Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DvxrUCmnYeTkh1QDjProGtBP33EWnAWi4BEFBKtMxruE/1/34352e3136382e3130302e302f32322d3234203d3e20323638303838.roa
File:                     34352e3136382e3130302e302f32322d3234203d3e20323638303838.roa (raw, json)
Hash identifier:          gbo1ZzkUCZWG5+l5CgTYJZtfpThAgQk/L6rli7IY0ZY=
Subject key identifier:   0D:4A:EC:46:9E:0B:65:9E:61:42:A2:8F:6F:34:35:10:D2:F8:DF:D3
Certificate issuer:       /CN=9CDD5ED9F381FA7C7CF55870AB5AC71FABD4ADA1
Certificate serial:       6FD8BF54BB9CEAAD54448FF345709F4540A31FE8
Authority key identifier: 9C:DD:5E:D9:F3:81:FA:7C:7C:F5:58:70:AB:5A:C7:1F:AB:D4:AD:A1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CDD5ED9F381FA7C7CF55870AB5AC71FABD4ADA1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DvxrUCmnYeTkh1QDjProGtBP33EWnAWi4BEFBKtMxruE/1/34352e3136382e3130302e302f32322d3234203d3e20323638303838.roa
Signing time:             Wed 03 Apr 2024 19:03:55 +0000
ROA not before:           Wed 03 Apr 2024 18:58:55 +0000
ROA not after:            Wed 02 Apr 2025 19:03:55 +0000
asID:                     268088
IP address blocks:        45.168.100.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DvxrUCmnYeTkh1QDjProGtBP33EWnAWi4BEFBKtMxruE/1/9CDD5ED9F381FA7C7CF55870AB5AC71FABD4ADA1.crl
                          rsync://rpki-repo.registro.br/repo/DvxrUCmnYeTkh1QDjProGtBP33EWnAWi4BEFBKtMxruE/1/9CDD5ED9F381FA7C7CF55870AB5AC71FABD4ADA1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CDD5ED9F381FA7C7CF55870AB5AC71FABD4ADA1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 15:43:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:d8:bf:54:bb:9c:ea:ad:54:44:8f:f3:45:70:9f:45:40:a3:1f:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9CDD5ED9F381FA7C7CF55870AB5AC71FABD4ADA1
        Validity
            Not Before: Apr  3 18:58:55 2024 GMT
            Not After : Apr  2 19:03:55 2025 GMT
        Subject: CN=0D4AEC469E0B659E6142A28F6F343510D2F8DFD3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:dd:3c:78:0d:3c:2d:81:a8:80:aa:43:61:d6:
                    65:0f:d5:5e:49:87:76:34:a2:76:e4:66:96:a2:12:
                    9a:2d:f7:b4:ee:3b:bc:e5:9b:5c:9b:25:95:94:8b:
                    79:9f:c3:7a:27:99:dd:34:38:c5:c8:73:de:3f:54:
                    f6:96:25:e0:95:45:97:1d:4b:85:be:37:b9:1b:65:
                    db:91:b4:7e:27:e5:bf:7e:e9:c8:2b:b9:4c:5a:a0:
                    1a:2b:2e:fd:2b:88:94:58:16:5b:46:d2:f3:ac:2c:
                    3f:a0:49:5b:d6:8b:f7:d3:35:78:a6:7e:72:72:7d:
                    bb:6d:d5:76:f3:d4:5d:8d:92:01:c3:e3:2a:be:13:
                    3a:7c:58:04:9c:93:67:db:93:4d:c1:e9:2c:ff:8b:
                    fa:c4:f0:6a:3b:b9:57:6e:de:49:59:20:9b:49:21:
                    e0:43:f6:56:bd:56:ad:b4:93:2c:5a:bd:1b:3a:81:
                    31:65:31:84:cb:ff:be:c6:54:9b:c7:82:06:69:3e:
                    8a:b7:aa:5f:e0:79:8f:b3:03:f9:6a:7e:d2:4e:b6:
                    14:8e:6a:31:25:17:0e:21:27:09:a6:c5:7a:33:02:
                    17:a3:fa:7c:ed:f0:11:a1:f5:14:c4:9d:85:41:59:
                    ed:6d:21:e0:aa:07:72:f6:fb:c4:37:18:fc:de:4b:
                    a3:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:4A:EC:46:9E:0B:65:9E:61:42:A2:8F:6F:34:35:10:D2:F8:DF:D3
            X509v3 Authority Key Identifier:
                keyid:9C:DD:5E:D9:F3:81:FA:7C:7C:F5:58:70:AB:5A:C7:1F:AB:D4:AD:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DvxrUCmnYeTkh1QDjProGtBP33EWnAWi4BEFBKtMxruE/1/9CDD5ED9F381FA7C7CF55870AB5AC71FABD4ADA1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CDD5ED9F381FA7C7CF55870AB5AC71FABD4ADA1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DvxrUCmnYeTkh1QDjProGtBP33EWnAWi4BEFBKtMxruE/1/34352e3136382e3130302e302f32322d3234203d3e20323638303838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.168.100.0/22

    Signature Algorithm: sha256WithRSAEncryption
         77:13:88:64:d2:cb:75:7b:0c:7a:ca:d9:10:37:b7:f9:f6:6e:
         3d:39:25:00:34:fb:9e:39:10:b2:26:ad:ac:11:28:87:7d:a8:
         d8:16:82:7e:5e:2c:16:c3:78:d0:36:ef:fb:ea:28:a8:0f:1b:
         18:09:f5:97:5c:f9:e6:4a:d8:93:fb:c7:26:5d:9c:02:9b:8d:
         d2:3d:a6:a7:fb:e1:43:b0:a7:64:51:9b:3a:38:a5:ef:31:ab:
         30:a5:72:7d:4b:40:94:13:10:12:5b:a9:4e:ed:a9:f0:9f:d2:
         2f:61:50:a6:f5:eb:0b:46:7a:bb:5e:bc:fd:4b:87:55:bf:9b:
         96:bc:0b:c4:16:49:eb:38:ba:ec:c0:f6:79:a8:3c:14:a0:b7:
         0e:d7:06:0f:14:36:e5:94:c8:e6:42:3e:82:8f:1a:c3:78:ed:
         e4:bf:b3:79:2c:a0:86:8c:9f:dc:72:43:37:c1:3a:a1:0c:a8:
         8b:f9:6e:01:06:1b:4f:1d:45:65:d9:6a:28:b0:40:52:43:99:
         db:a3:ab:4e:1c:fa:57:9e:dc:26:02:17:1e:16:a5:26:0c:a5:
         8d:fc:44:c0:da:c2:73:8b:56:b8:ea:8a:96:96:58:e7:55:c3:
         d4:ed:74:69:d1:7d:15:f8:09:18:69:0c:49:7b:7d:e3:23:e4:
         a4:9d:2a:fd
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUb9i/VLuc6q1URI/zRXCfRUCjH+gwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUNERDVFRDlGMzgxRkE3QzdDRjU1ODcwQUI1QUM3MUZB
QkQ0QURBMTAeFw0yNDA0MDMxODU4NTVaFw0yNTA0MDIxOTAzNTVaMDMxMTAvBgNV
BAMTKDBENEFFQzQ2OUUwQjY1OUU2MTQyQTI4RjZGMzQzNTEwRDJGOERGRDMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCk3Tx4DTwtgaiAqkNh1mUP1V5J
h3Y0onbkZpaiEpot97TuO7zlm1ybJZWUi3mfw3onmd00OMXIc94/VPaWJeCVRZcd
S4W+N7kbZduRtH4n5b9+6cgruUxaoBorLv0riJRYFltG0vOsLD+gSVvWi/fTNXim
fnJyfbtt1Xbz1F2NkgHD4yq+Ezp8WASck2fbk03B6Sz/i/rE8Go7uVdu3klZIJtJ
IeBD9la9Vq20kyxavRs6gTFlMYTL/77GVJvHggZpPoq3ql/geY+zA/lqftJOthSO
ajElFw4hJwmmxXozAhej+nzt8BGh9RTEnYVBWe1tIeCqB3L2+8Q3GPzeS6MVAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUDUrsRp4LZZ5hQqKPbzQ1ENL439MwHwYDVR0j
BBgwFoAUnN1e2fOB+nx89Vhwq1rHH6vUraEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRHZ4clVDbW5ZZVRraDFRRGpQcm9HdEJQMzNFV25BV2k0QkVGQkt0TXhy
dUUvMS85Q0RENUVEOUYzODFGQTdDN0NGNTU4NzBBQjVBQzcxRkFCRDRBREExLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzlDREQ1RUQ5RjM4MUZBN0M3
Q0Y1NTg3MEFCNUFDNzFGQUJENEFEQTEuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0R2eHJVQ21uWWVUa2gxUURqUHJvR3RCUDMzRVduQVdpNEJFRkJLdE14cnVFLzEv
MzQzNTJlMzEzNjM4MmUzMTMwMzAyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM2
MzgzMDM4Mzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAItqGQwDQYJKoZIhvcNAQELBQADggEBAHcTiGTS
y3V7DHrK2RA3t/n2bj05JQA0+545ELImrawRKId9qNgWgn5eLBbDeNA27/vqKKgP
GxgJ9Zdc+eZK2JP7xyZdnAKbjdI9pqf74UOwp2RRmzo4pe8xqzClcn1LQJQTEBJb
qU7tqfCf0i9hUKb16wtGertevP1Lh1W/m5a8C8QWSes4uuzA9nmoPBSgtw7XBg8U
NuWUyOZCPoKPGsN47eS/s3ksoIaMn9xyQzfBOqEMqIv5bgEGG08dRWXZaiiwQFJD
mdujq04c+lee3CYCFx4WpSYMpY38RMDawnOLVrjqipaWWOdVw9TtdGnRfRX4CRhp
DEl7feMj5KSdKv0=
-----END CERTIFICATE-----
Generated at Sat Sep 28 19:14:01 2024 by rpki-client on console-ams.rpki-client.org