Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9HjNudPfCuBLwUs4YKPRX25n7NqGWzjFXdZcwwhiZ8ev/1/34352e3136312e3132342e302f32322d3332203d3e20323638343635.roa
File:                     34352e3136312e3132342e302f32322d3332203d3e20323638343635.roa (raw, json)
Hash identifier:          u0LAptkzOEN241nl9FiR1RyUxYtly+ctY2gPYwDv0xY=
Subject key identifier:   83:90:51:8E:EA:53:AB:A2:63:AB:23:D4:BA:42:F0:89:40:CB:A5:5B
Certificate issuer:       /CN=0480C093E98E907CBEAC592394DE5FB72A439B24
Certificate serial:       2744178E51F18C2194404ACE700AF892A0DEEC19
Authority key identifier: 04:80:C0:93:E9:8E:90:7C:BE:AC:59:23:94:DE:5F:B7:2A:43:9B:24
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0480C093E98E907CBEAC592394DE5FB72A439B24.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9HjNudPfCuBLwUs4YKPRX25n7NqGWzjFXdZcwwhiZ8ev/1/34352e3136312e3132342e302f32322d3332203d3e20323638343635.roa
Signing time:             Thu 04 Apr 2024 11:52:50 +0000
ROA not before:           Thu 04 Apr 2024 11:47:50 +0000
ROA not after:            Thu 03 Apr 2025 11:52:50 +0000
asID:                     268465
IP address blocks:        45.161.124.0/22 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9HjNudPfCuBLwUs4YKPRX25n7NqGWzjFXdZcwwhiZ8ev/1/0480C093E98E907CBEAC592394DE5FB72A439B24.crl
                          rsync://rpki-repo.registro.br/repo/9HjNudPfCuBLwUs4YKPRX25n7NqGWzjFXdZcwwhiZ8ev/1/0480C093E98E907CBEAC592394DE5FB72A439B24.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0480C093E98E907CBEAC592394DE5FB72A439B24.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 16:45:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:44:17:8e:51:f1:8c:21:94:40:4a:ce:70:0a:f8:92:a0:de:ec:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0480C093E98E907CBEAC592394DE5FB72A439B24
        Validity
            Not Before: Apr  4 11:47:50 2024 GMT
            Not After : Apr  3 11:52:50 2025 GMT
        Subject: CN=8390518EEA53ABA263AB23D4BA42F08940CBA55B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:a9:53:30:8d:87:38:71:58:0a:9e:cb:e1:58:
                    c3:4a:57:2c:72:30:a5:db:57:7e:aa:46:e7:6f:3c:
                    3c:8e:02:73:79:74:48:26:ff:b0:95:aa:e9:64:a0:
                    9d:27:e9:78:22:00:59:da:d8:cb:90:72:38:d5:ac:
                    1c:4c:84:5c:fd:f3:94:97:c8:6c:bd:69:85:f4:aa:
                    3a:db:87:2a:5e:a4:d9:cd:18:ef:9a:0d:d6:d5:c7:
                    f8:6a:8d:8b:60:ec:a1:9a:fb:fa:54:34:51:54:32:
                    9f:1a:58:2d:14:ff:44:4d:6d:43:73:a2:d4:bf:71:
                    d0:ec:72:cb:2c:fa:fa:96:c5:03:ee:a8:7b:1d:02:
                    e7:0b:45:5a:a5:39:f9:56:45:4d:ac:91:0e:4b:09:
                    8e:55:91:33:70:9c:e2:23:78:8d:04:a4:e5:07:37:
                    7a:0e:42:77:26:b4:0d:f5:10:d7:9b:cf:a4:21:9c:
                    d9:09:c4:2e:55:e4:e2:9e:db:d6:c6:92:41:78:ac:
                    e3:3d:3e:d5:5b:4c:fb:13:19:04:7d:f1:57:b2:e0:
                    36:be:ac:20:b0:9f:66:7f:cc:0d:0f:d7:d9:bb:dc:
                    2f:7c:f3:5f:89:fd:4c:8f:b7:45:41:f6:44:f7:5a:
                    67:f3:10:c2:61:02:56:75:69:53:ec:a1:6e:5b:01:
                    08:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:90:51:8E:EA:53:AB:A2:63:AB:23:D4:BA:42:F0:89:40:CB:A5:5B
            X509v3 Authority Key Identifier:
                keyid:04:80:C0:93:E9:8E:90:7C:BE:AC:59:23:94:DE:5F:B7:2A:43:9B:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9HjNudPfCuBLwUs4YKPRX25n7NqGWzjFXdZcwwhiZ8ev/1/0480C093E98E907CBEAC592394DE5FB72A439B24.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0480C093E98E907CBEAC592394DE5FB72A439B24.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9HjNudPfCuBLwUs4YKPRX25n7NqGWzjFXdZcwwhiZ8ev/1/34352e3136312e3132342e302f32322d3332203d3e20323638343635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.161.124.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7f:04:74:e5:b3:53:88:08:89:47:4b:3f:81:14:89:81:e3:2e:
         cf:7e:7f:69:90:e4:3d:f4:96:9f:8b:e8:58:b0:0a:6c:3a:32:
         1f:8e:9a:c5:40:ef:91:9e:30:c2:73:6b:a5:f1:7f:df:1b:ee:
         2a:ac:a6:7f:77:75:34:52:c8:02:4a:7a:c8:cd:67:9a:3a:4c:
         8a:79:e8:bd:39:68:e4:50:a5:af:47:10:3f:59:3a:00:d7:93:
         5a:fb:82:70:b9:66:35:53:a8:fb:91:25:8a:a5:81:ab:e7:47:
         e5:cf:37:2b:98:5d:14:95:5d:48:0f:b3:1d:5c:f9:c9:ef:2a:
         79:ac:09:63:75:8d:d7:9f:9b:7a:4a:7e:4c:dc:45:5c:ae:9b:
         b3:d2:1c:5d:bd:d9:87:72:d9:8c:67:eb:a9:ef:fc:bb:01:e8:
         91:64:23:f7:78:dd:a9:5d:9e:00:9e:ca:17:95:e8:c2:ce:ce:
         18:fa:eb:0b:8d:22:87:f0:5d:2b:c4:f3:e3:1e:84:e8:7b:f5:
         99:19:85:fc:fa:e4:09:64:57:de:07:8d:2d:53:7b:08:b4:37:
         12:9e:19:57:52:95:a5:4f:97:27:5b:a0:48:10:f7:59:24:4a:
         10:c4:1c:dd:8e:ab:fc:a0:69:d5:77:48:c1:bb:d6:9c:75:4d:
         d5:9e:39:4d
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUJ0QXjlHxjCGUQErOcAr4kqDe7BkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDQ4MEMwOTNFOThFOTA3Q0JFQUM1OTIzOTRERTVGQjcy
QTQzOUIyNDAeFw0yNDA0MDQxMTQ3NTBaFw0yNTA0MDMxMTUyNTBaMDMxMTAvBgNV
BAMTKDgzOTA1MThFRUE1M0FCQTI2M0FCMjNENEJBNDJGMDg5NDBDQkE1NUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCUqVMwjYc4cVgKnsvhWMNKVyxy
MKXbV36qRudvPDyOAnN5dEgm/7CVqulkoJ0n6XgiAFna2MuQcjjVrBxMhFz985SX
yGy9aYX0qjrbhypepNnNGO+aDdbVx/hqjYtg7KGa+/pUNFFUMp8aWC0U/0RNbUNz
otS/cdDscsss+vqWxQPuqHsdAucLRVqlOflWRU2skQ5LCY5VkTNwnOIjeI0EpOUH
N3oOQncmtA31ENebz6QhnNkJxC5V5OKe29bGkkF4rOM9PtVbTPsTGQR98Vey4Da+
rCCwn2Z/zA0P19m73C9881+J/UyPt0VB9kT3WmfzEMJhAlZ1aVPsoW5bAQh/AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUg5BRjupTq6JjqyPUukLwiUDLpVswHwYDVR0j
BBgwFoAUBIDAk+mOkHy+rFkjlN5ftypDmyQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOUhqTnVkUGZDdUJMd1VzNFlLUFJYMjVuN05xR1d6akZYZFpjd3doaVo4
ZXYvMS8wNDgwQzA5M0U5OEU5MDdDQkVBQzU5MjM5NERFNUZCNzJBNDM5QjI0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzA0ODBDMDkzRTk4RTkwN0NC
RUFDNTkyMzk0REU1RkI3MkE0MzlCMjQuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzlIak51ZFBmQ3VCTHdVczRZS1BSWDI1bjdOcUdXempGWGRaY3d3aGlaOGV2LzEv
MzQzNTJlMzEzNjMxMmUzMTMyMzQyZTMwMmYzMjMyMmQzMzMyMjAzZDNlMjAzMjM2
MzgzNDM2MzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAItoXwwDQYJKoZIhvcNAQELBQADggEBAH8EdOWz
U4gIiUdLP4EUiYHjLs9+f2mQ5D30lp+L6FiwCmw6Mh+OmsVA75GeMMJza6Xxf98b
7iqspn93dTRSyAJKesjNZ5o6TIp56L05aORQpa9HED9ZOgDXk1r7gnC5ZjVTqPuR
JYqlgavnR+XPNyuYXRSVXUgPsx1c+cnvKnmsCWN1jdefm3pKfkzcRVyum7PSHF29
2Ydy2Yxn66nv/LsB6JFkI/d43aldngCeyheV6MLOzhj66wuNIofwXSvE8+MehOh7
9ZkZhfz65AlkV94HjS1Tewi0NxKeGVdSlaVPlydboEgQ91kkShDEHN2Oq/ygadV3
SMG71px1TdWeOU0=
-----END CERTIFICATE-----
Generated at Tue Nov 26 17:13:47 2024 by rpki-client on console-fra.rpki-client.org