Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CgFW4qUHiiMR7yt2uF2KgbvCXLH27bbAUscu2bECXqtF/1/34352e3138322e3136342e302f32322d3332203d3e20323639333032.roa
File:                     34352e3138322e3136342e302f32322d3332203d3e20323639333032.roa (raw, json)
Hash identifier:          3xJyzKXEtpjnjvRlNLsb2VA8mfiG+SwMK4FtA/8EdjQ=
Subject key identifier:   B8:76:37:7D:27:27:F7:FB:CF:2C:FD:8A:73:15:A7:9E:25:2C:07:72
Certificate issuer:       /CN=0F8527D7B78AAF3D805B156085B133DC25F008C2
Certificate serial:       434F5EB5562F9103FA1A8829DC00FC8F3D7390BF
Authority key identifier: 0F:85:27:D7:B7:8A:AF:3D:80:5B:15:60:85:B1:33:DC:25:F0:08:C2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F8527D7B78AAF3D805B156085B133DC25F008C2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CgFW4qUHiiMR7yt2uF2KgbvCXLH27bbAUscu2bECXqtF/1/34352e3138322e3136342e302f32322d3332203d3e20323639333032.roa
Signing time:             Thu 04 Apr 2024 12:55:51 +0000
ROA not before:           Thu 04 Apr 2024 12:50:51 +0000
ROA not after:            Thu 03 Apr 2025 12:55:51 +0000
asID:                     269302
IP address blocks:        45.182.164.0/22 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CgFW4qUHiiMR7yt2uF2KgbvCXLH27bbAUscu2bECXqtF/1/0F8527D7B78AAF3D805B156085B133DC25F008C2.crl
                          rsync://rpki-repo.registro.br/repo/CgFW4qUHiiMR7yt2uF2KgbvCXLH27bbAUscu2bECXqtF/1/0F8527D7B78AAF3D805B156085B133DC25F008C2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F8527D7B78AAF3D805B156085B133DC25F008C2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:4f:5e:b5:56:2f:91:03:fa:1a:88:29:dc:00:fc:8f:3d:73:90:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0F8527D7B78AAF3D805B156085B133DC25F008C2
        Validity
            Not Before: Apr  4 12:50:51 2024 GMT
            Not After : Apr  3 12:55:51 2025 GMT
        Subject: CN=B876377D2727F7FBCF2CFD8A7315A79E252C0772
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:a4:fd:23:02:e3:7c:bb:03:12:9f:9b:ae:10:
                    d8:f9:58:d2:e6:78:b6:dc:49:2b:4f:03:c3:46:3d:
                    43:ab:91:55:08:87:29:c4:58:1c:79:24:c8:5a:cb:
                    6c:8e:ae:7f:65:99:4e:69:74:be:a2:b3:d1:d5:02:
                    b5:bf:a5:ca:09:5c:13:43:1e:f2:b8:ed:59:03:2f:
                    45:96:cd:2a:dc:96:3e:3d:94:c5:96:09:6f:76:b0:
                    1a:67:4a:dc:c7:19:3a:8a:b9:07:de:79:86:22:b8:
                    61:b9:48:e2:03:90:13:9d:c6:a1:d1:19:ce:4f:aa:
                    7f:cb:72:44:59:57:8b:f4:01:99:c6:ca:38:e5:de:
                    d0:e0:26:61:f3:6a:3f:cb:73:4c:dd:23:37:f9:d2:
                    29:df:02:5d:bf:0e:24:67:97:dd:16:34:43:32:5b:
                    31:9f:0b:b1:2d:5e:cf:7d:87:ce:e1:08:18:ad:cb:
                    1b:88:0e:02:60:cf:38:e1:2b:c8:f4:c6:bc:a2:8a:
                    a7:c4:26:79:bc:11:fb:6f:47:c6:8b:77:18:4a:9b:
                    b4:e9:17:e9:6a:d3:81:50:40:ad:ce:7f:0e:d4:75:
                    3b:5f:f1:8c:bc:cf:87:27:3a:5a:6c:96:8a:ee:83:
                    b7:e5:a7:71:76:1d:4c:f4:14:5f:d6:e4:33:4f:18:
                    e4:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:76:37:7D:27:27:F7:FB:CF:2C:FD:8A:73:15:A7:9E:25:2C:07:72
            X509v3 Authority Key Identifier:
                keyid:0F:85:27:D7:B7:8A:AF:3D:80:5B:15:60:85:B1:33:DC:25:F0:08:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CgFW4qUHiiMR7yt2uF2KgbvCXLH27bbAUscu2bECXqtF/1/0F8527D7B78AAF3D805B156085B133DC25F008C2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F8527D7B78AAF3D805B156085B133DC25F008C2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CgFW4qUHiiMR7yt2uF2KgbvCXLH27bbAUscu2bECXqtF/1/34352e3138322e3136342e302f32322d3332203d3e20323639333032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.182.164.0/22

    Signature Algorithm: sha256WithRSAEncryption
         02:36:9f:39:2c:1e:f5:df:5d:42:12:24:57:12:3f:a2:b6:53:
         6e:ff:4a:a5:b0:50:a1:11:b4:49:f4:fb:69:42:22:37:11:5d:
         54:0c:d2:78:ef:53:78:16:8a:fc:bf:c6:a3:25:ba:62:a2:bb:
         d6:ce:bb:a1:c4:5e:7c:0d:5a:86:7c:ec:e9:3a:0f:91:9c:c6:
         80:57:93:86:cf:12:97:87:1b:14:00:90:3f:fa:a0:d7:d3:0f:
         29:1c:44:02:f2:51:4d:57:fc:fe:b3:14:24:cf:ea:6a:4a:f5:
         d4:c5:29:ce:8d:82:83:73:bd:78:76:55:13:cf:cb:f5:d8:2b:
         23:81:65:69:40:05:d4:ef:71:a4:95:27:22:11:9d:fa:52:72:
         62:30:68:a8:b2:eb:fc:5d:53:0d:9a:b1:7b:74:f5:83:9d:fd:
         7c:42:a2:53:59:44:34:17:30:7c:e6:8d:42:bc:7c:a1:61:2f:
         be:9d:ff:f3:49:66:ac:fe:bc:89:99:94:98:b4:e9:21:a2:b3:
         2c:c4:7d:6d:39:b4:7b:cb:79:5d:04:5c:5a:f6:91:00:5b:11:
         f9:0a:f8:d0:39:92:ef:50:c6:64:ae:e8:e1:07:74:34:33:07:
         80:e9:d3:a8:6f:f4:34:80:62:70:5d:6c:bd:16:fd:22:ca:00:
         ec:28:16:e9
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUQ09etVYvkQP6Gogp3AD8jz1zkL8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEY4NTI3RDdCNzhBQUYzRDgwNUIxNTYwODVCMTMzREMy
NUYwMDhDMjAeFw0yNDA0MDQxMjUwNTFaFw0yNTA0MDMxMjU1NTFaMDMxMTAvBgNV
BAMTKEI4NzYzNzdEMjcyN0Y3RkJDRjJDRkQ4QTczMTVBNzlFMjUyQzA3NzIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXpP0jAuN8uwMSn5uuENj5WNLm
eLbcSStPA8NGPUOrkVUIhynEWBx5JMhay2yOrn9lmU5pdL6is9HVArW/pcoJXBND
HvK47VkDL0WWzSrclj49lMWWCW92sBpnStzHGTqKuQfeeYYiuGG5SOIDkBOdxqHR
Gc5Pqn/LckRZV4v0AZnGyjjl3tDgJmHzaj/Lc0zdIzf50infAl2/DiRnl90WNEMy
WzGfC7EtXs99h87hCBityxuIDgJgzzjhK8j0xryiiqfEJnm8EftvR8aLdxhKm7Tp
F+lq04FQQK3Ofw7UdTtf8Yy8z4cnOlpslorug7flp3F2HUz0FF/W5DNPGORrAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUuHY3fScn9/vPLP2KcxWnniUsB3IwHwYDVR0j
BBgwFoAUD4Un17eKrz2AWxVghbEz3CXwCMIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ2dGVzRxVUhpaU1SN3l0MnVGMktnYnZDWExIMjdiYkFVc2N1MmJFQ1hx
dEYvMS8wRjg1MjdEN0I3OEFBRjNEODA1QjE1NjA4NUIxMzNEQzI1RjAwOEMyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzBGODUyN0Q3Qjc4QUFGM0Q4
MDVCMTU2MDg1QjEzM0RDMjVGMDA4QzIuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0NnRlc0cVVIaWlNUjd5dDJ1RjJLZ2J2Q1hMSDI3YmJBVXNjdTJiRUNYcXRGLzEv
MzQzNTJlMzEzODMyMmUzMTM2MzQyZTMwMmYzMjMyMmQzMzMyMjAzZDNlMjAzMjM2
MzkzMzMwMzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAIttqQwDQYJKoZIhvcNAQELBQADggEBAAI2nzks
HvXfXUISJFcSP6K2U27/SqWwUKERtEn0+2lCIjcRXVQM0njvU3gWivy/xqMlumKi
u9bOu6HEXnwNWoZ87Ok6D5GcxoBXk4bPEpeHGxQAkD/6oNfTDykcRALyUU1X/P6z
FCTP6mpK9dTFKc6NgoNzvXh2VRPPy/XYKyOBZWlABdTvcaSVJyIRnfpScmIwaKiy
6/xdUw2asXt09YOd/XxColNZRDQXMHzmjUK8fKFhL76d//NJZqz+vImZlJi06SGi
syzEfW05tHvLeV0EXFr2kQBbEfkK+NA5ku9QxmSu6OEHdDQzB4Dp06hv9DSAYnBd
bL0W/SLKAOwoFuk=
-----END CERTIFICATE-----
Generated at Sat Nov 23 07:43:35 2024 by rpki-client on console-ams.rpki-client.org