Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ba3idfAfcLggDMCqw9AGLKJ8fxDjaTnmPoq3xisU33Us/1/34352e3232352e3234362e302f32332d3234203d3e20323730343137.roa
File:                     34352e3232352e3234362e302f32332d3234203d3e20323730343137.roa (raw, json)
Hash identifier:          see2/0A31VrRKjZAr8ROsI6Q9MDEtczYqxSppcxbZNI=
Subject key identifier:   75:B9:18:CD:1F:A1:24:4A:E9:0D:83:A8:F7:32:78:25:B7:B8:CF:1B
Certificate issuer:       /CN=4DE454FF1B8BF0DF2AC7FEC8E0AD68782B7D8519
Certificate serial:       44D47A453EE393623BD34853B4C484940AE79249
Authority key identifier: 4D:E4:54:FF:1B:8B:F0:DF:2A:C7:FE:C8:E0:AD:68:78:2B:7D:85:19
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4DE454FF1B8BF0DF2AC7FEC8E0AD68782B7D8519.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ba3idfAfcLggDMCqw9AGLKJ8fxDjaTnmPoq3xisU33Us/1/34352e3232352e3234362e302f32332d3234203d3e20323730343137.roa
Signing time:             Thu 04 Apr 2024 17:07:47 +0000
ROA not before:           Thu 04 Apr 2024 17:02:47 +0000
ROA not after:            Thu 03 Apr 2025 17:07:47 +0000
asID:                     270417
IP address blocks:        45.225.246.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ba3idfAfcLggDMCqw9AGLKJ8fxDjaTnmPoq3xisU33Us/1/4DE454FF1B8BF0DF2AC7FEC8E0AD68782B7D8519.crl
                          rsync://rpki-repo.registro.br/repo/Ba3idfAfcLggDMCqw9AGLKJ8fxDjaTnmPoq3xisU33Us/1/4DE454FF1B8BF0DF2AC7FEC8E0AD68782B7D8519.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4DE454FF1B8BF0DF2AC7FEC8E0AD68782B7D8519.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 17:36:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:d4:7a:45:3e:e3:93:62:3b:d3:48:53:b4:c4:84:94:0a:e7:92:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4DE454FF1B8BF0DF2AC7FEC8E0AD68782B7D8519
        Validity
            Not Before: Apr  4 17:02:47 2024 GMT
            Not After : Apr  3 17:07:47 2025 GMT
        Subject: CN=75B918CD1FA1244AE90D83A8F7327825B7B8CF1B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:66:72:2b:ce:d2:87:f5:fe:49:17:ed:2b:e7:
                    67:fa:c2:85:5a:49:47:fb:aa:b7:15:4d:20:fa:ea:
                    e6:8b:cf:7e:9b:46:e6:5d:58:bc:23:b3:3b:f5:93:
                    12:ad:0d:77:a9:26:4e:3d:46:e0:73:7e:1b:36:44:
                    29:04:5c:b6:eb:99:0a:1a:cc:8d:1e:1d:d9:87:52:
                    e9:29:f8:ce:01:7a:8a:e5:fe:27:c8:7c:f4:2f:8b:
                    43:e9:a3:0f:61:ac:bf:ac:92:5a:e8:ee:27:8a:7b:
                    88:fd:56:a4:97:82:fd:97:f0:87:1a:24:3b:00:86:
                    9c:37:22:27:c8:a6:6b:01:71:88:20:75:26:cf:8a:
                    6a:6d:e6:af:cb:3f:3d:f2:e0:5e:10:20:f2:de:ce:
                    70:d1:78:d7:01:a0:22:45:51:4a:00:58:bf:83:9f:
                    7e:a9:1d:d6:bc:ae:c6:81:3d:da:61:5c:0f:23:43:
                    21:0b:8c:58:77:96:49:d1:ff:03:0d:9f:25:9a:ac:
                    b7:b9:b6:53:66:78:66:3c:f0:09:a6:b8:80:ee:e3:
                    62:e6:fc:15:92:b1:1b:99:f8:99:4f:89:a0:3e:dd:
                    5d:86:d1:17:6b:83:1f:29:be:1b:b9:d5:36:f0:74:
                    b9:7b:42:56:3c:d8:71:12:ad:f3:57:21:f3:c5:85:
                    55:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:B9:18:CD:1F:A1:24:4A:E9:0D:83:A8:F7:32:78:25:B7:B8:CF:1B
            X509v3 Authority Key Identifier:
                keyid:4D:E4:54:FF:1B:8B:F0:DF:2A:C7:FE:C8:E0:AD:68:78:2B:7D:85:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ba3idfAfcLggDMCqw9AGLKJ8fxDjaTnmPoq3xisU33Us/1/4DE454FF1B8BF0DF2AC7FEC8E0AD68782B7D8519.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4DE454FF1B8BF0DF2AC7FEC8E0AD68782B7D8519.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ba3idfAfcLggDMCqw9AGLKJ8fxDjaTnmPoq3xisU33Us/1/34352e3232352e3234362e302f32332d3234203d3e20323730343137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.225.246.0/23

    Signature Algorithm: sha256WithRSAEncryption
         72:8e:36:e1:7c:cc:48:e1:a2:70:bd:30:20:1e:ac:65:89:48:
         26:f9:5d:cd:e6:45:12:a8:6d:af:0e:6a:f5:1e:54:9b:24:92:
         52:34:9a:ae:b3:3c:aa:25:be:1e:68:0b:24:a8:5a:c6:84:68:
         72:a4:80:d2:57:ca:36:fb:cb:8a:14:25:17:20:c6:1a:4d:ea:
         4c:e2:93:20:92:57:7b:8e:35:b5:3f:29:0e:24:a1:2d:aa:93:
         77:f6:d6:a5:2f:28:56:cc:b2:fe:14:53:a6:55:5a:10:2c:7f:
         b4:e8:2d:bd:5e:c6:22:c8:58:1a:35:c0:df:6f:15:21:0b:24:
         df:8e:52:ca:22:25:77:e4:15:87:2f:b9:d4:ef:ae:48:7d:40:
         d7:e3:63:ba:17:d8:b9:b6:ad:2a:7a:9e:0a:09:e5:9c:9c:75:
         2b:e3:02:b5:9a:1e:a0:61:b0:7f:d6:f0:82:ca:7e:22:9f:b1:
         42:c9:1a:da:1f:5e:cb:64:33:e4:84:ca:8b:b3:f4:82:e2:24:
         e9:97:34:82:c4:2d:a1:1c:c0:d7:85:bf:40:df:68:23:12:02:
         67:dc:16:7f:1a:11:1d:8d:d1:d3:02:a3:80:0f:a7:fd:93:de:
         8e:3f:a2:3c:7b:5e:b1:7b:13:65:77:ec:5f:aa:4f:97:02:4d:
         fc:1c:e1:d4
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIURNR6RT7jk2I700hTtMSElArnkkkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNERFNDU0RkYxQjhCRjBERjJBQzdGRUM4RTBBRDY4Nzgy
QjdEODUxOTAeFw0yNDA0MDQxNzAyNDdaFw0yNTA0MDMxNzA3NDdaMDMxMTAvBgNV
BAMTKDc1QjkxOENEMUZBMTI0NEFFOTBEODNBOEY3MzI3ODI1QjdCOENGMUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgZnIrztKH9f5JF+0r52f6woVa
SUf7qrcVTSD66uaLz36bRuZdWLwjszv1kxKtDXepJk49RuBzfhs2RCkEXLbrmQoa
zI0eHdmHUukp+M4Beorl/ifIfPQvi0Ppow9hrL+sklro7ieKe4j9VqSXgv2X8Ica
JDsAhpw3IifIpmsBcYggdSbPimpt5q/LPz3y4F4QIPLeznDReNcBoCJFUUoAWL+D
n36pHda8rsaBPdphXA8jQyELjFh3lknR/wMNnyWarLe5tlNmeGY88AmmuIDu42Lm
/BWSsRuZ+JlPiaA+3V2G0Rdrgx8pvhu51TbwdLl7QlY82HESrfNXIfPFhVW7AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUdbkYzR+hJErpDYOo9zJ4Jbe4zxswHwYDVR0j
BBgwFoAUTeRU/xuL8N8qx/7I4K1oeCt9hRkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQmEzaWRmQWZjTGdnRE1DcXc5QUdMS0o4ZnhEamFUbm1Qb3EzeGlzVTMz
VXMvMS80REU0NTRGRjFCOEJGMERGMkFDN0ZFQzhFMEFENjg3ODJCN0Q4NTE5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzRERTQ1NEZGMUI4QkYwREYy
QUM3RkVDOEUwQUQ2ODc4MkI3RDg1MTkuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0JhM2lkZkFmY0xnZ0RNQ3F3OUFHTEtKOGZ4RGphVG5tUG9xM3hpc1UzM1VzLzEv
MzQzNTJlMzIzMjM1MmUzMjM0MzYyZTMwMmYzMjMzMmQzMjM0MjAzZDNlMjAzMjM3
MzAzNDMxMzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAEt4fYwDQYJKoZIhvcNAQELBQADggEBAHKONuF8
zEjhonC9MCAerGWJSCb5Xc3mRRKoba8OavUeVJskklI0mq6zPKolvh5oCySoWsaE
aHKkgNJXyjb7y4oUJRcgxhpN6kzikyCSV3uONbU/KQ4koS2qk3f21qUvKFbMsv4U
U6ZVWhAsf7ToLb1exiLIWBo1wN9vFSELJN+OUsoiJXfkFYcvudTvrkh9QNfjY7oX
2Lm2rSp6ngoJ5ZycdSvjArWaHqBhsH/W8ILKfiKfsULJGtofXstkM+SEyouz9ILi
JOmXNILELaEcwNeFv0DfaCMSAmfcFn8aER2N0dMCo4APp/2T3o4/ojx7XrF7E2V3
7F+qT5cCTfwc4dQ=
-----END CERTIFICATE-----
Generated at Fri Nov 22 17:50:29 2024 by rpki-client on console-fra.rpki-client.org