Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D3cieqzvMC2PKTA9TYePjqQn8Q2dKxfX8RghKKopqMFP/0/34352e3138332e3231322e302f32332d3233203d3e20323639323932.roa
File:                     34352e3138332e3231322e302f32332d3233203d3e20323639323932.roa (raw, json)
Hash identifier:          gPU+pwwhhwGyCvN44eP0vGWa6o768Y7W4IO2OTaenAE=
Subject key identifier:   C6:6B:25:8C:A3:B3:EE:A1:D5:5D:E4:C8:11:0D:9E:F2:C4:11:E1:E3
Certificate issuer:       /CN=891876379661096633CCF1E14D82D1BBB9CBF133
Certificate serial:       1E2D55C17AA120EE1241212075787CE01B001EBA
Authority key identifier: 89:18:76:37:96:61:09:66:33:CC:F1:E1:4D:82:D1:BB:B9:CB:F1:33
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/891876379661096633CCF1E14D82D1BBB9CBF133.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D3cieqzvMC2PKTA9TYePjqQn8Q2dKxfX8RghKKopqMFP/0/34352e3138332e3231322e302f32332d3233203d3e20323639323932.roa
Signing time:             Tue 15 Oct 2024 16:41:13 +0000
ROA not before:           Tue 15 Oct 2024 16:36:13 +0000
ROA not after:            Tue 14 Oct 2025 16:41:13 +0000
asID:                     269292
IP address blocks:        45.183.212.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/D3cieqzvMC2PKTA9TYePjqQn8Q2dKxfX8RghKKopqMFP/0/891876379661096633CCF1E14D82D1BBB9CBF133.crl
                          rsync://rpki-repo.registro.br/repo/D3cieqzvMC2PKTA9TYePjqQn8Q2dKxfX8RghKKopqMFP/0/891876379661096633CCF1E14D82D1BBB9CBF133.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/891876379661096633CCF1E14D82D1BBB9CBF133.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 30 Nov 2024 19:48:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:2d:55:c1:7a:a1:20:ee:12:41:21:20:75:78:7c:e0:1b:00:1e:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=891876379661096633CCF1E14D82D1BBB9CBF133
        Validity
            Not Before: Oct 15 16:36:13 2024 GMT
            Not After : Oct 14 16:41:13 2025 GMT
        Subject: CN=C66B258CA3B3EEA1D55DE4C8110D9EF2C411E1E3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:17:24:fb:b4:ca:ed:b8:69:52:aa:1a:b5:96:
                    89:1e:ff:01:17:89:80:ce:81:da:2c:dd:77:cc:4b:
                    5f:d1:1b:6c:db:9d:3d:cf:5d:ae:b1:8d:f7:2d:88:
                    34:ed:45:13:7f:74:c4:fb:7b:06:0f:80:79:c2:ba:
                    75:d9:0f:9c:c9:f5:37:ca:8b:dc:37:89:1a:8e:fe:
                    8f:a0:b1:b8:94:98:96:af:99:ed:53:a3:3a:22:39:
                    af:0a:26:9d:1f:86:cf:27:9c:10:f7:96:33:7b:1a:
                    04:10:cf:b1:b8:62:26:7b:f4:b6:b5:67:96:6f:48:
                    7c:d9:69:dc:86:02:80:c9:40:21:fb:a7:d3:90:cf:
                    4a:1b:f8:ce:82:6b:0f:db:26:23:6e:49:5f:fb:7c:
                    6a:d7:e9:f8:2b:17:1a:65:dc:c0:33:cc:79:a9:d3:
                    f4:2c:fa:4b:99:9f:5a:e3:8e:31:8d:ef:63:7e:50:
                    94:fe:ef:54:4b:09:11:36:b1:68:02:4b:84:ed:f0:
                    f6:60:75:0f:78:81:81:45:c0:93:53:48:51:4a:28:
                    68:c2:2a:52:dd:68:b2:62:02:60:5a:8a:e6:bb:00:
                    bb:a6:c5:8f:5e:fb:ae:15:e1:5f:e8:b6:44:f9:26:
                    18:13:7b:32:08:df:06:af:22:26:eb:f6:fd:ad:27:
                    69:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:6B:25:8C:A3:B3:EE:A1:D5:5D:E4:C8:11:0D:9E:F2:C4:11:E1:E3
            X509v3 Authority Key Identifier:
                keyid:89:18:76:37:96:61:09:66:33:CC:F1:E1:4D:82:D1:BB:B9:CB:F1:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D3cieqzvMC2PKTA9TYePjqQn8Q2dKxfX8RghKKopqMFP/0/891876379661096633CCF1E14D82D1BBB9CBF133.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/891876379661096633CCF1E14D82D1BBB9CBF133.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D3cieqzvMC2PKTA9TYePjqQn8Q2dKxfX8RghKKopqMFP/0/34352e3138332e3231322e302f32332d3233203d3e20323639323932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.183.212.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9a:00:e4:c0:62:32:12:54:86:2b:21:a3:08:dc:16:15:11:c6:
         df:2e:70:d2:2e:b8:de:ee:d2:d5:0a:df:37:ef:c4:48:5f:b8:
         1e:16:c6:38:dc:e1:6e:33:1c:4d:e7:66:64:57:ab:c4:ba:79:
         e0:a6:a4:55:94:05:01:ee:37:df:3e:c2:1f:c6:09:23:92:0d:
         49:37:29:e0:9d:71:be:97:28:af:8b:09:4f:6e:a8:ed:43:27:
         b0:cd:fd:9b:40:ea:c0:f8:b6:16:c5:5d:1c:34:89:b7:65:50:
         44:dd:c7:40:85:71:c0:90:d0:d5:bb:22:d5:2d:03:3b:66:8d:
         22:d7:6e:0f:7b:f2:99:34:a1:97:ac:17:e2:aa:11:1f:d3:7a:
         75:20:b3:9d:54:60:4b:bd:06:f3:c1:c4:3c:63:21:35:d7:04:
         ef:49:c9:f2:d0:af:db:7e:76:d9:25:af:27:78:fc:1d:e7:64:
         ca:6d:ba:1a:83:b3:ff:28:46:81:d8:44:01:85:7d:ee:b4:b4:
         f1:3b:28:1c:b9:67:97:85:d3:2e:23:61:80:75:2e:28:ff:77:
         07:f3:e8:5b:32:1a:f2:5f:6a:ee:43:69:97:31:a5:22:3b:eb:
         86:50:2f:56:7e:10:e9:87:cc:72:6e:ae:b9:9d:49:4a:00:66:
         90:75:34:19
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUHi1VwXqhIO4SQSEgdXh84BsAHrowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODkxODc2Mzc5NjYxMDk2NjMzQ0NGMUUxNEQ4MkQxQkJC
OUNCRjEzMzAeFw0yNDEwMTUxNjM2MTNaFw0yNTEwMTQxNjQxMTNaMDMxMTAvBgNV
BAMTKEM2NkIyNThDQTNCM0VFQTFENTVERTRDODExMEQ5RUYyQzQxMUUxRTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7FyT7tMrtuGlSqhq1loke/wEX
iYDOgdos3XfMS1/RG2zbnT3PXa6xjfctiDTtRRN/dMT7ewYPgHnCunXZD5zJ9TfK
i9w3iRqO/o+gsbiUmJavme1TozoiOa8KJp0fhs8nnBD3ljN7GgQQz7G4YiZ79La1
Z5ZvSHzZadyGAoDJQCH7p9OQz0ob+M6Caw/bJiNuSV/7fGrX6fgrFxpl3MAzzHmp
0/Qs+kuZn1rjjjGN72N+UJT+71RLCRE2sWgCS4Tt8PZgdQ94gYFFwJNTSFFKKGjC
KlLdaLJiAmBaiua7ALumxY9e+64V4V/otkT5JhgTezII3wavIibr9v2tJ2kPAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUxmsljKOz7qHVXeTIEQ2e8sQR4eMwHwYDVR0j
BBgwFoAUiRh2N5ZhCWYzzPHhTYLRu7nL8TMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRDNjaWVxenZNQzJQS1RBOVRZZVBqcVFuOFEyZEt4Zlg4UmdoS0tvcHFN
RlAvMC84OTE4NzYzNzk2NjEwOTY2MzNDQ0YxRTE0RDgyRDFCQkI5Q0JGMTMzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzg5MTg3NjM3OTY2MTA5NjYz
M0NDRjFFMTREODJEMUJCQjlDQkYxMzMuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0QzY2llcXp2TUMyUEtUQTlUWWVQanFRbjhRMmRLeGZYOFJnaEtLb3BxTUZQLzAv
MzQzNTJlMzEzODMzMmUzMjMxMzIyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjM2
MzkzMjM5MzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAEtt9QwDQYJKoZIhvcNAQELBQADggEBAJoA5MBi
MhJUhishowjcFhURxt8ucNIuuN7u0tUK3zfvxEhfuB4Wxjjc4W4zHE3nZmRXq8S6
eeCmpFWUBQHuN98+wh/GCSOSDUk3KeCdcb6XKK+LCU9uqO1DJ7DN/ZtA6sD4thbF
XRw0ibdlUETdx0CFccCQ0NW7ItUtAztmjSLXbg978pk0oZesF+KqER/TenUgs51U
YEu9BvPBxDxjITXXBO9JyfLQr9t+dtklryd4/B3nZMptuhqDs/8oRoHYRAGFfe60
tPE7KBy5Z5eF0y4jYYB1Lij/dwfz6FsyGvJfau5DaZcxpSI764ZQL1Z+EOmHzHJu
rrmdSUoAZpB1NBk=
-----END CERTIFICATE-----
Generated at Fri Nov 29 20:09:49 2024 by rpki-client on console-fra.rpki-client.org