Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C4dg6LHipG4m96jHkH5CUa3aWVMqjbnZEAhwYMojnoPs/0/34352e3137362e38302e302f32342d3234203d3e20323639303131.roa
File:                     34352e3137362e38302e302f32342d3234203d3e20323639303131.roa (raw, json)
Hash identifier:          PMtWa4lU++T76slQAT6jOhAbpgP+iccxJCsA0TqEiLI=
Subject key identifier:   9F:6C:29:44:EA:D3:18:41:DF:55:3D:90:15:A1:94:0D:EE:5E:DA:4E
Certificate issuer:       /CN=7161E84D34482AB3498808B14DA6C9DAB7635308
Certificate serial:       66D265B3F49A17D249D6275C6E831404A32A1869
Authority key identifier: 71:61:E8:4D:34:48:2A:B3:49:88:08:B1:4D:A6:C9:DA:B7:63:53:08
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7161E84D34482AB3498808B14DA6C9DAB7635308.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C4dg6LHipG4m96jHkH5CUa3aWVMqjbnZEAhwYMojnoPs/0/34352e3137362e38302e302f32342d3234203d3e20323639303131.roa
Signing time:             Mon 05 Aug 2024 19:58:41 +0000
ROA not before:           Mon 05 Aug 2024 19:53:41 +0000
ROA not after:            Mon 04 Aug 2025 19:58:41 +0000
asID:                     269011
IP address blocks:        45.176.80.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/C4dg6LHipG4m96jHkH5CUa3aWVMqjbnZEAhwYMojnoPs/0/7161E84D34482AB3498808B14DA6C9DAB7635308.crl
                          rsync://rpki-repo.registro.br/repo/C4dg6LHipG4m96jHkH5CUa3aWVMqjbnZEAhwYMojnoPs/0/7161E84D34482AB3498808B14DA6C9DAB7635308.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7161E84D34482AB3498808B14DA6C9DAB7635308.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 14 Mar 2025 20:13:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:d2:65:b3:f4:9a:17:d2:49:d6:27:5c:6e:83:14:04:a3:2a:18:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7161E84D34482AB3498808B14DA6C9DAB7635308
        Validity
            Not Before: Aug  5 19:53:41 2024 GMT
            Not After : Aug  4 19:58:41 2025 GMT
        Subject: CN=9F6C2944EAD31841DF553D9015A1940DEE5EDA4E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:15:e5:57:31:72:d7:ff:e4:76:56:c3:f1:5b:
                    0d:f7:70:5f:58:22:96:ce:af:d8:39:5f:c5:20:4c:
                    b5:4d:46:c5:d9:0f:42:cb:7b:73:45:3d:f3:c8:c9:
                    83:dc:55:66:9a:84:a9:f1:89:a9:b0:b2:e7:97:17:
                    9e:25:d2:a9:88:6e:0b:0f:85:82:c4:0f:19:9d:9e:
                    37:77:7d:f4:da:02:95:71:b5:0a:e8:29:f5:7f:8e:
                    90:bc:ab:f7:d5:03:bf:a5:3f:29:62:d2:39:00:80:
                    2d:b5:2a:b0:e1:cf:23:c9:5c:a9:19:a4:33:6c:bc:
                    f1:1c:39:d5:f3:7b:47:6d:f0:44:f1:cd:93:70:98:
                    51:96:d7:3b:65:a3:9c:06:4c:da:1a:20:0c:56:33:
                    7f:90:23:c3:f5:b9:f4:5c:bf:4f:c1:3e:29:25:c1:
                    7f:f3:8a:e2:fe:7d:e7:50:a2:40:16:b7:55:22:1f:
                    7b:71:98:31:64:44:db:1b:49:a3:62:d7:df:d6:09:
                    db:5f:7b:ce:66:c8:ca:e9:31:23:4d:c7:a1:9e:c9:
                    3b:ad:f5:ac:ec:4d:88:9c:a3:6b:7b:70:b1:d2:ba:
                    2e:a9:ab:2b:f4:d3:ba:18:bb:5a:43:e2:36:44:a7:
                    98:37:1d:d9:28:c1:9f:47:ac:09:b7:2c:39:6e:8c:
                    4a:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:6C:29:44:EA:D3:18:41:DF:55:3D:90:15:A1:94:0D:EE:5E:DA:4E
            X509v3 Authority Key Identifier:
                keyid:71:61:E8:4D:34:48:2A:B3:49:88:08:B1:4D:A6:C9:DA:B7:63:53:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C4dg6LHipG4m96jHkH5CUa3aWVMqjbnZEAhwYMojnoPs/0/7161E84D34482AB3498808B14DA6C9DAB7635308.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7161E84D34482AB3498808B14DA6C9DAB7635308.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C4dg6LHipG4m96jHkH5CUa3aWVMqjbnZEAhwYMojnoPs/0/34352e3137362e38302e302f32342d3234203d3e20323639303131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.176.80.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1a:e8:29:ab:fd:1e:b0:dc:95:7c:c2:2b:01:b3:94:6a:05:d8:
         d4:63:4c:51:08:55:27:d0:66:da:40:46:14:24:77:5c:db:9f:
         c2:4c:a8:ac:be:d9:72:cf:67:eb:fc:5e:69:49:a7:ec:c2:34:
         f3:95:1f:c4:a3:74:88:cc:17:12:2b:db:ac:0d:a3:29:68:27:
         d5:58:47:63:a5:79:46:aa:9e:78:70:6b:f0:c5:4f:f0:ba:54:
         47:76:b4:b1:e4:75:19:2b:8f:4b:28:21:ca:62:3b:7a:dd:39:
         86:ee:71:76:eb:70:20:35:25:0d:ec:c6:5e:73:9d:f4:8e:38:
         ae:b0:4f:d1:4a:50:cc:21:27:ce:f5:a3:4a:5b:12:57:0e:d0:
         3e:0f:b6:c9:1e:87:c0:05:94:72:cd:78:d7:3b:13:7e:cc:dc:
         1e:fe:81:be:10:a0:38:0b:17:b6:c1:08:b2:93:45:69:00:a9:
         d3:0e:7f:2c:cf:13:9b:cb:0f:9d:8f:63:a1:f5:cb:5c:1b:e1:
         64:1e:f8:d8:c2:d8:08:5e:2c:7b:d4:4b:87:09:02:8b:f7:59:
         84:fd:32:7c:c6:e2:d3:18:cc:d0:f6:ef:50:15:a4:8b:79:1c:
         14:f7:e0:90:55:10:be:8a:c4:36:ad:be:55:6c:7b:3b:6a:36:
         8f:71:a0:f3
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUZtJls/SaF9JJ1idcboMUBKMqGGkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzE2MUU4NEQzNDQ4MkFCMzQ5ODgwOEIxNERBNkM5REFC
NzYzNTMwODAeFw0yNDA4MDUxOTUzNDFaFw0yNTA4MDQxOTU4NDFaMDMxMTAvBgNV
BAMTKDlGNkMyOTQ0RUFEMzE4NDFERjU1M0Q5MDE1QTE5NDBERUU1RURBNEUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMFeVXMXLX/+R2VsPxWw33cF9Y
IpbOr9g5X8UgTLVNRsXZD0LLe3NFPfPIyYPcVWaahKnxiamwsueXF54l0qmIbgsP
hYLEDxmdnjd3ffTaApVxtQroKfV/jpC8q/fVA7+lPyli0jkAgC21KrDhzyPJXKkZ
pDNsvPEcOdXze0dt8ETxzZNwmFGW1ztlo5wGTNoaIAxWM3+QI8P1ufRcv0/BPikl
wX/ziuL+fedQokAWt1UiH3txmDFkRNsbSaNi19/WCdtfe85myMrpMSNNx6GeyTut
9azsTYico2t7cLHSui6pqyv007oYu1pD4jZEp5g3HdkowZ9HrAm3LDlujEphAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUn2wpROrTGEHfVT2QFaGUDe5e2k4wHwYDVR0j
BBgwFoAUcWHoTTRIKrNJiAixTabJ2rdjUwgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQzRkZzZMSGlwRzRtOTZqSGtINUNVYTNhV1ZNcWpiblpFQWh3WU1vam5v
UHMvMC83MTYxRTg0RDM0NDgyQUIzNDk4ODA4QjE0REE2QzlEQUI3NjM1MzA4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzcxNjFFODREMzQ0ODJBQjM0
OTg4MDhCMTREQTZDOURBQjc2MzUzMDguY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0M0ZGc2TEhpcEc0bTk2akhrSDVDVWEzYVdWTXFqYm5aRUFod1lNb2pub1BzLzAv
MzQzNTJlMzEzNzM2MmUzODMwMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM5
MzAzMTMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQALbBQMA0GCSqGSIb3DQEBCwUAA4IBAQAa6Cmr/R6w
3JV8wisBs5RqBdjUY0xRCFUn0GbaQEYUJHdc25/CTKisvtlyz2fr/F5pSafswjTz
lR/Eo3SIzBcSK9usDaMpaCfVWEdjpXlGqp54cGvwxU/wulRHdrSx5HUZK49LKCHK
Yjt63TmG7nF263AgNSUN7MZec530jjiusE/RSlDMISfO9aNKWxJXDtA+D7bJHofA
BZRyzXjXOxN+zNwe/oG+EKA4Cxe2wQiyk0VpAKnTDn8szxObyw+dj2Oh9ctcG+Fk
HvjYwtgIXix71EuHCQKL91mE/TJ8xuLTGMzQ9u9QFaSLeRwU9+CQVRC+isQ2rb5V
bHs7ajaPcaDz
-----END CERTIFICATE-----
Generated at Fri Mar 14 01:12:28 2025 by rpki-client