Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EJVHQ6GpmMA4PdwacCWJEokxhU1VQzkypcyX6Q9E66JF/0/34352e3138322e33342e302f32332d3233203d3e20323639323635.roa
File:                     34352e3138322e33342e302f32332d3233203d3e20323639323635.roa (raw, json)
Hash identifier:          P0tRL2VgzgtWwm0VV31SVm3zdygQZgm6kDAZHkwUKGk=
Subject key identifier:   03:85:03:C5:6C:5D:E0:AE:02:21:8A:AD:F4:53:96:89:EB:77:E2:01
Certificate issuer:       /CN=3AB0C1C3272FAF86D4CC4B68841015B5E90A1D42
Certificate serial:       2B13EC0B3B3C56953F02691A2B448DA9F79886DE
Authority key identifier: 3A:B0:C1:C3:27:2F:AF:86:D4:CC:4B:68:84:10:15:B5:E9:0A:1D:42
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3AB0C1C3272FAF86D4CC4B68841015B5E90A1D42.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EJVHQ6GpmMA4PdwacCWJEokxhU1VQzkypcyX6Q9E66JF/0/34352e3138322e33342e302f32332d3233203d3e20323639323635.roa
Signing time:             Thu 21 Nov 2024 22:00:10 +0000
ROA not before:           Thu 21 Nov 2024 21:55:10 +0000
ROA not after:            Thu 20 Nov 2025 22:00:10 +0000
asID:                     269265
IP address blocks:        45.182.34.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EJVHQ6GpmMA4PdwacCWJEokxhU1VQzkypcyX6Q9E66JF/0/3AB0C1C3272FAF86D4CC4B68841015B5E90A1D42.crl
                          rsync://rpki-repo.registro.br/repo/EJVHQ6GpmMA4PdwacCWJEokxhU1VQzkypcyX6Q9E66JF/0/3AB0C1C3272FAF86D4CC4B68841015B5E90A1D42.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3AB0C1C3272FAF86D4CC4B68841015B5E90A1D42.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 17:38:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:13:ec:0b:3b:3c:56:95:3f:02:69:1a:2b:44:8d:a9:f7:98:86:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3AB0C1C3272FAF86D4CC4B68841015B5E90A1D42
        Validity
            Not Before: Nov 21 21:55:10 2024 GMT
            Not After : Nov 20 22:00:10 2025 GMT
        Subject: CN=038503C56C5DE0AE02218AADF4539689EB77E201
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:88:69:a3:72:de:c4:df:56:ee:6e:77:3b:c6:
                    ab:4f:7c:fb:9a:ee:6c:bc:49:aa:4e:51:92:a6:41:
                    64:81:2a:ef:7c:f2:ca:d5:99:92:47:92:8f:73:78:
                    2c:a6:5f:73:79:c2:f9:b5:0f:d2:a7:15:da:c0:09:
                    a5:e7:de:0e:43:a5:71:5b:25:e0:95:27:3a:81:fd:
                    9f:2a:e4:82:3b:83:6e:a4:7f:c9:7d:c1:b0:90:ec:
                    af:e9:fe:d8:bc:d8:b6:54:e9:3d:b5:df:5e:52:ef:
                    4e:51:cf:1f:e4:32:cd:aa:43:f0:10:23:5e:a0:21:
                    1a:16:47:45:cd:d4:ad:e2:75:ac:01:73:29:45:80:
                    8b:4a:db:ed:9c:3b:ba:52:2d:f1:d7:34:a1:e6:69:
                    36:41:65:cc:14:7d:c7:04:79:63:b3:86:7c:0f:61:
                    08:2a:e7:73:45:d6:17:f4:b6:ba:32:6b:3a:f4:d4:
                    f3:a0:eb:78:c9:ae:fe:66:57:8e:e5:79:5c:4f:b7:
                    b4:87:53:cf:d0:0b:27:ae:62:3c:2b:94:85:9a:27:
                    04:6c:51:e9:1c:b0:fb:b8:c6:ee:a6:67:c1:6c:c1:
                    b4:e4:5a:0a:1f:fc:3c:3b:07:3a:3d:05:f0:1b:93:
                    a5:6a:2a:e6:7b:77:90:7c:3e:26:c2:90:a6:b4:c7:
                    9b:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:85:03:C5:6C:5D:E0:AE:02:21:8A:AD:F4:53:96:89:EB:77:E2:01
            X509v3 Authority Key Identifier:
                keyid:3A:B0:C1:C3:27:2F:AF:86:D4:CC:4B:68:84:10:15:B5:E9:0A:1D:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EJVHQ6GpmMA4PdwacCWJEokxhU1VQzkypcyX6Q9E66JF/0/3AB0C1C3272FAF86D4CC4B68841015B5E90A1D42.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3AB0C1C3272FAF86D4CC4B68841015B5E90A1D42.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EJVHQ6GpmMA4PdwacCWJEokxhU1VQzkypcyX6Q9E66JF/0/34352e3138322e33342e302f32332d3233203d3e20323639323635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.182.34.0/23

    Signature Algorithm: sha256WithRSAEncryption
         d6:80:13:97:af:f1:dc:b4:6c:8e:56:ce:4b:7d:a6:a9:c9:97:
         a0:c3:42:d4:e9:1e:d3:5a:c0:c6:f5:1a:6d:42:2f:91:b9:83:
         a7:26:0a:4d:aa:15:f7:01:d1:97:f6:49:ef:a5:b6:c2:4c:f9:
         3b:a9:06:0f:04:40:5a:09:16:e5:3f:76:a4:69:e1:35:fa:bf:
         7f:a9:e3:34:8f:fa:6b:c6:8d:e8:41:bc:f7:82:c7:9b:c5:68:
         f4:c9:b4:2d:bd:4d:ad:20:3a:60:f5:43:28:83:d6:bb:9e:0a:
         c3:a7:6d:0a:d0:8f:ec:44:ae:c8:2c:e3:42:b7:e2:99:24:8f:
         fc:6c:e7:a6:25:5f:46:48:49:0c:32:84:71:76:9b:93:6b:ae:
         25:21:8e:7a:7a:c0:35:3d:96:3e:94:6d:2f:e6:f3:2a:a1:c3:
         b3:78:a3:88:19:76:8a:e7:92:87:23:8c:61:b4:93:97:a5:df:
         e8:cb:43:4e:67:ed:bf:2f:3f:08:52:9c:44:85:37:6f:d7:da:
         c3:d5:73:36:da:4f:35:ca:a6:50:e0:57:4d:46:ba:60:87:88:
         05:cd:4d:3d:11:b3:a3:a6:d1:35:45:64:7c:a3:38:01:15:d5:
         75:13:b1:00:7a:f7:13:66:86:af:e8:e5:56:f5:56:51:d9:af:
         f3:1c:90:73
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUKxPsCzs8VpU/AmkaK0SNqfeYht4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0FCMEMxQzMyNzJGQUY4NkQ0Q0M0QjY4ODQxMDE1QjVF
OTBBMUQ0MjAeFw0yNDExMjEyMTU1MTBaFw0yNTExMjAyMjAwMTBaMDMxMTAvBgNV
BAMTKDAzODUwM0M1NkM1REUwQUUwMjIxOEFBREY0NTM5Njg5RUI3N0UyMDEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDeiGmjct7E31bubnc7xqtPfPua
7my8SapOUZKmQWSBKu988srVmZJHko9zeCymX3N5wvm1D9KnFdrACaXn3g5DpXFb
JeCVJzqB/Z8q5II7g26kf8l9wbCQ7K/p/ti82LZU6T21315S705Rzx/kMs2qQ/AQ
I16gIRoWR0XN1K3idawBcylFgItK2+2cO7pSLfHXNKHmaTZBZcwUfccEeWOzhnwP
YQgq53NF1hf0troyazr01POg63jJrv5mV47leVxPt7SHU8/QCyeuYjwrlIWaJwRs
UekcsPu4xu6mZ8FswbTkWgof/Dw7Bzo9BfAbk6VqKuZ7d5B8PibCkKa0x5tvAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUA4UDxWxd4K4CIYqt9FOWiet34gEwHwYDVR0j
BBgwFoAUOrDBwycvr4bUzEtohBAVtekKHUIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRUpWSFE2R3BtTUE0UGR3YWNDV0pFb2t4aFUxVlF6a3lwY3lYNlE5RTY2
SkYvMC8zQUIwQzFDMzI3MkZBRjg2RDRDQzRCNjg4NDEwMTVCNUU5MEExRDQyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzNBQjBDMUMzMjcyRkFGODZE
NENDNEI2ODg0MTAxNUI1RTkwQTFENDIuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0VKVkhRNkdwbU1BNFBkd2FjQ1dKRW9reGhVMVZRemt5cGN5WDZROUU2NkpGLzAv
MzQzNTJlMzEzODMyMmUzMzM0MmUzMDJmMzIzMzJkMzIzMzIwM2QzZTIwMzIzNjM5
MzIzNjM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQBLbYiMA0GCSqGSIb3DQEBCwUAA4IBAQDWgBOXr/Hc
tGyOVs5LfaapyZegw0LU6R7TWsDG9RptQi+RuYOnJgpNqhX3AdGX9knvpbbCTPk7
qQYPBEBaCRblP3akaeE1+r9/qeM0j/prxo3oQbz3gsebxWj0ybQtvU2tIDpg9UMo
g9a7ngrDp20K0I/sRK7ILONCt+KZJI/8bOemJV9GSEkMMoRxdpuTa64lIY56esA1
PZY+lG0v5vMqocOzeKOIGXaK55KHI4xhtJOXpd/oy0NOZ+2/Lz8IUpxEhTdv19rD
1XM22k81yqZQ4FdNRrpgh4gFzU09EbOjptE1RWR8ozgBFdV1E7EAevcTZoav6OVW
9VZR2a/zHJBz
-----END CERTIFICATE-----
Generated at Mon Nov 25 15:49:59 2024 by rpki-client on console-ams.rpki-client.org