Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Advjh7aXF3VLn684prXxZG1cq4gQw6JJpsaguwK1Gjkq/1/34352e3138302e39362e302f32332d3233203d3e20323639313238.roa
File:                     34352e3138302e39362e302f32332d3233203d3e20323639313238.roa (raw, json)
Hash identifier:          2NPSs0HTwmgI0h8DimygZSEr3/fdmLB3WNos/tnsrpc=
Subject key identifier:   F4:40:DA:72:F2:B9:5F:DC:A7:F9:78:C6:0C:6D:22:78:A7:F2:3B:29
Certificate issuer:       /CN=F4CE893E9874372932D6054F7AFDD9FBBD021974
Certificate serial:       393F7FAA771796C92541F0D5520332837AA40689
Authority key identifier: F4:CE:89:3E:98:74:37:29:32:D6:05:4F:7A:FD:D9:FB:BD:02:19:74
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F4CE893E9874372932D6054F7AFDD9FBBD021974.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Advjh7aXF3VLn684prXxZG1cq4gQw6JJpsaguwK1Gjkq/1/34352e3138302e39362e302f32332d3233203d3e20323639313238.roa
Signing time:             Thu 04 Apr 2024 08:00:49 +0000
ROA not before:           Thu 04 Apr 2024 07:55:49 +0000
ROA not after:            Thu 03 Apr 2025 08:00:49 +0000
asID:                     269128
IP address blocks:        45.180.96.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Advjh7aXF3VLn684prXxZG1cq4gQw6JJpsaguwK1Gjkq/1/F4CE893E9874372932D6054F7AFDD9FBBD021974.crl
                          rsync://rpki-repo.registro.br/repo/Advjh7aXF3VLn684prXxZG1cq4gQw6JJpsaguwK1Gjkq/1/F4CE893E9874372932D6054F7AFDD9FBBD021974.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F4CE893E9874372932D6054F7AFDD9FBBD021974.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 13:01:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:3f:7f:aa:77:17:96:c9:25:41:f0:d5:52:03:32:83:7a:a4:06:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F4CE893E9874372932D6054F7AFDD9FBBD021974
        Validity
            Not Before: Apr  4 07:55:49 2024 GMT
            Not After : Apr  3 08:00:49 2025 GMT
        Subject: CN=F440DA72F2B95FDCA7F978C60C6D2278A7F23B29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:99:ae:1c:dc:8c:4d:c6:12:96:52:8e:a5:22:
                    80:5e:9a:78:85:81:47:6e:3a:b2:9a:07:b9:c1:2a:
                    07:1a:95:58:99:d9:7b:99:e5:06:1c:49:79:ec:7e:
                    ad:b1:7d:ed:a4:47:b4:5d:99:1d:47:42:ec:1e:04:
                    50:1b:46:b6:a0:71:bc:ae:34:ce:09:bd:27:26:d4:
                    b6:0a:bc:fd:ca:9d:50:de:de:04:5d:d0:1f:e3:83:
                    0b:a8:bd:71:47:ef:20:19:c8:8d:90:35:de:b7:ff:
                    df:bb:1b:5e:fa:2f:f4:0e:73:f0:f8:e5:c0:1e:45:
                    02:4b:92:23:a9:9e:14:bb:9b:f2:f8:14:6b:d7:ff:
                    be:d3:e0:c2:0c:53:8b:04:7c:ea:44:19:1c:c9:7f:
                    51:f2:9d:3a:e4:c8:a4:27:c8:ae:5a:18:41:72:04:
                    aa:a3:8a:42:bd:74:44:85:51:14:5d:ea:6b:e6:d9:
                    03:f7:37:61:5f:54:c2:83:b0:79:1d:bb:64:c3:2b:
                    13:7e:cf:b3:87:5c:d6:ba:5f:1e:32:ee:f0:df:e1:
                    4f:1e:14:0f:de:e5:46:6c:af:cf:03:54:95:e6:b1:
                    37:10:6e:f9:31:eb:72:19:f2:89:c8:c5:5e:49:73:
                    9b:e4:d5:6c:86:77:0a:6b:4d:30:62:88:66:81:97:
                    5d:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:40:DA:72:F2:B9:5F:DC:A7:F9:78:C6:0C:6D:22:78:A7:F2:3B:29
            X509v3 Authority Key Identifier:
                keyid:F4:CE:89:3E:98:74:37:29:32:D6:05:4F:7A:FD:D9:FB:BD:02:19:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Advjh7aXF3VLn684prXxZG1cq4gQw6JJpsaguwK1Gjkq/1/F4CE893E9874372932D6054F7AFDD9FBBD021974.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F4CE893E9874372932D6054F7AFDD9FBBD021974.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Advjh7aXF3VLn684prXxZG1cq4gQw6JJpsaguwK1Gjkq/1/34352e3138302e39362e302f32332d3233203d3e20323639313238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.180.96.0/23

    Signature Algorithm: sha256WithRSAEncryption
         ae:4b:b0:09:db:c3:43:14:b2:f4:74:02:8b:67:51:95:46:ac:
         42:af:d7:ae:27:ef:73:06:23:ec:94:8f:75:99:2f:7a:95:2a:
         d9:06:e0:a0:df:3f:43:4f:0b:7f:1a:ca:48:00:ef:ca:c8:4c:
         a2:fc:40:d9:26:ee:62:b1:5a:69:60:61:ec:65:22:64:fd:75:
         39:f1:20:5f:c0:db:06:cf:0e:b7:e8:3a:8f:a8:ae:b6:67:1f:
         ad:65:57:0a:3e:3e:40:1b:e2:c9:f3:96:b5:fe:21:a0:43:13:
         8e:3f:4b:5a:08:62:ae:15:f5:e2:8d:07:22:c1:62:52:13:9e:
         21:04:76:6d:77:15:d7:85:6e:5d:f4:bf:84:25:5b:a3:4e:45:
         0f:c9:f5:ec:f8:6b:71:e5:10:13:f7:ce:fe:11:bf:03:a2:30:
         a2:1b:95:8c:88:f7:1c:ec:03:55:f0:4f:d6:31:58:dc:a6:36:
         bc:ec:c6:3f:1e:89:f8:8f:c2:22:5a:09:75:89:89:68:5d:62:
         2d:13:2b:34:7c:99:f8:6f:fe:58:e7:c9:86:f1:c8:c5:a5:32:
         91:bf:57:f4:6b:ec:a1:da:f3:33:df:9d:d3:d1:7a:c6:e2:a7:
         62:fd:77:91:11:c4:7b:91:f8:db:3f:15:8a:d7:23:16:a6:10:
         0c:cc:4e:17
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUOT9/qncXlsklQfDVUgMyg3qkBokwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjRDRTg5M0U5ODc0MzcyOTMyRDYwNTRGN0FGREQ5RkJC
RDAyMTk3NDAeFw0yNDA0MDQwNzU1NDlaFw0yNTA0MDMwODAwNDlaMDMxMTAvBgNV
BAMTKEY0NDBEQTcyRjJCOTVGRENBN0Y5NzhDNjBDNkQyMjc4QTdGMjNCMjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7ma4c3IxNxhKWUo6lIoBemniF
gUduOrKaB7nBKgcalViZ2XuZ5QYcSXnsfq2xfe2kR7RdmR1HQuweBFAbRragcbyu
NM4JvScm1LYKvP3KnVDe3gRd0B/jgwuovXFH7yAZyI2QNd63/9+7G176L/QOc/D4
5cAeRQJLkiOpnhS7m/L4FGvX/77T4MIMU4sEfOpEGRzJf1HynTrkyKQnyK5aGEFy
BKqjikK9dESFURRd6mvm2QP3N2FfVMKDsHkdu2TDKxN+z7OHXNa6Xx4y7vDf4U8e
FA/e5UZsr88DVJXmsTcQbvkx63IZ8onIxV5Jc5vk1WyGdwprTTBiiGaBl12ZAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQU9EDacvK5X9yn+XjGDG0ieKfyOykwHwYDVR0j
BBgwFoAU9M6JPph0Nyky1gVPev3Z+70CGXQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQWR2amg3YVhGM1ZMbjY4NHByWHhaRzFjcTRnUXc2Skpwc2FndXdLMUdq
a3EvMS9GNENFODkzRTk4NzQzNzI5MzJENjA1NEY3QUZERDlGQkJEMDIxOTc0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Y0Q0U4OTNFOTg3NDM3Mjkz
MkQ2MDU0RjdBRkREOUZCQkQwMjE5NzQuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0FkdmpoN2FYRjNWTG42ODRwclh4WkcxY3E0Z1F3NkpKcHNhZ3V3SzFHamtxLzEv
MzQzNTJlMzEzODMwMmUzOTM2MmUzMDJmMzIzMzJkMzIzMzIwM2QzZTIwMzIzNjM5
MzEzMjM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQBLbRgMA0GCSqGSIb3DQEBCwUAA4IBAQCuS7AJ28ND
FLL0dAKLZ1GVRqxCr9euJ+9zBiPslI91mS96lSrZBuCg3z9DTwt/GspIAO/KyEyi
/EDZJu5isVppYGHsZSJk/XU58SBfwNsGzw636DqPqK62Zx+tZVcKPj5AG+LJ85a1
/iGgQxOOP0taCGKuFfXijQciwWJSE54hBHZtdxXXhW5d9L+EJVujTkUPyfXs+Gtx
5RAT987+Eb8DojCiG5WMiPcc7ANV8E/WMVjcpja87MY/Hon4j8IiWgl1iYloXWIt
Eys0fJn4b/5Y58mG8cjFpTKRv1f0a+yh2vMz353T0XrG4qdi/XeREcR7kfjbPxWK
1yMWphAMzE4X
-----END CERTIFICATE-----
Generated at Fri Jun 28 15:42:21 2024 by rpki-client on console-fra.rpki-client.org