Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/97Qwv9XZqBL3jZiLXfS9rbFExTZQpwd1B4cX7crovbMp/0/34352e36352e3230382e302f32332d3233203d3e20323636323638.roa
File:                     34352e36352e3230382e302f32332d3233203d3e20323636323638.roa (raw, json)
Hash identifier:          5ok2r1+P9R7uOBy8YZGvuDvoqUHT3Lye7RkT9tvYOjY=
Subject key identifier:   C0:9D:45:C1:46:76:FE:18:1A:F7:6C:6F:63:A0:C8:E4:04:89:45:31
Certificate issuer:       /CN=C2BD84A4FCDD5ADABE293A26CC9CE9BA27D4633D
Certificate serial:       302125C2A038596F17553B16A90648EE92AF5373
Authority key identifier: C2:BD:84:A4:FC:DD:5A:DA:BE:29:3A:26:CC:9C:E9:BA:27:D4:63:3D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C2BD84A4FCDD5ADABE293A26CC9CE9BA27D4633D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/97Qwv9XZqBL3jZiLXfS9rbFExTZQpwd1B4cX7crovbMp/0/34352e36352e3230382e302f32332d3233203d3e20323636323638.roa
Signing time:             Wed 20 Nov 2024 12:51:46 +0000
ROA not before:           Wed 20 Nov 2024 12:46:46 +0000
ROA not after:            Wed 19 Nov 2025 12:51:46 +0000
asID:                     266268
IP address blocks:        45.65.208.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/97Qwv9XZqBL3jZiLXfS9rbFExTZQpwd1B4cX7crovbMp/0/C2BD84A4FCDD5ADABE293A26CC9CE9BA27D4633D.crl
                          rsync://rpki-repo.registro.br/repo/97Qwv9XZqBL3jZiLXfS9rbFExTZQpwd1B4cX7crovbMp/0/C2BD84A4FCDD5ADABE293A26CC9CE9BA27D4633D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C2BD84A4FCDD5ADABE293A26CC9CE9BA27D4633D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 04:23:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:21:25:c2:a0:38:59:6f:17:55:3b:16:a9:06:48:ee:92:af:53:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C2BD84A4FCDD5ADABE293A26CC9CE9BA27D4633D
        Validity
            Not Before: Nov 20 12:46:46 2024 GMT
            Not After : Nov 19 12:51:46 2025 GMT
        Subject: CN=C09D45C14676FE181AF76C6F63A0C8E404894531
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:44:71:bf:c0:b5:66:5e:20:03:b5:7e:6f:9d:
                    2d:32:67:88:18:28:11:bb:a2:e0:b0:83:f3:e9:46:
                    c4:3f:20:14:1b:a8:ef:db:5e:d8:8c:fa:88:ea:22:
                    f3:8d:7e:f4:58:d1:1f:41:4f:13:df:81:92:46:3c:
                    87:5c:32:5f:6d:b2:bd:a7:8e:26:7c:9e:52:25:64:
                    b7:86:cc:ca:41:13:04:69:41:21:cf:79:b9:f4:73:
                    31:e4:65:50:30:c5:0c:74:ca:db:fd:ce:47:ca:51:
                    75:55:32:22:25:cb:57:10:21:ca:49:4b:ba:3a:17:
                    29:b7:83:41:8a:81:49:42:43:60:d0:c3:a0:2a:86:
                    1a:da:ca:e4:b6:ef:b4:a8:da:82:54:e3:68:6d:74:
                    f5:20:df:fa:6e:e2:90:bb:d9:fa:9f:20:65:a7:e9:
                    e5:6a:56:96:4d:60:06:fb:a2:3c:10:9d:da:84:e4:
                    df:cd:fc:92:99:98:d8:22:99:de:86:fa:f7:d9:9f:
                    c4:e9:0f:df:5b:07:5c:2c:32:87:12:c4:40:0f:9a:
                    ea:c1:a6:dc:5e:e8:62:e6:ce:15:ac:30:07:22:15:
                    65:4f:a7:0d:ed:d5:e5:d5:08:c5:9b:4f:44:38:28:
                    07:06:b2:65:b1:8a:1a:37:54:df:22:a0:fd:6f:79:
                    1e:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:9D:45:C1:46:76:FE:18:1A:F7:6C:6F:63:A0:C8:E4:04:89:45:31
            X509v3 Authority Key Identifier:
                keyid:C2:BD:84:A4:FC:DD:5A:DA:BE:29:3A:26:CC:9C:E9:BA:27:D4:63:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/97Qwv9XZqBL3jZiLXfS9rbFExTZQpwd1B4cX7crovbMp/0/C2BD84A4FCDD5ADABE293A26CC9CE9BA27D4633D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C2BD84A4FCDD5ADABE293A26CC9CE9BA27D4633D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/97Qwv9XZqBL3jZiLXfS9rbFExTZQpwd1B4cX7crovbMp/0/34352e36352e3230382e302f32332d3233203d3e20323636323638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.65.208.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b6:1d:51:1d:48:15:91:45:6e:31:68:01:52:a8:de:74:a8:74:
         02:ca:39:0f:09:1a:3f:1e:88:f2:26:07:17:e1:a9:4c:9b:76:
         1c:7c:da:8c:0b:2e:e8:04:81:52:fe:5e:96:9e:0b:68:0f:33:
         d1:75:41:3b:c8:02:17:99:71:7c:aa:46:4a:18:93:34:8b:76:
         58:15:3e:27:a4:85:b5:14:f4:31:69:1c:5e:a4:b4:c5:1c:cf:
         e6:64:30:40:5b:a2:d1:41:e3:50:bb:45:a3:bf:06:95:ff:8e:
         aa:65:f6:a5:48:b1:a0:0f:e0:f1:90:4e:61:d8:4e:fc:01:bd:
         65:00:c2:1d:63:bc:a5:c9:8b:0e:2e:6d:d4:79:95:42:08:79:
         69:2b:85:83:4a:57:d2:1d:71:18:c6:bf:3e:80:68:eb:44:70:
         02:8a:ca:63:f6:da:7d:85:40:10:1b:31:e7:e5:be:2b:89:90:
         d7:26:7c:0c:71:ac:94:d5:71:91:3a:0f:2c:5d:48:62:5f:71:
         bb:4e:52:f2:89:87:ec:97:3f:69:8f:42:8e:1e:89:66:7b:5c:
         92:2c:28:f6:e3:af:29:67:8d:be:f5:c0:49:38:eb:0b:b0:26:
         68:96:b3:16:48:38:27:e9:ad:08:f2:b5:6b:45:8c:22:29:73:
         f0:df:21:59
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUMCElwqA4WW8XVTsWqQZI7pKvU3MwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzJCRDg0QTRGQ0RENUFEQUJFMjkzQTI2Q0M5Q0U5QkEy
N0Q0NjMzRDAeFw0yNDExMjAxMjQ2NDZaFw0yNTExMTkxMjUxNDZaMDMxMTAvBgNV
BAMTKEMwOUQ0NUMxNDY3NkZFMTgxQUY3NkM2RjYzQTBDOEU0MDQ4OTQ1MzEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqRHG/wLVmXiADtX5vnS0yZ4gY
KBG7ouCwg/PpRsQ/IBQbqO/bXtiM+ojqIvONfvRY0R9BTxPfgZJGPIdcMl9tsr2n
jiZ8nlIlZLeGzMpBEwRpQSHPebn0czHkZVAwxQx0ytv9zkfKUXVVMiIly1cQIcpJ
S7o6Fym3g0GKgUlCQ2DQw6AqhhrayuS277So2oJU42htdPUg3/pu4pC72fqfIGWn
6eVqVpZNYAb7ojwQndqE5N/N/JKZmNgimd6G+vfZn8TpD99bB1wsMocSxEAPmurB
ptxe6GLmzhWsMAciFWVPpw3t1eXVCMWbT0Q4KAcGsmWxiho3VN8ioP1veR7tAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUwJ1FwUZ2/hga92xvY6DI5ASJRTEwHwYDVR0j
BBgwFoAUwr2EpPzdWtq+KTomzJzpuifUYz0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOTdRd3Y5WFpxQkwzalppTFhmUzlyYkZFeFRaUXB3ZDFCNGNYN2Nyb3Zi
TXAvMC9DMkJEODRBNEZDREQ1QURBQkUyOTNBMjZDQzlDRTlCQTI3RDQ2MzNELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0MyQkQ4NEE0RkNERDVBREFC
RTI5M0EyNkNDOUNFOUJBMjdENDYzM0QuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
Lzk3UXd2OVhacUJMM2paaUxYZlM5cmJGRXhUWlFwd2QxQjRjWDdjcm92Yk1wLzAv
MzQzNTJlMzYzNTJlMzIzMDM4MmUzMDJmMzIzMzJkMzIzMzIwM2QzZTIwMzIzNjM2
MzIzNjM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQBLUHQMA0GCSqGSIb3DQEBCwUAA4IBAQC2HVEdSBWR
RW4xaAFSqN50qHQCyjkPCRo/HojyJgcX4alMm3YcfNqMCy7oBIFS/l6WngtoDzPR
dUE7yAIXmXF8qkZKGJM0i3ZYFT4npIW1FPQxaRxepLTFHM/mZDBAW6LRQeNQu0Wj
vwaV/46qZfalSLGgD+DxkE5h2E78Ab1lAMIdY7ylyYsOLm3UeZVCCHlpK4WDSlfS
HXEYxr8+gGjrRHACispj9tp9hUAQGzHn5b4riZDXJnwMcayU1XGROg8sXUhiX3G7
TlLyiYfslz9pj0KOHolme1ySLCj2468pZ42+9cBJOOsLsCZolrMWSDgn6a0I8rVr
RYwiKXPw3yFZ
-----END CERTIFICATE-----
Generated at Tue Nov 26 04:52:48 2024 by rpki-client on console-ams.rpki-client.org