Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C7zwxbC2AhrcXvoCe6MEoMDJCgFeRgggbLZ84UhPCmtk/0/34352e3136322e34302e302f32322d3234203d3e203238313538.roa
File:                     34352e3136322e34302e302f32322d3234203d3e203238313538.roa (raw, json)
Hash identifier:          vBSjbaih7gLkHl3eekwK24BJU+B4fUnsVgayuiYlD/o=
Subject key identifier:   70:60:99:63:24:89:A7:93:25:85:FB:AE:39:72:C5:4B:21:1F:15:74
Certificate issuer:       /CN=B45D1A8AF74D94B0E0B1356736C8BC9AFB0185FE
Certificate serial:       366D1ECEDF89775F035230491C273598E36B3A22
Authority key identifier: B4:5D:1A:8A:F7:4D:94:B0:E0:B1:35:67:36:C8:BC:9A:FB:01:85:FE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B45D1A8AF74D94B0E0B1356736C8BC9AFB0185FE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C7zwxbC2AhrcXvoCe6MEoMDJCgFeRgggbLZ84UhPCmtk/0/34352e3136322e34302e302f32322d3234203d3e203238313538.roa
Signing time:             Thu 19 Sep 2024 14:37:36 +0000
ROA not before:           Thu 19 Sep 2024 14:32:36 +0000
ROA not after:            Thu 18 Sep 2025 14:37:36 +0000
asID:                     28158
IP address blocks:        45.162.40.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/C7zwxbC2AhrcXvoCe6MEoMDJCgFeRgggbLZ84UhPCmtk/0/B45D1A8AF74D94B0E0B1356736C8BC9AFB0185FE.crl
                          rsync://rpki-repo.registro.br/repo/C7zwxbC2AhrcXvoCe6MEoMDJCgFeRgggbLZ84UhPCmtk/0/B45D1A8AF74D94B0E0B1356736C8BC9AFB0185FE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B45D1A8AF74D94B0E0B1356736C8BC9AFB0185FE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 18:14:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:6d:1e:ce:df:89:77:5f:03:52:30:49:1c:27:35:98:e3:6b:3a:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B45D1A8AF74D94B0E0B1356736C8BC9AFB0185FE
        Validity
            Not Before: Sep 19 14:32:36 2024 GMT
            Not After : Sep 18 14:37:36 2025 GMT
        Subject: CN=706099632489A7932585FBAE3972C54B211F1574
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:5d:1a:64:e9:c7:ff:a6:17:09:4b:0d:0e:9f:
                    cb:e0:47:44:63:59:36:43:c2:68:67:b4:25:5c:38:
                    85:78:82:4e:f3:90:70:25:9b:72:d6:51:81:19:6c:
                    50:b9:ef:15:a5:99:c4:5b:b9:68:a4:71:bc:90:8c:
                    07:01:9b:4d:01:95:95:16:52:93:4d:72:6e:59:23:
                    73:fa:36:f8:ec:8b:35:af:15:92:10:08:0f:b0:ed:
                    72:94:26:83:b6:43:ba:08:dc:70:8c:1b:a5:b6:6b:
                    d5:b2:6d:6e:d1:47:e5:e0:4e:1b:f8:2f:77:98:01:
                    d1:3c:e0:15:bd:30:ab:86:98:8d:d1:2e:7e:3f:72:
                    22:ca:bb:7f:b1:40:66:00:7b:cf:67:66:d2:67:a1:
                    13:65:db:72:50:4e:da:64:62:e9:7e:58:8d:79:27:
                    68:41:73:1f:3f:d5:d7:b0:09:18:48:3c:a5:b0:83:
                    b8:c9:8a:36:e2:a5:3a:eb:ce:9e:d0:0e:08:bf:46:
                    3b:03:f6:c8:7c:ee:3d:dc:1b:3b:df:3c:e8:cc:6a:
                    d0:3e:06:8f:cd:08:44:f9:46:30:fd:8b:25:b6:ff:
                    09:81:5b:84:75:27:d7:db:2d:7f:7f:2c:37:07:71:
                    f1:82:c4:74:0f:0f:76:e4:a3:06:91:3b:e1:ae:eb:
                    49:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:60:99:63:24:89:A7:93:25:85:FB:AE:39:72:C5:4B:21:1F:15:74
            X509v3 Authority Key Identifier:
                keyid:B4:5D:1A:8A:F7:4D:94:B0:E0:B1:35:67:36:C8:BC:9A:FB:01:85:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C7zwxbC2AhrcXvoCe6MEoMDJCgFeRgggbLZ84UhPCmtk/0/B45D1A8AF74D94B0E0B1356736C8BC9AFB0185FE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B45D1A8AF74D94B0E0B1356736C8BC9AFB0185FE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C7zwxbC2AhrcXvoCe6MEoMDJCgFeRgggbLZ84UhPCmtk/0/34352e3136322e34302e302f32322d3234203d3e203238313538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.162.40.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b7:e2:38:13:95:ee:10:fa:c0:e9:88:00:0e:11:dc:74:0b:34:
         1e:60:1c:fa:0d:1f:cd:e5:bc:af:07:3c:ee:8a:42:dd:f2:68:
         b1:98:c8:ba:bd:ba:11:1e:1f:9a:bb:70:ee:da:16:03:d3:bf:
         a3:44:f9:50:f1:4a:8f:38:85:de:2b:05:21:05:4b:f0:e1:e3:
         b8:e6:39:ca:77:fb:b4:b8:8e:52:9a:d6:a5:74:74:d7:ce:64:
         2c:e4:4f:8c:5a:5a:6c:4b:8c:af:90:86:bb:87:f4:d7:9a:e6:
         a8:2a:f7:0f:ee:62:52:a2:fc:8f:1f:62:4b:05:b0:ef:b0:5f:
         c3:cf:37:d5:43:bc:85:cc:05:7c:ce:c3:ab:55:ba:39:ab:04:
         cc:fc:6c:06:7e:d4:1e:d8:4b:62:a1:1c:bf:2f:df:d1:e4:8e:
         84:f8:e9:70:65:58:55:f7:4a:cb:97:cf:be:85:20:4b:75:1b:
         8b:b9:fd:7a:16:0b:74:33:a2:b7:c7:e6:cf:ac:4f:93:6c:43:
         63:bc:f4:f6:7f:58:68:68:52:6c:60:c5:36:2c:a0:e5:70:d5:
         54:90:98:7c:6b:be:75:85:a5:05:03:27:26:5f:d0:65:70:42:
         10:ed:95:48:14:b4:dd:28:be:6f:fa:33:c7:0f:7e:33:bb:1f:
         89:ed:57:d3
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUNm0ezt+Jd18DUjBJHCc1mONrOiIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjQ1RDFBOEFGNzREOTRCMEUwQjEzNTY3MzZDOEJDOUFG
QjAxODVGRTAeFw0yNDA5MTkxNDMyMzZaFw0yNTA5MTgxNDM3MzZaMDMxMTAvBgNV
BAMTKDcwNjA5OTYzMjQ4OUE3OTMyNTg1RkJBRTM5NzJDNTRCMjExRjE1NzQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1XRpk6cf/phcJSw0On8vgR0Rj
WTZDwmhntCVcOIV4gk7zkHAlm3LWUYEZbFC57xWlmcRbuWikcbyQjAcBm00BlZUW
UpNNcm5ZI3P6NvjsizWvFZIQCA+w7XKUJoO2Q7oI3HCMG6W2a9WybW7RR+XgThv4
L3eYAdE84BW9MKuGmI3RLn4/ciLKu3+xQGYAe89nZtJnoRNl23JQTtpkYul+WI15
J2hBcx8/1dewCRhIPKWwg7jJijbipTrrzp7QDgi/RjsD9sh87j3cGzvfPOjMatA+
Bo/NCET5RjD9iyW2/wmBW4R1J9fbLX9/LDcHcfGCxHQPD3bkowaRO+Gu60kjAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUcGCZYySJp5MlhfuuOXLFSyEfFXQwHwYDVR0j
BBgwFoAUtF0aivdNlLDgsTVnNsi8mvsBhf4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQzd6d3hiQzJBaHJjWHZvQ2U2TUVvTURKQ2dGZVJnZ2diTFo4NFVoUENt
dGsvMC9CNDVEMUE4QUY3NEQ5NEIwRTBCMTM1NjczNkM4QkM5QUZCMDE4NUZFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0I0NUQxQThBRjc0RDk0QjBF
MEIxMzU2NzM2QzhCQzlBRkIwMTg1RkUuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0M3end4YkMyQWhyY1h2b0NlNk1Fb01ESkNnRmVSZ2dnYkxaODRVaFBDbXRrLzAv
MzQzNTJlMzEzNjMyMmUzNDMwMmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzODMx
MzUzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEAi2iKDANBgkqhkiG9w0BAQsFAAOCAQEAt+I4E5XuEPrA
6YgADhHcdAs0HmAc+g0fzeW8rwc87opC3fJosZjIur26ER4fmrtw7toWA9O/o0T5
UPFKjziF3isFIQVL8OHjuOY5ynf7tLiOUprWpXR0185kLORPjFpabEuMr5CGu4f0
15rmqCr3D+5iUqL8jx9iSwWw77Bfw8831UO8hcwFfM7Dq1W6OasEzPxsBn7UHthL
YqEcvy/f0eSOhPjpcGVYVfdKy5fPvoUgS3Ubi7n9ehYLdDOit8fmz6xPk2xDY7z0
9n9YaGhSbGDFNiyg5XDVVJCYfGu+dYWlBQMnJl/QZXBCEO2VSBS03Si+b/ozxw9+
M7sfie1X0w==
-----END CERTIFICATE-----
Generated at Sat Nov 23 17:31:56 2024 by rpki-client on console-fra.rpki-client.org