Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EfV7G1okT1vQtFbMQpgatDC9pthwAMUd8HUrvuEovE4K/0/34352e3138382e31302e302f32332d3233203d3e20323639353636.roa
File:                     34352e3138382e31302e302f32332d3233203d3e20323639353636.roa (raw, json)
Hash identifier:          TLN8ZNa53b+doaEx78MA5gcNo1k0+Yub7oRvRL9guWk=
Subject key identifier:   09:24:A6:75:CB:41:8A:A4:39:51:EA:5C:90:4B:DA:12:B3:BF:C2:CD
Certificate issuer:       /CN=8B76B82695398F313AF28AE7E54FA9B6036F0B82
Certificate serial:       485953B91EDF9549B32B599F93655236FF5EBD6B
Authority key identifier: 8B:76:B8:26:95:39:8F:31:3A:F2:8A:E7:E5:4F:A9:B6:03:6F:0B:82
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8B76B82695398F313AF28AE7E54FA9B6036F0B82.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EfV7G1okT1vQtFbMQpgatDC9pthwAMUd8HUrvuEovE4K/0/34352e3138382e31302e302f32332d3233203d3e20323639353636.roa
Signing time:             Thu 23 Jan 2025 12:24:58 +0000
ROA not before:           Thu 23 Jan 2025 12:19:58 +0000
ROA not after:            Thu 22 Jan 2026 12:24:58 +0000
asID:                     269566
IP address blocks:        45.188.10.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EfV7G1okT1vQtFbMQpgatDC9pthwAMUd8HUrvuEovE4K/0/8B76B82695398F313AF28AE7E54FA9B6036F0B82.crl
                          rsync://rpki-repo.registro.br/repo/EfV7G1okT1vQtFbMQpgatDC9pthwAMUd8HUrvuEovE4K/0/8B76B82695398F313AF28AE7E54FA9B6036F0B82.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8B76B82695398F313AF28AE7E54FA9B6036F0B82.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 17 Feb 2025 15:44:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:59:53:b9:1e:df:95:49:b3:2b:59:9f:93:65:52:36:ff:5e:bd:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8B76B82695398F313AF28AE7E54FA9B6036F0B82
        Validity
            Not Before: Jan 23 12:19:58 2025 GMT
            Not After : Jan 22 12:24:58 2026 GMT
        Subject: CN=0924A675CB418AA43951EA5C904BDA12B3BFC2CD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:a1:87:16:c4:52:4f:ae:c7:db:b0:0d:3f:3b:
                    3e:98:ae:9d:15:da:20:71:ef:24:10:e7:50:e6:de:
                    4f:ec:e0:fb:e5:8a:b7:ba:0e:c6:58:39:67:e9:d3:
                    e4:f6:bb:ef:15:52:db:5e:de:62:68:15:85:4a:9e:
                    36:f0:68:43:c8:63:01:66:b4:29:b3:b4:72:5c:e3:
                    a2:b0:0d:52:e4:13:fa:49:0a:04:df:cd:04:93:e4:
                    84:9c:2c:69:26:73:6e:45:7e:e7:f7:25:07:32:b8:
                    1d:ad:c0:dc:18:48:b2:4e:4e:43:49:d9:5f:b4:c0:
                    9e:70:f6:fc:25:69:a2:4d:5a:d0:7e:c2:20:76:bf:
                    c0:5b:6b:d6:39:e5:a9:8c:c2:a7:58:69:5f:6a:f3:
                    b6:e0:43:4e:73:df:0b:77:5b:eb:47:0a:5b:19:8a:
                    6a:36:05:7f:1f:6c:c1:f5:b8:45:23:9e:b3:79:f0:
                    48:31:06:91:03:a3:7b:bd:0e:78:dd:39:cb:44:6b:
                    20:d6:ea:02:64:a6:fa:b2:5c:58:81:f3:0f:d7:b3:
                    c3:30:ca:e0:54:33:11:df:ba:ef:84:61:4e:7b:f0:
                    5b:17:e3:24:68:e2:0a:11:66:40:c8:7c:b3:66:98:
                    0f:d6:89:7c:a3:8d:14:3c:93:cb:dd:f0:82:36:98:
                    00:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:24:A6:75:CB:41:8A:A4:39:51:EA:5C:90:4B:DA:12:B3:BF:C2:CD
            X509v3 Authority Key Identifier:
                keyid:8B:76:B8:26:95:39:8F:31:3A:F2:8A:E7:E5:4F:A9:B6:03:6F:0B:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EfV7G1okT1vQtFbMQpgatDC9pthwAMUd8HUrvuEovE4K/0/8B76B82695398F313AF28AE7E54FA9B6036F0B82.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8B76B82695398F313AF28AE7E54FA9B6036F0B82.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EfV7G1okT1vQtFbMQpgatDC9pthwAMUd8HUrvuEovE4K/0/34352e3138382e31302e302f32332d3233203d3e20323639353636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.188.10.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8f:11:4d:62:ec:a0:c5:12:c7:cb:65:8b:5f:3e:f7:64:08:e6:
         95:d9:4c:34:f0:14:49:4a:47:75:9a:8a:59:4a:3b:82:42:4a:
         99:98:34:79:56:e3:f2:66:10:8c:de:98:09:48:be:2d:84:2a:
         ec:0e:7a:7a:c5:ff:59:f9:1e:16:38:3f:b9:58:be:2b:f5:40:
         57:52:8e:c3:96:1e:5c:06:1d:ef:0b:1f:2d:60:93:09:e9:2a:
         de:38:c7:40:9f:7c:38:b7:49:22:21:6e:6f:a5:f1:64:4e:db:
         70:01:9f:f5:57:62:74:c8:5a:30:da:fa:ed:a5:d7:70:e0:cf:
         99:24:16:04:89:2c:35:17:c5:2d:f5:05:84:1e:d3:71:10:a3:
         f9:f3:99:ac:0d:2b:a5:09:5b:0f:4d:b4:53:3e:dd:14:9d:46:
         b9:d0:bc:63:6d:d7:ac:96:a3:57:f8:c7:a9:db:cb:d8:f3:a9:
         24:d5:c4:94:92:43:f1:e7:63:2c:4d:5f:5b:22:78:88:2d:7d:
         bb:a0:c0:43:d3:5a:29:25:6d:8e:97:f8:47:87:ea:22:7a:6f:
         75:46:1e:bc:e3:8c:f1:fe:1e:c6:c7:03:58:2d:11:b6:21:0e:
         75:ac:8e:43:3c:a6:87:ee:a4:0b:87:12:10:dc:11:73:b2:e1:
         33:86:a9:6c
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUSFlTuR7flUmzK1mfk2VSNv9evWswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEI3NkI4MjY5NTM5OEYzMTNBRjI4QUU3RTU0RkE5QjYw
MzZGMEI4MjAeFw0yNTAxMjMxMjE5NThaFw0yNjAxMjIxMjI0NThaMDMxMTAvBgNV
BAMTKDA5MjRBNjc1Q0I0MThBQTQzOTUxRUE1QzkwNEJEQTEyQjNCRkMyQ0QwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCooYcWxFJPrsfbsA0/Oz6Yrp0V
2iBx7yQQ51Dm3k/s4Pvlire6DsZYOWfp0+T2u+8VUtte3mJoFYVKnjbwaEPIYwFm
tCmztHJc46KwDVLkE/pJCgTfzQST5IScLGkmc25Ffuf3JQcyuB2twNwYSLJOTkNJ
2V+0wJ5w9vwlaaJNWtB+wiB2v8Bba9Y55amMwqdYaV9q87bgQ05z3wt3W+tHClsZ
imo2BX8fbMH1uEUjnrN58EgxBpEDo3u9DnjdOctEayDW6gJkpvqyXFiB8w/Xs8Mw
yuBUMxHfuu+EYU578FsX4yRo4goRZkDIfLNmmA/WiXyjjRQ8k8vd8II2mADNAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUCSSmdctBiqQ5UepckEvaErO/ws0wHwYDVR0j
BBgwFoAUi3a4JpU5jzE68orn5U+ptgNvC4IwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRWZWN0cxb2tUMXZRdEZiTVFwZ2F0REM5cHRod0FNVWQ4SFVydnVFb3ZF
NEsvMC84Qjc2QjgyNjk1Mzk4RjMxM0FGMjhBRTdFNTRGQTlCNjAzNkYwQjgyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzhCNzZCODI2OTUzOThGMzEz
QUYyOEFFN0U1NEZBOUI2MDM2RjBCODIuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0VmVjdHMW9rVDF2UXRGYk1RcGdhdERDOXB0aHdBTVVkOEhVcnZ1RW92RTRLLzAv
MzQzNTJlMzEzODM4MmUzMTMwMmUzMDJmMzIzMzJkMzIzMzIwM2QzZTIwMzIzNjM5
MzUzNjM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQBLbwKMA0GCSqGSIb3DQEBCwUAA4IBAQCPEU1i7KDF
EsfLZYtfPvdkCOaV2Uw08BRJSkd1mopZSjuCQkqZmDR5VuPyZhCM3pgJSL4thCrs
Dnp6xf9Z+R4WOD+5WL4r9UBXUo7Dlh5cBh3vCx8tYJMJ6SreOMdAn3w4t0kiIW5v
pfFkTttwAZ/1V2J0yFow2vrtpddw4M+ZJBYEiSw1F8Ut9QWEHtNxEKP585msDSul
CVsPTbRTPt0UnUa50LxjbdeslqNX+Mep28vY86kk1cSUkkPx52MsTV9bIniILX27
oMBD01opJW2Ol/hHh+oiem91Rh6844zx/h7GxwNYLRG2IQ51rI5DPKaH7qQLhxIQ
3BFzsuEzhqls
-----END CERTIFICATE-----
Generated at Sun Feb 16 21:46:17 2025 by rpki-client