Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Bbd3dczZLozaqUhFgrU2bTiA7j7jKozTGgERdz8o2bhn/0/34352e3233372e342e302f32322d3234203d3e20323638323932.roa
File:                     34352e3233372e342e302f32322d3234203d3e20323638323932.roa (raw, json)
Hash identifier:          eeoAW50v+vw7gZxyacv3npxzwcpubUxfU+XpMQahwnM=
Subject key identifier:   80:E3:A2:3A:65:F2:9F:88:79:0A:AC:C8:44:7E:0F:B5:66:F4:CC:FD
Certificate issuer:       /CN=9965B1E2931C94CDA03CB63EF3A6CAE33BC15E87
Certificate serial:       7E4C9B9A3E917C8F1157F40E8ACA8FA7B55BDFED
Authority key identifier: 99:65:B1:E2:93:1C:94:CD:A0:3C:B6:3E:F3:A6:CA:E3:3B:C1:5E:87
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9965B1E2931C94CDA03CB63EF3A6CAE33BC15E87.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Bbd3dczZLozaqUhFgrU2bTiA7j7jKozTGgERdz8o2bhn/0/34352e3233372e342e302f32322d3234203d3e20323638323932.roa
Signing time:             Thu 18 Apr 2024 12:25:52 +0000
ROA not before:           Thu 18 Apr 2024 12:20:52 +0000
ROA not after:            Thu 17 Apr 2025 12:25:52 +0000
asID:                     268292
IP address blocks:        45.237.4.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Bbd3dczZLozaqUhFgrU2bTiA7j7jKozTGgERdz8o2bhn/0/9965B1E2931C94CDA03CB63EF3A6CAE33BC15E87.crl
                          rsync://rpki-repo.registro.br/repo/Bbd3dczZLozaqUhFgrU2bTiA7j7jKozTGgERdz8o2bhn/0/9965B1E2931C94CDA03CB63EF3A6CAE33BC15E87.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9965B1E2931C94CDA03CB63EF3A6CAE33BC15E87.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 02:42:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:4c:9b:9a:3e:91:7c:8f:11:57:f4:0e:8a:ca:8f:a7:b5:5b:df:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9965B1E2931C94CDA03CB63EF3A6CAE33BC15E87
        Validity
            Not Before: Apr 18 12:20:52 2024 GMT
            Not After : Apr 17 12:25:52 2025 GMT
        Subject: CN=80E3A23A65F29F88790AACC8447E0FB566F4CCFD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:ed:cb:85:98:2c:4b:41:72:ca:89:f4:dd:18:
                    4e:e4:ab:fc:3f:f1:e2:f0:c2:8f:d9:78:19:37:c2:
                    b2:d7:c4:79:c8:f9:5d:11:54:79:66:e8:82:19:36:
                    62:4c:43:2b:b1:f8:3a:cb:a7:d8:20:fb:74:be:e1:
                    12:9f:33:fa:59:44:00:a5:37:1b:e6:77:f4:e9:b6:
                    2a:40:b5:0c:f6:fe:3f:d4:e8:8c:9c:f0:4f:c2:04:
                    46:2a:27:6c:61:2f:fa:49:2e:d7:80:d0:c4:88:dc:
                    d1:4a:c6:a1:61:d4:5f:a5:f2:5b:7f:d7:00:00:9b:
                    b3:77:6a:31:6b:02:20:ea:f5:54:a2:6f:9c:44:2e:
                    98:60:94:93:bc:ae:47:20:73:d7:73:c0:be:36:77:
                    c9:c8:17:ae:1f:3c:d1:5d:33:e5:bb:8d:bd:5e:d8:
                    da:2b:81:b9:73:9a:af:06:14:2d:a1:22:c5:c3:2c:
                    4e:72:5b:81:77:c9:0b:3c:4d:db:0c:98:1a:7b:cd:
                    7a:fd:bf:25:72:5f:6a:66:97:82:12:4c:0c:43:75:
                    61:fc:18:8d:9e:7d:f3:12:5a:58:34:cc:5b:2f:47:
                    23:1f:dc:d4:16:75:86:c4:d8:f2:ca:87:38:cb:cf:
                    81:92:aa:6d:14:83:a9:12:1b:f6:85:95:1d:d3:5e:
                    cc:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:E3:A2:3A:65:F2:9F:88:79:0A:AC:C8:44:7E:0F:B5:66:F4:CC:FD
            X509v3 Authority Key Identifier:
                keyid:99:65:B1:E2:93:1C:94:CD:A0:3C:B6:3E:F3:A6:CA:E3:3B:C1:5E:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Bbd3dczZLozaqUhFgrU2bTiA7j7jKozTGgERdz8o2bhn/0/9965B1E2931C94CDA03CB63EF3A6CAE33BC15E87.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9965B1E2931C94CDA03CB63EF3A6CAE33BC15E87.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Bbd3dczZLozaqUhFgrU2bTiA7j7jKozTGgERdz8o2bhn/0/34352e3233372e342e302f32322d3234203d3e20323638323932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.237.4.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8d:35:af:f6:53:29:69:ae:e0:9f:20:15:e8:16:eb:0f:a1:25:
         6c:4d:a3:39:d0:ed:35:32:01:56:d1:81:0a:eb:30:a7:50:f9:
         89:80:47:e9:9e:45:53:cc:7d:4a:59:27:d1:3a:21:7d:7e:ba:
         99:d3:c6:2f:0e:3e:8a:9a:1b:84:cd:71:3c:f8:b5:5f:d6:0e:
         ba:78:2b:95:4f:92:fa:50:b1:64:fa:83:93:0a:9d:11:e7:a3:
         4e:cb:9c:85:c7:23:c3:09:40:97:93:e5:8f:19:cc:15:d7:ea:
         12:2e:2b:d4:2c:8c:3b:45:ee:9b:a9:54:36:c1:36:02:26:c4:
         e6:e4:6f:4a:15:60:15:53:b1:e5:f5:a4:d7:99:8f:73:a3:c4:
         71:51:e6:d3:84:e0:83:02:c2:e5:af:ea:db:46:7c:65:63:dc:
         37:e0:dc:34:18:ec:5f:9c:f9:06:0c:1d:9d:08:0c:b2:cb:7c:
         a1:7a:c7:84:25:92:17:af:da:95:01:92:e5:fb:f3:c0:54:61:
         e2:17:a2:89:d2:3a:dc:fc:74:47:5c:d5:24:6b:a5:5b:74:7a:
         13:f9:24:a8:4a:77:33:6e:4c:0d:fe:e8:1f:62:f7:c9:fa:a8:
         e9:ee:9c:86:8f:31:d8:7b:27:19:c7:ab:76:be:d0:8c:a7:3c:
         f4:87:c6:3b
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUfkybmj6RfI8RV/QOisqPp7Vb3+0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTk2NUIxRTI5MzFDOTRDREEwM0NCNjNFRjNBNkNBRTMz
QkMxNUU4NzAeFw0yNDA0MTgxMjIwNTJaFw0yNTA0MTcxMjI1NTJaMDMxMTAvBgNV
BAMTKDgwRTNBMjNBNjVGMjlGODg3OTBBQUNDODQ0N0UwRkI1NjZGNENDRkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCk7cuFmCxLQXLKifTdGE7kq/w/
8eLwwo/ZeBk3wrLXxHnI+V0RVHlm6IIZNmJMQyux+DrLp9gg+3S+4RKfM/pZRACl
Nxvmd/TptipAtQz2/j/U6Iyc8E/CBEYqJ2xhL/pJLteA0MSI3NFKxqFh1F+l8lt/
1wAAm7N3ajFrAiDq9VSib5xELphglJO8rkcgc9dzwL42d8nIF64fPNFdM+W7jb1e
2Norgblzmq8GFC2hIsXDLE5yW4F3yQs8TdsMmBp7zXr9vyVyX2pml4ISTAxDdWH8
GI2effMSWlg0zFsvRyMf3NQWdYbE2PLKhzjLz4GSqm0Ug6kSG/aFlR3TXsxXAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUgOOiOmXyn4h5CqzIRH4PtWb0zP0wHwYDVR0j
BBgwFoAUmWWx4pMclM2gPLY+86bK4zvBXocwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQmJkM2RjelpMb3phcVVoRmdyVTJiVGlBN2o3aktvelRHZ0VSZHo4bzJi
aG4vMC85OTY1QjFFMjkzMUM5NENEQTAzQ0I2M0VGM0E2Q0FFMzNCQzE1RTg3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzk5NjVCMUUyOTMxQzk0Q0RB
MDNDQjYzRUYzQTZDQUUzM0JDMTVFODcuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0JiZDNkY3paTG96YXFVaEZnclUyYlRpQTdqN2pLb3pUR2dFUmR6OG8yYmhuLzAv
MzQzNTJlMzIzMzM3MmUzNDJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMyMzYzODMy
MzkzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEAi3tBDANBgkqhkiG9w0BAQsFAAOCAQEAjTWv9lMpaa7g
nyAV6BbrD6ElbE2jOdDtNTIBVtGBCuswp1D5iYBH6Z5FU8x9Slkn0TohfX66mdPG
Lw4+ipobhM1xPPi1X9YOungrlU+S+lCxZPqDkwqdEeejTsuchccjwwlAl5PljxnM
FdfqEi4r1CyMO0Xum6lUNsE2AibE5uRvShVgFVOx5fWk15mPc6PEcVHm04TggwLC
5a/q20Z8ZWPcN+DcNBjsX5z5BgwdnQgMsst8oXrHhCWSF6/alQGS5fvzwFRh4hei
idI63Px0R1zVJGulW3R6E/kkqEp3M25MDf7oH2L3yfqo6e6cho8x2HsnGcerdr7Q
jKc89IfGOw==
-----END CERTIFICATE-----
Generated at Sat Nov 23 05:01:00 2024 by rpki-client on console-fra.rpki-client.org