Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BvGzH6Pqd79p339G3eD22s9RTKUygLoNXNEhvNZqzv93/0/34352e3137392e33362e302f32322d3234203d3e20323639303733.roa
File:                     34352e3137392e33362e302f32322d3234203d3e20323639303733.roa (raw, json)
Hash identifier:          1ydgR0EWUeqOGjdBNss64VWpOe/BbFUlID+NmlVt1yw=
Subject key identifier:   48:C4:2D:36:C0:DF:B1:CD:84:4A:C4:46:93:64:60:20:3C:FB:6E:5E
Certificate issuer:       /CN=7C85DCA145843B801E0DE7F701B0084B2991189D
Certificate serial:       41B2605C5933FD504DAD02E9F3A08B86F42C9191
Authority key identifier: 7C:85:DC:A1:45:84:3B:80:1E:0D:E7:F7:01:B0:08:4B:29:91:18:9D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7C85DCA145843B801E0DE7F701B0084B2991189D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BvGzH6Pqd79p339G3eD22s9RTKUygLoNXNEhvNZqzv93/0/34352e3137392e33362e302f32322d3234203d3e20323639303733.roa
Signing time:             Fri 19 Apr 2024 20:18:42 +0000
ROA not before:           Fri 19 Apr 2024 20:13:42 +0000
ROA not after:            Fri 18 Apr 2025 20:18:42 +0000
asID:                     269073
IP address blocks:        45.179.36.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BvGzH6Pqd79p339G3eD22s9RTKUygLoNXNEhvNZqzv93/0/7C85DCA145843B801E0DE7F701B0084B2991189D.crl
                          rsync://rpki-repo.registro.br/repo/BvGzH6Pqd79p339G3eD22s9RTKUygLoNXNEhvNZqzv93/0/7C85DCA145843B801E0DE7F701B0084B2991189D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7C85DCA145843B801E0DE7F701B0084B2991189D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 16 Jun 2024 19:20:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:b2:60:5c:59:33:fd:50:4d:ad:02:e9:f3:a0:8b:86:f4:2c:91:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7C85DCA145843B801E0DE7F701B0084B2991189D
        Validity
            Not Before: Apr 19 20:13:42 2024 GMT
            Not After : Apr 18 20:18:42 2025 GMT
        Subject: CN=48C42D36C0DFB1CD844AC446936460203CFB6E5E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:13:42:14:7e:2c:a1:11:9f:65:45:0d:59:80:
                    4f:39:d2:9c:88:16:f2:9f:ba:e9:13:a0:ca:68:45:
                    8e:c2:24:33:33:d2:e5:e7:c2:9c:1d:e8:6f:b9:db:
                    c3:a7:33:8d:34:33:74:1a:15:81:63:39:2d:b3:91:
                    b4:cb:6a:06:29:93:1a:8d:1c:0c:da:b0:e9:bd:9a:
                    d0:bb:6a:3f:d7:90:2e:a5:31:8c:3e:4e:3f:67:c7:
                    dd:c9:41:71:d5:fb:a1:fc:df:35:d6:ae:88:91:c9:
                    ab:7c:01:f7:4f:83:a2:64:cb:91:27:b4:f9:01:4d:
                    dc:04:e9:bf:5d:94:44:17:9f:de:59:a4:69:34:8d:
                    41:e5:1e:21:68:c4:e1:24:0e:bd:89:e1:4a:96:41:
                    69:0b:10:e6:f1:a2:7f:09:52:5e:77:d3:96:eb:82:
                    c7:d2:da:74:b3:c9:ff:bd:90:ba:d6:80:d5:af:b5:
                    83:23:39:38:8d:53:73:d3:17:23:1a:be:7d:f2:9e:
                    84:cc:8d:ae:09:ae:eb:c3:3b:06:ca:41:f3:bd:15:
                    8f:ed:c5:1e:2f:99:38:c0:50:15:46:de:c4:e2:b7:
                    ba:a2:e7:3c:15:65:64:00:10:7f:bf:4b:45:b9:bb:
                    77:31:65:fe:65:e5:52:1a:6d:cd:e7:c5:70:71:88:
                    33:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:C4:2D:36:C0:DF:B1:CD:84:4A:C4:46:93:64:60:20:3C:FB:6E:5E
            X509v3 Authority Key Identifier:
                keyid:7C:85:DC:A1:45:84:3B:80:1E:0D:E7:F7:01:B0:08:4B:29:91:18:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BvGzH6Pqd79p339G3eD22s9RTKUygLoNXNEhvNZqzv93/0/7C85DCA145843B801E0DE7F701B0084B2991189D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7C85DCA145843B801E0DE7F701B0084B2991189D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BvGzH6Pqd79p339G3eD22s9RTKUygLoNXNEhvNZqzv93/0/34352e3137392e33362e302f32322d3234203d3e20323639303733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.179.36.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b0:79:2c:45:40:57:be:95:55:bb:ea:18:05:bc:ac:8e:a8:91:
         0f:ea:60:0b:c5:ec:d3:be:17:0e:d9:34:ce:b2:49:af:16:08:
         32:02:ef:2c:86:ed:4c:6d:84:2a:bb:48:89:a0:dc:fc:ff:61:
         d9:8f:27:fa:c7:3f:21:65:b8:3d:ed:3e:75:82:93:11:4b:c3:
         7e:2c:67:9d:07:80:53:68:d0:da:79:fa:05:60:10:41:44:67:
         b4:88:5a:6c:af:70:d8:ee:38:77:c8:22:90:dc:63:d2:81:68:
         47:7d:08:a7:58:b2:3b:7a:2a:88:f8:2c:57:08:8b:2e:46:f4:
         7f:db:f9:5a:55:f9:1d:a6:ee:3b:f8:87:2c:26:39:0c:f2:18:
         a7:8d:26:20:42:e9:2f:37:0d:a3:7a:fa:a1:7e:8d:aa:af:97:
         3b:b0:0e:a8:6f:0a:73:fe:b4:d4:8d:50:b7:23:82:0b:9d:df:
         dc:4f:66:f0:cd:53:22:3f:4a:a3:14:4d:8f:9b:88:6c:d9:96:
         c2:28:0c:c9:69:85:fa:45:cf:06:8d:e4:78:7b:c8:04:43:79:
         93:79:2d:83:19:06:09:a7:5a:c1:24:a1:f2:9d:a3:ad:49:af:
         02:d0:a4:90:11:4f:50:e0:6c:ad:24:8a:b8:7f:c6:f4:67:20:
         fb:3a:74:9f
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUQbJgXFkz/VBNrQLp86CLhvQskZEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0M4NURDQTE0NTg0M0I4MDFFMERFN0Y3MDFCMDA4NEIy
OTkxMTg5RDAeFw0yNDA0MTkyMDEzNDJaFw0yNTA0MTgyMDE4NDJaMDMxMTAvBgNV
BAMTKDQ4QzQyRDM2QzBERkIxQ0Q4NDRBQzQ0NjkzNjQ2MDIwM0NGQjZFNUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCVE0IUfiyhEZ9lRQ1ZgE850pyI
FvKfuukToMpoRY7CJDMz0uXnwpwd6G+528OnM400M3QaFYFjOS2zkbTLagYpkxqN
HAzasOm9mtC7aj/XkC6lMYw+Tj9nx93JQXHV+6H83zXWroiRyat8AfdPg6Jky5En
tPkBTdwE6b9dlEQXn95ZpGk0jUHlHiFoxOEkDr2J4UqWQWkLEObxon8JUl5305br
gsfS2nSzyf+9kLrWgNWvtYMjOTiNU3PTFyMavn3ynoTMja4JruvDOwbKQfO9FY/t
xR4vmTjAUBVG3sTit7qi5zwVZWQAEH+/S0W5u3cxZf5l5VIabc3nxXBxiDMjAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUSMQtNsDfsc2ESsRGk2RgIDz7bl4wHwYDVR0j
BBgwFoAUfIXcoUWEO4AeDef3AbAISymRGJ0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQnZHekg2UHFkNzlwMzM5RzNlRDIyczlSVEtVeWdMb05YTkVodk5acXp2
OTMvMC83Qzg1RENBMTQ1ODQzQjgwMUUwREU3RjcwMUIwMDg0QjI5OTExODlELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzdDODVEQ0ExNDU4NDNCODAx
RTBERTdGNzAxQjAwODRCMjk5MTE4OUQuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0J2R3pINlBxZDc5cDMzOUczZUQyMnM5UlRLVXlnTG9OWE5FaHZOWnF6djkzLzAv
MzQzNTJlMzEzNzM5MmUzMzM2MmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNjM5
MzAzNzMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCLbMkMA0GCSqGSIb3DQEBCwUAA4IBAQCweSxFQFe+
lVW76hgFvKyOqJEP6mALxezTvhcO2TTOskmvFggyAu8shu1MbYQqu0iJoNz8/2HZ
jyf6xz8hZbg97T51gpMRS8N+LGedB4BTaNDaefoFYBBBRGe0iFpsr3DY7jh3yCKQ
3GPSgWhHfQinWLI7eiqI+CxXCIsuRvR/2/laVfkdpu47+IcsJjkM8hinjSYgQukv
Nw2jevqhfo2qr5c7sA6obwpz/rTUjVC3I4ILnd/cT2bwzVMiP0qjFE2Pm4hs2ZbC
KAzJaYX6Rc8GjeR4e8gEQ3mTeS2DGQYJp1rBJKHynaOtSa8C0KSQEU9Q4GytJIq4
f8b0ZyD7OnSf
-----END CERTIFICATE-----
Generated at Sat Jun 15 23:26:07 2024 by rpki-client on console-ams.rpki-client.org