Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8gzz5TKKNpn3554Gog6UamkabYLrg8PApTW9ucKind8X/1/34352e3136352e3133302e302f32342d3234203d3e20323632383939.roa
File:                     34352e3136352e3133302e302f32342d3234203d3e20323632383939.roa (raw, json)
Hash identifier:          wGNZNggHaM/yBWZqJaTvcpNdRoYux0P6aMXlI344qXg=
Subject key identifier:   14:19:7D:E8:08:7E:76:3D:91:64:F4:1E:41:D9:E1:19:54:86:0F:AE
Certificate issuer:       /CN=9ACF8E0BC0F7B2EA16F15784D8D7BB6D81E7C685
Certificate serial:       78ED85C8D336D95BA8C0F00F31B32BB13FFFC99E
Authority key identifier: 9A:CF:8E:0B:C0:F7:B2:EA:16:F1:57:84:D8:D7:BB:6D:81:E7:C6:85
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9ACF8E0BC0F7B2EA16F15784D8D7BB6D81E7C685.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8gzz5TKKNpn3554Gog6UamkabYLrg8PApTW9ucKind8X/1/34352e3136352e3133302e302f32342d3234203d3e20323632383939.roa
Signing time:             Wed 03 Apr 2024 20:15:29 +0000
ROA not before:           Wed 03 Apr 2024 20:10:29 +0000
ROA not after:            Wed 02 Apr 2025 20:15:29 +0000
asID:                     262899
IP address blocks:        45.165.130.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8gzz5TKKNpn3554Gog6UamkabYLrg8PApTW9ucKind8X/1/9ACF8E0BC0F7B2EA16F15784D8D7BB6D81E7C685.crl
                          rsync://rpki-repo.registro.br/repo/8gzz5TKKNpn3554Gog6UamkabYLrg8PApTW9ucKind8X/1/9ACF8E0BC0F7B2EA16F15784D8D7BB6D81E7C685.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9ACF8E0BC0F7B2EA16F15784D8D7BB6D81E7C685.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 25 Nov 2024 23:07:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:ed:85:c8:d3:36:d9:5b:a8:c0:f0:0f:31:b3:2b:b1:3f:ff:c9:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ACF8E0BC0F7B2EA16F15784D8D7BB6D81E7C685
        Validity
            Not Before: Apr  3 20:10:29 2024 GMT
            Not After : Apr  2 20:15:29 2025 GMT
        Subject: CN=14197DE8087E763D9164F41E41D9E11954860FAE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:91:61:4d:28:f4:1a:49:38:83:4f:f0:5a:0c:
                    e0:21:6c:81:9b:ad:24:98:38:6f:5e:d8:52:68:fb:
                    34:40:43:c8:70:8a:19:de:68:9b:ec:33:37:eb:05:
                    c8:3c:c1:d4:2b:94:5f:5c:58:bd:c4:a6:54:2c:ff:
                    0a:96:66:ca:a5:29:bb:71:0c:76:f4:4d:31:18:4b:
                    ec:b1:00:7f:4b:20:3e:5b:78:47:b0:36:21:be:56:
                    6a:17:30:b8:a1:87:8a:41:b0:43:19:76:93:21:33:
                    f3:17:63:45:0a:a9:e1:fe:ca:ab:e7:d4:c9:18:7e:
                    2e:80:12:79:35:82:38:b6:8c:60:52:4f:3b:79:38:
                    89:e9:36:58:5e:80:77:30:3a:db:46:ba:d2:b7:06:
                    91:f1:16:6e:79:ff:37:7e:dc:71:6a:ef:63:7b:17:
                    e0:ed:95:bb:42:f6:24:ca:db:82:bb:c4:77:9c:19:
                    89:04:99:ce:9f:53:a5:54:85:74:29:68:6a:3e:b0:
                    09:f2:43:a4:41:1e:db:1e:25:42:ea:08:e1:c1:7a:
                    38:72:dd:d1:81:ae:bc:d0:76:de:e0:2d:7f:20:71:
                    be:b5:bc:28:ee:4a:97:96:e3:aa:50:55:e4:d8:03:
                    65:4e:44:2d:54:8f:1a:6f:d9:da:f9:f6:4c:b2:e7:
                    95:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:19:7D:E8:08:7E:76:3D:91:64:F4:1E:41:D9:E1:19:54:86:0F:AE
            X509v3 Authority Key Identifier:
                keyid:9A:CF:8E:0B:C0:F7:B2:EA:16:F1:57:84:D8:D7:BB:6D:81:E7:C6:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8gzz5TKKNpn3554Gog6UamkabYLrg8PApTW9ucKind8X/1/9ACF8E0BC0F7B2EA16F15784D8D7BB6D81E7C685.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9ACF8E0BC0F7B2EA16F15784D8D7BB6D81E7C685.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8gzz5TKKNpn3554Gog6UamkabYLrg8PApTW9ucKind8X/1/34352e3136352e3133302e302f32342d3234203d3e20323632383939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.165.130.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9d:f8:96:5d:8b:d7:f4:dd:a3:ff:c5:26:51:66:ee:58:09:89:
         2a:d0:77:b2:d9:00:61:eb:14:67:89:c2:3e:e5:5f:39:e4:85:
         c9:a3:46:6d:a9:ad:99:e3:f9:ad:95:9b:4b:89:ee:92:35:ea:
         cc:e2:7a:1c:4a:9a:87:5b:02:ab:1e:c9:2e:eb:d1:2b:2c:a3:
         55:d8:52:f4:98:7d:5a:32:d7:b4:2d:61:ae:7b:a9:bf:be:54:
         76:c3:ea:c6:25:e2:73:0a:ee:5a:24:7e:1e:45:b0:d0:66:a7:
         d9:49:d2:00:7d:fd:b9:2e:30:51:07:44:38:b7:fe:03:f3:30:
         fc:f9:1c:c7:4a:b4:ef:1f:b2:42:d8:b0:be:3b:49:df:6d:3c:
         42:a9:5f:f0:26:00:0f:7d:8b:ee:09:67:ba:ff:44:7a:59:6b:
         22:09:39:1d:b6:83:1a:50:bf:b7:a2:c3:a9:1a:51:ac:40:10:
         84:00:4a:6e:d7:22:30:3e:26:0c:fb:99:72:7f:d6:73:85:3f:
         92:53:6d:57:65:2c:f0:4d:41:92:a2:9e:58:ad:42:fa:fc:24:
         df:6f:6a:aa:37:7b:46:5c:96:81:c0:b9:01:42:8f:5d:cc:0a:
         89:15:05:da:c9:a1:8e:0d:35:7e:0c:15:a9:1d:34:48:39:8d:
         76:8c:f5:65
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUeO2FyNM22VuowPAPMbMrsT//yZ4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUFDRjhFMEJDMEY3QjJFQTE2RjE1Nzg0RDhEN0JCNkQ4
MUU3QzY4NTAeFw0yNDA0MDMyMDEwMjlaFw0yNTA0MDIyMDE1MjlaMDMxMTAvBgNV
BAMTKDE0MTk3REU4MDg3RTc2M0Q5MTY0RjQxRTQxRDlFMTE5NTQ4NjBGQUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNkWFNKPQaSTiDT/BaDOAhbIGb
rSSYOG9e2FJo+zRAQ8hwihneaJvsMzfrBcg8wdQrlF9cWL3EplQs/wqWZsqlKbtx
DHb0TTEYS+yxAH9LID5beEewNiG+VmoXMLihh4pBsEMZdpMhM/MXY0UKqeH+yqvn
1MkYfi6AEnk1gji2jGBSTzt5OInpNlhegHcwOttGutK3BpHxFm55/zd+3HFq72N7
F+DtlbtC9iTK24K7xHecGYkEmc6fU6VUhXQpaGo+sAnyQ6RBHtseJULqCOHBejhy
3dGBrrzQdt7gLX8gcb61vCjuSpeW46pQVeTYA2VORC1Ujxpv2dr59kyy55VzAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUFBl96Ah+dj2RZPQeQdnhGVSGD64wHwYDVR0j
BBgwFoAUms+OC8D3suoW8VeE2Ne7bYHnxoUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOGd6ejVUS0tOcG4zNTU0R29nNlVhbWthYllMcmc4UEFwVFc5dWNLaW5k
OFgvMS85QUNGOEUwQkMwRjdCMkVBMTZGMTU3ODREOEQ3QkI2RDgxRTdDNjg1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzlBQ0Y4RTBCQzBGN0IyRUEx
NkYxNTc4NEQ4RDdCQjZEODFFN0M2ODUuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
Lzhneno1VEtLTnBuMzU1NEdvZzZVYW1rYWJZTHJnOFBBcFRXOXVjS2luZDhYLzEv
MzQzNTJlMzEzNjM1MmUzMTMzMzAyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzIzODM5Mzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAAtpYIwDQYJKoZIhvcNAQELBQADggEBAJ34ll2L
1/Tdo//FJlFm7lgJiSrQd7LZAGHrFGeJwj7lXznkhcmjRm2prZnj+a2Vm0uJ7pI1
6sziehxKmodbAqseyS7r0Ssso1XYUvSYfVoy17QtYa57qb++VHbD6sYl4nMK7lok
fh5FsNBmp9lJ0gB9/bkuMFEHRDi3/gPzMPz5HMdKtO8fskLYsL47Sd9tPEKpX/Am
AA99i+4JZ7r/RHpZayIJOR22gxpQv7eiw6kaUaxAEIQASm7XIjA+Jgz7mXJ/1nOF
P5JTbVdlLPBNQZKinlitQvr8JN9vaqo3e0ZcloHAuQFCj13MCokVBdrJoY4NNX4M
FakdNEg5jXaM9WU=
-----END CERTIFICATE-----
Generated at Sun Nov 24 23:06:16 2024 by rpki-client on console-ams.rpki-client.org