Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8wLZUK7waTZjCjSnZbvwjJGP1yLk8ifWoi31HJqj1u74/1/34352e3139312e32332e302f32342d3234203d3e20323639363634.roa
File:                     34352e3139312e32332e302f32342d3234203d3e20323639363634.roa (raw, json)
Hash identifier:          Tg6z0wVqBltYLQ42FSuFBf2rpDdBii5wZLqrjK43Mcg=
Subject key identifier:   36:BA:CF:31:27:56:E1:C4:E7:77:5D:C6:18:01:77:A4:57:83:0D:80
Certificate issuer:       /CN=413E3D4F0110DFBA923D6F53579BE8E81ABDCC05
Certificate serial:       5F569B41A6E7D25D8BD3946D3A919E3BD656CEA4
Authority key identifier: 41:3E:3D:4F:01:10:DF:BA:92:3D:6F:53:57:9B:E8:E8:1A:BD:CC:05
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/413E3D4F0110DFBA923D6F53579BE8E81ABDCC05.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8wLZUK7waTZjCjSnZbvwjJGP1yLk8ifWoi31HJqj1u74/1/34352e3139312e32332e302f32342d3234203d3e20323639363634.roa
Signing time:             Wed 03 Apr 2024 21:52:38 +0000
ROA not before:           Wed 03 Apr 2024 21:47:38 +0000
ROA not after:            Wed 02 Apr 2025 21:52:38 +0000
asID:                     269664
IP address blocks:        45.191.23.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8wLZUK7waTZjCjSnZbvwjJGP1yLk8ifWoi31HJqj1u74/1/413E3D4F0110DFBA923D6F53579BE8E81ABDCC05.crl
                          rsync://rpki-repo.registro.br/repo/8wLZUK7waTZjCjSnZbvwjJGP1yLk8ifWoi31HJqj1u74/1/413E3D4F0110DFBA923D6F53579BE8E81ABDCC05.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/413E3D4F0110DFBA923D6F53579BE8E81ABDCC05.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:30:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:56:9b:41:a6:e7:d2:5d:8b:d3:94:6d:3a:91:9e:3b:d6:56:ce:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=413E3D4F0110DFBA923D6F53579BE8E81ABDCC05
        Validity
            Not Before: Apr  3 21:47:38 2024 GMT
            Not After : Apr  2 21:52:38 2025 GMT
        Subject: CN=36BACF312756E1C4E7775DC6180177A457830D80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:e8:e5:4c:02:71:32:99:b8:4c:94:3c:e7:dd:
                    8d:0d:7e:94:bc:e2:50:a8:f8:64:81:0e:34:e3:f6:
                    ef:ee:f6:c9:68:8e:51:2d:fe:99:1e:04:05:ed:13:
                    11:a4:7b:1c:5f:44:95:d3:91:2d:eb:15:07:35:f1:
                    77:91:01:ca:cf:4b:07:a0:e1:3c:1e:49:00:ec:8c:
                    20:6b:65:41:72:60:b3:29:c3:04:d2:50:bc:2c:3a:
                    10:2b:a2:09:16:fb:2d:67:01:b8:3f:03:ea:5a:87:
                    3c:c6:68:7b:76:d1:80:a7:4c:9f:37:54:6b:d5:74:
                    68:c3:8c:cd:48:55:6e:ce:34:d9:95:25:c7:59:a6:
                    9c:41:9a:09:53:11:b4:57:7d:17:cd:70:f4:c6:82:
                    cc:00:be:77:4b:be:58:f2:cc:75:bf:c8:7c:f2:bf:
                    6d:03:b2:5b:16:ee:a5:dd:74:a3:2b:b7:86:eb:a6:
                    ca:21:53:59:0a:9d:d1:1b:29:4b:73:96:dd:ce:ff:
                    11:2b:2a:db:a6:f4:35:eb:65:b8:fe:dc:d9:ec:af:
                    78:b0:55:ae:c0:c5:f9:07:53:c7:bb:09:5d:e1:d7:
                    a8:28:7a:88:14:b4:0a:54:84:17:0f:81:63:82:60:
                    3b:7a:e5:36:ce:8b:d2:4b:4a:c9:0e:c8:2a:f8:0a:
                    3f:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:BA:CF:31:27:56:E1:C4:E7:77:5D:C6:18:01:77:A4:57:83:0D:80
            X509v3 Authority Key Identifier:
                keyid:41:3E:3D:4F:01:10:DF:BA:92:3D:6F:53:57:9B:E8:E8:1A:BD:CC:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8wLZUK7waTZjCjSnZbvwjJGP1yLk8ifWoi31HJqj1u74/1/413E3D4F0110DFBA923D6F53579BE8E81ABDCC05.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/413E3D4F0110DFBA923D6F53579BE8E81ABDCC05.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8wLZUK7waTZjCjSnZbvwjJGP1yLk8ifWoi31HJqj1u74/1/34352e3139312e32332e302f32342d3234203d3e20323639363634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.191.23.0/24

    Signature Algorithm: sha256WithRSAEncryption
         75:31:16:2a:4f:7e:6d:2c:36:ea:23:91:6c:4d:4e:4a:6a:88:
         86:8a:a9:d3:64:84:80:85:2c:2c:a1:c4:87:4a:2b:e2:48:2a:
         26:a7:1c:30:2d:4a:6c:ca:a3:06:50:d0:9b:c9:25:33:be:8f:
         44:08:57:81:52:23:16:5e:49:78:13:f3:77:44:f1:0d:16:98:
         ef:8f:ee:fa:32:fa:6e:ad:0e:7b:f8:d3:12:f5:25:1b:78:09:
         f6:0e:b5:23:15:be:22:db:00:5e:55:08:c9:83:25:ce:35:0c:
         73:cf:33:c6:3b:dc:32:02:fc:b2:de:62:27:d6:22:dd:77:06:
         f0:c0:19:dd:ff:ed:19:22:00:5f:81:77:25:dc:e7:03:d3:ef:
         e8:c8:d6:0a:ad:f3:63:f2:6a:72:20:98:23:77:77:2a:30:82:
         a5:63:73:c2:12:d5:1a:b2:23:7b:10:97:4b:a5:b6:c9:28:9d:
         95:a6:07:a8:18:ad:a0:45:7d:4a:37:2d:b3:52:0d:56:0d:47:
         a1:ac:45:f8:16:68:b4:ad:61:7d:97:3f:4d:9b:8b:b7:60:f3:
         f5:4f:b9:10:85:fe:06:5b:f5:45:99:c9:e5:b9:93:d6:0a:b5:
         69:7e:8d:1d:be:a0:83:fc:63:c0:2c:12:4c:7f:51:a6:84:6e:
         99:ab:57:5a
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUX1abQabn0l2L05RtOpGeO9ZWzqQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDEzRTNENEYwMTEwREZCQTkyM0Q2RjUzNTc5QkU4RTgx
QUJEQ0MwNTAeFw0yNDA0MDMyMTQ3MzhaFw0yNTA0MDIyMTUyMzhaMDMxMTAvBgNV
BAMTKDM2QkFDRjMxMjc1NkUxQzRFNzc3NURDNjE4MDE3N0E0NTc4MzBEODAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC56OVMAnEymbhMlDzn3Y0NfpS8
4lCo+GSBDjTj9u/u9slojlEt/pkeBAXtExGkexxfRJXTkS3rFQc18XeRAcrPSweg
4TweSQDsjCBrZUFyYLMpwwTSULwsOhArogkW+y1nAbg/A+pahzzGaHt20YCnTJ83
VGvVdGjDjM1IVW7ONNmVJcdZppxBmglTEbRXfRfNcPTGgswAvndLvljyzHW/yHzy
v20DslsW7qXddKMrt4brpsohU1kKndEbKUtzlt3O/xErKtum9DXrZbj+3Nnsr3iw
Va7AxfkHU8e7CV3h16goeogUtApUhBcPgWOCYDt65TbOi9JLSskOyCr4Cj9BAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUNrrPMSdW4cTnd13GGAF3pFeDDYAwHwYDVR0j
BBgwFoAUQT49TwEQ37qSPW9TV5vo6Bq9zAUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOHdMWlVLN3dhVFpqQ2pTblpidndqSkdQMXlMazhpZldvaTMxSEpxajF1
NzQvMS80MTNFM0Q0RjAxMTBERkJBOTIzRDZGNTM1NzlCRThFODFBQkRDQzA1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQxM0UzRDRGMDExMERGQkE5
MjNENkY1MzU3OUJFOEU4MUFCRENDMDUuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
Lzh3TFpVSzd3YVRaakNqU25aYnZ3akpHUDF5TGs4aWZXb2kzMUhKcWoxdTc0LzEv
MzQzNTJlMzEzOTMxMmUzMjMzMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM5
MzYzNjM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQALb8XMA0GCSqGSIb3DQEBCwUAA4IBAQB1MRYqT35t
LDbqI5FsTU5KaoiGiqnTZISAhSwsocSHSiviSCompxwwLUpsyqMGUNCbySUzvo9E
CFeBUiMWXkl4E/N3RPENFpjvj+76MvpurQ57+NMS9SUbeAn2DrUjFb4i2wBeVQjJ
gyXONQxzzzPGO9wyAvyy3mIn1iLddwbwwBnd/+0ZIgBfgXcl3OcD0+/oyNYKrfNj
8mpyIJgjd3cqMIKlY3PCEtUasiN7EJdLpbbJKJ2VpgeoGK2gRX1KNy2zUg1WDUeh
rEX4Fmi0rWF9lz9Nm4u3YPP1T7kQhf4GW/VFmcnluZPWCrVpfo0dvqCD/GPALBJM
f1GmhG6Zq1da
-----END CERTIFICATE-----
Generated at Fri Nov 22 22:10:04 2024 by rpki-client on console-ams.rpki-client.org