Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9bhw3FK3WRRYMAzqnzKfYRsPcjAYr5u3mjP4Nzn6JvtL/1/34352e36352e3232382e302f32342d3234203d3e20323632363137.roa
File:                     34352e36352e3232382e302f32342d3234203d3e20323632363137.roa (raw, json)
Hash identifier:          oYfltL5Y0BSmEEfdcPpWeFMDbPsL78Ik3SNS6dyHxT0=
Subject key identifier:   82:6C:C6:48:27:F7:12:6F:89:87:74:F5:65:AD:40:4A:1F:CF:5A:6F
Certificate issuer:       /CN=392AEBF74273723B76684580562B17A77CDEF042
Certificate serial:       61C5CB38E17DC2C15937747202BE5FAA3CF9EB73
Authority key identifier: 39:2A:EB:F7:42:73:72:3B:76:68:45:80:56:2B:17:A7:7C:DE:F0:42
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/392AEBF74273723B76684580562B17A77CDEF042.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9bhw3FK3WRRYMAzqnzKfYRsPcjAYr5u3mjP4Nzn6JvtL/1/34352e36352e3232382e302f32342d3234203d3e20323632363137.roa
Signing time:             Thu 04 Apr 2024 18:18:26 +0000
ROA not before:           Thu 04 Apr 2024 18:13:26 +0000
ROA not after:            Thu 03 Apr 2025 18:18:26 +0000
asID:                     262617
IP address blocks:        45.65.228.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9bhw3FK3WRRYMAzqnzKfYRsPcjAYr5u3mjP4Nzn6JvtL/1/392AEBF74273723B76684580562B17A77CDEF042.crl
                          rsync://rpki-repo.registro.br/repo/9bhw3FK3WRRYMAzqnzKfYRsPcjAYr5u3mjP4Nzn6JvtL/1/392AEBF74273723B76684580562B17A77CDEF042.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/392AEBF74273723B76684580562B17A77CDEF042.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 14:21:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:c5:cb:38:e1:7d:c2:c1:59:37:74:72:02:be:5f:aa:3c:f9:eb:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=392AEBF74273723B76684580562B17A77CDEF042
        Validity
            Not Before: Apr  4 18:13:26 2024 GMT
            Not After : Apr  3 18:18:26 2025 GMT
        Subject: CN=826CC64827F7126F898774F565AD404A1FCF5A6F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:32:41:0c:74:3e:86:fe:4c:d3:fc:fd:bc:ab:
                    1e:94:1e:dd:4e:00:da:f0:87:d5:ab:9c:23:88:05:
                    96:fb:be:33:74:54:9e:ef:34:12:4b:1e:67:72:73:
                    ef:8b:a9:df:57:86:f7:f5:62:f1:88:59:e6:83:07:
                    2d:0a:56:d8:f6:a8:8c:90:29:4e:06:ff:f5:e0:60:
                    24:fb:e3:0f:fe:29:60:e7:a7:ff:4b:79:fa:72:25:
                    e6:dc:68:4c:8d:08:c8:ec:30:4f:c5:1b:74:94:f3:
                    db:5d:08:92:ea:bd:9e:05:8c:84:90:77:60:c6:b6:
                    35:a5:ef:32:8e:a0:cb:fe:b4:13:1d:18:92:f0:37:
                    a3:5e:a1:35:71:7d:60:a1:18:eb:da:28:f2:e4:29:
                    f7:72:fb:ee:c4:45:86:f5:ff:60:f9:4a:ff:1a:1e:
                    f9:0b:aa:a3:36:84:9f:7f:e8:99:19:aa:cc:79:94:
                    4f:33:20:cb:6e:f0:bb:bb:00:4e:c1:81:fc:9f:82:
                    5f:12:40:83:5e:77:0d:46:a8:b9:e5:77:fb:77:ec:
                    7c:40:78:ae:dc:ed:6f:72:76:ad:b7:6a:e2:f2:70:
                    f4:0d:20:4e:43:78:4f:16:e2:47:72:6d:8a:53:a1:
                    ef:4c:5c:bd:f4:4c:2f:32:62:25:06:22:88:9b:58:
                    aa:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:6C:C6:48:27:F7:12:6F:89:87:74:F5:65:AD:40:4A:1F:CF:5A:6F
            X509v3 Authority Key Identifier:
                keyid:39:2A:EB:F7:42:73:72:3B:76:68:45:80:56:2B:17:A7:7C:DE:F0:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9bhw3FK3WRRYMAzqnzKfYRsPcjAYr5u3mjP4Nzn6JvtL/1/392AEBF74273723B76684580562B17A77CDEF042.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/392AEBF74273723B76684580562B17A77CDEF042.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9bhw3FK3WRRYMAzqnzKfYRsPcjAYr5u3mjP4Nzn6JvtL/1/34352e36352e3232382e302f32342d3234203d3e20323632363137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.65.228.0/24

    Signature Algorithm: sha256WithRSAEncryption
         84:47:d2:58:2c:04:4f:7e:84:a8:2e:18:b1:7c:6f:7e:8e:7c:
         b2:ce:9b:1e:7b:65:bc:ea:b8:ee:48:c8:9b:72:a2:59:f5:a8:
         02:50:a3:0a:e5:70:1d:5a:b6:ab:30:f7:d9:90:fb:e5:00:db:
         87:53:38:09:22:0c:9e:ad:ac:e0:95:51:f4:ef:6e:38:b9:67:
         19:a1:8a:89:f0:4f:6b:7d:33:52:48:b3:27:72:6c:81:f6:a9:
         52:c5:25:16:e5:5f:17:07:66:a7:2f:07:c7:93:bb:43:e4:f0:
         86:a0:c2:44:59:2f:02:50:b1:b0:66:85:15:86:61:2b:d9:1b:
         b7:df:b4:c6:d4:64:86:83:3a:96:62:76:34:5d:6b:d3:a7:3d:
         cd:3d:4d:35:60:56:90:02:ef:c4:43:64:7d:75:20:c0:d9:72:
         91:2b:c9:c5:7b:68:2b:56:9d:49:59:5d:a9:47:13:bb:3d:2f:
         ef:72:59:87:db:67:d7:78:73:7a:7c:61:a1:1c:e1:8b:8e:e2:
         da:51:6f:26:ce:20:dd:21:fd:8a:74:e1:10:27:f9:24:81:e3:
         de:d8:7a:1a:c8:f0:18:27:f3:3e:23:95:a5:05:3b:48:30:d9:
         57:93:f3:64:04:3c:10:68:f0:59:49:2c:c3:27:66:ac:85:50:
         81:fe:0f:e6
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUYcXLOOF9wsFZN3RyAr5fqjz563MwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzkyQUVCRjc0MjczNzIzQjc2Njg0NTgwNTYyQjE3QTc3
Q0RFRjA0MjAeFw0yNDA0MDQxODEzMjZaFw0yNTA0MDMxODE4MjZaMDMxMTAvBgNV
BAMTKDgyNkNDNjQ4MjdGNzEyNkY4OTg3NzRGNTY1QUQ0MDRBMUZDRjVBNkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpMkEMdD6G/kzT/P28qx6UHt1O
ANrwh9WrnCOIBZb7vjN0VJ7vNBJLHmdyc++Lqd9Xhvf1YvGIWeaDBy0KVtj2qIyQ
KU4G//XgYCT74w/+KWDnp/9LefpyJebcaEyNCMjsME/FG3SU89tdCJLqvZ4FjISQ
d2DGtjWl7zKOoMv+tBMdGJLwN6NeoTVxfWChGOvaKPLkKfdy++7ERYb1/2D5Sv8a
HvkLqqM2hJ9/6JkZqsx5lE8zIMtu8Lu7AE7Bgfyfgl8SQINedw1GqLnld/t37HxA
eK7c7W9ydq23auLycPQNIE5DeE8W4kdybYpToe9MXL30TC8yYiUGIoibWKoVAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUgmzGSCf3Em+Jh3T1Za1ASh/PWm8wHwYDVR0j
BBgwFoAUOSrr90Jzcjt2aEWAVisXp3ze8EIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOWJodzNGSzNXUlJZTUF6cW56S2ZZUnNQY2pBWXI1dTNtalA0TnpuNkp2
dEwvMS8zOTJBRUJGNzQyNzM3MjNCNzY2ODQ1ODA1NjJCMTdBNzdDREVGMDQyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzM5MkFFQkY3NDI3MzcyM0I3
NjY4NDU4MDU2MkIxN0E3N0NERUYwNDIuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzliaHczRkszV1JSWU1BenFuektmWVJzUGNqQVlyNXUzbWpQNE56bjZKdnRMLzEv
MzQzNTJlMzYzNTJlMzIzMjM4MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjMy
MzYzMTM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQALUHkMA0GCSqGSIb3DQEBCwUAA4IBAQCER9JYLARP
foSoLhixfG9+jnyyzpsee2W86rjuSMibcqJZ9agCUKMK5XAdWrarMPfZkPvlANuH
UzgJIgyerazglVH07244uWcZoYqJ8E9rfTNSSLMncmyB9qlSxSUW5V8XB2anLwfH
k7tD5PCGoMJEWS8CULGwZoUVhmEr2Ru337TG1GSGgzqWYnY0XWvTpz3NPU01YFaQ
Au/EQ2R9dSDA2XKRK8nFe2grVp1JWV2pRxO7PS/vclmH22fXeHN6fGGhHOGLjuLa
UW8mziDdIf2KdOEQJ/kkgePe2HoayPAYJ/M+I5WlBTtIMNlXk/NkBDwQaPBZSSzD
J2ashVCB/g/m
-----END CERTIFICATE-----
Generated at Fri Nov 22 15:22:40 2024 by rpki-client on console-fra.rpki-client.org