Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7c2sAVHYvBxnNpVDAA28eanmJ9oegSYCXUG75KPGHuwk/0/34352e3138372e3134302e302f32342d3234203d3e20323639343637.roa
File:                     34352e3138372e3134302e302f32342d3234203d3e20323639343637.roa (raw, json)
Hash identifier:          xfmEUI8j48KDYjLl10aAJVo9eUgqDpMmKfqEU+YbxwA=
Subject key identifier:   8D:5D:89:CC:67:C6:2C:93:7A:8C:CD:F1:3D:F8:6C:C5:4C:81:CA:20
Certificate issuer:       /CN=04AD1F05D68B9B203EF5342540FC9B754E8F2B50
Certificate serial:       055964E59BB62C0384E79F4EAECB87D7C06673C3
Authority key identifier: 04:AD:1F:05:D6:8B:9B:20:3E:F5:34:25:40:FC:9B:75:4E:8F:2B:50
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/04AD1F05D68B9B203EF5342540FC9B754E8F2B50.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7c2sAVHYvBxnNpVDAA28eanmJ9oegSYCXUG75KPGHuwk/0/34352e3138372e3134302e302f32342d3234203d3e20323639343637.roa
Signing time:             Mon 28 Oct 2024 12:15:50 +0000
ROA not before:           Mon 28 Oct 2024 12:10:50 +0000
ROA not after:            Mon 27 Oct 2025 12:15:50 +0000
asID:                     269467
IP address blocks:        45.187.140.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7c2sAVHYvBxnNpVDAA28eanmJ9oegSYCXUG75KPGHuwk/0/04AD1F05D68B9B203EF5342540FC9B754E8F2B50.crl
                          rsync://rpki-repo.registro.br/repo/7c2sAVHYvBxnNpVDAA28eanmJ9oegSYCXUG75KPGHuwk/0/04AD1F05D68B9B203EF5342540FC9B754E8F2B50.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/04AD1F05D68B9B203EF5342540FC9B754E8F2B50.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 10:21:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:59:64:e5:9b:b6:2c:03:84:e7:9f:4e:ae:cb:87:d7:c0:66:73:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04AD1F05D68B9B203EF5342540FC9B754E8F2B50
        Validity
            Not Before: Oct 28 12:10:50 2024 GMT
            Not After : Oct 27 12:15:50 2025 GMT
        Subject: CN=8D5D89CC67C62C937A8CCDF13DF86CC54C81CA20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:7c:52:49:e7:b4:e2:74:26:44:2f:b1:0c:fc:
                    8f:68:6f:4a:54:d8:66:98:58:f3:ee:cc:36:cd:ac:
                    26:19:77:72:e9:e2:c3:32:66:b1:ef:18:0e:68:68:
                    64:cf:44:1c:d2:c5:4b:b7:4d:2e:43:18:c8:3b:2d:
                    d4:9b:a5:38:35:40:f5:3e:26:5b:43:07:bf:06:cf:
                    3f:3b:2e:cc:63:6e:83:6a:24:8c:00:9a:a3:d8:a9:
                    1a:d9:8b:f6:db:1e:8f:1c:0c:b4:ce:bc:c2:4a:28:
                    cc:80:8f:dd:1e:f4:58:22:b9:22:23:16:f4:56:cc:
                    97:53:3a:78:23:49:f3:af:b7:f0:71:4a:26:f3:9e:
                    b6:73:8a:56:41:d1:d6:3d:62:49:fa:28:0f:7f:93:
                    e0:0d:68:f9:66:be:10:ae:33:2b:95:bd:44:66:cf:
                    0b:88:60:aa:01:29:40:12:be:99:60:ab:a3:19:a1:
                    8e:67:36:af:ac:b3:35:a8:55:cd:aa:2e:0a:92:71:
                    99:aa:d4:b4:ab:d1:6d:3c:ce:49:31:6b:2e:61:3d:
                    74:2d:ed:81:99:6e:b6:d0:b4:73:fe:11:cc:73:bb:
                    a5:c3:d1:7d:bf:6a:47:09:80:65:08:11:f9:c1:68:
                    01:98:53:ec:5c:fc:73:aa:4b:48:0e:a4:60:a6:b0:
                    7f:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:5D:89:CC:67:C6:2C:93:7A:8C:CD:F1:3D:F8:6C:C5:4C:81:CA:20
            X509v3 Authority Key Identifier:
                keyid:04:AD:1F:05:D6:8B:9B:20:3E:F5:34:25:40:FC:9B:75:4E:8F:2B:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7c2sAVHYvBxnNpVDAA28eanmJ9oegSYCXUG75KPGHuwk/0/04AD1F05D68B9B203EF5342540FC9B754E8F2B50.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/04AD1F05D68B9B203EF5342540FC9B754E8F2B50.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7c2sAVHYvBxnNpVDAA28eanmJ9oegSYCXUG75KPGHuwk/0/34352e3138372e3134302e302f32342d3234203d3e20323639343637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.187.140.0/24

    Signature Algorithm: sha256WithRSAEncryption
         af:7b:16:68:51:38:ae:d5:89:06:61:7b:30:ee:09:4f:49:da:
         d3:bd:76:a2:ca:e6:8a:b1:93:c8:3c:73:fc:d7:1c:aa:57:aa:
         76:26:6a:47:ae:fe:f4:f4:b9:9d:cb:ec:1c:4d:9d:48:1d:f6:
         95:8f:b5:df:44:2f:77:b0:a5:78:54:3f:2a:7a:ac:fb:b5:5d:
         65:f9:07:3d:b0:e1:12:00:c9:0e:e0:51:8b:fc:9d:25:ae:f1:
         b4:fa:e7:60:0c:09:31:35:cc:f7:86:4c:6a:22:be:f0:b6:38:
         47:c4:f4:ec:fc:ef:0f:c0:9b:e8:59:ca:a6:2b:61:3c:c9:3b:
         24:e8:e0:1c:3e:2d:fb:7e:56:af:14:57:09:4e:41:ba:6a:2c:
         a9:40:15:a4:a7:54:39:ce:a9:71:2f:af:39:ea:05:f7:79:b3:
         4a:32:04:87:77:b7:8f:b7:d2:a4:93:c4:e0:50:5d:d0:a0:50:
         ea:21:cc:48:9f:e0:00:c1:41:9c:e1:f5:40:26:4f:06:7a:f8:
         5b:d7:0a:77:74:eb:0c:51:31:09:ea:31:9a:b2:b9:fd:4b:2a:
         c4:b7:7f:8d:f9:c0:62:9e:ad:1b:68:5d:50:b5:91:00:53:51:
         9d:ed:49:05:89:de:2f:b0:fb:d9:82:34:ee:8a:30:be:65:34:
         73:eb:5d:3e
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUBVlk5Zu2LAOE559OrsuH18Bmc8MwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDRBRDFGMDVENjhCOUIyMDNFRjUzNDI1NDBGQzlCNzU0
RThGMkI1MDAeFw0yNDEwMjgxMjEwNTBaFw0yNTEwMjcxMjE1NTBaMDMxMTAvBgNV
BAMTKDhENUQ4OUNDNjdDNjJDOTM3QThDQ0RGMTNERjg2Q0M1NEM4MUNBMjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8fFJJ57TidCZEL7EM/I9ob0pU
2GaYWPPuzDbNrCYZd3Lp4sMyZrHvGA5oaGTPRBzSxUu3TS5DGMg7LdSbpTg1QPU+
JltDB78Gzz87LsxjboNqJIwAmqPYqRrZi/bbHo8cDLTOvMJKKMyAj90e9FgiuSIj
FvRWzJdTOngjSfOvt/BxSibznrZzilZB0dY9Ykn6KA9/k+ANaPlmvhCuMyuVvURm
zwuIYKoBKUASvplgq6MZoY5nNq+sszWoVc2qLgqScZmq1LSr0W08zkkxay5hPXQt
7YGZbrbQtHP+Ecxzu6XD0X2/akcJgGUIEfnBaAGYU+xc/HOqS0gOpGCmsH+nAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUjV2JzGfGLJN6jM3xPfhsxUyByiAwHwYDVR0j
BBgwFoAUBK0fBdaLmyA+9TQlQPybdU6PK1AwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN2Myc0FWSFl2QnhuTnBWREFBMjhlYW5tSjlvZWdTWUNYVUc3NUtQR0h1
d2svMC8wNEFEMUYwNUQ2OEI5QjIwM0VGNTM0MjU0MEZDOUI3NTRFOEYyQjUwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzA0QUQxRjA1RDY4QjlCMjAz
RUY1MzQyNTQwRkM5Qjc1NEU4RjJCNTAuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzdjMnNBVkhZdkJ4bk5wVkRBQTI4ZWFubUo5b2VnU1lDWFVHNzVLUEdIdXdrLzAv
MzQzNTJlMzEzODM3MmUzMTM0MzAyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzkzNDM2Mzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAAtu4wwDQYJKoZIhvcNAQELBQADggEBAK97FmhR
OK7ViQZhezDuCU9J2tO9dqLK5oqxk8g8c/zXHKpXqnYmakeu/vT0uZ3L7BxNnUgd
9pWPtd9EL3ewpXhUPyp6rPu1XWX5Bz2w4RIAyQ7gUYv8nSWu8bT652AMCTE1zPeG
TGoivvC2OEfE9Oz87w/Am+hZyqYrYTzJOyTo4Bw+Lft+Vq8UVwlOQbpqLKlAFaSn
VDnOqXEvrznqBfd5s0oyBId3t4+30qSTxOBQXdCgUOohzEif4ADBQZzh9UAmTwZ6
+FvXCnd06wxRMQnqMZqyuf1LKsS3f435wGKerRtoXVC1kQBTUZ3tSQWJ3i+w+9mC
NO6KML5lNHPrXT4=
-----END CERTIFICATE-----
Generated at Tue Nov 26 10:46:39 2024 by rpki-client on console-fra.rpki-client.org