Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8wLZUK7waTZjCjSnZbvwjJGP1yLk8ifWoi31HJqj1u74/1/34352e3139312e32312e302f32342d3234203d3e20323639363634.roa
File:                     34352e3139312e32312e302f32342d3234203d3e20323639363634.roa (raw, json)
Hash identifier:          VyhxzFwXm3V70bqlmDNHAmcCAfwQHH1Ii7/pMkJqcJk=
Subject key identifier:   C8:EC:BF:95:D1:FA:AB:EA:11:7D:26:D1:D2:75:D0:B4:46:F3:FC:F9
Certificate issuer:       /CN=413E3D4F0110DFBA923D6F53579BE8E81ABDCC05
Certificate serial:       15BC3536D51BA46F48374E334B757DFE5279FF38
Authority key identifier: 41:3E:3D:4F:01:10:DF:BA:92:3D:6F:53:57:9B:E8:E8:1A:BD:CC:05
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/413E3D4F0110DFBA923D6F53579BE8E81ABDCC05.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8wLZUK7waTZjCjSnZbvwjJGP1yLk8ifWoi31HJqj1u74/1/34352e3139312e32312e302f32342d3234203d3e20323639363634.roa
Signing time:             Mon 06 May 2024 18:31:48 +0000
ROA not before:           Mon 06 May 2024 18:26:48 +0000
ROA not after:            Mon 05 May 2025 18:31:48 +0000
asID:                     269664
IP address blocks:        45.191.21.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8wLZUK7waTZjCjSnZbvwjJGP1yLk8ifWoi31HJqj1u74/1/413E3D4F0110DFBA923D6F53579BE8E81ABDCC05.crl
                          rsync://rpki-repo.registro.br/repo/8wLZUK7waTZjCjSnZbvwjJGP1yLk8ifWoi31HJqj1u74/1/413E3D4F0110DFBA923D6F53579BE8E81ABDCC05.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/413E3D4F0110DFBA923D6F53579BE8E81ABDCC05.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 21:57:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:bc:35:36:d5:1b:a4:6f:48:37:4e:33:4b:75:7d:fe:52:79:ff:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=413E3D4F0110DFBA923D6F53579BE8E81ABDCC05
        Validity
            Not Before: May  6 18:26:48 2024 GMT
            Not After : May  5 18:31:48 2025 GMT
        Subject: CN=C8ECBF95D1FAABEA117D26D1D275D0B446F3FCF9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:87:e8:b8:23:e1:54:61:94:67:be:00:f2:aa:
                    cd:06:e4:46:2a:38:b6:a8:8c:88:90:46:22:d4:dd:
                    d5:4d:28:f8:bd:18:fd:b2:66:65:1d:22:3d:d6:d9:
                    37:07:f4:71:38:a7:aa:7c:82:f6:aa:df:66:df:6f:
                    f9:db:db:a9:b4:95:87:f3:05:2f:7a:5b:77:a3:06:
                    82:ce:d7:ac:e2:7a:a8:30:ac:9e:15:dc:60:ef:96:
                    e6:90:af:a2:b4:a8:e7:a1:37:56:a6:8f:8b:27:c1:
                    c1:a1:0f:35:99:82:e8:90:c3:04:5e:83:9a:74:e4:
                    c5:7d:49:6b:f7:ba:3e:e9:98:60:59:bf:67:23:b8:
                    49:10:72:0e:60:80:2d:2b:96:2d:9b:fd:e9:65:22:
                    59:90:52:cf:c1:bb:0a:88:3c:74:ef:7c:f4:9b:7a:
                    a6:18:53:42:6e:dc:ad:55:04:d8:54:3a:93:6e:44:
                    33:a6:65:c9:a3:fe:d5:99:27:7e:a5:c7:1c:87:32:
                    d2:b6:77:b9:eb:3e:34:35:47:5a:17:48:ab:a9:05:
                    3e:3a:9d:88:4a:43:76:d2:f7:ae:0e:fe:4e:fe:4a:
                    83:b8:3a:76:35:7c:ac:98:43:49:60:ae:f7:40:00:
                    18:7d:4a:78:e5:3d:54:b6:1c:e2:5e:c5:18:53:40:
                    b2:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:EC:BF:95:D1:FA:AB:EA:11:7D:26:D1:D2:75:D0:B4:46:F3:FC:F9
            X509v3 Authority Key Identifier:
                keyid:41:3E:3D:4F:01:10:DF:BA:92:3D:6F:53:57:9B:E8:E8:1A:BD:CC:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8wLZUK7waTZjCjSnZbvwjJGP1yLk8ifWoi31HJqj1u74/1/413E3D4F0110DFBA923D6F53579BE8E81ABDCC05.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/413E3D4F0110DFBA923D6F53579BE8E81ABDCC05.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8wLZUK7waTZjCjSnZbvwjJGP1yLk8ifWoi31HJqj1u74/1/34352e3139312e32312e302f32342d3234203d3e20323639363634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.191.21.0/24

    Signature Algorithm: sha256WithRSAEncryption
         54:41:a5:b8:7f:9b:f2:13:35:9f:7c:00:7b:0e:43:5a:fb:c5:
         04:a9:3e:3a:87:59:be:c0:ca:bc:49:8c:b0:14:14:29:bf:17:
         c6:87:73:4f:20:d3:45:89:78:3f:fe:f4:6b:32:26:54:c5:e2:
         35:91:e6:56:48:95:57:8e:22:1a:a3:04:cb:6e:48:0e:4b:5c:
         11:70:3c:7b:d8:ec:1c:a0:39:ed:ee:fa:12:41:98:95:13:32:
         3d:09:bc:84:af:f7:bd:51:27:60:d6:81:af:57:39:c1:f4:e2:
         b5:c5:0f:5b:35:e0:39:67:83:2d:db:e0:f0:e2:8a:30:2a:ce:
         a8:8f:81:58:69:4b:e9:3e:91:d3:94:50:32:3e:26:32:68:9a:
         36:74:51:18:5e:19:1d:f0:4c:bd:cd:6d:a7:a5:de:05:48:db:
         02:ee:5c:b3:19:83:81:37:db:25:31:27:02:68:e3:53:1d:c3:
         9c:e6:d7:7e:d2:81:b9:49:7b:e0:5a:40:3d:0c:f9:3c:ad:5b:
         2f:90:a6:b3:77:87:f9:1c:5e:b5:07:f4:23:26:2d:1e:8c:e2:
         b8:f6:02:d2:bb:8b:a8:b2:6f:d9:b8:87:ec:2c:da:4c:8e:da:
         4b:73:c1:75:27:11:8f:51:86:d6:a8:c3:65:75:53:61:e3:39:
         26:16:2c:14
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUFbw1NtUbpG9IN04zS3V9/lJ5/zgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDEzRTNENEYwMTEwREZCQTkyM0Q2RjUzNTc5QkU4RTgx
QUJEQ0MwNTAeFw0yNDA1MDYxODI2NDhaFw0yNTA1MDUxODMxNDhaMDMxMTAvBgNV
BAMTKEM4RUNCRjk1RDFGQUFCRUExMTdEMjZEMUQyNzVEMEI0NDZGM0ZDRjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXh+i4I+FUYZRnvgDyqs0G5EYq
OLaojIiQRiLU3dVNKPi9GP2yZmUdIj3W2TcH9HE4p6p8gvaq32bfb/nb26m0lYfz
BS96W3ejBoLO16zieqgwrJ4V3GDvluaQr6K0qOehN1amj4snwcGhDzWZguiQwwRe
g5p05MV9SWv3uj7pmGBZv2cjuEkQcg5ggC0rli2b/ellIlmQUs/BuwqIPHTvfPSb
eqYYU0Ju3K1VBNhUOpNuRDOmZcmj/tWZJ36lxxyHMtK2d7nrPjQ1R1oXSKupBT46
nYhKQ3bS964O/k7+SoO4OnY1fKyYQ0lgrvdAABh9SnjlPVS2HOJexRhTQLK9AgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUyOy/ldH6q+oRfSbR0nXQtEbz/PkwHwYDVR0j
BBgwFoAUQT49TwEQ37qSPW9TV5vo6Bq9zAUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOHdMWlVLN3dhVFpqQ2pTblpidndqSkdQMXlMazhpZldvaTMxSEpxajF1
NzQvMS80MTNFM0Q0RjAxMTBERkJBOTIzRDZGNTM1NzlCRThFODFBQkRDQzA1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQxM0UzRDRGMDExMERGQkE5
MjNENkY1MzU3OUJFOEU4MUFCRENDMDUuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
Lzh3TFpVSzd3YVRaakNqU25aYnZ3akpHUDF5TGs4aWZXb2kzMUhKcWoxdTc0LzEv
MzQzNTJlMzEzOTMxMmUzMjMxMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM5
MzYzNjM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQALb8VMA0GCSqGSIb3DQEBCwUAA4IBAQBUQaW4f5vy
EzWffAB7DkNa+8UEqT46h1m+wMq8SYywFBQpvxfGh3NPINNFiXg//vRrMiZUxeI1
keZWSJVXjiIaowTLbkgOS1wRcDx72OwcoDnt7voSQZiVEzI9CbyEr/e9USdg1oGv
VznB9OK1xQ9bNeA5Z4Mt2+Dw4oowKs6oj4FYaUvpPpHTlFAyPiYyaJo2dFEYXhkd
8Ey9zW2npd4FSNsC7lyzGYOBN9slMScCaONTHcOc5td+0oG5SXvgWkA9DPk8rVsv
kKazd4f5HF61B/QjJi0ejOK49gLSu4uosm/ZuIfsLNpMjtpLc8F1JxGPUYbWqMNl
dVNh4zkmFiwU
-----END CERTIFICATE-----
Generated at Fri Nov 22 21:02:34 2024 by rpki-client on console-fra.rpki-client.org