Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AF4qNkXUkn4GnmKUdnHfJWgEHutgcgwAdXANf59Pq6j2/0/34352e3136362e3230332e302f32342d3234203d3e20323638303333.roa
File:                     34352e3136362e3230332e302f32342d3234203d3e20323638303333.roa (raw, json)
Hash identifier:          F0MykZvF0S5nwAFCNGjCrYKK8N74DaLReONjzVpISvU=
Subject key identifier:   8F:24:C2:48:47:87:62:BE:2F:A8:84:11:C4:87:95:DD:4C:F8:1E:F8
Certificate issuer:       /CN=EB84E09364662EDCA9ADD7153DBD782F05779B3C
Certificate serial:       15BC872A693F6999F37589ED37CD96E5482C026C
Authority key identifier: EB:84:E0:93:64:66:2E:DC:A9:AD:D7:15:3D:BD:78:2F:05:77:9B:3C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EB84E09364662EDCA9ADD7153DBD782F05779B3C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AF4qNkXUkn4GnmKUdnHfJWgEHutgcgwAdXANf59Pq6j2/0/34352e3136362e3230332e302f32342d3234203d3e20323638303333.roa
Signing time:             Thu 31 Oct 2024 14:03:03 +0000
ROA not before:           Thu 31 Oct 2024 13:58:03 +0000
ROA not after:            Thu 30 Oct 2025 14:03:03 +0000
asID:                     268033
IP address blocks:        45.166.203.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AF4qNkXUkn4GnmKUdnHfJWgEHutgcgwAdXANf59Pq6j2/0/EB84E09364662EDCA9ADD7153DBD782F05779B3C.crl
                          rsync://rpki-repo.registro.br/repo/AF4qNkXUkn4GnmKUdnHfJWgEHutgcgwAdXANf59Pq6j2/0/EB84E09364662EDCA9ADD7153DBD782F05779B3C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EB84E09364662EDCA9ADD7153DBD782F05779B3C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 23:47:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:bc:87:2a:69:3f:69:99:f3:75:89:ed:37:cd:96:e5:48:2c:02:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB84E09364662EDCA9ADD7153DBD782F05779B3C
        Validity
            Not Before: Oct 31 13:58:03 2024 GMT
            Not After : Oct 30 14:03:03 2025 GMT
        Subject: CN=8F24C248478762BE2FA88411C48795DD4CF81EF8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:e4:0d:ce:9a:22:6d:cb:d4:2c:98:fa:f4:30:
                    e6:09:8c:d4:e6:6c:0c:0c:ed:52:10:26:4e:48:2f:
                    b9:5f:eb:83:31:e1:e6:23:70:5a:34:d7:da:81:b4:
                    63:af:0f:83:0d:98:52:a6:63:b1:04:cb:bf:9b:46:
                    27:bc:a1:d1:7f:46:f2:8e:8d:77:3a:d1:a9:69:22:
                    39:55:ba:99:8f:e2:f0:f3:f3:6d:8a:c1:3c:99:14:
                    48:65:c2:9d:ce:af:88:e6:4b:01:7f:a4:59:7e:a4:
                    79:36:c2:9e:de:59:7b:c2:dc:cb:aa:d2:84:f6:12:
                    71:f5:e8:83:2c:0d:26:13:f6:29:fb:8e:95:2d:04:
                    26:5e:3e:8e:79:13:f2:33:f5:1f:eb:99:c3:c0:64:
                    a0:d4:bc:44:5f:8d:2c:9c:81:76:ad:92:3f:a4:1d:
                    4a:89:46:9b:d4:fa:12:f6:a9:17:b7:67:69:46:a5:
                    02:0f:a4:86:37:d1:b4:6e:06:6b:0f:f5:82:37:14:
                    62:78:42:d7:71:37:a9:a2:c1:1c:d1:4c:03:b0:af:
                    c3:68:af:8d:35:aa:8d:b1:84:96:12:5d:bf:58:75:
                    e8:39:a2:bc:94:41:73:25:9c:d5:75:ff:76:ce:4a:
                    f8:99:e2:bb:55:98:d8:51:b3:9a:9d:1b:88:b7:06:
                    34:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:24:C2:48:47:87:62:BE:2F:A8:84:11:C4:87:95:DD:4C:F8:1E:F8
            X509v3 Authority Key Identifier:
                keyid:EB:84:E0:93:64:66:2E:DC:A9:AD:D7:15:3D:BD:78:2F:05:77:9B:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AF4qNkXUkn4GnmKUdnHfJWgEHutgcgwAdXANf59Pq6j2/0/EB84E09364662EDCA9ADD7153DBD782F05779B3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EB84E09364662EDCA9ADD7153DBD782F05779B3C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AF4qNkXUkn4GnmKUdnHfJWgEHutgcgwAdXANf59Pq6j2/0/34352e3136362e3230332e302f32342d3234203d3e20323638303333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.166.203.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9b:49:df:d1:8f:75:67:cd:8b:02:57:9c:e7:56:4d:e1:f1:88:
         18:76:fe:1f:cc:c7:b9:a8:dd:93:35:6e:c2:3e:c5:53:19:87:
         dc:94:64:1f:cf:01:2c:43:f3:8b:e5:72:71:b7:3f:14:8a:36:
         a7:1f:32:1f:76:3d:ef:fe:93:c7:ba:e5:c8:0e:c0:15:07:96:
         59:bc:f9:ab:6e:9d:e4:45:3a:8a:5f:12:ff:89:4d:32:c4:1e:
         81:31:47:75:42:37:e3:b3:0b:9a:cc:6f:69:65:75:ce:00:8c:
         0c:0d:f0:f1:9f:ca:10:f9:04:3d:37:41:05:14:7f:7d:f7:6d:
         8b:cb:34:38:a8:ce:d7:19:9a:74:d3:37:13:a5:5d:c7:1a:8d:
         85:d2:67:6e:d9:20:28:31:a1:0a:ab:77:05:74:67:c0:d8:71:
         bf:61:32:84:9a:d8:c7:aa:85:62:da:8a:79:9e:49:72:50:40:
         d3:2f:3a:b7:83:32:d5:45:46:54:be:81:82:52:90:0e:7c:10:
         30:7e:d0:86:37:e6:92:89:ff:61:c8:e9:fe:a6:8e:bf:ce:30:
         89:17:85:14:5a:17:8d:47:dc:34:eb:c1:0d:30:36:47:6e:7f:
         92:a5:e7:e5:74:f2:c1:6b:7f:69:b9:56:0e:b4:7b:61:ad:d2:
         c5:3c:af:8d
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUFbyHKmk/aZnzdYntN82W5UgsAmwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUI4NEUwOTM2NDY2MkVEQ0E5QURENzE1M0RCRDc4MkYw
NTc3OUIzQzAeFw0yNDEwMzExMzU4MDNaFw0yNTEwMzAxNDAzMDNaMDMxMTAvBgNV
BAMTKDhGMjRDMjQ4NDc4NzYyQkUyRkE4ODQxMUM0ODc5NURENENGODFFRjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDU5A3OmiJty9QsmPr0MOYJjNTm
bAwM7VIQJk5IL7lf64Mx4eYjcFo019qBtGOvD4MNmFKmY7EEy7+bRie8odF/RvKO
jXc60alpIjlVupmP4vDz822KwTyZFEhlwp3Or4jmSwF/pFl+pHk2wp7eWXvC3Muq
0oT2EnH16IMsDSYT9in7jpUtBCZePo55E/Iz9R/rmcPAZKDUvERfjSycgXatkj+k
HUqJRpvU+hL2qRe3Z2lGpQIPpIY30bRuBmsP9YI3FGJ4QtdxN6miwRzRTAOwr8No
r401qo2xhJYSXb9Ydeg5oryUQXMlnNV1/3bOSviZ4rtVmNhRs5qdG4i3BjT1AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUjyTCSEeHYr4vqIQRxIeV3Uz4HvgwHwYDVR0j
BBgwFoAU64Tgk2RmLtyprdcVPb14LwV3mzwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQUY0cU5rWFVrbjRHbm1LVWRuSGZKV2dFSHV0Z2Nnd0FkWEFOZjU5UHE2
ajIvMC9FQjg0RTA5MzY0NjYyRURDQTlBREQ3MTUzREJENzgyRjA1Nzc5QjNDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0VCODRFMDkzNjQ2NjJFRENB
OUFERDcxNTNEQkQ3ODJGMDU3NzlCM0MuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0FGNHFOa1hVa240R25tS1VkbkhmSldnRUh1dGdjZ3dBZFhBTmY1OVBxNmoyLzAv
MzQzNTJlMzEzNjM2MmUzMjMwMzMyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzgzMDMzMzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAAtpsswDQYJKoZIhvcNAQELBQADggEBAJtJ39GP
dWfNiwJXnOdWTeHxiBh2/h/Mx7mo3ZM1bsI+xVMZh9yUZB/PASxD84vlcnG3PxSK
NqcfMh92Pe/+k8e65cgOwBUHllm8+atuneRFOopfEv+JTTLEHoExR3VCN+OzC5rM
b2lldc4AjAwN8PGfyhD5BD03QQUUf333bYvLNDioztcZmnTTNxOlXccajYXSZ27Z
ICgxoQqrdwV0Z8DYcb9hMoSa2MeqhWLainmeSXJQQNMvOreDMtVFRlS+gYJSkA58
EDB+0IY35pKJ/2HI6f6mjr/OMIkXhRRaF41H3DTrwQ0wNkduf5Kl5+V08sFrf2m5
Vg60e2Gt0sU8r40=
-----END CERTIFICATE-----
Generated at Fri Nov 22 23:37:34 2024 by rpki-client on console-fra.rpki-client.org