Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7njrcCcu617bG7jWQwzwT1ZQYzntrjCoC37N9pQqMCWL/0/34352e3136392e3231322e302f32322d3332203d3e203532393431.roa
File:                     34352e3136392e3231322e302f32322d3332203d3e203532393431.roa (raw, json)
Hash identifier:          8kdE+cnV4qGeFAsodl57ABBn2+KT1UGxrv+yCJEJyOk=
Subject key identifier:   03:52:B4:AF:17:D5:C6:09:08:3A:71:DC:D3:D1:AA:B7:EC:19:38:3E
Certificate issuer:       /CN=9D103AA204540DE0058FABD735474D7C4AE2DC8F
Certificate serial:       53056E437D2638AE7B787AFBA19D197DA7121A2A
Authority key identifier: 9D:10:3A:A2:04:54:0D:E0:05:8F:AB:D7:35:47:4D:7C:4A:E2:DC:8F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9D103AA204540DE0058FABD735474D7C4AE2DC8F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7njrcCcu617bG7jWQwzwT1ZQYzntrjCoC37N9pQqMCWL/0/34352e3136392e3231322e302f32322d3332203d3e203532393431.roa
Signing time:             Fri 01 Nov 2024 19:11:56 +0000
ROA not before:           Fri 01 Nov 2024 19:06:56 +0000
ROA not after:            Fri 31 Oct 2025 19:11:56 +0000
asID:                     52941
IP address blocks:        45.169.212.0/22 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7njrcCcu617bG7jWQwzwT1ZQYzntrjCoC37N9pQqMCWL/0/9D103AA204540DE0058FABD735474D7C4AE2DC8F.crl
                          rsync://rpki-repo.registro.br/repo/7njrcCcu617bG7jWQwzwT1ZQYzntrjCoC37N9pQqMCWL/0/9D103AA204540DE0058FABD735474D7C4AE2DC8F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9D103AA204540DE0058FABD735474D7C4AE2DC8F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 08:05:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:05:6e:43:7d:26:38:ae:7b:78:7a:fb:a1:9d:19:7d:a7:12:1a:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9D103AA204540DE0058FABD735474D7C4AE2DC8F
        Validity
            Not Before: Nov  1 19:06:56 2024 GMT
            Not After : Oct 31 19:11:56 2025 GMT
        Subject: CN=0352B4AF17D5C609083A71DCD3D1AAB7EC19383E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:8d:d7:88:1a:7d:0c:c0:e1:8c:ee:0c:0a:2a:
                    4d:37:04:ae:1d:f2:d7:70:31:87:bf:7b:f5:6d:39:
                    8c:03:1b:f8:de:46:ea:4a:d6:61:3f:c9:cb:1d:a9:
                    67:09:11:d1:a2:c2:8f:8d:59:d6:56:90:20:28:10:
                    42:b6:95:9a:aa:1d:13:73:9d:c7:36:36:bb:b3:be:
                    4c:75:3e:bc:27:dc:53:93:7d:e8:18:1a:3c:38:8c:
                    4e:08:45:9f:c3:c0:5c:2e:20:96:78:c0:a9:61:e5:
                    76:37:ef:c4:ed:8c:8f:81:a1:d3:b9:47:e4:a8:ef:
                    7a:23:26:17:ce:8d:d9:af:5f:d7:43:f1:bc:82:ea:
                    87:c9:03:62:4e:d4:44:aa:ca:e4:56:e3:d5:a9:13:
                    4c:4e:6d:a5:a6:79:2b:83:ef:db:81:d9:e2:9e:1b:
                    1a:c9:07:92:3f:ff:62:32:40:03:e5:26:2d:5f:73:
                    ac:f5:0a:25:45:b9:e0:be:1e:a8:7b:98:7e:3d:ad:
                    56:07:76:db:51:32:a3:f1:ca:1d:d0:76:5b:05:7e:
                    58:eb:4a:9a:85:52:a6:c3:88:0a:15:90:3c:f9:4f:
                    f4:58:48:c1:a8:52:df:86:0c:ea:0e:73:55:28:48:
                    1e:f1:28:ad:40:fe:49:8b:40:10:64:97:b4:d6:78:
                    21:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:52:B4:AF:17:D5:C6:09:08:3A:71:DC:D3:D1:AA:B7:EC:19:38:3E
            X509v3 Authority Key Identifier:
                keyid:9D:10:3A:A2:04:54:0D:E0:05:8F:AB:D7:35:47:4D:7C:4A:E2:DC:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7njrcCcu617bG7jWQwzwT1ZQYzntrjCoC37N9pQqMCWL/0/9D103AA204540DE0058FABD735474D7C4AE2DC8F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9D103AA204540DE0058FABD735474D7C4AE2DC8F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7njrcCcu617bG7jWQwzwT1ZQYzntrjCoC37N9pQqMCWL/0/34352e3136392e3231322e302f32322d3332203d3e203532393431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.169.212.0/22

    Signature Algorithm: sha256WithRSAEncryption
         09:77:20:51:72:a0:07:1a:4a:ef:bd:25:52:3f:0d:ab:cb:c5:
         cc:5d:83:58:b7:98:9b:10:12:06:74:47:41:11:56:4a:ab:2c:
         a6:50:29:59:c3:8c:7d:3b:65:6e:e5:8f:d0:2f:f0:fb:72:31:
         2d:cc:0b:d0:58:f5:7f:9b:e6:74:dd:d9:98:ee:1b:9e:16:0c:
         cd:4d:cf:80:68:7a:05:e6:72:20:07:9e:c1:52:ba:15:3b:4c:
         c2:a7:ec:fe:ca:50:3b:a3:ee:06:85:aa:0b:51:4c:48:0c:15:
         f4:be:80:f8:45:d4:f7:6b:37:cd:e4:71:6b:97:c1:35:cf:15:
         4c:17:72:ac:d8:21:e8:a3:8e:20:be:a1:2f:df:84:35:89:c8:
         48:e0:65:8f:41:b1:b6:86:41:c7:76:c3:25:5d:2f:47:1a:76:
         3f:fe:fc:73:43:c9:b8:4a:0e:48:ba:7b:e0:06:81:4a:86:d4:
         28:07:f1:13:dc:85:a1:1c:2d:7d:df:45:43:ee:e0:dd:4f:f3:
         ca:e6:03:ab:17:7d:d3:1c:17:b8:c9:50:7a:e3:61:06:73:31:
         d2:95:c6:6c:0e:21:6c:69:8c:89:a1:cb:c1:c4:da:34:a4:6a:
         40:90:72:6e:87:db:0d:39:a1:25:96:d0:ab:c5:df:8b:24:b3:
         7a:69:f5:30
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUUwVuQ30mOK57eHr7oZ0ZfacSGiowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUQxMDNBQTIwNDU0MERFMDA1OEZBQkQ3MzU0NzREN0M0
QUUyREM4RjAeFw0yNDExMDExOTA2NTZaFw0yNTEwMzExOTExNTZaMDMxMTAvBgNV
BAMTKDAzNTJCNEFGMTdENUM2MDkwODNBNzFEQ0QzRDFBQUI3RUMxOTM4M0UwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpjdeIGn0MwOGM7gwKKk03BK4d
8tdwMYe/e/VtOYwDG/jeRupK1mE/ycsdqWcJEdGiwo+NWdZWkCAoEEK2lZqqHRNz
ncc2Nruzvkx1Prwn3FOTfegYGjw4jE4IRZ/DwFwuIJZ4wKlh5XY378TtjI+BodO5
R+So73ojJhfOjdmvX9dD8byC6ofJA2JO1ESqyuRW49WpE0xObaWmeSuD79uB2eKe
GxrJB5I//2IyQAPlJi1fc6z1CiVFueC+Hqh7mH49rVYHdttRMqPxyh3QdlsFfljr
SpqFUqbDiAoVkDz5T/RYSMGoUt+GDOoOc1UoSB7xKK1A/kmLQBBkl7TWeCHJAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUA1K0rxfVxgkIOnHc09Gqt+wZOD4wHwYDVR0j
BBgwFoAUnRA6ogRUDeAFj6vXNUdNfEri3I8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN25qcmNDY3U2MTdiRzdqV1F3endUMVpRWXpudHJqQ29DMzdOOXBRcU1D
V0wvMC85RDEwM0FBMjA0NTQwREUwMDU4RkFCRDczNTQ3NEQ3QzRBRTJEQzhGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzlEMTAzQUEyMDQ1NDBERTAw
NThGQUJENzM1NDc0RDdDNEFFMkRDOEYuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzduanJjQ2N1NjE3Ykc3aldRd3p3VDFaUVl6bnRyakNvQzM3TjlwUXFNQ1dMLzAv
MzQzNTJlMzEzNjM5MmUzMjMxMzIyZTMwMmYzMjMyMmQzMzMyMjAzZDNlMjAzNTMy
MzkzNDMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCLanUMA0GCSqGSIb3DQEBCwUAA4IBAQAJdyBRcqAH
GkrvvSVSPw2ry8XMXYNYt5ibEBIGdEdBEVZKqyymUClZw4x9O2Vu5Y/QL/D7cjEt
zAvQWPV/m+Z03dmY7hueFgzNTc+AaHoF5nIgB57BUroVO0zCp+z+ylA7o+4GhaoL
UUxIDBX0voD4RdT3azfN5HFrl8E1zxVMF3Ks2CHoo44gvqEv34Q1ichI4GWPQbG2
hkHHdsMlXS9HGnY//vxzQ8m4Sg5IunvgBoFKhtQoB/ET3IWhHC1930VD7uDdT/PK
5gOrF33THBe4yVB642EGczHSlcZsDiFsaYyJocvBxNo0pGpAkHJuh9sNOaElltCr
xd+LJLN6afUw
-----END CERTIFICATE-----
Generated at Fri Nov 22 09:30:08 2024 by rpki-client on console-fra.rpki-client.org