Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8KS6JPTQchwPwmMcJpzVqKVG3AZ1mgWgnUbPB9XyaXFL/1/34352e3138372e36382e302f32342d3234203d3e20323639343631.roa
File:                     34352e3138372e36382e302f32342d3234203d3e20323639343631.roa (raw, json)
Hash identifier:          NluoH+euOMspfmVq4phzxtmlesaScLKSt60hJIo0uag=
Subject key identifier:   50:18:4C:B9:C0:37:7E:13:FD:ED:A6:7B:37:5B:8F:69:6D:D2:77:B7
Certificate issuer:       /CN=121F6202CB0EE7F5E476D4E34E5818A48E42C8D0
Certificate serial:       533C89B8A6EAAC8983ABA47C2F9271A1846530E9
Authority key identifier: 12:1F:62:02:CB:0E:E7:F5:E4:76:D4:E3:4E:58:18:A4:8E:42:C8:D0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/121F6202CB0EE7F5E476D4E34E5818A48E42C8D0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8KS6JPTQchwPwmMcJpzVqKVG3AZ1mgWgnUbPB9XyaXFL/1/34352e3138372e36382e302f32342d3234203d3e20323639343631.roa
Signing time:             Wed 03 Apr 2024 18:32:46 +0000
ROA not before:           Wed 03 Apr 2024 18:27:46 +0000
ROA not after:            Wed 02 Apr 2025 18:32:46 +0000
asID:                     269461
IP address blocks:        45.187.68.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8KS6JPTQchwPwmMcJpzVqKVG3AZ1mgWgnUbPB9XyaXFL/1/121F6202CB0EE7F5E476D4E34E5818A48E42C8D0.crl
                          rsync://rpki-repo.registro.br/repo/8KS6JPTQchwPwmMcJpzVqKVG3AZ1mgWgnUbPB9XyaXFL/1/121F6202CB0EE7F5E476D4E34E5818A48E42C8D0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/121F6202CB0EE7F5E476D4E34E5818A48E42C8D0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:07:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:3c:89:b8:a6:ea:ac:89:83:ab:a4:7c:2f:92:71:a1:84:65:30:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=121F6202CB0EE7F5E476D4E34E5818A48E42C8D0
        Validity
            Not Before: Apr  3 18:27:46 2024 GMT
            Not After : Apr  2 18:32:46 2025 GMT
        Subject: CN=50184CB9C0377E13FDEDA67B375B8F696DD277B7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:b6:3f:87:ff:56:dd:56:c5:72:88:30:ce:02:
                    de:54:a6:a9:45:a9:df:19:de:c7:53:6c:75:8d:ae:
                    bf:fc:b7:45:85:fb:57:80:1e:6e:0b:90:dc:78:8e:
                    0b:36:84:11:5f:a6:4a:0c:64:dd:ca:21:24:21:a9:
                    fa:02:05:d6:1c:b9:3b:16:5c:2e:c5:e2:89:25:dd:
                    24:cc:ef:e4:9f:be:29:1b:02:a0:20:96:bd:e7:2d:
                    b3:9c:16:d9:c1:44:21:ff:10:9d:0a:d8:59:cd:59:
                    10:a5:9d:96:7b:36:6f:8a:90:47:e6:21:d1:a4:82:
                    5e:6d:52:a4:d8:10:bc:da:7a:97:a2:5b:9b:ba:95:
                    53:76:4b:12:e3:50:21:83:22:c3:fb:a1:8b:3f:5b:
                    fc:25:cf:da:63:bd:c4:bd:68:ed:63:3b:95:f8:41:
                    79:cc:bb:25:3c:07:2b:e8:11:3f:fe:01:25:19:3a:
                    7d:c3:39:6a:18:cd:9d:a5:b6:fa:12:6f:dd:51:64:
                    bf:81:84:ec:0b:d4:42:ed:8c:82:38:dd:89:74:a4:
                    9f:ed:7d:68:ff:72:44:a4:c1:6f:a0:1a:b2:ee:22:
                    b9:16:cd:30:12:07:3c:26:20:76:b7:d9:7f:04:d9:
                    ed:13:f8:ab:9d:ff:ae:37:87:69:58:1c:ab:00:72:
                    5a:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:18:4C:B9:C0:37:7E:13:FD:ED:A6:7B:37:5B:8F:69:6D:D2:77:B7
            X509v3 Authority Key Identifier:
                keyid:12:1F:62:02:CB:0E:E7:F5:E4:76:D4:E3:4E:58:18:A4:8E:42:C8:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8KS6JPTQchwPwmMcJpzVqKVG3AZ1mgWgnUbPB9XyaXFL/1/121F6202CB0EE7F5E476D4E34E5818A48E42C8D0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/121F6202CB0EE7F5E476D4E34E5818A48E42C8D0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8KS6JPTQchwPwmMcJpzVqKVG3AZ1mgWgnUbPB9XyaXFL/1/34352e3138372e36382e302f32342d3234203d3e20323639343631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.187.68.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9d:50:47:41:cc:68:65:23:56:ac:fc:50:bd:e2:7e:7e:d9:71:
         35:c1:81:b5:7e:e8:bb:69:c3:86:5a:3a:a8:65:f4:fa:e4:76:
         12:8c:ee:db:a8:08:c8:80:d7:28:3b:f1:63:b4:72:e0:03:4a:
         88:b6:9e:b5:54:cb:bb:88:9f:fa:ae:dc:b1:56:e2:03:82:52:
         54:ec:64:94:7a:8e:e8:28:ef:5d:e8:f3:3f:dd:9b:bd:5f:a2:
         1d:da:ab:36:cc:0d:50:03:5e:e9:71:28:de:24:71:64:69:08:
         e2:02:5a:e2:ec:4d:33:90:e4:36:cf:c6:47:42:40:20:e2:58:
         2f:05:f9:75:13:3a:3d:73:05:21:37:ba:8c:4d:68:d7:1b:9e:
         22:ed:d1:27:e8:45:9d:35:d5:75:4b:f5:7d:a0:96:0b:70:b1:
         0b:09:f6:9e:08:a3:54:68:2f:61:79:93:ee:f0:b2:d4:40:82:
         99:10:48:29:be:fa:e7:7b:44:e8:c2:bb:72:17:e3:7d:5c:43:
         fa:0a:99:02:3b:d4:3c:7b:73:4c:3d:e7:0c:b2:72:f6:9b:80:
         ab:fb:f2:ca:4d:41:92:b2:f5:9e:1a:d0:a5:6b:d5:0d:b4:4e:
         02:d0:47:a6:8f:f7:fe:fe:67:21:77:23:43:00:ae:f7:96:9a:
         d1:cb:12:df
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUUzyJuKbqrImDq6R8L5JxoYRlMOkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTIxRjYyMDJDQjBFRTdGNUU0NzZENEUzNEU1ODE4QTQ4
RTQyQzhEMDAeFw0yNDA0MDMxODI3NDZaFw0yNTA0MDIxODMyNDZaMDMxMTAvBgNV
BAMTKDUwMTg0Q0I5QzAzNzdFMTNGREVEQTY3QjM3NUI4RjY5NkREMjc3QjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTtj+H/1bdVsVyiDDOAt5UpqlF
qd8Z3sdTbHWNrr/8t0WF+1eAHm4LkNx4jgs2hBFfpkoMZN3KISQhqfoCBdYcuTsW
XC7F4okl3STM7+SfvikbAqAglr3nLbOcFtnBRCH/EJ0K2FnNWRClnZZ7Nm+KkEfm
IdGkgl5tUqTYELzaepeiW5u6lVN2SxLjUCGDIsP7oYs/W/wlz9pjvcS9aO1jO5X4
QXnMuyU8ByvoET/+ASUZOn3DOWoYzZ2ltvoSb91RZL+BhOwL1ELtjII43Yl0pJ/t
fWj/ckSkwW+gGrLuIrkWzTASBzwmIHa32X8E2e0T+Kud/643h2lYHKsAclrTAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUUBhMucA3fhP97aZ7N1uPaW3Sd7cwHwYDVR0j
BBgwFoAUEh9iAssO5/XkdtTjTlgYpI5CyNAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOEtTNkpQVFFjaHdQd21NY0pwelZxS1ZHM0FaMW1nV2duVWJQQjlYeWFY
RkwvMS8xMjFGNjIwMkNCMEVFN0Y1RTQ3NkQ0RTM0RTU4MThBNDhFNDJDOEQwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzEyMUY2MjAyQ0IwRUU3RjVF
NDc2RDRFMzRFNTgxOEE0OEU0MkM4RDAuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhLUzZKUFRRY2h3UHdtTWNKcHpWcUtWRzNBWjFtZ1dnblViUEI5WHlhWEZMLzEv
MzQzNTJlMzEzODM3MmUzNjM4MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM5
MzQzNjMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQALbtEMA0GCSqGSIb3DQEBCwUAA4IBAQCdUEdBzGhl
I1as/FC94n5+2XE1wYG1fui7acOGWjqoZfT65HYSjO7bqAjIgNcoO/FjtHLgA0qI
tp61VMu7iJ/6rtyxVuIDglJU7GSUeo7oKO9d6PM/3Zu9X6Id2qs2zA1QA17pcSje
JHFkaQjiAlri7E0zkOQ2z8ZHQkAg4lgvBfl1Ezo9cwUhN7qMTWjXG54i7dEn6EWd
NdV1S/V9oJYLcLELCfaeCKNUaC9heZPu8LLUQIKZEEgpvvrne0TowrtyF+N9XEP6
CpkCO9Q8e3NMPecMsnL2m4Cr+/LKTUGSsvWeGtCla9UNtE4C0Eemj/f+/mchdyND
AK73lprRyxLf
-----END CERTIFICATE-----
Generated at Fri Nov 22 22:21:07 2024 by rpki-client on console-fra.rpki-client.org