Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7avLNSuTwzgJ1DvkqCRncY5dS6b3mbn7bypZTH9F95ym/1/34352e3136352e39362e302f32342d3234203d3e20323638363734.roa
File:                     34352e3136352e39362e302f32342d3234203d3e20323638363734.roa (raw, json)
Hash identifier:          5IOKVltu8RqkJN25eege5+SujZOayqyKb1DClvEK7u8=
Subject key identifier:   E8:BC:75:05:9E:AE:1C:28:20:E9:1A:33:C2:55:5E:85:2D:3E:28:83
Certificate issuer:       /CN=DEA478CF34A11C2016DD7ED26FDC9421A6EE294D
Certificate serial:       56E5C7A6F014A967A565F2D549A5A130302C33D8
Authority key identifier: DE:A4:78:CF:34:A1:1C:20:16:DD:7E:D2:6F:DC:94:21:A6:EE:29:4D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DEA478CF34A11C2016DD7ED26FDC9421A6EE294D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7avLNSuTwzgJ1DvkqCRncY5dS6b3mbn7bypZTH9F95ym/1/34352e3136352e39362e302f32342d3234203d3e20323638363734.roa
Signing time:             Thu 04 Apr 2024 18:05:14 +0000
ROA not before:           Thu 04 Apr 2024 18:00:14 +0000
ROA not after:            Thu 03 Apr 2025 18:05:14 +0000
asID:                     268674
IP address blocks:        45.165.96.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7avLNSuTwzgJ1DvkqCRncY5dS6b3mbn7bypZTH9F95ym/1/DEA478CF34A11C2016DD7ED26FDC9421A6EE294D.crl
                          rsync://rpki-repo.registro.br/repo/7avLNSuTwzgJ1DvkqCRncY5dS6b3mbn7bypZTH9F95ym/1/DEA478CF34A11C2016DD7ED26FDC9421A6EE294D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DEA478CF34A11C2016DD7ED26FDC9421A6EE294D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 03:37:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:e5:c7:a6:f0:14:a9:67:a5:65:f2:d5:49:a5:a1:30:30:2c:33:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DEA478CF34A11C2016DD7ED26FDC9421A6EE294D
        Validity
            Not Before: Apr  4 18:00:14 2024 GMT
            Not After : Apr  3 18:05:14 2025 GMT
        Subject: CN=E8BC75059EAE1C2820E91A33C2555E852D3E2883
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:d8:75:4e:a0:66:80:94:fb:c7:da:ed:bd:5c:
                    af:e5:18:3e:85:9c:d2:ac:25:22:cd:15:df:9a:e6:
                    43:a9:bd:e9:83:e8:39:91:ef:64:16:45:e9:75:a8:
                    24:8f:61:28:f3:c5:90:56:96:c5:80:48:c2:a3:06:
                    29:db:08:2d:8f:dc:3b:a8:ad:f3:dc:d9:90:fe:d1:
                    d9:8c:be:ad:05:57:b5:f4:54:68:5a:db:c3:09:f8:
                    b2:d9:19:d1:6a:dc:fc:6d:6d:98:1e:70:3b:e9:42:
                    27:ed:ac:c2:c7:e1:24:d3:86:61:86:d6:10:9f:15:
                    bf:07:b3:00:5f:97:4a:af:b8:eb:ca:1f:c6:c8:c5:
                    4e:64:a8:57:1d:2b:a4:00:ee:78:b9:51:41:02:a1:
                    3d:ae:11:42:fc:e7:71:f5:56:ec:09:4c:79:41:ec:
                    78:d5:b5:bf:82:27:21:83:62:5e:36:c9:cc:7a:70:
                    3a:25:65:b4:c1:61:16:a0:26:0d:13:b2:40:84:cb:
                    0b:b1:22:16:e8:d4:7a:d9:73:0a:68:0d:6d:c8:02:
                    c5:2e:cb:11:45:d8:a9:69:9f:66:f7:99:f5:02:e8:
                    41:95:51:57:de:67:a0:64:c2:07:9c:03:62:ec:96:
                    1f:02:96:59:30:b3:d5:5a:c7:de:9b:1c:66:93:d6:
                    57:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:BC:75:05:9E:AE:1C:28:20:E9:1A:33:C2:55:5E:85:2D:3E:28:83
            X509v3 Authority Key Identifier:
                keyid:DE:A4:78:CF:34:A1:1C:20:16:DD:7E:D2:6F:DC:94:21:A6:EE:29:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7avLNSuTwzgJ1DvkqCRncY5dS6b3mbn7bypZTH9F95ym/1/DEA478CF34A11C2016DD7ED26FDC9421A6EE294D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DEA478CF34A11C2016DD7ED26FDC9421A6EE294D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7avLNSuTwzgJ1DvkqCRncY5dS6b3mbn7bypZTH9F95ym/1/34352e3136352e39362e302f32342d3234203d3e20323638363734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.165.96.0/24

    Signature Algorithm: sha256WithRSAEncryption
         37:ca:63:b9:09:ab:3b:70:42:8e:10:a8:70:0e:f7:15:6b:4d:
         be:79:be:92:72:93:32:63:be:c4:c7:3c:83:bd:41:35:92:7c:
         95:a4:38:69:5f:0d:4f:6c:68:d2:f0:17:39:5d:21:cd:6d:3f:
         d5:c3:f0:08:68:e5:41:e9:29:1e:15:7e:d7:d0:64:89:1f:0b:
         04:e1:16:90:ad:83:82:4f:37:99:61:83:21:c2:69:f7:0a:78:
         15:25:f7:22:c9:e6:86:97:1b:23:e9:cd:c0:6f:42:22:cc:05:
         fe:03:c7:1f:bb:b8:97:bb:7d:8d:ae:d4:1c:87:3e:34:1c:a0:
         1b:c9:00:b6:37:dd:7b:e0:5a:23:4d:98:e2:b0:aa:92:67:10:
         8a:31:94:c6:5a:16:1f:79:bc:e2:7b:14:2a:c3:3b:94:fd:3e:
         35:91:6a:be:72:82:7d:28:9b:f9:f1:de:f1:59:d2:b2:77:3c:
         87:77:5d:9c:a9:e9:4a:df:36:63:3b:50:79:2d:bd:0b:a9:49:
         ae:32:fc:b0:fd:35:d8:18:44:b4:bf:82:3b:4a:1c:3f:a6:3c:
         bb:02:a3:fd:d6:71:2e:a0:c2:48:64:41:e9:78:26:31:e0:7f:
         67:89:07:b4:6c:38:1c:85:ca:1f:53:d8:d1:31:79:93:f0:9f:
         4e:48:1a:a2
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUVuXHpvAUqWelZfLVSaWhMDAsM9gwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREVBNDc4Q0YzNEExMUMyMDE2REQ3RUQyNkZEQzk0MjFB
NkVFMjk0RDAeFw0yNDA0MDQxODAwMTRaFw0yNTA0MDMxODA1MTRaMDMxMTAvBgNV
BAMTKEU4QkM3NTA1OUVBRTFDMjgyMEU5MUEzM0MyNTU1RTg1MkQzRTI4ODMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCt2HVOoGaAlPvH2u29XK/lGD6F
nNKsJSLNFd+a5kOpvemD6DmR72QWRel1qCSPYSjzxZBWlsWASMKjBinbCC2P3Duo
rfPc2ZD+0dmMvq0FV7X0VGha28MJ+LLZGdFq3PxtbZgecDvpQiftrMLH4STThmGG
1hCfFb8HswBfl0qvuOvKH8bIxU5kqFcdK6QA7ni5UUECoT2uEUL853H1VuwJTHlB
7HjVtb+CJyGDYl42ycx6cDolZbTBYRagJg0TskCEywuxIhbo1HrZcwpoDW3IAsUu
yxFF2Klpn2b3mfUC6EGVUVfeZ6BkwgecA2Lslh8Cllkws9Vax96bHGaT1lfVAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQU6Lx1BZ6uHCgg6RozwlVehS0+KIMwHwYDVR0j
BBgwFoAU3qR4zzShHCAW3X7Sb9yUIabuKU0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN2F2TE5TdVR3emdKMUR2a3FDUm5jWTVkUzZiM21ibjdieXBaVEg5Rjk1
eW0vMS9ERUE0NzhDRjM0QTExQzIwMTZERDdFRDI2RkRDOTQyMUE2RUUyOTRELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0RFQTQ3OENGMzRBMTFDMjAx
NkREN0VEMjZGREM5NDIxQTZFRTI5NEQuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzdhdkxOU3VUd3pnSjFEdmtxQ1JuY1k1ZFM2YjNtYm43YnlwWlRIOUY5NXltLzEv
MzQzNTJlMzEzNjM1MmUzOTM2MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM4
MzYzNzM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQALaVgMA0GCSqGSIb3DQEBCwUAA4IBAQA3ymO5Cas7
cEKOEKhwDvcVa02+eb6ScpMyY77ExzyDvUE1knyVpDhpXw1PbGjS8Bc5XSHNbT/V
w/AIaOVB6SkeFX7X0GSJHwsE4RaQrYOCTzeZYYMhwmn3CngVJfciyeaGlxsj6c3A
b0IizAX+A8cfu7iXu32NrtQchz40HKAbyQC2N9174FojTZjisKqSZxCKMZTGWhYf
ebziexQqwzuU/T41kWq+coJ9KJv58d7xWdKydzyHd12cqelK3zZjO1B5Lb0LqUmu
Mvyw/TXYGES0v4I7Shw/pjy7AqP91nEuoMJIZEHpeCYx4H9niQe0bDgchcofU9jR
MXmT8J9OSBqi
-----END CERTIFICATE-----
Generated at Tue Nov 26 02:25:32 2024 by rpki-client on console-ams.rpki-client.org