66:BA:5B:1F:5A:B6:B1
Certificate issuer:       /CN=BFB590FA7A04C15A07E802593C4472D77FAB7820
Certificate serial:       031AFB104D9C10552C92CBFEA68FB026E8314624
Authority key identifier: BF:B5:90:FA:7A:04:C1:5A:07:E8:02:59:3C:44:72:D7:7F:AB:78:20
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BFB590FA7A04C15A07E802593C4472D77FAB7820.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/79K4idmLm4ees52PwYMAJQKWXbcVQT85693ikRyzskbo/0/34352e3137342e31362e302f32332d3233203d3e20323638383738.roa
Signing time:             Wed 25 Dec 2024 09:58:29 +0000
ROA not before:           Wed 25 Dec 2024 09:53:29 +0000
ROA not after:            Wed 24 Dec 2025 09:58:29 +0000
asID:                     268878
IP address blocks:        45.174.16.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/79K4idmLm4ees52PwYMAJQKWXbcVQT85693ikRyzskbo/0/BFB590FA7A04C15A07E802593C4472D77FAB7820.crl
                          rsync://rpki-repo.registro.br/repo/79K4idmLm4ees52PwYMAJQKWXbcVQT85693ikRyzskbo/0/BFB590FA7A04C15A07E802593C4472D77FAB7820.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BFB590FA7A04C15A07E802593C4472D77FAB7820.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 00:01:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:1a:fb:10:4d:9c:10:55:2c:92:cb:fe:a6:8f:b0:26:e8:31:46:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BFB590FA7A04C15A07E802593C4472D77FAB7820
        Validity
            Not Before: Dec 25 09:53:29 2024 GMT
            Not After : Dec 24 09:58:29 2025 GMT
        Subject: CN=4D2CADD2539BB7DDBF8F4869D566BA5B1F5AB6B1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:91:3d:6d:c3:47:9f:cb:10:ee:52:f7:f1:f5:
                    23:0f:cc:77:21:18:ca:7c:ad:94:82:6a:2f:aa:76:
                    8e:48:34:5b:4b:6a:8d:68:c8:a6:b8:bd:cb:33:6d:
                    d3:2b:eb:ac:9b:df:e5:cf:be:1d:7e:74:be:d3:4d:
                    1e:65:e4:89:cd:b1:00:45:ea:96:e7:82:b1:cb:0e:
                    a7:96:4f:30:44:1d:d8:a5:67:29:58:78:f6:b5:ad:
                    ed:74:e2:03:74:08:72:37:f3:71:a8:cd:17:17:df:
                    7a:ae:d8:01:71:72:02:a4:4f:1e:09:ed:c1:7a:c0:
                    57:ba:86:8c:7c:0d:74:7c:6a:a1:fe:e5:51:e1:68:
                    8d:51:08:87:49:e6:6d:4e:11:dc:f0:22:5c:95:aa:
                    53:45:52:59:91:d1:80:c4:5c:1b:2a:ca:ee:fa:92:
                    02:5a:65:57:10:0c:97:b2:b5:f1:d8:1d:36:9d:9c:
                    7a:1c:e6:09:5d:9d:d2:4b:e2:d8:4c:05:6d:75:a5:
                    db:c4:b1:73:0f:ae:95:d9:30:b6:66:50:fd:0b:eb:
                    12:2c:d8:48:82:bb:87:13:a7:2e:d0:8d:50:c4:a9:
                    3c:4e:5a:da:b6:a4:3c:a2:da:41:3e:20:84:ee:b9:
                    12:96:73:9a:ee:69:57:96:64:62:a9:a7:59:03:8e:
                    b9:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:2C:AD:D2:53:9B:B7:DD:BF:8F:48:69:D5:66:BA:5B:1F:5A:B6:B1
            X509v3 Authority Key Identifier:
                keyid:BF:B5:90:FA:7A:04:C1:5A:07:E8:02:59:3C:44:72:D7:7F:AB:78:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/79K4idmLm4ees52PwYMAJQKWXbcVQT85693ikRyzskbo/0/BFB590FA7A04C15A07E802593C4472D77FAB7820.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BFB590FA7A04C15A07E802593C4472D77FAB7820.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/79K4idmLm4ees52PwYMAJQKWXbcVQT85693ikRyzskbo/0/34352e3137342e31362e302f32332d3233203d3e20323638383738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.174.16.0/23

    Signature Algorithm: sha256WithRSAEncryption
         84:5c:c2:71:92:cb:71:4b:54:8d:3d:92:28:08:a8:34:f2:f1:
         5f:e5:7e:1c:11:e9:a9:74:9a:8b:ee:9e:87:4a:52:d1:9b:32:
         6c:51:21:28:a6:3f:8c:79:6c:59:d7:1f:a8:58:83:c6:3b:4d:
         d6:17:fd:f3:ed:e3:ad:fb:15:53:24:cf:07:b0:8e:7f:82:18:
         c2:d0:9e:8c:40:db:31:3c:5f:fa:28:fc:20:4e:80:56:20:e6:
         19:81:49:ce:13:ea:f8:18:bf:e6:92:97:4c:4e:23:21:22:99:
         8d:ac:10:12:6e:38:e6:72:7a:c4:dd:72:ee:60:d7:49:cb:9c:
         70:b5:f4:ae:a7:9f:04:40:da:c9:19:b5:a2:cc:5b:7d:ee:0c:
         ee:a8:8b:00:d1:df:fa:d7:18:95:47:95:8a:e9:98:72:d8:1a:
         ee:90:03:f9:fe:17:65:fe:28:b0:cb:1f:02:67:5c:40:5b:08:
         17:59:10:2b:69:62:52:25:f3:ae:57:e6:5a:33:24:1a:15:fb:
         93:c3:be:52:6b:c2:ae:bf:3f:a3:e1:65:a6:91:bc:9d:59:cc:
         b7:3f:81:0c:1b:94:7d:bc:46:90:2a:82:d8:eb:a4:33:ba:22:
         78:02:1f:3b:cb:72:2e:31:f8:c6:e7:af:cf:8b:25:e6:de:d9:
         f4:23:45:8d
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUAxr7EE2cEFUsksv+po+wJugxRiQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkZCNTkwRkE3QTA0QzE1QTA3RTgwMjU5M0M0NDcyRDc3
RkFCNzgyMDAeFw0yNDEyMjUwOTUzMjlaFw0yNTEyMjQwOTU4MjlaMDMxMTAvBgNV
BAMTKDREMkNBREQyNTM5QkI3RERCRjhGNDg2OUQ1NjZCQTVCMUY1QUI2QjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLkT1tw0efyxDuUvfx9SMPzHch
GMp8rZSCai+qdo5INFtLao1oyKa4vcszbdMr66yb3+XPvh1+dL7TTR5l5InNsQBF
6pbngrHLDqeWTzBEHdilZylYePa1re104gN0CHI383GozRcX33qu2AFxcgKkTx4J
7cF6wFe6hox8DXR8aqH+5VHhaI1RCIdJ5m1OEdzwIlyVqlNFUlmR0YDEXBsqyu76
kgJaZVcQDJeytfHYHTadnHoc5gldndJL4thMBW11pdvEsXMPrpXZMLZmUP0L6xIs
2EiCu4cTpy7QjVDEqTxOWtq2pDyi2kE+IITuuRKWc5ruaVeWZGKpp1kDjrlnAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUTSyt0lObt92/j0hp1Wa6Wx9atrEwHwYDVR0j
BBgwFoAUv7WQ+noEwVoH6AJZPERy13+reCAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNzlLNGlkbUxtNGVlczUyUHdZTUFKUUtXWGJjVlFUODU2OTNpa1J5enNr
Ym8vMC9CRkI1OTBGQTdBMDRDMTVBMDdFODAyNTkzQzQ0NzJENzdGQUI3ODIwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0JGQjU5MEZBN0EwNEMxNUEw
N0U4MDI1OTNDNDQ3MkQ3N0ZBQjc4MjAuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
Lzc5SzRpZG1MbTRlZXM1MlB3WU1BSlFLV1hiY1ZRVDg1NjkzaWtSeXpza2JvLzAv
MzQzNTJlMzEzNzM0MmUzMTM2MmUzMDJmMzIzMzJkMzIzMzIwM2QzZTIwMzIzNjM4
MzgzNzM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQBLa4QMA0GCSqGSIb3DQEBCwUAA4IBAQCEXMJxkstx
S1SNPZIoCKg08vFf5X4cEempdJqL7p6HSlLRmzJsUSEopj+MeWxZ1x+oWIPGO03W
F/3z7eOt+xVTJM8HsI5/ghjC0J6MQNsxPF/6KPwgToBWIOYZgUnOE+r4GL/mkpdM
TiMhIpmNrBASbjjmcnrE3XLuYNdJy5xwtfSup58EQNrJGbWizFt97gzuqIsA0d/6
1xiVR5WK6Zhy2BrukAP5/hdl/iiwyx8CZ1xAWwgXWRAraWJSJfOuV+ZaMyQaFfuT
w75Sa8Kuvz+j4WWmkbydWcy3P4EMG5R9vEaQKoLY66QzuiJ4Ah87y3IuMfjG56/P
iyXm3tn0I0WN
-----END CERTIFICATE-----
Generated at Mon Apr 7 06:37:07 2025 by rpki-client