Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BKZpT4mAJ6B2ztjyWUk3jgQnY4FNixzSGoLWGzfuNaew/1/34352e3233312e3234352e302f32342d3234203d3e20323637323239.roa
File:                     34352e3233312e3234352e302f32342d3234203d3e20323637323239.roa (raw, json)
Hash identifier:          behxjsdyXVNflapssHl4OwrQZc3PE65aqwdGoMVvpFQ=
Subject key identifier:   88:14:6C:6C:67:E7:6F:FC:D8:25:EC:82:7E:84:06:B4:A3:74:4C:2E
Certificate issuer:       /CN=65D261ADDE2DA8D5A8D0F709C380A3D96DDCBA35
Certificate serial:       5B90D0ECF9E374399C9EBC1E1509BB056FD966ED
Authority key identifier: 65:D2:61:AD:DE:2D:A8:D5:A8:D0:F7:09:C3:80:A3:D9:6D:DC:BA:35
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/65D261ADDE2DA8D5A8D0F709C380A3D96DDCBA35.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BKZpT4mAJ6B2ztjyWUk3jgQnY4FNixzSGoLWGzfuNaew/1/34352e3233312e3234352e302f32342d3234203d3e20323637323239.roa
Signing time:             Thu 04 Apr 2024 10:48:51 +0000
ROA not before:           Thu 04 Apr 2024 10:43:51 +0000
ROA not after:            Thu 03 Apr 2025 10:48:51 +0000
asID:                     267229
IP address blocks:        45.231.245.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BKZpT4mAJ6B2ztjyWUk3jgQnY4FNixzSGoLWGzfuNaew/1/65D261ADDE2DA8D5A8D0F709C380A3D96DDCBA35.crl
                          rsync://rpki-repo.registro.br/repo/BKZpT4mAJ6B2ztjyWUk3jgQnY4FNixzSGoLWGzfuNaew/1/65D261ADDE2DA8D5A8D0F709C380A3D96DDCBA35.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/65D261ADDE2DA8D5A8D0F709C380A3D96DDCBA35.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 19:08:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:90:d0:ec:f9:e3:74:39:9c:9e:bc:1e:15:09:bb:05:6f:d9:66:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65D261ADDE2DA8D5A8D0F709C380A3D96DDCBA35
        Validity
            Not Before: Apr  4 10:43:51 2024 GMT
            Not After : Apr  3 10:48:51 2025 GMT
        Subject: CN=88146C6C67E76FFCD825EC827E8406B4A3744C2E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:ad:ef:45:67:c3:3f:31:54:86:e2:9a:38:e0:
                    e6:84:56:05:37:7e:16:cf:a7:00:a0:c7:33:1d:eb:
                    8c:53:df:5d:e7:44:d3:77:49:0b:3d:42:62:f2:b5:
                    b2:64:3a:d3:2a:ef:2e:77:51:d7:3d:fe:ee:72:00:
                    c0:6b:d4:e0:12:ce:21:26:49:b7:b4:b6:42:d1:a6:
                    e5:d6:dc:a0:87:ad:2a:44:23:89:b5:f2:8b:b3:eb:
                    e9:ea:b9:ff:02:f2:01:1e:ad:67:25:c1:dc:ca:2b:
                    d6:03:d7:ef:bb:19:4c:ee:13:9b:d3:e8:d3:9f:e0:
                    b2:1f:c3:40:e3:ea:ad:fb:b4:a2:4c:13:be:1e:50:
                    51:c4:ed:61:77:1f:af:97:9a:90:cd:f4:fd:61:f7:
                    ef:cb:98:e3:dd:37:38:b7:4c:d2:e0:6f:bb:e6:28:
                    3a:99:7e:54:81:05:cc:e1:2f:dc:5b:64:47:c3:a5:
                    f6:89:3b:d5:24:80:35:8a:b7:98:93:77:4d:4f:2c:
                    56:e5:30:71:0b:fb:9a:c4:5b:60:67:55:19:8a:81:
                    5e:ba:3c:e0:5f:88:35:50:86:ad:00:85:6c:f4:7b:
                    cd:9c:2d:37:0a:2f:34:96:eb:7e:f5:40:fd:32:f7:
                    b8:01:ad:78:6a:9a:71:ee:43:70:88:22:fa:31:cb:
                    34:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:14:6C:6C:67:E7:6F:FC:D8:25:EC:82:7E:84:06:B4:A3:74:4C:2E
            X509v3 Authority Key Identifier:
                keyid:65:D2:61:AD:DE:2D:A8:D5:A8:D0:F7:09:C3:80:A3:D9:6D:DC:BA:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BKZpT4mAJ6B2ztjyWUk3jgQnY4FNixzSGoLWGzfuNaew/1/65D261ADDE2DA8D5A8D0F709C380A3D96DDCBA35.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/65D261ADDE2DA8D5A8D0F709C380A3D96DDCBA35.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BKZpT4mAJ6B2ztjyWUk3jgQnY4FNixzSGoLWGzfuNaew/1/34352e3233312e3234352e302f32342d3234203d3e20323637323239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.231.245.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8f:34:5a:b9:47:1e:1a:88:22:32:e3:fb:38:ce:88:86:6f:a9:
         88:14:b2:bd:9b:50:33:94:e4:25:a8:36:58:19:a1:5a:7f:8b:
         9b:f6:d3:c6:82:0e:66:a2:a4:39:20:23:5d:17:62:2a:a6:69:
         8c:74:75:df:aa:27:4e:83:56:92:b0:5c:89:73:78:cf:99:79:
         dc:71:a3:25:ca:58:fe:c6:cf:59:7b:b3:d8:d3:ff:33:79:2a:
         cc:ca:ab:16:a8:5e:ed:ee:37:8b:16:6b:1f:82:30:9f:2e:39:
         6e:8b:4f:89:ee:6f:c3:c2:15:89:f9:84:38:70:9c:ca:9c:0a:
         be:5d:1d:d9:87:23:a8:ef:d4:34:73:46:a8:ea:1a:6f:8c:af:
         95:b9:8f:69:ef:e8:c2:66:c2:bf:3c:37:a5:8d:33:29:d4:d9:
         f6:9d:7a:b2:be:7d:09:5b:53:37:83:eb:2a:8a:34:ca:03:d2:
         d7:b6:30:90:ba:d4:bd:e2:01:53:75:53:21:f4:f2:00:b2:16:
         dd:53:0d:32:44:8b:b6:bb:c9:f5:0f:7b:c7:20:83:1a:78:64:
         1c:fe:0e:f2:2c:1f:18:29:a1:ff:23:e1:e9:de:03:36:f7:15:
         3a:ef:5e:8e:0c:fd:86:8e:98:e9:5d:29:39:4a:ce:86:ac:24:
         b3:39:09:09
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUW5DQ7PnjdDmcnrweFQm7BW/ZZu0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjVEMjYxQURERTJEQThENUE4RDBGNzA5QzM4MEEzRDk2
RERDQkEzNTAeFw0yNDA0MDQxMDQzNTFaFw0yNTA0MDMxMDQ4NTFaMDMxMTAvBgNV
BAMTKDg4MTQ2QzZDNjdFNzZGRkNEODI1RUM4MjdFODQwNkI0QTM3NDRDMkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIre9FZ8M/MVSG4po44OaEVgU3
fhbPpwCgxzMd64xT313nRNN3SQs9QmLytbJkOtMq7y53Udc9/u5yAMBr1OASziEm
Sbe0tkLRpuXW3KCHrSpEI4m18ouz6+nquf8C8gEerWclwdzKK9YD1++7GUzuE5vT
6NOf4LIfw0Dj6q37tKJME74eUFHE7WF3H6+XmpDN9P1h9+/LmOPdNzi3TNLgb7vm
KDqZflSBBczhL9xbZEfDpfaJO9UkgDWKt5iTd01PLFblMHEL+5rEW2BnVRmKgV66
POBfiDVQhq0AhWz0e82cLTcKLzSW6371QP0y97gBrXhqmnHuQ3CIIvoxyzSdAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUiBRsbGfnb/zYJeyCfoQGtKN0TC4wHwYDVR0j
BBgwFoAUZdJhrd4tqNWo0PcJw4Cj2W3cujUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQktacFQ0bUFKNkIyenRqeVdVazNqZ1FuWTRGTml4elNHb0xXR3pmdU5h
ZXcvMS82NUQyNjFBRERFMkRBOEQ1QThEMEY3MDlDMzgwQTNEOTZERENCQTM1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzY1RDI2MUFEREUyREE4RDVB
OEQwRjcwOUMzODBBM0Q5NkREQ0JBMzUuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0JLWnBUNG1BSjZCMnp0anlXVWszamdRblk0Rk5peHpTR29MV0d6ZnVOYWV3LzEv
MzQzNTJlMzIzMzMxMmUzMjM0MzUyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzczMjMyMzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAAt5/UwDQYJKoZIhvcNAQELBQADggEBAI80WrlH
HhqIIjLj+zjOiIZvqYgUsr2bUDOU5CWoNlgZoVp/i5v208aCDmaipDkgI10XYiqm
aYx0dd+qJ06DVpKwXIlzeM+ZedxxoyXKWP7Gz1l7s9jT/zN5KszKqxaoXu3uN4sW
ax+CMJ8uOW6LT4nub8PCFYn5hDhwnMqcCr5dHdmHI6jv1DRzRqjqGm+Mr5W5j2nv
6MJmwr88N6WNMynU2faderK+fQlbUzeD6yqKNMoD0te2MJC61L3iAVN1UyH08gCy
Ft1TDTJEi7a7yfUPe8cggxp4ZBz+DvIsHxgpof8j4eneAzb3FTrvXo4M/YaOmOld
KTlKzoasJLM5CQk=
-----END CERTIFICATE-----
Generated at Fri Nov 22 19:42:18 2024 by rpki-client on console-fra.rpki-client.org