Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9DAQd2y3Ggai8RJEsLftFtrUa9ZvGry39FMVYQPHknLn/1/34352e3137392e3139302e302f32342d3234203d3e20323639313935.roa
File:                     34352e3137392e3139302e302f32342d3234203d3e20323639313935.roa (raw, json)
Hash identifier:          qxuvPFsSyrsAvq3o+UJoRo/Ti4U0WJX21EanfP0qf2c=
Subject key identifier:   D4:F8:4E:A3:44:FD:42:A5:E8:2B:8F:BD:C4:81:22:70:81:C8:23:01
Certificate issuer:       /CN=558242E85C6C8D5E0E16FA3F9B75D77CCF448A9D
Certificate serial:       3F55CA693F3E11F5A08CEC9062C15657E70F4C24
Authority key identifier: 55:82:42:E8:5C:6C:8D:5E:0E:16:FA:3F:9B:75:D7:7C:CF:44:8A:9D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/558242E85C6C8D5E0E16FA3F9B75D77CCF448A9D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9DAQd2y3Ggai8RJEsLftFtrUa9ZvGry39FMVYQPHknLn/1/34352e3137392e3139302e302f32342d3234203d3e20323639313935.roa
Signing time:             Wed 03 Apr 2024 18:32:12 +0000
ROA not before:           Wed 03 Apr 2024 18:27:12 +0000
ROA not after:            Wed 02 Apr 2025 18:32:12 +0000
asID:                     269195
IP address blocks:        45.179.190.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9DAQd2y3Ggai8RJEsLftFtrUa9ZvGry39FMVYQPHknLn/1/558242E85C6C8D5E0E16FA3F9B75D77CCF448A9D.crl
                          rsync://rpki-repo.registro.br/repo/9DAQd2y3Ggai8RJEsLftFtrUa9ZvGry39FMVYQPHknLn/1/558242E85C6C8D5E0E16FA3F9B75D77CCF448A9D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/558242E85C6C8D5E0E16FA3F9B75D77CCF448A9D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 22:33:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:55:ca:69:3f:3e:11:f5:a0:8c:ec:90:62:c1:56:57:e7:0f:4c:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=558242E85C6C8D5E0E16FA3F9B75D77CCF448A9D
        Validity
            Not Before: Apr  3 18:27:12 2024 GMT
            Not After : Apr  2 18:32:12 2025 GMT
        Subject: CN=D4F84EA344FD42A5E82B8FBDC481227081C82301
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:e4:52:98:1d:e2:bb:75:9a:a1:20:25:41:4b:
                    83:ae:5c:fb:86:3d:84:ba:b9:fd:ed:c5:c6:3d:1b:
                    2e:c3:2c:e5:16:c9:6d:0b:d9:f9:e8:d9:bb:4c:23:
                    59:ce:32:ec:91:a1:9e:6c:17:ee:51:65:a0:17:7d:
                    54:7f:36:97:89:d5:6f:ae:32:24:fc:47:e9:ee:f9:
                    d5:a9:5b:5c:26:a9:07:02:6a:b2:f2:6d:8b:bb:1f:
                    f8:39:89:fd:98:0f:97:ee:9b:b6:e4:c3:a1:96:52:
                    ba:61:95:9c:25:69:4a:56:f3:0a:b1:b6:46:86:89:
                    c4:0b:92:0e:f7:ff:7e:c6:7d:af:9e:94:b5:97:f4:
                    89:ad:40:f3:64:03:ea:0b:6a:c7:07:3c:a3:f2:d2:
                    e1:c8:97:f9:17:55:d9:56:e7:34:83:95:73:0d:93:
                    32:e7:e4:ce:40:73:49:3d:a6:e6:af:b0:1f:46:e9:
                    2c:73:56:60:2f:26:28:f0:d1:80:49:24:40:3a:83:
                    7d:37:49:ce:da:a2:fd:a7:e2:c9:76:b1:11:42:b5:
                    65:ad:93:58:92:27:fe:c4:c1:41:e2:45:f7:cf:99:
                    90:75:5c:61:d8:e4:36:69:9c:be:a5:ab:4a:88:76:
                    e1:c6:db:09:be:c0:4b:90:c0:39:13:26:42:0c:eb:
                    dd:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:F8:4E:A3:44:FD:42:A5:E8:2B:8F:BD:C4:81:22:70:81:C8:23:01
            X509v3 Authority Key Identifier:
                keyid:55:82:42:E8:5C:6C:8D:5E:0E:16:FA:3F:9B:75:D7:7C:CF:44:8A:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9DAQd2y3Ggai8RJEsLftFtrUa9ZvGry39FMVYQPHknLn/1/558242E85C6C8D5E0E16FA3F9B75D77CCF448A9D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/558242E85C6C8D5E0E16FA3F9B75D77CCF448A9D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9DAQd2y3Ggai8RJEsLftFtrUa9ZvGry39FMVYQPHknLn/1/34352e3137392e3139302e302f32342d3234203d3e20323639313935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.179.190.0/24

    Signature Algorithm: sha256WithRSAEncryption
         20:71:3e:00:85:a9:95:d7:8d:e7:d0:26:ba:43:f4:fd:d9:1f:
         05:0c:e5:60:c2:8e:80:d5:f4:44:2d:ae:e0:cb:d4:39:6a:3c:
         84:6f:97:e5:d4:f7:0b:fb:86:dd:fd:a6:11:a3:8d:7a:2c:6a:
         0a:90:b4:27:5a:b4:0a:ca:f1:10:83:4e:2c:bd:11:1b:e1:a3:
         88:97:73:00:f9:aa:6e:0c:6a:64:84:19:63:23:dd:7e:e0:9d:
         93:d5:36:d2:f5:74:19:55:96:09:86:79:76:df:72:7c:55:f6:
         00:b0:94:6d:74:63:2f:4a:ac:b9:42:54:a9:ed:c5:4a:53:87:
         7b:23:a6:e3:b0:c0:a4:88:23:2a:8b:f7:c7:3c:6f:72:55:17:
         42:1a:ea:a5:14:d4:0c:21:4d:13:67:a8:53:ee:70:2c:4d:8f:
         d7:87:86:05:df:05:4b:c3:de:19:b5:56:6d:e9:ba:42:b3:f4:
         16:3d:52:d8:ed:45:43:b1:d9:fd:99:14:ca:9d:ae:21:b3:d5:
         15:72:1a:6b:09:f1:71:ce:78:bd:b1:8b:bb:49:28:41:7b:0a:
         fa:4d:a3:de:1c:75:82:ca:bd:ea:21:fa:66:2c:00:ab:62:51:
         5b:0b:2a:02:fd:8f:11:6b:23:be:e6:29:b9:1a:73:0d:43:6b:
         9b:5d:b3:9d
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUP1XKaT8+EfWgjOyQYsFWV+cPTCQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTU4MjQyRTg1QzZDOEQ1RTBFMTZGQTNGOUI3NUQ3N0ND
RjQ0OEE5RDAeFw0yNDA0MDMxODI3MTJaFw0yNTA0MDIxODMyMTJaMDMxMTAvBgNV
BAMTKEQ0Rjg0RUEzNDRGRDQyQTVFODJCOEZCREM0ODEyMjcwODFDODIzMDEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCz5FKYHeK7dZqhICVBS4OuXPuG
PYS6uf3txcY9Gy7DLOUWyW0L2fno2btMI1nOMuyRoZ5sF+5RZaAXfVR/NpeJ1W+u
MiT8R+nu+dWpW1wmqQcCarLybYu7H/g5if2YD5fum7bkw6GWUrphlZwlaUpW8wqx
tkaGicQLkg73/37Gfa+elLWX9ImtQPNkA+oLascHPKPy0uHIl/kXVdlW5zSDlXMN
kzLn5M5Ac0k9puavsB9G6SxzVmAvJijw0YBJJEA6g303Sc7aov2n4sl2sRFCtWWt
k1iSJ/7EwUHiRffPmZB1XGHY5DZpnL6lq0qIduHG2wm+wEuQwDkTJkIM6925AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU1PhOo0T9QqXoK4+9xIEicIHIIwEwHwYDVR0j
BBgwFoAUVYJC6FxsjV4OFvo/m3XXfM9Eip0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOURBUWQyeTNHZ2FpOFJKRXNMZnRGdHJVYTladkdyeTM5Rk1WWVFQSGtu
TG4vMS81NTgyNDJFODVDNkM4RDVFMEUxNkZBM0Y5Qjc1RDc3Q0NGNDQ4QTlELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzU1ODI0MkU4NUM2QzhENUUw
RTE2RkEzRjlCNzVENzdDQ0Y0NDhBOUQuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzlEQVFkMnkzR2dhaThSSkVzTGZ0RnRyVWE5WnZHcnkzOUZNVllRUEhrbkxuLzEv
MzQzNTJlMzEzNzM5MmUzMTM5MzAyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzkzMTM5MzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAAts74wDQYJKoZIhvcNAQELBQADggEBACBxPgCF
qZXXjefQJrpD9P3ZHwUM5WDCjoDV9EQtruDL1DlqPIRvl+XU9wv7ht39phGjjXos
agqQtCdatArK8RCDTiy9ERvho4iXcwD5qm4MamSEGWMj3X7gnZPVNtL1dBlVlgmG
eXbfcnxV9gCwlG10Yy9KrLlCVKntxUpTh3sjpuOwwKSIIyqL98c8b3JVF0Ia6qUU
1AwhTRNnqFPucCxNj9eHhgXfBUvD3hm1Vm3pukKz9BY9UtjtRUOx2f2ZFMqdriGz
1RVyGmsJ8XHOeL2xi7tJKEF7CvpNo94cdYLKveoh+mYsAKtiUVsLKgL9jxFrI77m
Kbkacw1Da5tds50=
-----END CERTIFICATE-----
Generated at Mon Nov 25 23:53:06 2024 by rpki-client on console-ams.rpki-client.org