Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ARwZYYVkfmKWZoAuCxHgBNmvFfczcKWBGEjGg4HaNS7c/0/34352e3138362e3131322e302f32322d3332203d3e20323639343139.roa
File:                     34352e3138362e3131322e302f32322d3332203d3e20323639343139.roa (raw, json)
Hash identifier:          ny5QjA+Cy7w8yoDlM2BodKEz3lCLL262ymq0m0mdavk=
Subject key identifier:   0D:60:B2:66:AF:93:DB:9E:42:3E:76:13:A0:91:4E:11:9E:25:09:45
Certificate issuer:       /CN=0C9DFE5053F106F443D6D05357D3DB206D91D319
Certificate serial:       3F8DA61235E56246224B7E4C7B3AA5894237D7CD
Authority key identifier: 0C:9D:FE:50:53:F1:06:F4:43:D6:D0:53:57:D3:DB:20:6D:91:D3:19
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0C9DFE5053F106F443D6D05357D3DB206D91D319.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ARwZYYVkfmKWZoAuCxHgBNmvFfczcKWBGEjGg4HaNS7c/0/34352e3138362e3131322e302f32322d3332203d3e20323639343139.roa
Signing time:             Fri 16 Aug 2024 22:14:18 +0000
ROA not before:           Fri 16 Aug 2024 22:09:18 +0000
ROA not after:            Fri 15 Aug 2025 22:14:18 +0000
asID:                     269419
IP address blocks:        45.186.112.0/22 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ARwZYYVkfmKWZoAuCxHgBNmvFfczcKWBGEjGg4HaNS7c/0/0C9DFE5053F106F443D6D05357D3DB206D91D319.crl
                          rsync://rpki-repo.registro.br/repo/ARwZYYVkfmKWZoAuCxHgBNmvFfczcKWBGEjGg4HaNS7c/0/0C9DFE5053F106F443D6D05357D3DB206D91D319.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0C9DFE5053F106F443D6D05357D3DB206D91D319.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 16:55:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:8d:a6:12:35:e5:62:46:22:4b:7e:4c:7b:3a:a5:89:42:37:d7:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0C9DFE5053F106F443D6D05357D3DB206D91D319
        Validity
            Not Before: Aug 16 22:09:18 2024 GMT
            Not After : Aug 15 22:14:18 2025 GMT
        Subject: CN=0D60B266AF93DB9E423E7613A0914E119E250945
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:54:41:a4:dc:6e:92:ea:c5:c4:ac:2e:1f:07:
                    6d:32:3a:28:8a:b8:99:f0:bf:a3:c1:68:bb:72:84:
                    10:41:f3:1a:0c:e3:17:6c:f8:8f:51:f6:be:32:7b:
                    38:74:92:49:64:52:3a:40:50:23:45:85:27:43:cc:
                    dd:4d:6e:8b:13:82:11:84:ba:5c:2e:54:98:e5:92:
                    8d:45:0f:6b:df:34:54:e2:66:a9:7d:fe:2e:24:a2:
                    3b:c0:52:31:b9:34:2c:77:71:81:40:cf:38:9a:23:
                    b2:e0:fd:e7:5d:33:f9:91:bb:fa:eb:c9:c1:48:36:
                    45:f3:d3:2d:3d:f4:38:0c:13:a6:6c:83:49:02:28:
                    c5:19:3c:ce:59:0f:33:2e:03:18:3d:05:b1:a4:9a:
                    e9:d5:f5:29:c3:c2:a5:76:67:57:86:b9:71:48:31:
                    a6:81:f6:c2:b8:6d:bc:06:d5:6f:37:e6:0b:26:0d:
                    c1:bc:50:5d:cc:8a:c4:14:15:e9:e8:43:fb:ae:ad:
                    d0:77:b2:8d:a7:e8:bc:9b:c6:cd:9a:01:59:71:0d:
                    d8:5d:46:4b:9c:6b:b4:13:af:d3:17:b2:ad:d5:71:
                    a0:1b:a3:7a:25:81:ec:84:c6:14:a8:9f:f4:aa:65:
                    28:0c:7d:f7:e7:1b:bb:57:ff:9a:42:26:b8:db:db:
                    d3:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:60:B2:66:AF:93:DB:9E:42:3E:76:13:A0:91:4E:11:9E:25:09:45
            X509v3 Authority Key Identifier:
                keyid:0C:9D:FE:50:53:F1:06:F4:43:D6:D0:53:57:D3:DB:20:6D:91:D3:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ARwZYYVkfmKWZoAuCxHgBNmvFfczcKWBGEjGg4HaNS7c/0/0C9DFE5053F106F443D6D05357D3DB206D91D319.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0C9DFE5053F106F443D6D05357D3DB206D91D319.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ARwZYYVkfmKWZoAuCxHgBNmvFfczcKWBGEjGg4HaNS7c/0/34352e3138362e3131322e302f32322d3332203d3e20323639343139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.186.112.0/22

    Signature Algorithm: sha256WithRSAEncryption
         23:b4:f6:55:31:64:62:21:55:c5:19:96:c2:2f:4a:76:73:ea:
         01:11:f5:ca:7c:84:bc:30:4f:d1:f8:38:a7:50:0f:45:37:d1:
         52:c3:03:a2:8a:26:2b:2c:b9:80:76:1f:89:21:aa:1b:08:43:
         7c:a8:a3:b9:dc:10:82:1d:1c:f5:fe:a1:a2:23:eb:5e:6a:f1:
         95:b0:66:0c:50:c2:e1:45:94:f4:97:8c:15:a4:d1:91:48:52:
         96:9c:da:69:00:4d:93:05:69:d5:71:8f:f9:71:1f:91:e3:86:
         70:37:5d:23:01:b6:4d:13:7b:66:94:58:65:01:1f:3c:ac:66:
         ea:bf:4c:b3:cc:80:16:9b:fb:83:6b:f1:e2:3a:19:68:55:0e:
         61:98:2b:25:fa:9a:7d:16:83:6d:58:c4:3c:c4:54:2d:eb:5d:
         43:fc:18:24:f5:83:08:4a:d9:f7:a7:df:c9:f4:b8:aa:b5:c5:
         bf:aa:de:09:f6:3b:ca:8c:41:97:f7:fd:1f:bb:f7:05:73:21:
         6d:d0:70:62:e3:b1:cf:a0:a6:b3:ad:1c:5c:f4:79:ff:12:7f:
         e8:04:3f:38:32:f1:de:4b:0d:a5:74:87:49:c8:b5:24:d8:da:
         48:2e:4f:b4:85:bc:18:6c:f0:2d:16:d2:44:96:83:00:8d:fe:
         27:1d:bf:e4
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUP42mEjXlYkYiS35MezqliUI3180wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEM5REZFNTA1M0YxMDZGNDQzRDZEMDUzNTdEM0RCMjA2
RDkxRDMxOTAeFw0yNDA4MTYyMjA5MThaFw0yNTA4MTUyMjE0MThaMDMxMTAvBgNV
BAMTKDBENjBCMjY2QUY5M0RCOUU0MjNFNzYxM0EwOTE0RTExOUUyNTA5NDUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5VEGk3G6S6sXErC4fB20yOiiK
uJnwv6PBaLtyhBBB8xoM4xds+I9R9r4yezh0kklkUjpAUCNFhSdDzN1NbosTghGE
ulwuVJjlko1FD2vfNFTiZql9/i4kojvAUjG5NCx3cYFAzziaI7Lg/eddM/mRu/rr
ycFINkXz0y099DgME6Zsg0kCKMUZPM5ZDzMuAxg9BbGkmunV9SnDwqV2Z1eGuXFI
MaaB9sK4bbwG1W835gsmDcG8UF3MisQUFenoQ/uurdB3so2n6Lybxs2aAVlxDdhd
Rkuca7QTr9MXsq3VcaAbo3olgeyExhSon/SqZSgMfffnG7tX/5pCJrjb29N7AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUDWCyZq+T255CPnYToJFOEZ4lCUUwHwYDVR0j
BBgwFoAUDJ3+UFPxBvRD1tBTV9PbIG2R0xkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQVJ3WllZVmtmbUtXWm9BdUN4SGdCTm12RmZjemNLV0JHRWpHZzRIYU5T
N2MvMC8wQzlERkU1MDUzRjEwNkY0NDNENkQwNTM1N0QzREIyMDZEOTFEMzE5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzBDOURGRTUwNTNGMTA2RjQ0
M0Q2RDA1MzU3RDNEQjIwNkQ5MUQzMTkuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0FSd1pZWVZrZm1LV1pvQXVDeEhnQk5tdkZmY3pjS1dCR0VqR2c0SGFOUzdjLzAv
MzQzNTJlMzEzODM2MmUzMTMxMzIyZTMwMmYzMjMyMmQzMzMyMjAzZDNlMjAzMjM2
MzkzNDMxMzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAItunAwDQYJKoZIhvcNAQELBQADggEBACO09lUx
ZGIhVcUZlsIvSnZz6gER9cp8hLwwT9H4OKdQD0U30VLDA6KKJissuYB2H4khqhsI
Q3yoo7ncEIIdHPX+oaIj615q8ZWwZgxQwuFFlPSXjBWk0ZFIUpac2mkATZMFadVx
j/lxH5HjhnA3XSMBtk0Te2aUWGUBHzysZuq/TLPMgBab+4Nr8eI6GWhVDmGYKyX6
mn0Wg21YxDzEVC3rXUP8GCT1gwhK2fen38n0uKq1xb+q3gn2O8qMQZf3/R+79wVz
IW3QcGLjsc+gprOtHFz0ef8Sf+gEPzgy8d5LDaV0h0nItSTY2kguT7SFvBhs8C0W
0kSWgwCN/icdv+Q=
-----END CERTIFICATE-----
Generated at Sat Nov 23 16:21:09 2024 by rpki-client on console-ams.rpki-client.org