Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C4dg6LHipG4m96jHkH5CUa3aWVMqjbnZEAhwYMojnoPs/0/34352e3137362e38322e302f32332d3233203d3e20323639303131.roa
File:                     34352e3137362e38322e302f32332d3233203d3e20323639303131.roa (raw, json)
Hash identifier:          Spu1puoZ+v66BNxuvr60b3W2A+pPvPUcuNznFgpln84=
Subject key identifier:   E2:8F:B7:C7:8D:C1:8C:39:6C:C7:F9:17:E6:95:E7:AD:C2:8C:19:00
Certificate issuer:       /CN=7161E84D34482AB3498808B14DA6C9DAB7635308
Certificate serial:       2188270E33DD548726DAF06EDAB4BB43395A263B
Authority key identifier: 71:61:E8:4D:34:48:2A:B3:49:88:08:B1:4D:A6:C9:DA:B7:63:53:08
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7161E84D34482AB3498808B14DA6C9DAB7635308.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C4dg6LHipG4m96jHkH5CUa3aWVMqjbnZEAhwYMojnoPs/0/34352e3137362e38322e302f32332d3233203d3e20323639303131.roa
Signing time:             Mon 05 Aug 2024 19:58:59 +0000
ROA not before:           Mon 05 Aug 2024 19:53:59 +0000
ROA not after:            Mon 04 Aug 2025 19:58:59 +0000
asID:                     269011
IP address blocks:        45.176.82.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/C4dg6LHipG4m96jHkH5CUa3aWVMqjbnZEAhwYMojnoPs/0/7161E84D34482AB3498808B14DA6C9DAB7635308.crl
                          rsync://rpki-repo.registro.br/repo/C4dg6LHipG4m96jHkH5CUa3aWVMqjbnZEAhwYMojnoPs/0/7161E84D34482AB3498808B14DA6C9DAB7635308.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7161E84D34482AB3498808B14DA6C9DAB7635308.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 19 Feb 2025 04:01:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:88:27:0e:33:dd:54:87:26:da:f0:6e:da:b4:bb:43:39:5a:26:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7161E84D34482AB3498808B14DA6C9DAB7635308
        Validity
            Not Before: Aug  5 19:53:59 2024 GMT
            Not After : Aug  4 19:58:59 2025 GMT
        Subject: CN=E28FB7C78DC18C396CC7F917E695E7ADC28C1900
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:de:98:58:7a:24:8b:cd:5e:e4:e9:1b:91:2b:
                    87:de:36:7d:ff:65:6d:01:95:97:91:b2:38:10:a9:
                    83:7b:de:5e:13:8b:14:6f:6f:c5:8f:6e:3e:7f:5b:
                    4e:a6:da:d4:ba:ba:a2:cf:d4:32:14:7f:5e:03:f3:
                    bd:6f:52:7d:95:08:39:37:87:44:68:ab:59:13:98:
                    19:07:40:29:76:c2:e7:78:b6:44:00:28:df:a9:3c:
                    c4:c8:2e:2e:1c:97:34:38:5b:fa:46:c3:c0:15:4e:
                    83:54:8b:fb:d1:87:fd:6c:90:00:5c:9d:f8:a8:1d:
                    07:d4:33:8f:d4:18:dd:79:96:0b:90:8e:f5:61:b6:
                    f8:4e:77:03:13:16:57:95:7b:b5:17:8e:aa:a6:37:
                    25:1a:7f:2e:a4:ff:24:92:c3:9f:5f:73:a3:1f:1d:
                    38:6d:81:d8:83:77:ce:b1:4b:78:35:13:1a:b7:63:
                    29:70:31:9f:74:15:8c:95:7c:19:d2:b4:26:9f:4c:
                    58:9d:d4:23:5e:f5:1c:90:c9:cc:94:c9:55:b8:16:
                    f3:d2:39:9c:08:70:52:c7:f4:e7:17:a4:9d:f2:4c:
                    c3:c9:df:97:4a:a0:ae:eb:cd:58:76:08:92:bf:d3:
                    8c:0e:dd:d2:87:b3:c9:6b:3e:aa:24:50:57:37:af:
                    80:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:8F:B7:C7:8D:C1:8C:39:6C:C7:F9:17:E6:95:E7:AD:C2:8C:19:00
            X509v3 Authority Key Identifier:
                keyid:71:61:E8:4D:34:48:2A:B3:49:88:08:B1:4D:A6:C9:DA:B7:63:53:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C4dg6LHipG4m96jHkH5CUa3aWVMqjbnZEAhwYMojnoPs/0/7161E84D34482AB3498808B14DA6C9DAB7635308.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7161E84D34482AB3498808B14DA6C9DAB7635308.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C4dg6LHipG4m96jHkH5CUa3aWVMqjbnZEAhwYMojnoPs/0/34352e3137362e38322e302f32332d3233203d3e20323639303131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.176.82.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2f:49:43:59:2e:c9:17:86:bf:25:ca:cc:d3:39:f0:84:63:01:
         aa:a7:34:de:34:78:6e:ae:fe:e9:38:f6:5d:35:2c:7f:25:fc:
         23:53:eb:3e:8a:80:fe:3e:40:d1:da:25:e5:db:3e:ae:14:dd:
         f5:d5:f5:51:75:25:26:e0:10:b4:e5:35:db:6b:4e:70:46:e8:
         ea:d4:91:1a:be:7b:8d:1d:2a:63:d3:bd:88:f9:66:14:9d:69:
         73:5a:75:0a:06:36:d3:4a:5c:75:c2:ba:f6:00:8c:9c:73:16:
         87:bb:24:66:e0:88:73:99:e9:c4:01:b1:f3:db:e3:b9:55:8c:
         7b:7b:72:14:b0:ae:5c:97:3e:d9:6d:1a:c1:35:0e:46:66:a7:
         14:17:50:07:df:89:5e:f0:36:82:e0:da:3a:61:f1:2b:f7:25:
         79:e9:73:e3:53:69:da:e4:7d:72:1a:cf:42:55:00:41:2a:de:
         f3:39:2d:55:aa:2a:3b:fd:33:32:00:6b:b1:28:0d:d9:b3:b9:
         0e:47:4c:23:2e:54:bd:98:b9:ce:e5:a5:3c:5c:60:58:a8:be:
         1d:56:15:90:bf:e9:46:90:bb:43:83:1c:18:5d:ba:53:a5:ff:
         c9:2f:8f:28:c3:4b:10:82:86:a0:fd:07:ad:be:31:7d:6c:5c:
         fd:57:ed:0f
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUIYgnDjPdVIcm2vBu2rS7QzlaJjswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzE2MUU4NEQzNDQ4MkFCMzQ5ODgwOEIxNERBNkM5REFC
NzYzNTMwODAeFw0yNDA4MDUxOTUzNTlaFw0yNTA4MDQxOTU4NTlaMDMxMTAvBgNV
BAMTKEUyOEZCN0M3OERDMThDMzk2Q0M3RjkxN0U2OTVFN0FEQzI4QzE5MDAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDb3phYeiSLzV7k6RuRK4feNn3/
ZW0BlZeRsjgQqYN73l4TixRvb8WPbj5/W06m2tS6uqLP1DIUf14D871vUn2VCDk3
h0Roq1kTmBkHQCl2wud4tkQAKN+pPMTILi4clzQ4W/pGw8AVToNUi/vRh/1skABc
nfioHQfUM4/UGN15lguQjvVhtvhOdwMTFleVe7UXjqqmNyUafy6k/ySSw59fc6Mf
HThtgdiDd86xS3g1Exq3YylwMZ90FYyVfBnStCafTFid1CNe9RyQycyUyVW4FvPS
OZwIcFLH9OcXpJ3yTMPJ35dKoK7rzVh2CJK/04wO3dKHs8lrPqokUFc3r4CxAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQU4o+3x43BjDlsx/kX5pXnrcKMGQAwHwYDVR0j
BBgwFoAUcWHoTTRIKrNJiAixTabJ2rdjUwgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQzRkZzZMSGlwRzRtOTZqSGtINUNVYTNhV1ZNcWpiblpFQWh3WU1vam5v
UHMvMC83MTYxRTg0RDM0NDgyQUIzNDk4ODA4QjE0REE2QzlEQUI3NjM1MzA4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzcxNjFFODREMzQ0ODJBQjM0
OTg4MDhCMTREQTZDOURBQjc2MzUzMDguY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0M0ZGc2TEhpcEc0bTk2akhrSDVDVWEzYVdWTXFqYm5aRUFod1lNb2pub1BzLzAv
MzQzNTJlMzEzNzM2MmUzODMyMmUzMDJmMzIzMzJkMzIzMzIwM2QzZTIwMzIzNjM5
MzAzMTMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQBLbBSMA0GCSqGSIb3DQEBCwUAA4IBAQAvSUNZLskX
hr8lyszTOfCEYwGqpzTeNHhurv7pOPZdNSx/JfwjU+s+ioD+PkDR2iXl2z6uFN31
1fVRdSUm4BC05TXba05wRujq1JEavnuNHSpj072I+WYUnWlzWnUKBjbTSlx1wrr2
AIyccxaHuyRm4IhzmenEAbHz2+O5VYx7e3IUsK5clz7ZbRrBNQ5GZqcUF1AH34le
8DaC4No6YfEr9yV56XPjU2na5H1yGs9CVQBBKt7zOS1Vqio7/TMyAGuxKA3Zs7kO
R0wjLlS9mLnO5aU8XGBYqL4dVhWQv+lGkLtDgxwYXbpTpf/JL48ow0sQgoag/Qet
vjF9bFz9V+0P
-----END CERTIFICATE-----
Generated at Tue Feb 18 13:34:23 2025 by rpki-client