Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/99fRWK3KHYAnyGMGFayYV77LyeZwJ4ffr1G8i5fYbAVS/0/34352e3233332e3132342e302f32322d3232203d3e20323637333131.roa
File:                     34352e3233332e3132342e302f32322d3232203d3e20323637333131.roa (raw, json)
Hash identifier:          f2hQr3QPxaXr5U4kdD8vVhp3KHKrAgLh1zoDYrgaCmY=
Subject key identifier:   1B:A6:CF:9A:A9:65:CC:35:B0:53:40:7D:11:A8:FC:1C:FB:4F:69:5C
Certificate issuer:       /CN=4A2574393B503DE41274B86A7310E0272B6E4C75
Certificate serial:       11E79F4BA779DC3D77124F7A23D2FD6431DF4CF1
Authority key identifier: 4A:25:74:39:3B:50:3D:E4:12:74:B8:6A:73:10:E0:27:2B:6E:4C:75
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4A2574393B503DE41274B86A7310E0272B6E4C75.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/99fRWK3KHYAnyGMGFayYV77LyeZwJ4ffr1G8i5fYbAVS/0/34352e3233332e3132342e302f32322d3232203d3e20323637333131.roa
Signing time:             Tue 05 Nov 2024 13:11:38 +0000
ROA not before:           Tue 05 Nov 2024 13:06:38 +0000
ROA not after:            Tue 04 Nov 2025 13:11:38 +0000
asID:                     267311
IP address blocks:        45.233.124.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/99fRWK3KHYAnyGMGFayYV77LyeZwJ4ffr1G8i5fYbAVS/0/4A2574393B503DE41274B86A7310E0272B6E4C75.crl
                          rsync://rpki-repo.registro.br/repo/99fRWK3KHYAnyGMGFayYV77LyeZwJ4ffr1G8i5fYbAVS/0/4A2574393B503DE41274B86A7310E0272B6E4C75.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4A2574393B503DE41274B86A7310E0272B6E4C75.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 11:45:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:e7:9f:4b:a7:79:dc:3d:77:12:4f:7a:23:d2:fd:64:31:df:4c:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4A2574393B503DE41274B86A7310E0272B6E4C75
        Validity
            Not Before: Nov  5 13:06:38 2024 GMT
            Not After : Nov  4 13:11:38 2025 GMT
        Subject: CN=1BA6CF9AA965CC35B053407D11A8FC1CFB4F695C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:b4:a9:a3:6a:91:36:c9:0a:65:a4:3a:f9:af:
                    6c:3f:4f:c9:fd:e4:1b:38:f2:f9:35:56:0d:15:76:
                    5b:2e:c3:77:34:d2:cb:25:3e:da:b8:39:d8:43:6c:
                    8e:c4:93:7b:f7:1f:e8:bb:85:f4:72:ad:66:44:d2:
                    4f:c2:51:4a:1c:7a:bb:e5:4c:0d:43:fd:2d:36:46:
                    a9:38:ee:78:24:c9:fd:3b:21:0b:8d:b1:29:6d:71:
                    bc:2f:ba:99:44:a3:ef:19:45:e1:9b:e6:62:9e:6c:
                    67:3b:aa:f7:1d:c3:a9:2a:cb:91:c5:b0:ba:ea:16:
                    7c:6d:1a:2d:61:e9:e6:6e:1a:30:30:3d:23:77:88:
                    87:bf:31:c5:a2:92:ab:f6:99:41:9a:60:6b:2c:31:
                    50:b7:83:a9:c1:59:b7:be:d1:82:18:3e:36:15:9a:
                    c3:1f:bb:ce:09:1c:4c:86:b5:d7:36:7f:e4:af:94:
                    49:3f:34:a0:db:24:d1:ee:a6:72:0b:3e:89:6f:9a:
                    c2:6c:15:a9:f5:d3:a3:9b:35:d6:49:e9:38:39:b1:
                    67:2e:a5:a7:c5:0a:ea:2c:8f:fa:f8:11:20:fe:64:
                    78:8f:6d:53:5d:fe:7a:48:37:3b:c7:d7:3f:18:41:
                    42:6d:53:b3:5a:09:fb:79:45:40:60:23:30:e7:05:
                    b5:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:A6:CF:9A:A9:65:CC:35:B0:53:40:7D:11:A8:FC:1C:FB:4F:69:5C
            X509v3 Authority Key Identifier:
                keyid:4A:25:74:39:3B:50:3D:E4:12:74:B8:6A:73:10:E0:27:2B:6E:4C:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/99fRWK3KHYAnyGMGFayYV77LyeZwJ4ffr1G8i5fYbAVS/0/4A2574393B503DE41274B86A7310E0272B6E4C75.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4A2574393B503DE41274B86A7310E0272B6E4C75.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/99fRWK3KHYAnyGMGFayYV77LyeZwJ4ffr1G8i5fYbAVS/0/34352e3233332e3132342e302f32322d3232203d3e20323637333131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.233.124.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ae:bb:44:64:e5:66:92:3b:95:e2:83:d0:f9:7e:39:90:c8:e1:
         2b:96:6b:ee:f4:71:58:67:f0:23:17:25:87:b5:cd:f8:8f:9f:
         23:24:19:7b:36:18:52:0e:da:e3:52:93:ca:d2:ea:3f:5e:0e:
         8a:83:62:d8:a0:bd:0e:a3:51:f6:ad:f2:7d:a1:b1:63:11:96:
         33:68:46:c1:d0:72:1b:98:8e:99:68:04:df:6d:2c:2e:65:58:
         80:80:21:c7:17:3e:9b:b2:79:99:ca:a6:ad:2a:aa:94:98:5f:
         2d:4d:7b:a1:c9:8f:95:57:ea:c0:ca:8d:d9:c2:95:e1:84:ab:
         31:70:23:50:fd:53:7f:df:b0:f9:e6:d8:fb:a0:f0:2a:4f:47:
         19:83:29:ed:e1:cb:b5:b3:aa:7d:72:7e:69:cd:6d:c6:ef:f6:
         54:df:8a:e2:f7:b8:4e:53:a5:7a:3e:f2:33:bb:66:f3:58:48:
         29:14:02:28:b6:c8:7c:95:de:f1:d0:34:28:31:03:42:5a:9f:
         37:c1:64:7a:a1:cd:8f:94:0d:ef:01:ca:64:2d:9b:bc:b2:93:
         2f:ac:13:3a:c1:bf:48:e9:db:ab:d5:67:16:31:f1:53:a3:68:
         5a:af:b0:60:8d:b9:e9:72:1a:e0:1f:fd:02:0a:d1:4a:bc:73:
         a2:70:3b:c5
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUEeefS6d53D13Ek96I9L9ZDHfTPEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEEyNTc0MzkzQjUwM0RFNDEyNzRCODZBNzMxMEUwMjcy
QjZFNEM3NTAeFw0yNDExMDUxMzA2MzhaFw0yNTExMDQxMzExMzhaMDMxMTAvBgNV
BAMTKDFCQTZDRjlBQTk2NUNDMzVCMDUzNDA3RDExQThGQzFDRkI0RjY5NUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/tKmjapE2yQplpDr5r2w/T8n9
5Bs48vk1Vg0Vdlsuw3c00sslPtq4OdhDbI7Ek3v3H+i7hfRyrWZE0k/CUUocervl
TA1D/S02Rqk47ngkyf07IQuNsSltcbwvuplEo+8ZReGb5mKebGc7qvcdw6kqy5HF
sLrqFnxtGi1h6eZuGjAwPSN3iIe/McWikqv2mUGaYGssMVC3g6nBWbe+0YIYPjYV
msMfu84JHEyGtdc2f+SvlEk/NKDbJNHupnILPolvmsJsFan106ObNdZJ6Tg5sWcu
pafFCuosj/r4ESD+ZHiPbVNd/npINzvH1z8YQUJtU7NaCft5RUBgIzDnBbWJAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUG6bPmqllzDWwU0B9Eaj8HPtPaVwwHwYDVR0j
BBgwFoAUSiV0OTtQPeQSdLhqcxDgJytuTHUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOTlmUldLM0tIWUFueUdNR0ZheVlWNzdMeWVad0o0ZmZyMUc4aTVmWWJB
VlMvMC80QTI1NzQzOTNCNTAzREU0MTI3NEI4NkE3MzEwRTAyNzJCNkU0Qzc1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzRBMjU3NDM5M0I1MDNERTQx
Mjc0Qjg2QTczMTBFMDI3MkI2RTRDNzUuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
Lzk5ZlJXSzNLSFlBbnlHTUdGYXlZVjc3THllWndKNGZmcjFHOGk1ZlliQVZTLzAv
MzQzNTJlMzIzMzMzMmUzMTMyMzQyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzMjM2
MzczMzMxMzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAIt6XwwDQYJKoZIhvcNAQELBQADggEBAK67RGTl
ZpI7leKD0Pl+OZDI4SuWa+70cVhn8CMXJYe1zfiPnyMkGXs2GFIO2uNSk8rS6j9e
DoqDYtigvQ6jUfat8n2hsWMRljNoRsHQchuYjploBN9tLC5lWICAIccXPpuyeZnK
pq0qqpSYXy1Ne6HJj5VX6sDKjdnCleGEqzFwI1D9U3/fsPnm2Pug8CpPRxmDKe3h
y7Wzqn1yfmnNbcbv9lTfiuL3uE5TpXo+8jO7ZvNYSCkUAii2yHyV3vHQNCgxA0Ja
nzfBZHqhzY+UDe8BymQtm7yyky+sEzrBv0jp26vVZxYx8VOjaFqvsGCNuelyGuAf
/QIK0Uq8c6JwO8U=
-----END CERTIFICATE-----
Generated at Tue Nov 26 11:47:34 2024 by rpki-client on console-ams.rpki-client.org