Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AsD25Bi2Qr1Vm1MX542GBtegLqKa6S6KMhWRSQ9tshdd/0/34352e3137332e3137382e302f32342d3234203d3e20323638383138.roa
File:                     34352e3137332e3137382e302f32342d3234203d3e20323638383138.roa (raw, json)
Hash identifier:          /12Dm7mEUVKunxABbRQFkJmOhbZB+kvwOuJY1Rpzty8=
Subject key identifier:   58:55:9C:8F:B8:DD:DB:0D:4E:C5:5F:FC:B7:75:85:F1:7C:E9:41:72
Certificate issuer:       /CN=C4D5C5400FE83E14C685785FB1C216DAF000FF44
Certificate serial:       5E5C67419F72462D0313B3E7DBF05416AACF7CBE
Authority key identifier: C4:D5:C5:40:0F:E8:3E:14:C6:85:78:5F:B1:C2:16:DA:F0:00:FF:44
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C4D5C5400FE83E14C685785FB1C216DAF000FF44.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AsD25Bi2Qr1Vm1MX542GBtegLqKa6S6KMhWRSQ9tshdd/0/34352e3137332e3137382e302f32342d3234203d3e20323638383138.roa
Signing time:             Tue 24 Sep 2024 13:22:01 +0000
ROA not before:           Tue 24 Sep 2024 13:17:01 +0000
ROA not after:            Tue 23 Sep 2025 13:22:01 +0000
asID:                     268818
IP address blocks:        45.173.178.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AsD25Bi2Qr1Vm1MX542GBtegLqKa6S6KMhWRSQ9tshdd/0/C4D5C5400FE83E14C685785FB1C216DAF000FF44.crl
                          rsync://rpki-repo.registro.br/repo/AsD25Bi2Qr1Vm1MX542GBtegLqKa6S6KMhWRSQ9tshdd/0/C4D5C5400FE83E14C685785FB1C216DAF000FF44.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C4D5C5400FE83E14C685785FB1C216DAF000FF44.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 17:33:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:5c:67:41:9f:72:46:2d:03:13:b3:e7:db:f0:54:16:aa:cf:7c:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C4D5C5400FE83E14C685785FB1C216DAF000FF44
        Validity
            Not Before: Sep 24 13:17:01 2024 GMT
            Not After : Sep 23 13:22:01 2025 GMT
        Subject: CN=58559C8FB8DDDB0D4EC55FFCB77585F17CE94172
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:f0:df:34:ea:58:13:bc:2a:be:52:a9:ea:62:
                    82:14:ff:4c:bc:4c:76:3b:c1:79:c2:c7:33:5a:c5:
                    17:c0:01:ff:61:ad:d1:35:29:b4:d4:44:86:fe:75:
                    2f:7b:d0:02:4b:d6:a2:85:48:df:c0:fa:6c:1c:8c:
                    6a:e4:32:ca:b0:1d:5e:c5:d6:fc:f0:2d:45:94:e1:
                    05:a5:3d:38:ac:f6:4d:49:30:0c:75:53:6a:ba:21:
                    ec:76:2b:e7:fa:ee:b5:6c:a5:4b:83:47:07:f8:a1:
                    96:c1:63:e4:e4:dc:77:4f:00:3f:f4:2f:22:88:12:
                    2a:ff:79:04:7c:80:02:f1:41:72:c7:d8:0b:93:5d:
                    5f:57:6c:36:dd:40:7a:ff:6d:0b:96:fa:76:8e:2e:
                    b3:26:be:18:0f:f4:2b:eb:a5:3c:b1:87:7b:a6:c6:
                    b2:5f:a2:82:31:84:69:cc:8c:d5:e8:2c:9c:d9:bb:
                    95:4c:7e:89:e7:3b:4d:bb:e9:87:62:3a:0f:98:e1:
                    57:00:aa:3c:d6:99:4a:69:cd:cd:df:03:80:0d:a2:
                    29:ac:5d:85:27:80:e9:83:af:41:8b:f4:43:8e:8d:
                    9e:06:71:df:c9:97:17:4c:1c:41:ae:bf:33:f9:0c:
                    cb:c2:19:c2:0c:25:ee:e4:3e:50:6d:6c:63:95:4b:
                    c9:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:55:9C:8F:B8:DD:DB:0D:4E:C5:5F:FC:B7:75:85:F1:7C:E9:41:72
            X509v3 Authority Key Identifier:
                keyid:C4:D5:C5:40:0F:E8:3E:14:C6:85:78:5F:B1:C2:16:DA:F0:00:FF:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AsD25Bi2Qr1Vm1MX542GBtegLqKa6S6KMhWRSQ9tshdd/0/C4D5C5400FE83E14C685785FB1C216DAF000FF44.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C4D5C5400FE83E14C685785FB1C216DAF000FF44.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AsD25Bi2Qr1Vm1MX542GBtegLqKa6S6KMhWRSQ9tshdd/0/34352e3137332e3137382e302f32342d3234203d3e20323638383138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.173.178.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6d:14:4e:32:f8:76:56:2e:2c:3a:a9:22:1c:82:f3:e5:aa:bf:
         b8:b9:84:8d:0c:3f:67:1b:35:58:87:1e:c5:bc:a0:60:fd:31:
         ac:c4:4c:0a:4d:c5:a2:09:c2:aa:50:7c:05:fc:d5:18:61:46:
         2d:d2:92:01:f4:4e:c7:cb:24:d6:fa:54:b2:e2:50:d7:ae:5d:
         2a:c1:1b:e2:87:03:3d:dd:43:ee:92:02:15:ff:1d:77:44:da:
         76:2f:5e:14:e9:35:c3:42:60:6b:75:98:50:b3:85:74:b5:7c:
         8a:1a:16:3c:ae:0e:3d:cc:15:8f:e8:c9:80:03:17:65:21:b9:
         66:f2:27:65:2c:72:45:00:5a:66:39:2a:8d:13:10:be:12:89:
         93:3e:25:74:6a:e3:54:bc:8f:6e:56:2e:f1:b2:fa:70:cf:06:
         5e:0b:57:33:32:3f:5b:69:8c:60:7e:7a:a5:14:7f:d2:cc:ec:
         81:2f:a3:eb:7f:88:1b:39:6f:3c:db:02:56:44:04:7f:78:93:
         2d:df:84:32:35:13:9c:88:4a:6e:28:24:4a:ee:2f:a2:7c:3a:
         63:47:73:20:6e:da:14:fc:5a:72:c5:a6:93:7a:c9:dc:8b:e7:
         8b:39:cd:a9:66:70:0b:47:ec:df:a0:0f:75:0a:76:6c:c7:58:
         2c:47:d0:a1
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUXlxnQZ9yRi0DE7Pn2/BUFqrPfL4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzRENUM1NDAwRkU4M0UxNEM2ODU3ODVGQjFDMjE2REFG
MDAwRkY0NDAeFw0yNDA5MjQxMzE3MDFaFw0yNTA5MjMxMzIyMDFaMDMxMTAvBgNV
BAMTKDU4NTU5QzhGQjhERERCMEQ0RUM1NUZGQ0I3NzU4NUYxN0NFOTQxNzIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDB8N806lgTvCq+UqnqYoIU/0y8
THY7wXnCxzNaxRfAAf9hrdE1KbTURIb+dS970AJL1qKFSN/A+mwcjGrkMsqwHV7F
1vzwLUWU4QWlPTis9k1JMAx1U2q6Iex2K+f67rVspUuDRwf4oZbBY+Tk3HdPAD/0
LyKIEir/eQR8gALxQXLH2AuTXV9XbDbdQHr/bQuW+naOLrMmvhgP9CvrpTyxh3um
xrJfooIxhGnMjNXoLJzZu5VMfonnO0276YdiOg+Y4VcAqjzWmUppzc3fA4ANoims
XYUngOmDr0GL9EOOjZ4Gcd/JlxdMHEGuvzP5DMvCGcIMJe7kPlBtbGOVS8mvAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUWFWcj7jd2w1OxV/8t3WF8XzpQXIwHwYDVR0j
BBgwFoAUxNXFQA/oPhTGhXhfscIW2vAA/0QwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQXNEMjVCaTJRcjFWbTFNWDU0MkdCdGVnTHFLYTZTNktNaFdSU1E5dHNo
ZGQvMC9DNEQ1QzU0MDBGRTgzRTE0QzY4NTc4NUZCMUMyMTZEQUYwMDBGRjQ0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0M0RDVDNTQwMEZFODNFMTRD
Njg1Nzg1RkIxQzIxNkRBRjAwMEZGNDQuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0FzRDI1QmkyUXIxVm0xTVg1NDJHQnRlZ0xxS2E2UzZLTWhXUlNROXRzaGRkLzAv
MzQzNTJlMzEzNzMzMmUzMTM3MzgyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzgzODMxMzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAAtrbIwDQYJKoZIhvcNAQELBQADggEBAG0UTjL4
dlYuLDqpIhyC8+Wqv7i5hI0MP2cbNViHHsW8oGD9MazETApNxaIJwqpQfAX81Rhh
Ri3SkgH0TsfLJNb6VLLiUNeuXSrBG+KHAz3dQ+6SAhX/HXdE2nYvXhTpNcNCYGt1
mFCzhXS1fIoaFjyuDj3MFY/oyYADF2UhuWbyJ2UsckUAWmY5Ko0TEL4SiZM+JXRq
41S8j25WLvGy+nDPBl4LVzMyP1tpjGB+eqUUf9LM7IEvo+t/iBs5bzzbAlZEBH94
ky3fhDI1E5yISm4oJEruL6J8OmNHcyBu2hT8WnLFppN6ydyL54s5zalmcAtH7N+g
D3UKdmzHWCxH0KE=
-----END CERTIFICATE-----
Generated at Sat Nov 23 17:31:54 2024 by rpki-client on console-fra.rpki-client.org