Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DhUX35ZMUCbRhYuECLQuQiyiqCX4z9LvRirJw3bBUwyX/0/34352e3138362e38332e302f32342d3234203d3e20323639343136.roa
File:                     34352e3138362e38332e302f32342d3234203d3e20323639343136.roa (raw, json)
Hash identifier:          0iYfdjSZwhOz/MWx3GRYXbX9K2sDdV2r/MtqG//ugUE=
Subject key identifier:   29:64:97:25:C4:F1:47:FA:D4:ED:10:01:13:39:D2:5E:3D:4F:49:A6
Certificate issuer:       /CN=2431B91B2498F01C25C009C9345EE622B155100B
Certificate serial:       317D6B88DEBFDFF384F0636665E3A08DA26E7FEE
Authority key identifier: 24:31:B9:1B:24:98:F0:1C:25:C0:09:C9:34:5E:E6:22:B1:55:10:0B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2431B91B2498F01C25C009C9345EE622B155100B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DhUX35ZMUCbRhYuECLQuQiyiqCX4z9LvRirJw3bBUwyX/0/34352e3138362e38332e302f32342d3234203d3e20323639343136.roa
Signing time:             Wed 30 Oct 2024 15:02:53 +0000
ROA not before:           Wed 30 Oct 2024 14:57:53 +0000
ROA not after:            Wed 29 Oct 2025 15:02:53 +0000
asID:                     269416
IP address blocks:        45.186.83.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DhUX35ZMUCbRhYuECLQuQiyiqCX4z9LvRirJw3bBUwyX/0/2431B91B2498F01C25C009C9345EE622B155100B.crl
                          rsync://rpki-repo.registro.br/repo/DhUX35ZMUCbRhYuECLQuQiyiqCX4z9LvRirJw3bBUwyX/0/2431B91B2498F01C25C009C9345EE622B155100B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2431B91B2498F01C25C009C9345EE622B155100B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:7d:6b:88:de:bf:df:f3:84:f0:63:66:65:e3:a0:8d:a2:6e:7f:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2431B91B2498F01C25C009C9345EE622B155100B
        Validity
            Not Before: Oct 30 14:57:53 2024 GMT
            Not After : Oct 29 15:02:53 2025 GMT
        Subject: CN=29649725C4F147FAD4ED10011339D25E3D4F49A6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fd:1a:38:38:9c:75:0a:4c:d1:58:47:22:bd:bf:
                    4e:71:60:cb:84:f0:d0:ad:7b:41:9b:e7:c9:eb:f7:
                    b1:32:af:bc:e8:d5:ba:7d:0e:84:28:a9:61:69:e6:
                    7f:1f:98:2a:36:66:37:7c:ce:78:4e:11:31:3f:58:
                    5d:c2:b4:41:7f:91:d8:05:a5:3f:f7:7c:8a:3d:b6:
                    41:95:e2:6d:43:52:e0:2e:95:9a:6f:bc:ad:e4:50:
                    79:bd:56:a2:38:cf:97:ed:8a:4e:f1:0f:2b:a7:ca:
                    a9:9f:5c:e8:54:09:15:f9:03:87:e7:2f:69:76:a6:
                    4a:e6:87:35:07:61:ae:36:df:cb:86:27:75:51:bf:
                    5c:34:fc:b2:c5:9f:95:19:13:9a:68:f2:c8:81:2e:
                    3d:99:eb:59:f3:6d:ab:a1:e1:57:57:d0:99:d4:1d:
                    6a:70:a5:b1:6e:41:6a:6c:2d:f4:f4:4c:2e:c9:e8:
                    0c:47:d5:77:3f:e2:52:02:cf:e4:4e:77:47:f6:65:
                    49:e2:c2:a1:4f:4b:d2:5f:4f:fe:87:72:d9:9a:b7:
                    09:c7:06:a8:47:0c:19:c3:c5:0a:42:eb:8e:d9:ec:
                    b1:a5:fc:4b:c5:df:19:25:6c:ae:9c:6d:89:06:a9:
                    87:18:ea:7d:d2:fa:b6:a1:e6:45:7e:33:2b:2b:c5:
                    e1:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:64:97:25:C4:F1:47:FA:D4:ED:10:01:13:39:D2:5E:3D:4F:49:A6
            X509v3 Authority Key Identifier:
                keyid:24:31:B9:1B:24:98:F0:1C:25:C0:09:C9:34:5E:E6:22:B1:55:10:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DhUX35ZMUCbRhYuECLQuQiyiqCX4z9LvRirJw3bBUwyX/0/2431B91B2498F01C25C009C9345EE622B155100B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2431B91B2498F01C25C009C9345EE622B155100B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DhUX35ZMUCbRhYuECLQuQiyiqCX4z9LvRirJw3bBUwyX/0/34352e3138362e38332e302f32342d3234203d3e20323639343136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.186.83.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c0:10:5a:0f:28:6d:e8:b2:1d:8d:48:f8:a4:3f:28:5d:aa:4b:
         a2:a0:a7:bb:e3:62:51:96:c8:6d:33:06:dd:fb:ac:74:dc:bf:
         97:58:c2:e2:99:74:89:4a:59:6c:2b:36:5a:e5:c3:f8:08:40:
         24:1c:28:1e:03:6b:a3:0a:9d:04:48:25:8a:8e:e3:94:d2:4a:
         c3:3c:bb:0e:a4:ee:d3:a3:7b:ee:4f:c2:20:94:70:cd:6a:bf:
         41:37:57:82:5a:90:f3:c8:de:5d:49:0c:34:1d:dc:5e:6e:62:
         e9:e9:fb:0f:ec:f1:d0:a8:c3:0a:c8:57:65:76:67:d6:4b:cd:
         c5:7f:ba:76:9d:29:f4:63:85:61:1f:d5:51:c8:e7:63:14:8c:
         89:98:98:9b:01:60:a3:91:1f:a6:af:35:d7:6f:d2:0f:bd:c8:
         3e:ef:6d:18:48:9b:86:0b:17:b0:91:55:1f:28:79:0f:65:34:
         20:86:1c:13:07:a9:63:ec:71:1e:12:2e:1d:e1:25:37:1d:60:
         bc:95:3c:2e:46:3b:43:5b:37:71:a1:98:87:1b:af:be:81:bd:
         bf:a9:fb:c8:84:2d:27:cd:bb:df:60:13:c6:8c:ba:9d:8e:7c:
         5f:00:b0:e7:d8:18:8f:37:29:8f:d8:fd:c5:8f:53:30:d0:aa:
         7f:99:b0:53
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUMX1riN6/3/OE8GNmZeOgjaJuf+4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjQzMUI5MUIyNDk4RjAxQzI1QzAwOUM5MzQ1RUU2MjJC
MTU1MTAwQjAeFw0yNDEwMzAxNDU3NTNaFw0yNTEwMjkxNTAyNTNaMDMxMTAvBgNV
BAMTKDI5NjQ5NzI1QzRGMTQ3RkFENEVEMTAwMTEzMzlEMjVFM0Q0RjQ5QTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD9Gjg4nHUKTNFYRyK9v05xYMuE
8NCte0Gb58nr97Eyr7zo1bp9DoQoqWFp5n8fmCo2Zjd8znhOETE/WF3CtEF/kdgF
pT/3fIo9tkGV4m1DUuAulZpvvK3kUHm9VqI4z5ftik7xDyunyqmfXOhUCRX5A4fn
L2l2pkrmhzUHYa4238uGJ3VRv1w0/LLFn5UZE5po8siBLj2Z61nzbauh4VdX0JnU
HWpwpbFuQWpsLfT0TC7J6AxH1Xc/4lICz+ROd0f2ZUniwqFPS9JfT/6HctmatwnH
BqhHDBnDxQpC647Z7LGl/EvF3xklbK6cbYkGqYcY6n3S+rah5kV+MysrxeEFAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUKWSXJcTxR/rU7RABEznSXj1PSaYwHwYDVR0j
BBgwFoAUJDG5GySY8BwlwAnJNF7mIrFVEAswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRGhVWDM1Wk1VQ2JSaFl1RUNMUXVRaXlpcUNYNHo5THZSaXJKdzNiQlV3
eVgvMC8yNDMxQjkxQjI0OThGMDFDMjVDMDA5QzkzNDVFRTYyMkIxNTUxMDBCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzI0MzFCOTFCMjQ5OEYwMUMy
NUMwMDlDOTM0NUVFNjIyQjE1NTEwMEIuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RoVVgzNVpNVUNiUmhZdUVDTFF1UWl5aXFDWDR6OUx2UmlySnczYkJVd3lYLzAv
MzQzNTJlMzEzODM2MmUzODMzMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM5
MzQzMTM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQALbpTMA0GCSqGSIb3DQEBCwUAA4IBAQDAEFoPKG3o
sh2NSPikPyhdqkuioKe742JRlshtMwbd+6x03L+XWMLimXSJSllsKzZa5cP4CEAk
HCgeA2ujCp0ESCWKjuOU0krDPLsOpO7To3vuT8IglHDNar9BN1eCWpDzyN5dSQw0
HdxebmLp6fsP7PHQqMMKyFdldmfWS83Ff7p2nSn0Y4VhH9VRyOdjFIyJmJibAWCj
kR+mrzXXb9IPvcg+720YSJuGCxewkVUfKHkPZTQghhwTB6lj7HEeEi4d4SU3HWC8
lTwuRjtDWzdxoZiHG6++gb2/qfvIhC0nzbvfYBPGjLqdjnxfALDn2BiPNymP2P3F
j1Mw0Kp/mbBT
-----END CERTIFICATE-----
Generated at Sat Nov 23 11:32:53 2024 by rpki-client on console-fra.rpki-client.org