Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C7zwxbC2AhrcXvoCe6MEoMDJCgFeRgggbLZ84UhPCmtk/0/34352e3138392e3134342e302f32322d3234203d3e203238313538.roa
File:                     34352e3138392e3134342e302f32322d3234203d3e203238313538.roa (raw, json)
Hash identifier:          wIWRAsbs90yB1cnVbF0rD8W22Fg1G+uDnHB97m4+ceI=
Subject key identifier:   29:73:13:71:44:FF:52:95:67:0A:0B:4C:70:10:18:39:CB:FD:7B:0F
Certificate issuer:       /CN=B45D1A8AF74D94B0E0B1356736C8BC9AFB0185FE
Certificate serial:       7942D20E4F7A0F905C381A22209A152E3767BEB6
Authority key identifier: B4:5D:1A:8A:F7:4D:94:B0:E0:B1:35:67:36:C8:BC:9A:FB:01:85:FE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B45D1A8AF74D94B0E0B1356736C8BC9AFB0185FE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C7zwxbC2AhrcXvoCe6MEoMDJCgFeRgggbLZ84UhPCmtk/0/34352e3138392e3134342e302f32322d3234203d3e203238313538.roa
Signing time:             Thu 19 Sep 2024 14:39:48 +0000
ROA not before:           Thu 19 Sep 2024 14:34:48 +0000
ROA not after:            Thu 18 Sep 2025 14:39:48 +0000
asID:                     28158
IP address blocks:        45.189.144.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/C7zwxbC2AhrcXvoCe6MEoMDJCgFeRgggbLZ84UhPCmtk/0/B45D1A8AF74D94B0E0B1356736C8BC9AFB0185FE.crl
                          rsync://rpki-repo.registro.br/repo/C7zwxbC2AhrcXvoCe6MEoMDJCgFeRgggbLZ84UhPCmtk/0/B45D1A8AF74D94B0E0B1356736C8BC9AFB0185FE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B45D1A8AF74D94B0E0B1356736C8BC9AFB0185FE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 18:14:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:42:d2:0e:4f:7a:0f:90:5c:38:1a:22:20:9a:15:2e:37:67:be:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B45D1A8AF74D94B0E0B1356736C8BC9AFB0185FE
        Validity
            Not Before: Sep 19 14:34:48 2024 GMT
            Not After : Sep 18 14:39:48 2025 GMT
        Subject: CN=2973137144FF5295670A0B4C70101839CBFD7B0F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:6d:8e:29:0c:e6:bd:e3:cf:8e:d0:fc:5b:76:
                    f0:97:14:0e:02:5a:ff:a0:30:10:c8:d7:d3:9e:f6:
                    7c:ce:ee:cf:67:45:2a:d7:4e:9f:4a:e2:06:aa:e8:
                    99:41:70:8b:21:3e:46:cd:6b:ae:8e:60:88:f8:2e:
                    ed:a3:a7:77:1a:57:23:14:5f:95:fe:9c:ec:e8:65:
                    92:3f:69:2b:1e:bf:46:c5:7d:27:38:19:5f:86:40:
                    9d:0f:3f:bc:86:6b:84:c8:e7:d8:78:1c:42:79:6d:
                    ce:ae:a8:ff:4e:36:d1:9b:55:16:d2:1f:77:e0:6d:
                    35:e3:f1:a2:f5:6c:fe:53:8f:ae:44:be:3a:50:ef:
                    0a:d3:a1:77:d6:27:7a:e4:90:86:3a:09:d0:7b:60:
                    64:f2:88:ac:67:80:05:24:42:ff:7e:eb:60:f4:81:
                    79:9f:dc:04:56:8c:84:3c:f1:a1:cb:16:2d:71:a2:
                    05:80:ac:54:96:0c:5a:1e:d0:5d:77:12:a1:b2:c0:
                    42:ba:58:18:2b:60:1e:80:93:35:0b:a7:ec:df:a3:
                    f3:92:7c:9e:72:7e:7d:d9:56:38:de:2e:2b:94:42:
                    35:22:ec:49:2f:cf:67:b2:e1:e9:69:7a:48:92:b4:
                    7d:9c:da:d5:00:01:e5:08:c6:24:71:26:34:3c:6d:
                    29:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:73:13:71:44:FF:52:95:67:0A:0B:4C:70:10:18:39:CB:FD:7B:0F
            X509v3 Authority Key Identifier:
                keyid:B4:5D:1A:8A:F7:4D:94:B0:E0:B1:35:67:36:C8:BC:9A:FB:01:85:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C7zwxbC2AhrcXvoCe6MEoMDJCgFeRgggbLZ84UhPCmtk/0/B45D1A8AF74D94B0E0B1356736C8BC9AFB0185FE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B45D1A8AF74D94B0E0B1356736C8BC9AFB0185FE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C7zwxbC2AhrcXvoCe6MEoMDJCgFeRgggbLZ84UhPCmtk/0/34352e3138392e3134342e302f32322d3234203d3e203238313538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.189.144.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1a:fa:f8:e2:a7:c0:5d:9c:09:fa:89:16:87:13:08:2f:49:3a:
         a4:f6:6d:eb:be:78:22:ea:46:8b:85:08:9c:eb:21:77:ab:ab:
         eb:77:56:77:c5:04:70:86:aa:a1:21:f1:a0:c0:b0:95:92:c2:
         35:5d:ca:3d:d9:15:23:5b:b7:af:e7:21:d8:24:28:90:6f:b6:
         b0:d6:47:e5:ff:bc:c5:45:bb:37:df:e8:18:b8:cc:dd:d3:57:
         1b:e1:c6:45:27:73:b6:f6:df:a9:46:b0:00:73:b5:fe:c0:21:
         a4:a4:07:f2:f0:a2:cd:70:e0:48:21:fe:35:63:4d:c5:1e:e0:
         f8:16:59:5c:a5:af:e1:4a:1b:49:34:6f:d7:1e:2b:51:d9:28:
         ac:65:84:df:f8:00:fb:9e:c7:ee:8e:b9:5c:b0:1e:fb:27:38:
         2f:df:e9:63:81:03:b7:59:b7:59:ba:88:e2:5b:b2:23:3d:28:
         ee:2e:63:21:00:16:ed:43:c7:aa:a4:32:90:46:06:4b:15:78:
         c4:ba:84:1b:e9:61:35:e6:4b:67:a0:18:80:2a:b3:84:d5:cd:
         ee:9c:4d:a6:52:ff:f7:f2:0d:39:3e:c8:26:83:42:ea:f1:9f:
         40:cd:f6:d9:d9:0b:ef:34:3c:36:4d:c4:6a:03:cc:4f:a8:7c:
         c8:d5:0f:3d
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUeULSDk96D5BcOBoiIJoVLjdnvrYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjQ1RDFBOEFGNzREOTRCMEUwQjEzNTY3MzZDOEJDOUFG
QjAxODVGRTAeFw0yNDA5MTkxNDM0NDhaFw0yNTA5MTgxNDM5NDhaMDMxMTAvBgNV
BAMTKDI5NzMxMzcxNDRGRjUyOTU2NzBBMEI0QzcwMTAxODM5Q0JGRDdCMEYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQbY4pDOa948+O0PxbdvCXFA4C
Wv+gMBDI19Oe9nzO7s9nRSrXTp9K4gaq6JlBcIshPkbNa66OYIj4Lu2jp3caVyMU
X5X+nOzoZZI/aSsev0bFfSc4GV+GQJ0PP7yGa4TI59h4HEJ5bc6uqP9ONtGbVRbS
H3fgbTXj8aL1bP5Tj65EvjpQ7wrToXfWJ3rkkIY6CdB7YGTyiKxngAUkQv9+62D0
gXmf3ARWjIQ88aHLFi1xogWArFSWDFoe0F13EqGywEK6WBgrYB6AkzULp+zfo/OS
fJ5yfn3ZVjjeLiuUQjUi7Ekvz2ey4elpekiStH2c2tUAAeUIxiRxJjQ8bSmZAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUKXMTcUT/UpVnCgtMcBAYOcv9ew8wHwYDVR0j
BBgwFoAUtF0aivdNlLDgsTVnNsi8mvsBhf4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQzd6d3hiQzJBaHJjWHZvQ2U2TUVvTURKQ2dGZVJnZ2diTFo4NFVoUENt
dGsvMC9CNDVEMUE4QUY3NEQ5NEIwRTBCMTM1NjczNkM4QkM5QUZCMDE4NUZFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0I0NUQxQThBRjc0RDk0QjBF
MEIxMzU2NzM2QzhCQzlBRkIwMTg1RkUuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0M3end4YkMyQWhyY1h2b0NlNk1Fb01ESkNnRmVSZ2dnYkxaODRVaFBDbXRrLzAv
MzQzNTJlMzEzODM5MmUzMTM0MzQyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM4
MzEzNTM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCLb2QMA0GCSqGSIb3DQEBCwUAA4IBAQAa+vjip8Bd
nAn6iRaHEwgvSTqk9m3rvngi6kaLhQic6yF3q6vrd1Z3xQRwhqqhIfGgwLCVksI1
Xco92RUjW7ev5yHYJCiQb7aw1kfl/7zFRbs33+gYuMzd01cb4cZFJ3O29t+pRrAA
c7X+wCGkpAfy8KLNcOBIIf41Y03FHuD4Fllcpa/hShtJNG/XHitR2SisZYTf+AD7
nsfujrlcsB77Jzgv3+ljgQO3WbdZuojiW7IjPSjuLmMhABbtQ8eqpDKQRgZLFXjE
uoQb6WE15ktnoBiAKrOE1c3unE2mUv/38g05Psgmg0Lq8Z9AzfbZ2QvvNDw2TcRq
A8xPqHzI1Q89
-----END CERTIFICATE-----
Generated at Sat Nov 23 16:21:10 2024 by rpki-client on console-ams.rpki-client.org