Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DBdVWmNDzArDgU1FonFJKHMiXtp44Yd3bST6NyffGCgg/1/34352e3137392e3137362e302f32322d3332203d3e203631353838.roa
File:                     34352e3137392e3137362e302f32322d3332203d3e203631353838.roa (raw, json)
Hash identifier:          xJBX42w/rzvsRzEd9KABt209mgX3gRguEBoCTcB30Ds=
Subject key identifier:   55:5A:CC:5E:D8:61:53:63:27:B0:20:7A:DA:33:FE:54:C8:61:34:09
Certificate issuer:       /CN=9AEA4DC141FC20D7BA2A5381C52BC34A29AB6815
Certificate serial:       0C3EED007557D053215E46739B66F11E5459B80B
Authority key identifier: 9A:EA:4D:C1:41:FC:20:D7:BA:2A:53:81:C5:2B:C3:4A:29:AB:68:15
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9AEA4DC141FC20D7BA2A5381C52BC34A29AB6815.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DBdVWmNDzArDgU1FonFJKHMiXtp44Yd3bST6NyffGCgg/1/34352e3137392e3137362e302f32322d3332203d3e203631353838.roa
Signing time:             Thu 04 Apr 2024 09:00:25 +0000
ROA not before:           Thu 04 Apr 2024 08:55:25 +0000
ROA not after:            Thu 03 Apr 2025 09:00:25 +0000
asID:                     61588
IP address blocks:        45.179.176.0/22 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DBdVWmNDzArDgU1FonFJKHMiXtp44Yd3bST6NyffGCgg/1/9AEA4DC141FC20D7BA2A5381C52BC34A29AB6815.crl
                          rsync://rpki-repo.registro.br/repo/DBdVWmNDzArDgU1FonFJKHMiXtp44Yd3bST6NyffGCgg/1/9AEA4DC141FC20D7BA2A5381C52BC34A29AB6815.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9AEA4DC141FC20D7BA2A5381C52BC34A29AB6815.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 23:13:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:3e:ed:00:75:57:d0:53:21:5e:46:73:9b:66:f1:1e:54:59:b8:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9AEA4DC141FC20D7BA2A5381C52BC34A29AB6815
        Validity
            Not Before: Apr  4 08:55:25 2024 GMT
            Not After : Apr  3 09:00:25 2025 GMT
        Subject: CN=555ACC5ED861536327B0207ADA33FE54C8613409
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:cc:67:74:ca:ad:d3:e1:2d:10:b3:80:dd:4a:
                    33:e2:98:dd:20:ce:c1:c6:8d:db:de:d6:0f:1f:9e:
                    f9:8b:41:e5:79:5c:af:d9:2a:da:41:9f:38:83:0b:
                    3c:76:c9:25:0e:68:0e:44:1a:6b:13:e3:77:8b:ca:
                    98:03:f5:c6:81:21:8c:cd:69:5c:3d:8c:be:26:fa:
                    9e:48:6a:ca:00:c6:09:25:a1:30:d9:17:bf:ac:ef:
                    38:ab:51:e1:46:25:aa:88:93:b2:e5:9b:9a:bf:b2:
                    ea:ce:27:ca:93:4b:56:54:48:5a:16:76:c7:65:7e:
                    c7:57:8d:89:6a:7b:73:6e:bc:59:69:c3:73:9c:0a:
                    a0:5f:b1:c8:b6:11:f6:a3:a5:cd:9d:a7:45:e1:5d:
                    32:5c:67:6c:2f:df:89:6d:f4:4b:76:7d:2b:6c:e3:
                    4e:b1:8a:09:10:7a:46:13:b3:6c:6c:1d:81:6e:6b:
                    ab:72:3b:c0:f7:80:20:98:78:d3:49:cb:59:6b:d1:
                    d5:9d:75:e6:85:c6:5c:f7:43:16:7e:d2:11:fc:55:
                    4e:cc:0b:20:77:e0:44:9f:81:01:77:f1:6a:a8:d8:
                    c1:32:c6:47:48:40:e0:a6:f6:99:a6:dc:98:22:a8:
                    72:ba:d5:41:24:f8:e7:95:6a:c3:e5:8a:81:f7:a2:
                    ed:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:5A:CC:5E:D8:61:53:63:27:B0:20:7A:DA:33:FE:54:C8:61:34:09
            X509v3 Authority Key Identifier:
                keyid:9A:EA:4D:C1:41:FC:20:D7:BA:2A:53:81:C5:2B:C3:4A:29:AB:68:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DBdVWmNDzArDgU1FonFJKHMiXtp44Yd3bST6NyffGCgg/1/9AEA4DC141FC20D7BA2A5381C52BC34A29AB6815.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9AEA4DC141FC20D7BA2A5381C52BC34A29AB6815.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DBdVWmNDzArDgU1FonFJKHMiXtp44Yd3bST6NyffGCgg/1/34352e3137392e3137362e302f32322d3332203d3e203631353838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.179.176.0/22

    Signature Algorithm: sha256WithRSAEncryption
         08:83:ce:9f:5c:32:3c:f8:93:67:d0:c3:95:29:c3:9f:71:f1:
         de:4a:c8:2c:4d:c0:10:48:58:b0:a0:c8:ca:43:ee:45:a7:14:
         c6:1e:e1:bc:b4:bb:36:58:70:54:ed:c2:c2:68:e3:93:e7:8c:
         5d:ec:f8:33:c2:50:c5:79:64:bd:c4:d0:09:61:20:f9:cb:da:
         e3:44:a1:fd:dc:38:42:4f:29:ec:b3:ba:62:77:de:9e:d5:a3:
         d4:c4:de:58:38:0a:1f:f1:33:7c:d5:96:7b:a1:40:a9:60:d3:
         c0:0b:95:8d:cb:32:0f:11:24:18:70:1a:d2:98:d6:39:c9:46:
         25:b0:f6:da:ce:c4:83:80:d5:0a:43:43:51:69:c5:12:2e:32:
         90:39:11:ed:52:56:f5:52:cf:e0:60:d5:0a:b4:0a:3e:50:b1:
         b4:8b:c6:e7:05:66:94:60:17:04:97:85:0a:7b:47:27:ed:5d:
         21:eb:a2:1f:e1:e1:af:ba:25:a6:52:02:c7:87:60:93:e1:ee:
         81:af:ec:58:40:b6:80:c8:b5:52:6a:90:ce:51:ec:c3:74:7a:
         8b:e9:c7:c6:de:bb:d6:d4:5b:4f:cb:e6:40:ce:b1:d3:0b:10:
         b0:8f:7a:63:50:82:01:c0:94:eb:b0:16:27:74:54:19:c2:30:
         71:54:5f:2b
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUDD7tAHVX0FMhXkZzm2bxHlRZuAswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUFFQTREQzE0MUZDMjBEN0JBMkE1MzgxQzUyQkMzNEEy
OUFCNjgxNTAeFw0yNDA0MDQwODU1MjVaFw0yNTA0MDMwOTAwMjVaMDMxMTAvBgNV
BAMTKDU1NUFDQzVFRDg2MTUzNjMyN0IwMjA3QURBMzNGRTU0Qzg2MTM0MDkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCUzGd0yq3T4S0Qs4DdSjPimN0g
zsHGjdve1g8fnvmLQeV5XK/ZKtpBnziDCzx2ySUOaA5EGmsT43eLypgD9caBIYzN
aVw9jL4m+p5IasoAxgkloTDZF7+s7zirUeFGJaqIk7Llm5q/surOJ8qTS1ZUSFoW
dsdlfsdXjYlqe3NuvFlpw3OcCqBfsci2Efajpc2dp0XhXTJcZ2wv34lt9Et2fSts
406xigkQekYTs2xsHYFua6tyO8D3gCCYeNNJy1lr0dWddeaFxlz3QxZ+0hH8VU7M
CyB34ESfgQF38Wqo2MEyxkdIQOCm9pmm3JgiqHK61UEk+OeVasPlioH3ou3LAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUVVrMXthhU2MnsCB62jP+VMhhNAkwHwYDVR0j
BBgwFoAUmupNwUH8INe6KlOBxSvDSimraBUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vREJkVldtTkR6QXJEZ1UxRm9uRkpLSE1pWHRwNDRZZDNiU1Q2TnlmZkdD
Z2cvMS85QUVBNERDMTQxRkMyMEQ3QkEyQTUzODFDNTJCQzM0QTI5QUI2ODE1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzlBRUE0REMxNDFGQzIwRDdC
QTJBNTM4MUM1MkJDMzRBMjlBQjY4MTUuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RCZFZXbU5EekFyRGdVMUZvbkZKS0hNaVh0cDQ0WWQzYlNUNk55ZmZHQ2dnLzEv
MzQzNTJlMzEzNzM5MmUzMTM3MzYyZTMwMmYzMjMyMmQzMzMyMjAzZDNlMjAzNjMx
MzUzODM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCLbOwMA0GCSqGSIb3DQEBCwUAA4IBAQAIg86fXDI8
+JNn0MOVKcOfcfHeSsgsTcAQSFiwoMjKQ+5FpxTGHuG8tLs2WHBU7cLCaOOT54xd
7PgzwlDFeWS9xNAJYSD5y9rjRKH93DhCTynss7pid96e1aPUxN5YOAof8TN81ZZ7
oUCpYNPAC5WNyzIPESQYcBrSmNY5yUYlsPbazsSDgNUKQ0NRacUSLjKQORHtUlb1
Us/gYNUKtAo+ULG0i8bnBWaUYBcEl4UKe0cn7V0h66If4eGvuiWmUgLHh2CT4e6B
r+xYQLaAyLVSapDOUezDdHqL6cfG3rvW1FtPy+ZAzrHTCxCwj3pjUIIBwJTrsBYn
dFQZwjBxVF8r
-----END CERTIFICATE-----
Generated at Sat Nov 23 00:05:42 2024 by rpki-client on console-ams.rpki-client.org