Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BmEm8ExER7rrs7FrSJBP6DkKqwvkK65hVds3jU3GLrwX/0/34352e3138302e3133362e302f32322d3234203d3e20323639313336.roa
File:                     34352e3138302e3133362e302f32322d3234203d3e20323639313336.roa (raw, json)
Hash identifier:          e8dyrtakQI49meoRNLDC6nVUnRjWBHsTFBUHAcpiioY=
Subject key identifier:   E2:CF:61:A7:47:28:49:DF:26:30:1D:01:13:84:64:48:86:BC:82:16
Certificate issuer:       /CN=6D116F9E3C733D36B8C998049E0A509BB6C59F78
Certificate serial:       5AE22226F77EE5E316657275C822EE25EF1ADFAB
Authority key identifier: 6D:11:6F:9E:3C:73:3D:36:B8:C9:98:04:9E:0A:50:9B:B6:C5:9F:78
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6D116F9E3C733D36B8C998049E0A509BB6C59F78.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BmEm8ExER7rrs7FrSJBP6DkKqwvkK65hVds3jU3GLrwX/0/34352e3138302e3133362e302f32322d3234203d3e20323639313336.roa
Signing time:             Tue 12 Nov 2024 18:14:34 +0000
ROA not before:           Tue 12 Nov 2024 18:09:34 +0000
ROA not after:            Tue 11 Nov 2025 18:14:34 +0000
asID:                     269136
IP address blocks:        45.180.136.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BmEm8ExER7rrs7FrSJBP6DkKqwvkK65hVds3jU3GLrwX/0/6D116F9E3C733D36B8C998049E0A509BB6C59F78.crl
                          rsync://rpki-repo.registro.br/repo/BmEm8ExER7rrs7FrSJBP6DkKqwvkK65hVds3jU3GLrwX/0/6D116F9E3C733D36B8C998049E0A509BB6C59F78.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6D116F9E3C733D36B8C998049E0A509BB6C59F78.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 12:44:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:e2:22:26:f7:7e:e5:e3:16:65:72:75:c8:22:ee:25:ef:1a:df:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6D116F9E3C733D36B8C998049E0A509BB6C59F78
        Validity
            Not Before: Nov 12 18:09:34 2024 GMT
            Not After : Nov 11 18:14:34 2025 GMT
        Subject: CN=E2CF61A7472849DF26301D011384644886BC8216
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:cb:db:31:a5:5d:27:c7:94:47:86:09:60:b9:
                    4f:b9:48:44:66:27:b3:c1:46:6e:0f:6a:e6:84:3e:
                    6d:22:b4:d5:80:69:b2:6e:00:75:a7:f4:76:9c:bc:
                    bd:41:f9:c2:37:39:73:27:7d:d0:55:6f:63:6b:10:
                    f1:a4:66:f8:72:d0:ad:44:f9:0b:03:b5:d3:6e:79:
                    40:68:b8:fa:38:85:d7:8a:a0:b8:b1:6a:42:3e:e6:
                    12:a7:06:15:6e:91:f3:26:26:1f:14:2e:2e:84:99:
                    e1:ec:7e:dd:33:f8:68:b1:83:09:8b:af:59:d7:b4:
                    d5:38:7e:a7:50:cf:d1:64:4d:1c:ea:90:3c:17:67:
                    97:8f:1f:83:a3:5b:99:7e:be:3d:fe:bc:fe:ae:42:
                    97:ab:53:1a:1c:e8:97:36:91:d1:6a:34:aa:b0:e7:
                    86:05:3b:24:ad:f3:19:0e:13:f3:ad:77:66:66:bd:
                    f0:77:95:11:e1:7c:1a:2a:d7:85:47:75:9a:51:fe:
                    ba:e6:01:c2:c8:5d:68:40:4d:c4:14:ae:19:c7:c2:
                    b1:a2:e8:5b:b0:52:52:8d:9a:b3:9d:63:21:8c:9b:
                    b7:1b:ab:d8:5e:55:2c:6a:b3:55:2d:1b:82:17:ac:
                    b8:a8:0f:c6:48:74:12:d6:0d:e3:7b:72:ab:90:72:
                    f2:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:CF:61:A7:47:28:49:DF:26:30:1D:01:13:84:64:48:86:BC:82:16
            X509v3 Authority Key Identifier:
                keyid:6D:11:6F:9E:3C:73:3D:36:B8:C9:98:04:9E:0A:50:9B:B6:C5:9F:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BmEm8ExER7rrs7FrSJBP6DkKqwvkK65hVds3jU3GLrwX/0/6D116F9E3C733D36B8C998049E0A509BB6C59F78.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6D116F9E3C733D36B8C998049E0A509BB6C59F78.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BmEm8ExER7rrs7FrSJBP6DkKqwvkK65hVds3jU3GLrwX/0/34352e3138302e3133362e302f32322d3234203d3e20323639313336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.180.136.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5c:ae:34:a7:01:ae:5e:74:3a:c7:99:a8:65:8a:68:8b:19:8f:
         28:3b:a4:82:33:a6:16:1a:21:5a:cc:7f:55:48:69:31:ec:88:
         89:7d:28:5a:15:38:ab:b1:71:f2:b7:cd:3e:ec:b6:e0:f9:fb:
         27:bf:86:d5:02:fb:57:76:72:38:de:f0:b1:b2:06:26:14:85:
         2e:90:66:94:4f:1c:a7:d7:54:22:c4:e6:a2:43:08:96:2d:bb:
         ef:78:0c:f6:e1:5f:04:a4:b5:7f:24:1b:44:8c:33:c9:18:5b:
         80:c9:1b:0f:0e:78:50:f2:b3:7d:1d:6a:87:3c:35:f5:34:ea:
         22:a1:99:34:3b:80:5a:d9:1e:2b:4a:50:18:32:da:19:ef:5d:
         79:42:73:11:bc:8c:2f:92:55:35:e4:54:10:a6:05:6d:6c:06:
         71:ed:63:d4:a3:e7:8a:be:65:2a:ed:26:45:20:b4:10:98:1b:
         18:2f:26:89:d8:24:17:52:d1:7e:66:68:0d:7b:a9:c2:1b:b9:
         72:6e:f4:b7:3d:16:82:23:c1:a2:9b:4f:3b:ee:2d:f7:63:18:
         b6:4f:08:fe:ff:62:85:c3:74:47:d2:8e:d5:49:5c:ba:96:6c:
         ca:10:8e:4c:d0:a6:10:ab:9f:02:3d:bf:4b:57:a5:04:03:6e:
         60:31:57:a6
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUWuIiJvd+5eMWZXJ1yCLuJe8a36swDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkQxMTZGOUUzQzczM0QzNkI4Qzk5ODA0OUUwQTUwOUJC
NkM1OUY3ODAeFw0yNDExMTIxODA5MzRaFw0yNTExMTExODE0MzRaMDMxMTAvBgNV
BAMTKEUyQ0Y2MUE3NDcyODQ5REYyNjMwMUQwMTEzODQ2NDQ4ODZCQzgyMTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcy9sxpV0nx5RHhglguU+5SERm
J7PBRm4PauaEPm0itNWAabJuAHWn9HacvL1B+cI3OXMnfdBVb2NrEPGkZvhy0K1E
+QsDtdNueUBouPo4hdeKoLixakI+5hKnBhVukfMmJh8ULi6EmeHsft0z+GixgwmL
r1nXtNU4fqdQz9FkTRzqkDwXZ5ePH4OjW5l+vj3+vP6uQperUxoc6Jc2kdFqNKqw
54YFOySt8xkOE/Otd2ZmvfB3lRHhfBoq14VHdZpR/rrmAcLIXWhATcQUrhnHwrGi
6FuwUlKNmrOdYyGMm7cbq9heVSxqs1UtG4IXrLioD8ZIdBLWDeN7cquQcvIrAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU4s9hp0coSd8mMB0BE4RkSIa8ghYwHwYDVR0j
BBgwFoAUbRFvnjxzPTa4yZgEngpQm7bFn3gwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQm1FbThFeEVSN3JyczdGclNKQlA2RGtLcXd2a0s2NWhWZHMzalUzR0xy
d1gvMC82RDExNkY5RTNDNzMzRDM2QjhDOTk4MDQ5RTBBNTA5QkI2QzU5Rjc4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzZEMTE2RjlFM0M3MzNEMzZC
OEM5OTgwNDlFMEE1MDlCQjZDNTlGNzguY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0JtRW04RXhFUjdycnM3RnJTSkJQNkRrS3F3dmtLNjVoVmRzM2pVM0dMcndYLzAv
MzQzNTJlMzEzODMwMmUzMTMzMzYyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM2
MzkzMTMzMzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAIttIgwDQYJKoZIhvcNAQELBQADggEBAFyuNKcB
rl50OseZqGWKaIsZjyg7pIIzphYaIVrMf1VIaTHsiIl9KFoVOKuxcfK3zT7stuD5
+ye/htUC+1d2cjje8LGyBiYUhS6QZpRPHKfXVCLE5qJDCJYtu+94DPbhXwSktX8k
G0SMM8kYW4DJGw8OeFDys30daoc8NfU06iKhmTQ7gFrZHitKUBgy2hnvXXlCcxG8
jC+SVTXkVBCmBW1sBnHtY9Sj54q+ZSrtJkUgtBCYGxgvJonYJBdS0X5maA17qcIb
uXJu9Lc9FoIjwaKbTzvuLfdjGLZPCP7/YoXDdEfSjtVJXLqWbMoQjkzQphCrnwI9
v0tXpQQDbmAxV6Y=
-----END CERTIFICATE-----
Generated at Mon Nov 25 13:02:17 2024 by rpki-client on console-fra.rpki-client.org