Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7YupLApyE8p1jaBaMRVsTWqpoTgQJtc4USTWh6VemeKt/1/34352e3137362e342e302f32332d3233203d3e20323638393235.roa
File:                     34352e3137362e342e302f32332d3233203d3e20323638393235.roa (raw, json)
Hash identifier:          zSIReDBjHYyURCI60U4nKtgzcW9s0teaRNX0kV0t/Jg=
Subject key identifier:   2D:A3:0F:6D:BB:B1:D6:16:8E:2C:0C:57:4A:CE:41:49:72:B5:C9:28
Certificate issuer:       /CN=B39BB9AAD83EBFDF746E9B873C0E1FFAFD071E31
Certificate serial:       10A591B68A6387527C76037BE32BABF407242B4F
Authority key identifier: B3:9B:B9:AA:D8:3E:BF:DF:74:6E:9B:87:3C:0E:1F:FA:FD:07:1E:31
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B39BB9AAD83EBFDF746E9B873C0E1FFAFD071E31.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7YupLApyE8p1jaBaMRVsTWqpoTgQJtc4USTWh6VemeKt/1/34352e3137362e342e302f32332d3233203d3e20323638393235.roa
Signing time:             Thu 04 Apr 2024 07:39:07 +0000
ROA not before:           Thu 04 Apr 2024 07:34:07 +0000
ROA not after:            Thu 03 Apr 2025 07:39:07 +0000
asID:                     268925
IP address blocks:        45.176.4.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7YupLApyE8p1jaBaMRVsTWqpoTgQJtc4USTWh6VemeKt/1/B39BB9AAD83EBFDF746E9B873C0E1FFAFD071E31.crl
                          rsync://rpki-repo.registro.br/repo/7YupLApyE8p1jaBaMRVsTWqpoTgQJtc4USTWh6VemeKt/1/B39BB9AAD83EBFDF746E9B873C0E1FFAFD071E31.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B39BB9AAD83EBFDF746E9B873C0E1FFAFD071E31.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 23:10:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:a5:91:b6:8a:63:87:52:7c:76:03:7b:e3:2b:ab:f4:07:24:2b:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B39BB9AAD83EBFDF746E9B873C0E1FFAFD071E31
        Validity
            Not Before: Apr  4 07:34:07 2024 GMT
            Not After : Apr  3 07:39:07 2025 GMT
        Subject: CN=2DA30F6DBBB1D6168E2C0C574ACE414972B5C928
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:43:ef:38:7f:2f:98:69:b5:9f:b9:fc:3b:cd:
                    7c:42:c1:c4:40:39:97:67:50:81:58:bd:3f:a7:68:
                    12:69:ef:20:4e:af:ad:86:57:ad:cd:43:1f:cd:b8:
                    4b:c2:25:e2:40:2e:1e:89:57:3e:cd:3a:60:36:1d:
                    9a:f3:57:35:7f:3b:b2:37:16:a6:ca:f9:cb:a9:35:
                    21:3a:2e:49:d6:16:b6:e9:c6:ea:01:24:a2:77:90:
                    70:2b:4a:95:e4:99:19:d8:5b:90:39:39:4e:a2:46:
                    0c:7d:e7:b2:5c:2c:c7:1b:bb:42:ba:5b:c6:7d:4d:
                    b7:15:fa:9e:9b:0f:56:38:d6:67:7c:fc:91:c4:9b:
                    4d:d2:9f:65:3a:88:ca:83:ad:45:f8:e2:20:e3:e3:
                    20:d5:c4:11:1c:47:1c:4a:cf:03:8f:f0:35:bc:a3:
                    a1:21:f9:e3:0d:6a:43:21:a0:0d:e3:a5:c1:60:81:
                    31:ca:79:ff:34:8d:ff:9a:77:79:d9:5f:09:26:a8:
                    2f:45:f3:07:4c:10:71:af:33:3f:dd:d5:d0:0b:e7:
                    c0:f1:0d:9d:f4:0f:7d:99:9e:c5:89:05:21:d3:16:
                    08:2a:ac:c1:48:2f:5e:d4:60:9b:28:0f:6f:38:89:
                    2f:de:3c:0a:d4:89:52:68:8b:19:63:86:1c:52:a5:
                    68:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:A3:0F:6D:BB:B1:D6:16:8E:2C:0C:57:4A:CE:41:49:72:B5:C9:28
            X509v3 Authority Key Identifier:
                keyid:B3:9B:B9:AA:D8:3E:BF:DF:74:6E:9B:87:3C:0E:1F:FA:FD:07:1E:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7YupLApyE8p1jaBaMRVsTWqpoTgQJtc4USTWh6VemeKt/1/B39BB9AAD83EBFDF746E9B873C0E1FFAFD071E31.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B39BB9AAD83EBFDF746E9B873C0E1FFAFD071E31.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7YupLApyE8p1jaBaMRVsTWqpoTgQJtc4USTWh6VemeKt/1/34352e3137362e342e302f32332d3233203d3e20323638393235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.176.4.0/23

    Signature Algorithm: sha256WithRSAEncryption
         89:bb:48:15:7e:34:c2:29:0b:bc:66:83:00:d6:27:4d:ec:e0:
         73:ba:ef:2c:4d:f7:c5:96:86:ff:1a:68:b4:46:c6:82:4a:0c:
         0e:81:06:9a:5c:81:0a:5e:d6:23:ce:9c:62:b1:49:15:ae:27:
         0c:52:0a:64:25:ae:b2:96:25:c4:8a:69:b8:fc:81:54:b3:ac:
         c3:45:69:26:99:2f:62:ca:17:20:45:39:e5:98:b8:8e:b5:ba:
         86:86:61:0e:c2:e6:06:a6:75:b6:cc:ee:aa:ce:d4:4e:28:c1:
         b5:b4:98:4a:54:f9:72:6a:bf:f4:87:ae:48:b8:03:31:38:d4:
         60:22:56:55:c0:47:82:13:29:74:da:e5:9a:e5:27:30:f4:1d:
         ee:56:19:a2:dc:94:26:cf:c5:09:8b:ca:94:e2:34:22:fd:c1:
         1f:6e:a2:65:3b:e3:7f:ae:04:18:3b:fd:07:90:fc:49:33:51:
         25:2c:81:28:eb:3a:40:69:83:17:63:5b:c3:d0:7a:bc:01:e3:
         a9:f1:83:97:5f:87:ae:b5:49:d6:5e:eb:29:71:15:c0:41:d6:
         ae:41:32:60:12:79:18:06:d8:2b:ed:d9:54:23:7e:32:8a:8c:
         6d:74:1f:90:57:e5:ad:c0:6f:fa:42:04:01:3d:f0:90:f6:84:
         f9:f8:70:67
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUEKWRtopjh1J8dgN74yur9AckK08wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjM5QkI5QUFEODNFQkZERjc0NkU5Qjg3M0MwRTFGRkFG
RDA3MUUzMTAeFw0yNDA0MDQwNzM0MDdaFw0yNTA0MDMwNzM5MDdaMDMxMTAvBgNV
BAMTKDJEQTMwRjZEQkJCMUQ2MTY4RTJDMEM1NzRBQ0U0MTQ5NzJCNUM5MjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXQ+84fy+YabWfufw7zXxCwcRA
OZdnUIFYvT+naBJp7yBOr62GV63NQx/NuEvCJeJALh6JVz7NOmA2HZrzVzV/O7I3
FqbK+cupNSE6LknWFrbpxuoBJKJ3kHArSpXkmRnYW5A5OU6iRgx957JcLMcbu0K6
W8Z9TbcV+p6bD1Y41md8/JHEm03Sn2U6iMqDrUX44iDj4yDVxBEcRxxKzwOP8DW8
o6Eh+eMNakMhoA3jpcFggTHKef80jf+ad3nZXwkmqC9F8wdMEHGvMz/d1dAL58Dx
DZ30D32ZnsWJBSHTFggqrMFIL17UYJsoD284iS/ePArUiVJoixljhhxSpWhxAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQULaMPbbux1haOLAxXSs5BSXK1ySgwHwYDVR0j
BBgwFoAUs5u5qtg+v990bpuHPA4f+v0HHjEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN1l1cExBcHlFOHAxamFCYU1SVnNUV3Fwb1RnUUp0YzRVU1RXaDZWZW1l
S3QvMS9CMzlCQjlBQUQ4M0VCRkRGNzQ2RTlCODczQzBFMUZGQUZEMDcxRTMxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0IzOUJCOUFBRDgzRUJGREY3
NDZFOUI4NzNDMEUxRkZBRkQwNzFFMzEuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzdZdXBMQXB5RThwMWphQmFNUlZzVFdxcG9UZ1FKdGM0VVNUV2g2VmVtZUt0LzEv
MzQzNTJlMzEzNzM2MmUzNDJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDMyMzYzODM5
MzIzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEAS2wBDANBgkqhkiG9w0BAQsFAAOCAQEAibtIFX40wikL
vGaDANYnTezgc7rvLE33xZaG/xpotEbGgkoMDoEGmlyBCl7WI86cYrFJFa4nDFIK
ZCWuspYlxIppuPyBVLOsw0VpJpkvYsoXIEU55Zi4jrW6hoZhDsLmBqZ1tszuqs7U
TijBtbSYSlT5cmq/9IeuSLgDMTjUYCJWVcBHghMpdNrlmuUnMPQd7lYZotyUJs/F
CYvKlOI0Iv3BH26iZTvjf64EGDv9B5D8STNRJSyBKOs6QGmDF2Nbw9B6vAHjqfGD
l1+HrrVJ1l7rKXEVwEHWrkEyYBJ5GAbYK+3ZVCN+MoqMbXQfkFflrcBv+kIEAT3w
kPaE+fhwZw==
-----END CERTIFICATE-----
Generated at Fri Nov 22 22:21:07 2024 by rpki-client on console-fra.rpki-client.org