Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/86E3YjHp4mq3thohga9eZj2FjYEAB1btzuUVo1Cepdaw/1/34352e3233342e37302e302f32342d3234203d3e20323637333633.roa
File:                     34352e3233342e37302e302f32342d3234203d3e20323637333633.roa (raw, json)
Hash identifier:          fl/tIqQQfsajNbHFDfq1oK/+W4vlTGa8x3l1kyBfoZ4=
Subject key identifier:   A9:DA:28:B7:74:A1:AF:CB:91:9A:FF:5F:C5:DE:BA:9B:34:AC:F3:A5
Certificate issuer:       /CN=D7C65B9175A8C55DD1BE8B5D6F51152D72C505AA
Certificate serial:       70F813850228CDAF25076735094C9E597528F555
Authority key identifier: D7:C6:5B:91:75:A8:C5:5D:D1:BE:8B:5D:6F:51:15:2D:72:C5:05:AA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D7C65B9175A8C55DD1BE8B5D6F51152D72C505AA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/86E3YjHp4mq3thohga9eZj2FjYEAB1btzuUVo1Cepdaw/1/34352e3233342e37302e302f32342d3234203d3e20323637333633.roa
Signing time:             Thu 04 Apr 2024 13:53:52 +0000
ROA not before:           Thu 04 Apr 2024 13:48:52 +0000
ROA not after:            Thu 03 Apr 2025 13:53:52 +0000
asID:                     267363
IP address blocks:        45.234.70.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/86E3YjHp4mq3thohga9eZj2FjYEAB1btzuUVo1Cepdaw/1/D7C65B9175A8C55DD1BE8B5D6F51152D72C505AA.crl
                          rsync://rpki-repo.registro.br/repo/86E3YjHp4mq3thohga9eZj2FjYEAB1btzuUVo1Cepdaw/1/D7C65B9175A8C55DD1BE8B5D6F51152D72C505AA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D7C65B9175A8C55DD1BE8B5D6F51152D72C505AA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 15:34:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:f8:13:85:02:28:cd:af:25:07:67:35:09:4c:9e:59:75:28:f5:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D7C65B9175A8C55DD1BE8B5D6F51152D72C505AA
        Validity
            Not Before: Apr  4 13:48:52 2024 GMT
            Not After : Apr  3 13:53:52 2025 GMT
        Subject: CN=A9DA28B774A1AFCB919AFF5FC5DEBA9B34ACF3A5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:16:4b:84:ab:89:ca:fe:ac:c0:cc:6d:a6:ac:
                    88:fe:51:4f:82:0e:9b:d8:41:7c:15:97:13:6e:fc:
                    88:b0:92:e0:5a:87:08:a1:93:cb:d2:ba:75:e5:0b:
                    3c:bc:aa:a2:2c:2c:43:cd:49:74:f7:97:cd:0b:35:
                    71:0e:8d:97:bb:6a:68:00:8a:b3:6f:ae:25:53:db:
                    f6:c1:94:7b:8e:a1:bc:fb:2a:fe:5a:68:47:fb:5a:
                    dd:48:64:c0:a5:19:c1:d6:88:f3:7c:88:33:07:82:
                    af:f7:35:0d:b2:7c:5d:4a:c6:b4:02:f9:91:52:f1:
                    41:1d:88:24:72:3f:58:f9:c3:b6:38:02:f6:f4:f5:
                    38:e3:54:23:7e:40:8f:8e:58:83:5f:e6:3f:6e:1d:
                    ac:0b:d6:4c:e7:cb:de:31:47:f3:54:84:da:96:8b:
                    4e:c9:81:e1:c9:14:79:45:74:4c:ac:d6:90:4b:b0:
                    63:b6:4b:75:04:82:c0:fb:6d:b1:f9:55:6f:b4:0f:
                    99:ec:cc:a5:1b:9f:1b:87:ec:ed:6b:8f:74:ad:4c:
                    22:26:ed:56:3a:ff:6f:d3:6c:2f:e2:0a:13:4e:af:
                    cb:cc:76:cc:db:e8:b5:2e:a3:02:31:b0:8e:4a:9f:
                    bd:af:20:51:40:72:9a:a7:88:b8:2b:b0:ef:68:e1:
                    0a:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:DA:28:B7:74:A1:AF:CB:91:9A:FF:5F:C5:DE:BA:9B:34:AC:F3:A5
            X509v3 Authority Key Identifier:
                keyid:D7:C6:5B:91:75:A8:C5:5D:D1:BE:8B:5D:6F:51:15:2D:72:C5:05:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/86E3YjHp4mq3thohga9eZj2FjYEAB1btzuUVo1Cepdaw/1/D7C65B9175A8C55DD1BE8B5D6F51152D72C505AA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D7C65B9175A8C55DD1BE8B5D6F51152D72C505AA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/86E3YjHp4mq3thohga9eZj2FjYEAB1btzuUVo1Cepdaw/1/34352e3233342e37302e302f32342d3234203d3e20323637333633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.234.70.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3f:d5:e8:4a:6c:62:e1:dc:db:97:04:a0:49:0c:be:af:a7:b2:
         f2:e7:75:26:98:69:cd:6d:81:82:d8:49:af:06:e0:bc:64:f5:
         df:d2:be:08:bc:d6:aa:ff:ca:cb:a0:28:4a:cd:bb:fd:5e:c7:
         6f:31:ba:34:9c:39:30:d7:62:69:61:e0:ef:0c:d7:70:a5:68:
         69:ee:2a:91:a3:04:6d:75:ad:de:9a:d5:9b:ae:cc:e6:5d:0b:
         ec:65:b1:d7:3e:13:d9:d9:47:76:d5:ea:5f:96:de:9c:75:a8:
         87:fc:16:d3:73:ba:bc:f3:0a:3c:f9:4a:47:ea:09:c4:82:f2:
         34:f7:91:53:06:17:5d:aa:9d:2d:55:ed:a8:19:9a:05:14:c3:
         ce:f9:0c:49:51:13:a4:d1:6b:9f:8a:bb:bc:46:06:c9:b7:60:
         d1:bd:3e:cd:f7:fb:fd:a8:ec:b7:e8:eb:26:01:87:66:cd:a2:
         73:77:d7:39:60:4a:8d:bb:67:c8:68:68:75:e3:14:9a:b3:f3:
         da:c9:fb:2e:ae:84:49:e5:9f:5a:ab:36:2b:73:a6:51:82:b1:
         0b:35:80:b8:80:b0:d6:bf:3d:dd:ed:b2:5a:6c:c5:be:4e:2d:
         03:af:24:62:7a:7f:7c:fd:52:60:c6:73:e8:29:4f:f3:a5:52:
         39:9f:0d:93
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUcPgThQIoza8lB2c1CUyeWXUo9VUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDdDNjVCOTE3NUE4QzU1REQxQkU4QjVENkY1MTE1MkQ3
MkM1MDVBQTAeFw0yNDA0MDQxMzQ4NTJaFw0yNTA0MDMxMzUzNTJaMDMxMTAvBgNV
BAMTKEE5REEyOEI3NzRBMUFGQ0I5MTlBRkY1RkM1REVCQTlCMzRBQ0YzQTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCVFkuEq4nK/qzAzG2mrIj+UU+C
DpvYQXwVlxNu/IiwkuBahwihk8vSunXlCzy8qqIsLEPNSXT3l80LNXEOjZe7amgA
irNvriVT2/bBlHuOobz7Kv5aaEf7Wt1IZMClGcHWiPN8iDMHgq/3NQ2yfF1KxrQC
+ZFS8UEdiCRyP1j5w7Y4Avb09TjjVCN+QI+OWINf5j9uHawL1kzny94xR/NUhNqW
i07JgeHJFHlFdEys1pBLsGO2S3UEgsD7bbH5VW+0D5nszKUbnxuH7O1rj3StTCIm
7VY6/2/TbC/iChNOr8vMdszb6LUuowIxsI5Kn72vIFFAcpqniLgrsO9o4QoRAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUqdoot3Shr8uRmv9fxd66mzSs86UwHwYDVR0j
BBgwFoAU18ZbkXWoxV3Rvotdb1EVLXLFBaowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vODZFM1lqSHA0bXEzdGhvaGdhOWVaajJGallFQUIxYnR6dVVWbzFDZXBk
YXcvMS9EN0M2NUI5MTc1QThDNTVERDFCRThCNUQ2RjUxMTUyRDcyQzUwNUFBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Q3QzY1QjkxNzVBOEM1NURE
MUJFOEI1RDZGNTExNTJENzJDNTA1QUEuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
Lzg2RTNZakhwNG1xM3Rob2hnYTllWmoyRmpZRUFCMWJ0enVVVm8xQ2VwZGF3LzEv
MzQzNTJlMzIzMzM0MmUzNzMwMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM3
MzMzNjMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQALepGMA0GCSqGSIb3DQEBCwUAA4IBAQA/1ehKbGLh
3NuXBKBJDL6vp7Ly53UmmGnNbYGC2EmvBuC8ZPXf0r4IvNaq/8rLoChKzbv9Xsdv
Mbo0nDkw12JpYeDvDNdwpWhp7iqRowRtda3emtWbrszmXQvsZbHXPhPZ2Ud21epf
lt6cdaiH/BbTc7q88wo8+UpH6gnEgvI095FTBhddqp0tVe2oGZoFFMPO+QxJUROk
0Wufiru8RgbJt2DRvT7N9/v9qOy36OsmAYdmzaJzd9c5YEqNu2fIaGh14xSas/Pa
yfsuroRJ5Z9aqzYrc6ZRgrELNYC4gLDWvz3d7bJabMW+Ti0DryRien98/VJgxnPo
KU/zpVI5nw2T
-----END CERTIFICATE-----
Generated at Fri Nov 22 15:22:39 2024 by rpki-client on console-fra.rpki-client.org