Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FCxtNikLZdFwEFbCxqSd3VLJDCvEPoAi1Ust2LYzZm7G/1/34352e37312e3131362e302f32322d3234203d3e20323637363035.roa
File:                     34352e37312e3131362e302f32322d3234203d3e20323637363035.roa (raw, json)
Hash identifier:          X0IUBjrxkwYkvX9r5dAGatK6lJ2EpGs1eN/EwIVzbSQ=
Subject key identifier:   C8:DE:7B:30:40:74:DD:B3:79:1A:C0:7A:69:BA:35:43:77:E4:98:D0
Certificate issuer:       /CN=A8D6F853C127D85A0E619E7DC31EF9248B9C9429
Certificate serial:       55AA30A9F8064DDF2077493FE12C26AF68E11A76
Authority key identifier: A8:D6:F8:53:C1:27:D8:5A:0E:61:9E:7D:C3:1E:F9:24:8B:9C:94:29
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A8D6F853C127D85A0E619E7DC31EF9248B9C9429.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FCxtNikLZdFwEFbCxqSd3VLJDCvEPoAi1Ust2LYzZm7G/1/34352e37312e3131362e302f32322d3234203d3e20323637363035.roa
Signing time:             Wed 03 Apr 2024 18:46:13 +0000
ROA not before:           Wed 03 Apr 2024 18:41:13 +0000
ROA not after:            Wed 02 Apr 2025 18:46:13 +0000
asID:                     267605
IP address blocks:        45.71.116.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FCxtNikLZdFwEFbCxqSd3VLJDCvEPoAi1Ust2LYzZm7G/1/A8D6F853C127D85A0E619E7DC31EF9248B9C9429.crl
                          rsync://rpki-repo.registro.br/repo/FCxtNikLZdFwEFbCxqSd3VLJDCvEPoAi1Ust2LYzZm7G/1/A8D6F853C127D85A0E619E7DC31EF9248B9C9429.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A8D6F853C127D85A0E619E7DC31EF9248B9C9429.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 22:33:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:aa:30:a9:f8:06:4d:df:20:77:49:3f:e1:2c:26:af:68:e1:1a:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A8D6F853C127D85A0E619E7DC31EF9248B9C9429
        Validity
            Not Before: Apr  3 18:41:13 2024 GMT
            Not After : Apr  2 18:46:13 2025 GMT
        Subject: CN=C8DE7B304074DDB3791AC07A69BA354377E498D0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:0a:9e:eb:d6:56:45:cf:1b:76:d9:32:0b:0c:
                    c9:0b:a0:fa:86:90:48:db:83:c0:70:d2:aa:ca:81:
                    27:e2:2f:3c:8f:96:6e:31:c6:88:ac:79:f8:f8:be:
                    ae:35:8a:90:39:62:76:ef:b3:f3:d6:30:f7:e6:20:
                    85:5a:ae:f5:a2:0e:01:e4:b4:91:b7:bd:4d:9e:88:
                    16:9d:1c:98:2c:56:5f:e7:a1:12:9d:96:22:cd:ea:
                    50:d9:5c:3c:0d:d9:c6:a2:cd:cc:b6:45:c2:82:bd:
                    e5:98:22:86:a8:8d:c7:bc:50:cd:a2:3c:68:6d:67:
                    08:6c:bc:31:99:0d:78:3f:02:27:6b:42:1c:4c:72:
                    8a:2d:fa:09:dd:2c:50:49:d8:84:3b:fb:e2:b5:e5:
                    67:13:82:1e:d0:43:be:ad:46:2f:d5:02:9c:80:e2:
                    30:45:ff:0a:18:39:e9:79:4c:d0:56:f6:89:97:bb:
                    49:53:f3:d8:39:6e:fb:80:e4:30:61:4f:9f:55:1f:
                    bb:d1:56:5e:06:e2:ea:f7:67:21:2a:42:6d:92:d9:
                    ac:0e:c5:6f:7e:cd:6d:94:30:cc:3d:24:c1:82:0d:
                    a5:5b:b0:a0:7c:cd:f5:d6:e2:2d:1c:4f:09:fc:29:
                    9d:e7:b3:1a:2c:a4:72:75:3d:c9:03:1c:35:3b:50:
                    d7:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:DE:7B:30:40:74:DD:B3:79:1A:C0:7A:69:BA:35:43:77:E4:98:D0
            X509v3 Authority Key Identifier:
                keyid:A8:D6:F8:53:C1:27:D8:5A:0E:61:9E:7D:C3:1E:F9:24:8B:9C:94:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FCxtNikLZdFwEFbCxqSd3VLJDCvEPoAi1Ust2LYzZm7G/1/A8D6F853C127D85A0E619E7DC31EF9248B9C9429.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A8D6F853C127D85A0E619E7DC31EF9248B9C9429.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FCxtNikLZdFwEFbCxqSd3VLJDCvEPoAi1Ust2LYzZm7G/1/34352e37312e3131362e302f32322d3234203d3e20323637363035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.71.116.0/22

    Signature Algorithm: sha256WithRSAEncryption
         41:c5:45:90:91:38:5d:5e:5c:75:44:bc:36:a2:df:39:80:9b:
         22:64:8a:eb:35:99:15:90:33:fb:cc:c7:2f:25:06:47:f6:36:
         33:fc:d2:2b:42:09:48:48:16:37:3d:13:68:2d:6a:70:2c:37:
         72:f5:9b:2c:23:a7:66:e6:03:a4:1d:5f:93:b2:77:13:36:cc:
         39:2e:ee:37:0b:f7:72:71:bc:6f:14:9b:8c:0f:6c:e6:9c:ac:
         73:c9:fa:71:ae:49:b1:ef:7a:fc:69:e4:de:e7:fd:96:e7:51:
         12:4c:02:29:9a:dc:fc:f0:fe:0b:56:b5:57:c8:77:13:36:24:
         31:4e:da:34:f6:94:5d:56:d1:56:c1:f0:7a:1f:23:97:de:e4:
         2d:83:0b:c8:74:c3:79:4b:24:0d:d2:96:33:8d:79:aa:a2:3f:
         57:64:86:4d:8f:b2:1e:36:6f:43:03:d2:13:2e:5c:b8:34:4e:
         54:6f:ab:59:2a:2d:95:55:b2:7d:b8:7d:a1:30:6a:18:8c:cd:
         c7:27:0b:71:5c:b8:67:d7:ca:87:9f:d3:ef:ec:2e:e6:5b:4a:
         a4:0b:0e:da:07:20:83:8f:20:d9:43:42:7c:fd:53:82:f8:a8:
         59:a8:bb:8a:ab:0e:2d:12:f2:c8:15:b0:3b:8c:78:76:1b:81:
         69:e5:bd:29
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUVaowqfgGTd8gd0k/4Swmr2jhGnYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQThENkY4NTNDMTI3RDg1QTBFNjE5RTdEQzMxRUY5MjQ4
QjlDOTQyOTAeFw0yNDA0MDMxODQxMTNaFw0yNTA0MDIxODQ2MTNaMDMxMTAvBgNV
BAMTKEM4REU3QjMwNDA3NEREQjM3OTFBQzA3QTY5QkEzNTQzNzdFNDk4RDAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOCp7r1lZFzxt22TILDMkLoPqG
kEjbg8Bw0qrKgSfiLzyPlm4xxoisefj4vq41ipA5Ynbvs/PWMPfmIIVarvWiDgHk
tJG3vU2eiBadHJgsVl/noRKdliLN6lDZXDwN2caizcy2RcKCveWYIoaojce8UM2i
PGhtZwhsvDGZDXg/AidrQhxMcoot+gndLFBJ2IQ7++K15WcTgh7QQ76tRi/VApyA
4jBF/woYOel5TNBW9omXu0lT89g5bvuA5DBhT59VH7vRVl4G4ur3ZyEqQm2S2awO
xW9+zW2UMMw9JMGCDaVbsKB8zfXW4i0cTwn8KZ3nsxospHJ1PckDHDU7UNfTAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUyN57MEB03bN5GsB6abo1Q3fkmNAwHwYDVR0j
BBgwFoAUqNb4U8En2FoOYZ59wx75JIuclCkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRkN4dE5pa0xaZEZ3RUZiQ3hxU2QzVkxKREN2RVBvQWkxVXN0MkxZelpt
N0cvMS9BOEQ2Rjg1M0MxMjdEODVBMEU2MTlFN0RDMzFFRjkyNDhCOUM5NDI5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0E4RDZGODUzQzEyN0Q4NUEw
RTYxOUU3REMzMUVGOTI0OEI5Qzk0MjkuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0ZDeHROaWtMWmRGd0VGYkN4cVNkM1ZMSkRDdkVQb0FpMVVzdDJMWXpabTdHLzEv
MzQzNTJlMzczMTJlMzEzMTM2MmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNjM3
MzYzMDM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCLUd0MA0GCSqGSIb3DQEBCwUAA4IBAQBBxUWQkThd
Xlx1RLw2ot85gJsiZIrrNZkVkDP7zMcvJQZH9jYz/NIrQglISBY3PRNoLWpwLDdy
9ZssI6dm5gOkHV+TsncTNsw5Lu43C/dycbxvFJuMD2zmnKxzyfpxrkmx73r8aeTe
5/2W51ESTAIpmtz88P4LVrVXyHcTNiQxTto09pRdVtFWwfB6HyOX3uQtgwvIdMN5
SyQN0pYzjXmqoj9XZIZNj7IeNm9DA9ITLly4NE5Ub6tZKi2VVbJ9uH2hMGoYjM3H
JwtxXLhn18qHn9Pv7C7mW0qkCw7aByCDjyDZQ0J8/VOC+KhZqLuKqw4tEvLIFbA7
jHh2G4Fp5b0p
-----END CERTIFICATE-----
Generated at Mon Nov 25 23:53:14 2024 by rpki-client on console-ams.rpki-client.org