Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/B9H9NDN1Dmy6jFY4UcCWbyoYawCwcruEBPUrrMUwQEkY/0/34352e362e3137362e302f32322d3234203d3e20323636313730.roa
File:                     34352e362e3137362e302f32322d3234203d3e20323636313730.roa (raw, json)
Hash identifier:          DtXcZNH8zlAgw02Xq+6uPpz5XZ37ficXWR0l5yZhp2o=
Subject key identifier:   40:49:51:63:7C:8B:CD:2E:5D:4B:51:FD:5E:85:54:0D:8D:70:AF:AA
Certificate issuer:       /CN=5A85B3827E19AAE0B52BB06C21609C54CE16BF8C
Certificate serial:       5D917D931D162093364C64FD57199B521EE8DA09
Authority key identifier: 5A:85:B3:82:7E:19:AA:E0:B5:2B:B0:6C:21:60:9C:54:CE:16:BF:8C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5A85B3827E19AAE0B52BB06C21609C54CE16BF8C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B9H9NDN1Dmy6jFY4UcCWbyoYawCwcruEBPUrrMUwQEkY/0/34352e362e3137362e302f32322d3234203d3e20323636313730.roa
Signing time:             Thu 10 Oct 2024 19:45:24 +0000
ROA not before:           Thu 10 Oct 2024 19:40:24 +0000
ROA not after:            Thu 09 Oct 2025 19:45:24 +0000
asID:                     266170
IP address blocks:        45.6.176.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/B9H9NDN1Dmy6jFY4UcCWbyoYawCwcruEBPUrrMUwQEkY/0/5A85B3827E19AAE0B52BB06C21609C54CE16BF8C.crl
                          rsync://rpki-repo.registro.br/repo/B9H9NDN1Dmy6jFY4UcCWbyoYawCwcruEBPUrrMUwQEkY/0/5A85B3827E19AAE0B52BB06C21609C54CE16BF8C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5A85B3827E19AAE0B52BB06C21609C54CE16BF8C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 17 Feb 2025 12:38:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:91:7d:93:1d:16:20:93:36:4c:64:fd:57:19:9b:52:1e:e8:da:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5A85B3827E19AAE0B52BB06C21609C54CE16BF8C
        Validity
            Not Before: Oct 10 19:40:24 2024 GMT
            Not After : Oct  9 19:45:24 2025 GMT
        Subject: CN=404951637C8BCD2E5D4B51FD5E85540D8D70AFAA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:03:87:b4:d2:f2:08:88:c5:0c:0c:6b:77:ae:
                    13:bc:2a:cc:43:a2:9d:60:a0:d2:a5:3f:6b:b1:f8:
                    87:52:bd:e1:78:d7:6e:1f:97:2a:71:8f:84:94:e2:
                    82:40:ac:e7:8f:64:d7:88:3b:94:88:4b:56:1d:cf:
                    16:5c:72:4e:90:09:a2:db:0d:12:64:a0:5d:89:58:
                    bd:f0:7f:72:35:d1:a4:35:34:49:e2:e4:8d:52:65:
                    61:c8:16:ba:69:85:1f:5c:bd:2b:e6:96:00:f1:ba:
                    bb:1d:3f:b3:89:ee:a8:a6:60:12:02:e2:58:e0:62:
                    5b:1d:1a:46:3a:c6:0d:0e:88:7c:ac:10:95:7e:65:
                    14:ef:0f:60:49:5c:e7:97:ef:38:3d:e8:89:02:fa:
                    89:06:31:fc:57:a8:39:c7:25:45:03:fd:99:48:b7:
                    15:ec:83:41:67:85:c2:1a:be:1c:34:b3:ce:0a:2d:
                    35:e0:f8:10:3e:2d:cd:85:e1:d8:8f:49:26:d4:35:
                    ff:06:25:04:8c:58:ba:de:af:cf:84:d3:9d:f4:77:
                    eb:e7:15:3e:1d:a2:16:c0:dc:92:c3:a1:17:49:ec:
                    40:fd:5c:08:66:ef:cc:8f:0a:c0:fc:9a:ae:b9:93:
                    56:19:fb:fc:ee:39:88:c8:14:26:58:ff:db:6c:24:
                    aa:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:49:51:63:7C:8B:CD:2E:5D:4B:51:FD:5E:85:54:0D:8D:70:AF:AA
            X509v3 Authority Key Identifier:
                keyid:5A:85:B3:82:7E:19:AA:E0:B5:2B:B0:6C:21:60:9C:54:CE:16:BF:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B9H9NDN1Dmy6jFY4UcCWbyoYawCwcruEBPUrrMUwQEkY/0/5A85B3827E19AAE0B52BB06C21609C54CE16BF8C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5A85B3827E19AAE0B52BB06C21609C54CE16BF8C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B9H9NDN1Dmy6jFY4UcCWbyoYawCwcruEBPUrrMUwQEkY/0/34352e362e3137362e302f32322d3234203d3e20323636313730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.6.176.0/22

    Signature Algorithm: sha256WithRSAEncryption
         32:14:3b:53:97:24:b5:f0:31:29:cf:83:8c:65:48:29:50:df:
         75:d6:d8:79:68:3e:9c:0e:c0:9d:d2:e6:fd:3d:8a:22:cf:f2:
         d5:d0:78:ff:2f:97:7b:82:42:df:a1:98:ec:e2:56:ae:92:17:
         ad:e9:52:cd:7d:1e:18:93:26:56:87:2c:3b:c6:4c:d3:68:b0:
         69:f0:f0:2e:4c:d6:0a:e2:b1:bb:ac:3f:ac:96:ed:24:fc:ee:
         eb:1f:24:a6:6e:e7:d5:41:b4:96:86:60:76:ce:a5:ab:83:23:
         4c:89:86:0c:fe:ed:37:b7:c0:b1:b5:d1:28:e2:ae:55:3a:b1:
         2a:51:fb:f1:d2:10:16:90:8a:80:41:bc:4a:00:e5:3e:69:d3:
         61:2b:66:5e:36:2a:ad:f1:b4:7c:33:e9:e2:4f:46:c4:df:39:
         15:e5:d2:15:9a:f2:71:ab:df:60:7a:8c:17:c5:a1:b2:bb:34:
         cc:26:1d:45:01:45:a8:09:1a:88:05:53:56:20:0d:67:be:8a:
         fa:61:e9:dc:e7:bf:9e:20:f0:9b:42:ea:cc:43:9d:0e:c1:02:
         1a:1e:07:f3:8d:be:4c:7d:78:7e:18:6c:87:7c:22:91:e3:67:
         22:38:6d:f4:5b:5d:88:fd:1f:15:66:48:17:98:23:09:d0:70:
         0c:fd:00:4b
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUXZF9kx0WIJM2TGT9VxmbUh7o2gkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUE4NUIzODI3RTE5QUFFMEI1MkJCMDZDMjE2MDlDNTRD
RTE2QkY4QzAeFw0yNDEwMTAxOTQwMjRaFw0yNTEwMDkxOTQ1MjRaMDMxMTAvBgNV
BAMTKDQwNDk1MTYzN0M4QkNEMkU1RDRCNTFGRDVFODU1NDBEOEQ3MEFGQUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/A4e00vIIiMUMDGt3rhO8KsxD
op1goNKlP2ux+IdSveF4124flypxj4SU4oJArOePZNeIO5SIS1YdzxZcck6QCaLb
DRJkoF2JWL3wf3I10aQ1NEni5I1SZWHIFrpphR9cvSvmlgDxursdP7OJ7qimYBIC
4ljgYlsdGkY6xg0OiHysEJV+ZRTvD2BJXOeX7zg96IkC+okGMfxXqDnHJUUD/ZlI
txXsg0FnhcIavhw0s84KLTXg+BA+Lc2F4diPSSbUNf8GJQSMWLrer8+E0530d+vn
FT4dohbA3JLDoRdJ7ED9XAhm78yPCsD8mq65k1YZ+/zuOYjIFCZY/9tsJKqnAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUQElRY3yLzS5dS1H9XoVUDY1wr6owHwYDVR0j
BBgwFoAUWoWzgn4ZquC1K7BsIWCcVM4Wv4wwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQjlIOU5ETjFEbXk2akZZNFVjQ1dieW9ZYXdDd2NydUVCUFVyck1Vd1FF
a1kvMC81QTg1QjM4MjdFMTlBQUUwQjUyQkIwNkMyMTYwOUM1NENFMTZCRjhDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzVBODVCMzgyN0UxOUFBRTBC
NTJCQjA2QzIxNjA5QzU0Q0UxNkJGOEMuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0I5SDlORE4xRG15NmpGWTRVY0NXYnlvWWF3Q3djcnVFQlBVcnJNVXdRRWtZLzAv
MzQzNTJlMzYyZTMxMzczNjJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMyMzYzNjMx
MzczMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEAi0GsDANBgkqhkiG9w0BAQsFAAOCAQEAMhQ7U5cktfAx
Kc+DjGVIKVDfddbYeWg+nA7AndLm/T2KIs/y1dB4/y+Xe4JC36GY7OJWrpIXrelS
zX0eGJMmVocsO8ZM02iwafDwLkzWCuKxu6w/rJbtJPzu6x8kpm7n1UG0loZgds6l
q4MjTImGDP7tN7fAsbXRKOKuVTqxKlH78dIQFpCKgEG8SgDlPmnTYStmXjYqrfG0
fDPp4k9GxN85FeXSFZrycavfYHqMF8Whsrs0zCYdRQFFqAkaiAVTViANZ76K+mHp
3Oe/niDwm0LqzEOdDsECGh4H842+TH14fhhsh3wikeNnIjht9FtdiP0fFWZIF5gj
CdBwDP0ASw==
-----END CERTIFICATE-----
Generated at Sun Feb 16 21:53:23 2025 by rpki-client